Malware Analysis Report

2025-08-05 15:35

Sample ID 241031-y4hera1pew
Target https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE
Tags
discovery evasion persistence privilege_escalation spyware stealer trojan
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE was found to be: Likely malicious.

Malicious Activity Summary

discovery evasion persistence privilege_escalation spyware stealer trojan

Downloads MZ/PE file

Reads user/profile data of web browsers

Executes dropped EXE

Checks computer location settings

Event Triggered Execution: Component Object Model Hijacking

Loads dropped DLL

Adds Run key to start application

Checks whether UAC is enabled

Checks installed software on the system

Checks system information in the registry

Drops file in Program Files directory

System Network Configuration Discovery: Internet Connection Discovery

System Location Discovery: System Language Discovery

Browser Information Discovery

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Uses Task Scheduler COM API

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of AdjustPrivilegeToken

Modifies data under HKEY_USERS

Suspicious use of SendNotifyMessage

Enumerates system info in registry

Modifies registry class

NTFS ADS

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-10-31 20:20

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-10-31 20:20

Reported

2024-10-31 20:28

Platform

win10v2004-20241007-en

Max time kernel

468s

Max time network

469s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE

Signatures

Downloads MZ/PE file

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\Wave Browser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\Install\{2009C0F2-4102-487E-B238-FC3E1BEA7698}\WaveInstaller-v1.5.18.3.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterCore.exe\"" C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A

Checks installed software on the system

discovery

Checks whether UAC is enabled

evasion trojan
Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Checks system information in the registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\VN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\GM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\EE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1469942880\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\JP C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\FJ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CC C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psmachine_64.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\ZA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LT C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_656480185\manifest.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\TL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1400251971\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\TN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LB C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\ET C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdaterOnDemand.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\RU C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1328200556\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_419895823\manifest.fingerprint C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\UY C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SI C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\KG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IQ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IN C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\LC C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\FM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AU C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_965243136\LICENSE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psuser.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\XK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\GQ C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\swupdater.dll C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\RS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MP C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\IL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AG C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_965243136\_metadata\verified_contents.json C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\MA C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\KM C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CX C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\PK C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\ML C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\GE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\EH C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\CL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\AL C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SB C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\SE C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
File created C:\Program Files\chrome_Unpacker_BeginUnzipping5548_118617398\RW C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\Install\{2009C0F2-4102-487E-B238-FC3E1BEA7698}\WaveInstaller-v1.5.18.3.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

System Network Configuration Discovery: Internet Connection Discovery

discovery
Description Indicator Process Target
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133748797700048643" C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ = "ICoCreateAsync" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods\ = "9" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WavesorSWUpdater.PolicyStatusUser\CLSID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87}\ = "IPolicyStatusValue" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ = "IPackage" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\.xhtml C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ = "IAppVersionWeb" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6} C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\ = "IAppBundle" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\NumMethods\ = "12" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WavesorSWUpdater.CredentialDialogUser.1.0\CLSID C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\ = "PSFactoryBuffer" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ = "IApp2" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\NumMethods\ = "12" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\NumMethods\ = "24" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods\ = "10" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\.shtml\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods\ = "4" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ = "IProcessLauncher2" C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WaveBrwsHTM.V7UCG3NSZVD447JAIOWFWLOG4E\Application\ApplicationIcon = "C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\wavebrowser.exe,0" C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{E4E159E0-7B9C-4D75-AC11-A80628173DE3}\ProxyStubClsid32 C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key deleted \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32 C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\CLSID\{3C41B0C4-B5B6-4293-BED4-C927CCFDB909}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterOnDemand.exe\"" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods\ = "16" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\WOW6432Node\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C} C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\NumMethods C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3350944739-639801879-157714471-1000_Classes\.svg\OpenWithProgids C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 719390.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: 33 N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\AUDIODG.EXE N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\Downloads\Wave Browser.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeShutdownPrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A
N/A N/A C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3924 wrote to memory of 3084 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 3084 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4124 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 3992 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 3992 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 3924 wrote to memory of 4112 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://www.google.ru/aclk?sa=l&ai=DChcSEwiksvqcuLmJAxWChlAGHVTtJOcYABAAGgJkZw&co=1&ase=2&gclid=Cj0KCQjw1Yy5BhD-ARIsAI0RbXaaBnLOgxFwmlyhwdXueiGpxaWeVHzg0RtYbSsSHxL1WFzD5H_AyQgaAqxLEALw_wcB&sig=AOD64_3HtDN3DUY8_5VDKL_WCcyj_TT_Sg&q&nis=4&adurl&ved=2ahUKEwj05PWcuLmJAxUvV0EAHQ9PL4EQ0Qx6BAgIEAE

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa3aa46f8,0x7fffa3aa4708,0x7fffa3aa4718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3840 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3828 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3948 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6180 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x300 0x2f4

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8080 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=8052 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7772 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7208 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6556 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8476 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7952 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5528 /prefetch:8

C:\Users\Admin\Downloads\Wave Browser.exe

"C:\Users\Admin\Downloads\Wave Browser.exe"

C:\Users\Admin\Downloads\Wave Browser.exe

"C:\Users\Admin\Downloads\Wave Browser.exe"

C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe

"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe

"C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{353A1D61-7332-4D24-A075-2B24E64D54D4}"

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,10406483520205052429,16083453983512384994,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7064 /prefetch:2

C:\Users\Admin\Wavesor Software\SWUpdater\Install\{2009C0F2-4102-487E-B238-FC3E1BEA7698}\WaveInstaller-v1.5.18.3.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{2009C0F2-4102-487E-B238-FC3E1BEA7698}\WaveInstaller-v1.5.18.3.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiA426.tmp"

C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\wavebrowser.packed.7z" --wid=uahiylfs --installerdata="C:\Users\Admin\AppData\Local\Temp\guiA426.tmp"

C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff64c22b370,0x7ff64c22b37c,0x7ff64c22b388

C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe

"C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiA426.tmp" --create-shortcuts=0 --install-level=0

C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe

C:\Users\Admin\AppData\Local\Temp\nszA688.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0x258,0x25c,0x260,0x234,0x264,0x7ff64c22b370,0x7ff64c22b37c,0x7ff64c22b388

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0xf0,0xec,0xe8,0xa8,0xe4,0x7fff952bccf0,0x7fff952bccfc,0x7fff952bcd08

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2072,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2060 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --start-stack-profiler --field-trial-handle=1868,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2240 /prefetch:3

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2348,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2452 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3176,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3236 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3184,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3644 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3940,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3840 /prefetch:8

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTM1LjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xMzUuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9InszNTNBMUQ2MS03MzMyLTREMjQtQTA3NS0yQjI0RTY0RDU0RDR9IiB1c2VyaWQ9Ins2OTQ1MzRmYi05NDJkLTRhNDYtYmRmOS05MzI1YjQyMmNkZDF9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0ie0JDRTk1OTZELUFCNDMtNEJERS1BQjczLUFENkQ0N0EyNDUxMH0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iOCIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4xOTA0MS4xMjg4IiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7RUIxNDlBRDItQ0U0RS00RjUxLUI3RkMtQTE0OUZBQTRDQ0FGfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS41LjE4LjMiIGxhbmc9ImVuIiBicmFuZD0iIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iLTEiIGluc3RhbGxkYXRlPSItMSI-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-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNTAwIiBkb3dubG9hZF90aW1lX21zPSI4ODExIiBkb3dubG9hZGVkPSIxMDA4NzQ0MzIiIHRvdGFsPSIxMDA4NzQ0MzIiIGluc3RhbGxfdGltZV9tcz0iMTAyMzUiLz48L2FwcD48L3JlcXVlc3Q-

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --strtl=ti

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.18.3 --initial-client-data=0x11c,0x120,0x124,0x100,0x128,0x7fff952bccf0,0x7fff952bccfc,0x7fff952bcd08

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4544,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4576 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4596,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4636 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4580,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4600 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4608,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4864 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4704,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4576 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4720,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4996 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4724,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5116 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4764,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5232 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4784,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5348 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4800,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5464 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4812,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5580 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4820,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5696 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6172,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6232 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --field-trial-handle=6248,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6240 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --field-trial-handle=6272,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6480 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=6280,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6600 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=6320,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6716 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6328,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6928 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6424,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6964 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6436,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6948 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7596,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7608 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7760,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7764 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7904,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7928 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7916,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8096 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7936,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8244 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8392,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8420 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8400,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8428 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8412,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8712 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=8932,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8972 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=7532,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9180 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=9244,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9176 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7500,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9472 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9464,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7412 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9724,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9740 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9876,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9480 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9900,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10012 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9880,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10160 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7984,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10320 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10452,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10464 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10304,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10152 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10756,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10744 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10904,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10740 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=10896,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11056 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11160,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11172 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11388,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11424 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11412,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11156 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6736,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9440 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6296,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10772 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10348,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9424 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7452,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9712 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7384,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10480 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6260,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9748 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10764,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9588 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10780,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8068 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10860,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8044 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10848,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9888 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10020,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9568 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9380,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7736 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8072,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7940 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9580,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4636 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10924,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10736 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10912,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8540 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=5944,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6120 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=10308,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8308 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8660,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7880 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=7608,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8104 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11608,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11616 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8332,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11756 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8336,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11904 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12052,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12040 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12056,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12208 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12200,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12344 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12044,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12492 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12500,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12648 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12796,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12800 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=12824,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12944 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9496,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10300 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13172,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13188 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8740,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13332 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13344,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13396 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13364,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13652 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13372,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13684 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13380,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13932 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13388,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13972 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13392,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13376 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=14364,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14380 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=11380,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8324 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=7456,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14516 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=7840,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11312 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=8308,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14556 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=8136,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8728 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=11060,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11500 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=8216,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10992 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=11072,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7228 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --field-trial-handle=10876,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14384 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=10744,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14360 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=11296,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13432 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=11188,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13544 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --field-trial-handle=9436,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11884 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=7448,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10628 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=14580,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6760 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --field-trial-handle=8776,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14584 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --field-trial-handle=8692,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14064 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7892,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9656 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --field-trial-handle=9588,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4728 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --field-trial-handle=10220,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4620 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --field-trial-handle=6112,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9852 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --field-trial-handle=11540,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13908 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13652,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10360 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --field-trial-handle=13140,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10024 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13656,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10692 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13496,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8252 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8088,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11692 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --field-trial-handle=11652,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11732 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11756,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11704 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --field-trial-handle=13244,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9792 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7564,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10256 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11668,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11988 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8048,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14160 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4728,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3948 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7628,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10424 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8272,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11884 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=11780,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6036 /prefetch:8

C:\Windows\System32\RuntimeBroker.exe

C:\Windows\System32\RuntimeBroker.exe -Embedding

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --field-trial-handle=7368,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14708 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=15804,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9664 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --field-trial-handle=10180,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10724 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --field-trial-handle=13116,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8952 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=7820,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11692 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --field-trial-handle=16336,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13224 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --field-trial-handle=13204,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13264 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=10588,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6428 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13300,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10660 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=15760,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7976 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9688,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9848 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --start-stack-profiler --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=16372,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16360 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9856,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15972 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --field-trial-handle=11692,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11888 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=9112,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10380 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --field-trial-handle=7424,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9828 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --field-trial-handle=8544,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16064 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=8528,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16076 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=15912,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16020 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --field-trial-handle=16348,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11888 /prefetch:1

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --field-trial-handle=11876,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15992 /prefetch:2

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=13288,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=16236 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --no-appcompat-clear --start-stack-profiler --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --field-trial-handle=10668,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12064 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource core

C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe

"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=16292,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15880 /prefetch:8

C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe

"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --field-trial-handle=10760,i,13816445345356244426,16567041099236631126,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14220 /prefetch:2

Network

Country Destination Domain Proto
US 8.8.8.8:53 149.220.183.52.in-addr.arpa udp
US 8.8.8.8:53 www.google.ru udp
US 8.8.8.8:53 136.32.126.40.in-addr.arpa udp
US 8.8.8.8:53 0.204.248.87.in-addr.arpa udp
US 8.8.8.8:53 195.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 receitas2.com udp
US 172.67.222.59:443 receitas2.com tcp
US 8.8.8.8:53 194.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 59.222.67.172.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
US 8.8.8.8:53 26.35.223.20.in-addr.arpa udp
US 8.8.8.8:53 a.nel.cloudflare.com udp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 8.8.8.8:53 1.80.190.35.in-addr.arpa udp
US 8.8.8.8:53 cdn.izooto.com udp
US 104.16.255.64:443 cdn.izooto.com tcp
US 8.8.8.8:53 tdns5.gtranslate.net udp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 c.pubguru.net udp
US 8.8.8.8:53 connect.facebook.net udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net tcp
US 104.26.13.42:443 tdns5.gtranslate.net tcp
NL 18.239.50.119:443 c.pubguru.net tcp
GB 163.70.151.21:443 connect.facebook.net tcp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 163.70.151.21:443 connect.facebook.net tcp
US 8.8.8.8:53 34.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 42.13.26.104.in-addr.arpa udp
US 8.8.8.8:53 64.255.16.104.in-addr.arpa udp
US 8.8.8.8:53 200.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 119.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 fundingchoicesmessages.google.com udp
GB 142.250.178.14:443 fundingchoicesmessages.google.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 region1.google-analytics.com udp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.201.100:443 www.google.com tcp
US 216.239.34.36:443 region1.google-analytics.com tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
GB 216.58.201.100:443 www.google.com tcp
US 8.8.8.8:53 lh3.googleusercontent.com udp
GB 216.58.204.65:443 lh3.googleusercontent.com tcp
US 8.8.8.8:53 14.178.250.142.in-addr.arpa udp
US 8.8.8.8:53 36.34.239.216.in-addr.arpa udp
US 8.8.8.8:53 21.151.70.163.in-addr.arpa udp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
GB 172.217.16.226:443 googleads.g.doubleclick.net tcp
US 8.8.8.8:53 65.204.58.216.in-addr.arpa udp
US 8.8.8.8:53 100.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 226.16.217.172.in-addr.arpa udp
US 8.8.8.8:53 113.39.65.18.in-addr.arpa udp
US 8.8.8.8:53 a3.pubguru.net udp
DE 52.59.161.99:443 a3.pubguru.net tcp
US 8.8.8.8:53 www.facebook.com udp
GB 163.70.151.35:443 www.facebook.com tcp
DE 52.59.161.99:443 a3.pubguru.net tcp
DE 52.59.161.99:443 a3.pubguru.net tcp
US 8.8.8.8:53 99.161.59.52.in-addr.arpa udp
US 8.8.8.8:53 35.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 19e339862413b6992730594d9a180434.safeframe.googlesyndication.com udp
GB 216.58.213.1:443 19e339862413b6992730594d9a180434.safeframe.googlesyndication.com tcp
GB 216.58.213.1:443 19e339862413b6992730594d9a180434.safeframe.googlesyndication.com tcp
GB 216.58.201.100:443 www.google.com tcp
GB 216.58.201.100:443 www.google.com udp
US 8.8.8.8:53 www.google.co.uk udp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 8.8.8.8:53 1.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 227.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 67.204.58.216.in-addr.arpa udp
GB 216.58.201.100:443 www.google.com udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 cdn.ampproject.org udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 142.250.180.1:443 cdn.ampproject.org tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 172.217.16.226:443 googleads.g.doubleclick.net udp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
GB 172.217.169.33:443 tpc.googlesyndication.com tcp
US 8.8.8.8:53 1.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 33.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 ep1.adtrafficquality.google udp
GB 142.250.200.34:443 ep1.adtrafficquality.google tcp
GB 142.250.200.34:443 ep1.adtrafficquality.google tcp
US 8.8.8.8:53 ep2.adtrafficquality.google udp
GB 142.250.179.225:443 ep2.adtrafficquality.google tcp
GB 142.250.179.225:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 225.179.250.142.in-addr.arpa udp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
US 8.8.8.8:53 56.163.245.4.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 107.209.201.84.in-addr.arpa udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
US 8.8.8.8:53 client.wns.windows.com udp
GB 20.90.153.243:443 client.wns.windows.com tcp
US 8.8.8.8:53 enp.izooto.com udp
US 104.16.255.64:443 enp.izooto.com tcp
US 8.8.8.8:53 lvi.izooto.com udp
US 8.8.8.8:53 243.153.90.20.in-addr.arpa udp
DE 52.59.161.99:443 a3.pubguru.net tcp
US 8.8.8.8:53 google.com udp
GB 142.250.200.14:443 google.com tcp
GB 142.250.200.14:443 google.com tcp
GB 142.250.200.14:443 google.com tcp
GB 142.250.200.14:443 google.com udp
DE 52.59.161.99:443 a3.pubguru.net tcp
US 8.8.8.8:53 secure.gravatar.com udp
US 192.0.73.2:443 secure.gravatar.com tcp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
US 192.0.73.2:443 secure.gravatar.com tcp
US 8.8.8.8:53 fe2eebc776311f064f47dffac2db4780.safeframe.googlesyndication.com udp
US 8.8.8.8:53 2.73.0.192.in-addr.arpa udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 142.250.200.34:443 ep1.adtrafficquality.google udp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 tpc.googlesyndication.com udp
US 8.8.8.8:53 install.convertwithwave.com udp
US 18.235.129.234:443 install.convertwithwave.com tcp
US 18.235.129.234:443 install.convertwithwave.com tcp
US 8.8.8.8:53 234.129.235.18.in-addr.arpa udp
US 8.8.8.8:53 p.typekit.net udp
US 8.8.8.8:53 use.typekit.net udp
US 8.8.8.8:53 api.wavebrowser.co udp
GB 2.19.252.197:443 use.typekit.net tcp
GB 2.19.252.197:443 use.typekit.net tcp
GB 2.19.252.197:443 use.typekit.net tcp
US 3.224.232.184:443 api.wavebrowser.co tcp
GB 2.19.252.203:443 p.typekit.net tcp
GB 2.19.252.203:443 p.typekit.net tcp
GB 2.19.252.203:443 p.typekit.net tcp
US 8.8.8.8:53 203.252.19.2.in-addr.arpa udp
US 8.8.8.8:53 197.252.19.2.in-addr.arpa udp
US 8.8.8.8:53 184.232.224.3.in-addr.arpa udp
US 8.8.8.8:53 app.posthog.com udp
US 3.224.232.184:443 api.wavebrowser.co tcp
US 8.8.8.8:53 app.termly.io udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 104.22.59.181:443 app.posthog.com tcp
US 104.22.59.181:443 app.posthog.com tcp
US 3.217.147.142:443 api.wavebrowserbase.com tcp
US 104.18.31.234:443 app.termly.io tcp
US 3.224.232.184:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 crt.rootg2.amazontrust.com udp
US 104.18.31.234:443 app.termly.io tcp
NL 18.239.83.98:80 crt.rootg2.amazontrust.com tcp
US 8.8.8.8:53 api.mywavehome.net udp
US 54.88.37.179:443 api.mywavehome.net tcp
GB 2.19.252.197:443 use.typekit.net tcp
US 8.8.8.8:53 181.59.22.104.in-addr.arpa udp
US 8.8.8.8:53 234.31.18.104.in-addr.arpa udp
US 8.8.8.8:53 142.147.217.3.in-addr.arpa udp
US 8.8.8.8:53 98.83.239.18.in-addr.arpa udp
US 8.8.8.8:53 179.37.88.54.in-addr.arpa udp
US 3.217.147.142:443 api.mywavehome.net tcp
US 8.8.8.8:53 wav-installers.s3.amazonaws.com udp
US 52.216.144.11:443 wav-installers.s3.amazonaws.com tcp
US 8.8.8.8:53 11.144.216.52.in-addr.arpa udp
US 8.8.8.8:53 43.229.111.52.in-addr.arpa udp
US 8.8.8.8:53 a3.pubguru.net udp
DE 52.59.161.99:443 a3.pubguru.net tcp
US 8.8.8.8:53 connect.facebook.net udp
GB 142.250.178.14:443 fundingchoicesmessages.google.com udp
GB 163.70.151.21:443 connect.facebook.net tcp
US 8.8.8.8:53 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 30709c998a0f93d4286b4148cf22c0d3.safeframe.googlesyndication.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
GB 172.217.169.33:443 tpc.googlesyndication.com udp
GB 142.250.200.34:443 securepubads.g.doubleclick.net udp
US 8.8.8.8:53 csi.gstatic.com udp
SE 142.250.74.163:443 csi.gstatic.com tcp
US 8.8.8.8:53 163.74.250.142.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 54.80.36.184:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 54.80.36.184:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 184.36.80.54.in-addr.arpa udp
US 8.8.8.8:53 swupdater.com udp
US 34.236.161.155:443 swupdater.com tcp
US 34.236.161.155:443 swupdater.com tcp
US 8.8.8.8:53 155.161.236.34.in-addr.arpa udp
US 8.8.8.8:53 cdn.swupdater.com udp
GB 18.172.88.126:443 cdn.swupdater.com tcp
US 8.8.8.8:53 126.88.172.18.in-addr.arpa udp
US 8.8.8.8:53 dct.wavesecure.net udp
US 54.80.36.184:443 dct.wavesecure.net tcp
US 8.8.8.8:53 192.15.239.18.in-addr.arpa udp
US 8.8.8.8:53 80.41.65.18.in-addr.arpa udp
US 8.8.8.8:53 ocsp.r2m02.amazontrust.com udp
NL 18.238.246.206:80 ocsp.r2m02.amazontrust.com tcp
US 8.8.8.8:53 206.246.238.18.in-addr.arpa udp
US 54.80.36.184:443 dct.wavesecure.net tcp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 accounts.google.com udp
US 8.8.8.8:53 s2.googleusercontent.com udp
US 8.8.8.8:53 s2.googleusercontent.com udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
US 8.8.8.8:53 api.wavebrowser.net udp
BE 74.125.206.84:443 accounts.google.com tcp
GB 216.58.204.65:443 s2.googleusercontent.com tcp
US 3.224.232.184:443 api.wavebrowser.net tcp
US 52.6.252.145:443 api.wavebrowser.net tcp
US 34.236.161.155:443 swupdater.com tcp
US 8.8.8.8:53 t0.gstatic.com udp
US 8.8.8.8:53 t0.gstatic.com udp
GB 216.58.212.196:443 t0.gstatic.com tcp
US 8.8.8.8:53 dct.wavesecure.net udp
US 8.8.8.8:53 dct.wavesecure.net udp
US 8.8.8.8:53 seed.wavebrowser.co udp
US 8.8.8.8:53 seed.wavebrowser.co udp
US 3.224.232.184:443 dct.wavesecure.net tcp
US 3.224.232.184:443 dct.wavesecure.net tcp
US 3.224.232.184:443 dct.wavesecure.net tcp
US 3.224.232.184:443 dct.wavesecure.net tcp
US 3.224.232.184:443 dct.wavesecure.net tcp
NL 18.239.94.33:443 seed.wavebrowser.co tcp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 8.8.8.8:53 ntp2.mywavehome.net udp
US 3.224.232.184:443 dct.wavesecure.net tcp
GB 18.165.160.108:443 ntp2.mywavehome.net tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
GB 142.250.179.228:443 www.google.com udp
GB 142.250.179.228:443 www.google.com tcp
GB 142.250.179.228:443 www.google.com tcp
US 8.8.8.8:53 84.206.125.74.in-addr.arpa udp
US 8.8.8.8:53 145.252.6.52.in-addr.arpa udp
US 8.8.8.8:53 196.212.58.216.in-addr.arpa udp
GB 18.165.160.108:443 ntp2.mywavehome.net tcp
US 8.8.8.8:53 t1.gstatic.com udp
US 8.8.8.8:53 t1.gstatic.com udp
US 8.8.8.8:53 t2.gstatic.com udp
US 8.8.8.8:53 t2.gstatic.com udp
GB 142.250.200.36:443 t1.gstatic.com tcp
GB 216.58.201.100:443 t2.gstatic.com tcp
US 8.8.8.8:53 t3.gstatic.com udp
US 8.8.8.8:53 t3.gstatic.com udp
GB 142.250.200.36:443 t1.gstatic.com udp
US 8.8.8.8:53 t0.gstatic.com udp
US 8.8.8.8:53 t0.gstatic.com udp
GB 216.58.212.196:443 t0.gstatic.com tcp
GB 216.58.212.196:443 t0.gstatic.com tcp
GB 216.58.212.196:443 t0.gstatic.com tcp
US 8.8.8.8:53 js.recurly.com udp
US 8.8.8.8:53 js.recurly.com udp
GB 18.165.160.108:443 ntp2.mywavehome.net udp
US 34.98.107.242:443 js.recurly.com tcp
US 34.98.107.242:443 js.recurly.com tcp
US 8.8.8.8:53 33.94.239.18.in-addr.arpa udp
US 8.8.8.8:53 108.160.165.18.in-addr.arpa udp
US 8.8.8.8:53 36.200.250.142.in-addr.arpa udp
US 8.8.8.8:53 cdn.taboola.com udp
US 8.8.8.8:53 cdn.taboola.com udp
US 151.101.193.44:443 cdn.taboola.com tcp
US 8.8.8.8:53 content-autofill.googleapis.com udp
US 8.8.8.8:53 content-autofill.googleapis.com udp
GB 216.58.213.10:443 content-autofill.googleapis.com tcp
GB 216.58.213.10:443 content-autofill.googleapis.com udp
US 8.8.8.8:53 242.107.98.34.in-addr.arpa udp
US 8.8.8.8:53 44.193.101.151.in-addr.arpa udp
US 8.8.8.8:53 10.213.58.216.in-addr.arpa udp
US 8.8.8.8:53 api.recurly.com udp
US 8.8.8.8:53 api.recurly.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 gum.criteo.com udp
US 8.8.8.8:53 beacon.taboola.com udp
US 8.8.8.8:53 beacon.taboola.com udp
US 34.98.107.242:443 api.recurly.com tcp
US 34.98.107.242:443 api.recurly.com tcp
NL 178.250.1.11:443 gum.criteo.com tcp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 8.8.8.8:53 api.wavebrowserbase.com udp
US 54.80.36.184:443 api.wavebrowserbase.com tcp
US 54.80.36.184:443 api.wavebrowserbase.com tcp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 www.google.com udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
US 8.8.8.8:53 googleads.g.doubleclick.net udp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 api.mywavehome.net udp
US 8.8.8.8:53 www.google.co.uk udp
US 8.8.8.8:53 www.google.co.uk udp
US 54.88.37.179:443 api.wavebrowserbase.com tcp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 11.1.250.178.in-addr.arpa udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 8.8.8.8:53 extapi.wavebrowserbase.com udp
US 8.8.8.8:53 extapi.wavebrowserbase.com udp
US 52.4.162.144:443 extapi.wavebrowserbase.com tcp
US 216.239.34.36:443 region1.google-analytics.com udp
US 8.8.8.8:53 144.162.4.52.in-addr.arpa udp
US 8.8.8.8:443 dns.google udp
NL 18.239.50.126:443 tcp
US 8.8.8.8:53 cxcs.microsoft.net udp
US 8.8.8.8:443 dns.google udp
US 95.100.195.49:443 www.bing.com tcp
GB 23.62.195.195:443 cxcs.microsoft.net tcp
NL 18.238.243.121:443 tcp
GB 23.62.195.195:443 cxcs.microsoft.net tcp
US 95.100.195.49:443 www.bing.com tcp
US 8.8.8.8:53 126.50.239.18.in-addr.arpa udp
US 8.8.8.8:53 49.195.100.95.in-addr.arpa udp
US 8.8.8.8:53 195.195.62.23.in-addr.arpa udp
US 8.8.8.8:53 121.243.238.18.in-addr.arpa udp
GB 142.250.180.10:443 content-autofill.googleapis.com tcp
US 35.169.133.186:443 tcp
US 35.169.133.186:443 tcp
US 35.169.133.186:443 tcp
US 35.169.133.186:443 tcp
US 34.192.28.56:443 tcp
GB 163.70.151.23:443 tcp
US 8.8.8.8:53 10.180.250.142.in-addr.arpa udp
GB 216.58.201.110:443 tcp
GB 216.58.201.110:443 udp
GB 142.250.187.238:443 tcp
IE 212.82.100.137:443 tcp
GB 142.250.187.238:443 udp
GB 163.70.151.21:443 connect.facebook.net udp
GB 163.70.151.21:443 connect.facebook.net udp
GB 163.70.147.23:443 udp
US 8.8.8.8:53 23.151.70.163.in-addr.arpa udp
US 8.8.8.8:53 110.201.58.216.in-addr.arpa udp
US 8.8.8.8:53 56.28.192.34.in-addr.arpa udp
US 8.8.8.8:53 186.133.169.35.in-addr.arpa udp
US 8.8.8.8:53 137.100.82.212.in-addr.arpa udp
US 8.8.8.8:53 238.187.250.142.in-addr.arpa udp
US 8.8.8.8:53 23.147.70.163.in-addr.arpa udp
GB 163.70.147.35:443 tcp
GB 163.70.147.35:443 tcp
GB 163.70.147.35:443 tcp
GB 163.70.147.35:443 tcp
GB 163.70.147.35:443 tcp
GB 163.70.151.23:443 udp
GB 163.70.151.21:443 connect.facebook.net udp
US 8.8.8.8:53 35.147.70.163.in-addr.arpa udp
IE 212.82.100.137:443 tcp
IE 212.82.100.137:443 tcp
IE 34.253.150.202:443 tcp
IE 34.253.150.202:443 tcp
US 8.8.8.8:53 202.150.253.34.in-addr.arpa udp
IE 34.253.150.202:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
IE 188.125.72.139:443 tcp
US 8.8.8.8:53 11.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 139.72.125.188.in-addr.arpa udp
IE 212.82.100.137:443 tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
US 150.171.28.10:443 tse1.mm.bing.net tcp
GB 172.217.16.234:443 content-autofill.googleapis.com tcp
US 204.79.197.237:443 tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 87.248.114.11:443 tcp
GB 172.217.16.234:443 content-autofill.googleapis.com udp
GB 87.248.114.12:443 tcp
GB 87.248.114.11:443 tcp
TW 180.222.108.92:443 tcp
US 69.147.93.126:443 tcp
US 69.147.83.81:443 tcp
US 66.218.84.42:443 tcp
US 8.8.8.8:53 12.114.248.87.in-addr.arpa udp
US 8.8.8.8:53 126.93.147.69.in-addr.arpa udp
US 8.8.8.8:53 81.83.147.69.in-addr.arpa udp
US 8.8.8.8:53 42.84.218.66.in-addr.arpa udp
US 8.8.8.8:53 92.108.222.180.in-addr.arpa udp
US 67.195.176.8:443 tcp
BG 212.82.116.200:443 tcp
US 98.136.127.9:443 tcp
US 69.147.87.122:443 tcp
US 69.147.80.124:443 tcp
US 8.8.8.8:53 200.116.82.212.in-addr.arpa udp
US 8.8.8.8:53 8.176.195.67.in-addr.arpa udp
US 8.8.8.8:53 9.127.136.98.in-addr.arpa udp
US 8.8.8.8:53 122.87.147.69.in-addr.arpa udp
US 8.8.8.8:53 124.80.147.69.in-addr.arpa udp
GB 18.165.160.108:443 ntp2.mywavehome.net udp
GB 216.58.204.74:443 content-autofill.googleapis.com udp
US 34.98.107.242:443 api.recurly.com udp
US 8.8.8.8:53 74.204.58.216.in-addr.arpa udp
GB 142.250.179.228:443 www.google.com udp
GB 172.217.169.2:443 udp
GB 216.58.204.67:443 www.google.co.uk udp
US 8.8.8.8:53 2.169.217.172.in-addr.arpa udp
US 54.163.201.92:443 tcp
US 8.8.8.8:53 92.201.163.54.in-addr.arpa udp
GB 87.248.114.12:443 tcp
GB 87.248.114.12:443 tcp
GB 87.248.114.12:443 tcp
GB 87.248.114.12:443 tcp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:53 123.35.104.34.in-addr.arpa udp
US 8.8.8.8:53 wwwwwwwww.jodi.org udp
US 8.8.8.8:53 wwwwwwwww.jodi.org udp
NL 46.17.7.183:80 wwwwwwwww.jodi.org tcp
NL 46.17.7.183:80 wwwwwwwww.jodi.org tcp
NL 46.17.7.183:80 wwwwwwwww.jodi.org tcp
US 8.8.8.8:53 183.7.17.46.in-addr.arpa udp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
US 8.8.8.8:53 202.187.250.142.in-addr.arpa udp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
GB 142.250.187.229:443 tcp
GB 87.248.114.11:443 tcp
US 8.8.8.8:53 229.187.250.142.in-addr.arpa udp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
NL 142.250.179.163:443 tcp
US 8.8.8.8:53 163.179.250.142.in-addr.arpa udp
GB 142.250.187.229:443 tcp
GB 142.250.179.228:443 www.google.com udp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
NL 142.250.179.163:443 tcp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google udp
US 8.8.8.8:53 4.4.8.8.in-addr.arpa udp
US 8.8.8.8:53 107.116.69.13.in-addr.arpa udp
GB 142.250.187.229:443 tcp
GB 87.248.114.11:443 tcp
GB 216.58.212.202:443 udp
US 8.8.8.8:53 202.212.58.216.in-addr.arpa udp
NL 46.17.7.183:443 wwwwwwwww.jodi.org tcp
NL 142.250.179.195:443 udp
NL 142.250.179.195:443 udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:443 dns.google udp
US 8.8.8.8:443 dns.google tcp
GB 142.250.200.46:443 tcp
US 8.8.8.8:53 195.179.250.142.in-addr.arpa udp
US 8.8.8.8:53 46.200.250.142.in-addr.arpa udp
GB 216.58.201.100:443 t2.gstatic.com udp
US 8.8.4.4:443 dns.google udp
US 8.8.4.4:443 dns.google udp
GB 172.217.169.42:443 content-autofill.googleapis.com tcp
US 8.8.8.8:53 42.169.217.172.in-addr.arpa udp
US 8.8.8.8:53 clients2.swupdater.com udp
US 8.8.8.8:443 dns.google udp
US 54.174.146.176:443 tcp
NL 142.251.36.3:443 udp
US 8.8.8.8:53 176.146.174.54.in-addr.arpa udp
US 8.8.8.8:53 3.36.251.142.in-addr.arpa udp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 7de1bbdc1f9cf1a58ae1de4951ce8cb9
SHA1 010da169e15457c25bd80ef02d76a940c1210301
SHA256 6e390bbc0d03a652516705775e8e9a7b7936312a8a5bea407f9d7d9fa99d957e
SHA512 e4a33f2128883e71ab41e803e8b55d0ac17cbc51be3bde42bed157df24f10f34ad264f74ef3254dbe30d253aca03158fde21518c2b78aaa05dae8308b1c5f30c

\??\pipe\LOCAL\crashpad_3924_AAGNCDDGQIXQRHDG

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 85ba073d7015b6ce7da19235a275f6da
SHA1 a23c8c2125e45a0788bac14423ae1f3eab92cf00
SHA256 5ad04b8c19bf43b550ad725202f79086168ecccabe791100fba203d9aa27e617
SHA512 eb4fd72d7030ea1a25af2b59769b671a5760735fb95d18145f036a8d9e6f42c903b34a7e606046c740c644fab0bb9f5b7335c1869b098f121579e71f10f5a9c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 354293d9140210a10e294af5841cf036
SHA1 a489e6f637a54ee1a2d7a92ce8809cd000af3af9
SHA256 e675cad33f3f47e5caa450fdf3693cb896445aacbaff3ccfc0d2f581396a3f04
SHA512 f98cb60fad3f32f24cf28cf07b438cf3923d5b3b4f3a06e73454eeea11364f409dadf7ba4fefc3212f9acb9c1fd2786ed6c7454abfe191893583713afc97692d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 732acd2b38fa6875d1a6289261a6368c
SHA1 110d1a2c295866374540451ec2dd5f4b9b533b54
SHA256 c315e2d23a88c23e8249ded1ba0f671781e33dd95db0d7a94d38c33862cf06eb
SHA512 94e03d34cdb3eab29af557f8ccaf86b930426de942e87fdeb4fc68dfea43866481bf4860eb55d18f1e92b40e1a31afc1e4d4dc3656067889a73c0e1ad40f8f0b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9423ab1bc5a102e29d8bb1840e5a37e4
SHA1 8b553c89e321c6a77ffc96f26f4f66e43226a557
SHA256 2b882f21fa711ecdd143c57047104a478ff401e39ed39f5ba5e368df5fe7371b
SHA512 af3f1c95bdc69f852f5962abaa1d2ecbe1e4c8a30dabcd60fee0794ec4dd924ab5aa8e115ebf74c87759cd570fbac314534ba762114e88b75f275fc22a07d5b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

MD5 e579aca9a74ae76669750d8879e16bf3
SHA1 0b8f462b46ec2b2dbaa728bea79d611411bae752
SHA256 6e51c7866705bf0098febfaf05cf4652f96e69ac806c837bfb1199b6e21e6aaf
SHA512 df22f1dff74631bc14433499d1f61609de71e425410067fd08ec193d100b70d98672228906081c309a06bcba03c097ace885240a3ce71e0da4fdb8a022fc9640

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 aeda828fca2262ef4171de352093827b
SHA1 43bc839f06a2500b617d5bf7c43eea48ac80514d
SHA256 182e06bf7bcaa42d03e34a5aa780701ba96bfe08412a58d5abc6af1533dfae39
SHA512 27b037d4bff7b94f4e9cee1a42b302e45ac2607655de1a441c62546bd496cdd6542dbff962ab9533c35b2244722fb92bb1364748151a936c2291ac49f1e2a14c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580c01.TMP

MD5 b8d23a61e2a0d5d017859c7ef090d5d9
SHA1 dbe274248cc3a14e2efca8557bd91ae37a26db17
SHA256 2b2fdc9faa35c16f35396a307be7085f5e39736fc5276e54d9348b74faf504d8
SHA512 1e8608567c9cd10310a7c70605efd47348b0fc2078406b336c22f399015e7a12a255c2860260110d3921155a827384aea3b59b1434c7664f495e566969597435

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 51c3097444c2d1e2a5840f0b38287de3
SHA1 879f868f92068fe7e62aa52b1c370d91df1a8448
SHA256 80f9a2d6d869c7fd8dc2e09911ae39e8c99b03921aeb8c225671959cca542993
SHA512 5a0d64a10b6f54575e3a9e19401e722339d0b15c495da4e6158242a34c3161be34e4dc676da60847473edb3081c91fadb24c46b709ce624d10ce401c2d93cecc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 6861a92b44d58789de8d89c7d449777b
SHA1 0f034a020af52e7eccd7a2a5c6d9a554cca564fc
SHA256 849215d4370a23a891bf2138915c3ff7b55a86225108158a7119d45c1118cbf6
SHA512 e3a62a96253f89a9cf2bcd2de658d797eab3a12161405b3a9c716b3d3d28cb6b7c55e32673280f19d2eda37c51344f73649702bc1069a6ef215c61884497b200

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5821fa.TMP

MD5 1bdf9151be545a476f75f74b00790f84
SHA1 24e3725e5d9c02f92334f264a2380a5d08408b3d
SHA256 3d92dbc45d07912dc114eda2552c4206ec740df02c3e3d8010b0fcb8da84e962
SHA512 24f98d7333c09c7b63cdb7ee865af64a035e071c00a685367cdcd1f03be39c29693d20da4ce8b7685c70dd628b8edbcb8d547585b9aba45390e00b78c7d69730

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 94cc934ac4efaf3abb0cc5fa52d48aad
SHA1 c408eff4e558f675c007bac9e7eaec241fb13002
SHA256 70dc1c149ba8f4f3ed5c0792e4eda40b965757b4bc0060ccb8526c78d74633bf
SHA512 9dd58f7022ef51a0fc8d9c414f60746bd8f58850fd77a19369730acaf814f0747190603d074a838130dcb5a37b0fa5a843cc5db321a5bee5be0d2a2af02d9e34

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f028b35cc79d9e115e6baecb45b77373
SHA1 f9644c3dcd96202d077af360af028f47d7334ea5
SHA256 22786eacb43e9fb254a2c95e45390623f5f36eea847eb2c8ad97a1554db83dbf
SHA512 e3dd1ffa26b4a169ac59d3d5dbeb72a48d5a1b65117df7d1ffbd16a21ae64a25287b9c7d023863b03c47f75d195983158cb1c641fbfe0c687630fc8b040a160f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cb766157d473a3be172560330c6304e4
SHA1 ba891cff735872ce2fb0e71bf0f23efe3e43a12b
SHA256 0f5a8918c65740d51ff8e833a980b1c199ff17e80c822d22f664a1dc9a5e5a11
SHA512 602a5dd21154a356b91aa4e6da0ffd5962be2916946fe0b96d867255ee2472ef71b77494bcff1a22c3ff07f2a23f98dc997eae91128a37e5ac91aa18fc1ee273

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 7812029996c6f194558eea5c82ec5669
SHA1 d7959268a7fa06a7f2c9678acef3528cea4e697f
SHA256 cd3b1d74636c523c1721a74f8c87a485b035e32b56fc7c7872baf3776ac09a93
SHA512 b6eec7ab750974d5281c6320f78a8e79af32ebb91e705984d3e4a843568e5e7c12fb1db4f9598a3d57e371d6eb272779ddb542a8960ebe726997a56d0c753fbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 5aab9521705679aa6ec2dd051d95e5f6
SHA1 fa4d9f6d4847802c9ac8db0b36de8d04dda12d5f
SHA256 345178b5a8e5f752eb91082eedaad3a6a4bc0818744c32d22eb4bfed4d52dee1
SHA512 37d8ec83d11686f328cac3f2ffbb4c5bb046acaf2c64a4717c20241d5dc8ad3138c7819d63a6a22c895322c37f582bf9f5978966b37adcadb81d7dce9727215a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 30a9152c7ba96620c38ea373dc645f96
SHA1 a38a4af1c08790d541c5cb0f0cb8b8f27d7d7498
SHA256 50c7a89921110f2ac8eada82bef17e9958262e17c2da97618bdca0eefb0f2e5e
SHA512 af3074ddb1521d7fddf400f4a34999d82dc53902306e319033a39e1eb6b8c1df1befdafa51d64be8635ceabf25210f0cd45bc918f7a1a4762428dcc9d2f80bd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 b1407b325c07fd9ef7a868e28bbb328d
SHA1 a75c2178ffb947147a78d6056d3abc71f2b269d6
SHA256 03b0858f924a335fac194b0c857e9979a186eae45f2d25ff93d68a646ab2c1b5
SHA512 7b1c391414a6f166dc610dd61c0fc3df9e761b6598d82811bec2c942ba9a6ddc7d03f14aa1365a3637b52990683a25b7159d00e6a09889bd0674156a5cd9c03f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 17374634e518e5dc0d830d3e6b4d583b
SHA1 1c0ccf3b5d009a7a6da240d9eae930b8531475ce
SHA256 d256779d84f0b85eb571bb6d9b40f9a88549a02287a0d46b8330c27cbe631ff0
SHA512 75379673d0255fe45f6a256bbbe05faa5b603479ad1099f7e92dbc37d7c896ad14c2963d0977df6c29b34f1e5c7b85e37ad7f32db330e5e489db5df1999eafd5

C:\Users\Admin\Downloads\Unconfirmed 719390.crdownload

MD5 c9db6b5c84be13a43ad23cc204e4bc52
SHA1 94bd6634303205715fd04f8aa10d75158390e4d9
SHA256 77200156d4773175d341aad11ab23bd52445065cd95060348da17d083dc27688
SHA512 9273493c5e5ea24b2f5ee219fdf849546e85b3f5cc24c970f1ab6fdcfe961d96ca6fd41c96f9d915892ab24ce7ff409f0f5a6569b0225e95d36afba51615f8d6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5ece7f216189498f40fc1cafe1658fc9
SHA1 5ba6655ddf0d23801c7eea5f741339d72c2132c6
SHA256 aed31dbe21afb1ec4a5f491489595a1d7185f7cba587f6b9d91829068d6f7f86
SHA512 5537c0c8aa8b7b3b406be4f44c9c1f409f355bf2b4efd816276d2433fe6487322fbc591dd376a273f4341e290e25313455e4d5a8505f9c361a53e602369aa814

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5 81b7a157fdbea0969d5e5bb2283a7241
SHA1 2c07c99b5b3d6819766a8e5be078e601af1f1f07
SHA256 c3bad58a82de5faab7b80a5a624870cb1bf2fe9ef153ef28f7f8b995532f4835
SHA512 6581a367f31ebcd95d314c9ce1180c7bfba7f89065a88184ca79eef2a8f37cf9d971d05622f2a7cdc18ea5583d03bc95b12f24f2bc7cd220ec94eb0ed45062ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 8fc04f0a1a15bc42f5a832fd31f447a6
SHA1 1fdc1cbefb2a9bc601fb299241022d695b3013be
SHA256 8e5e82e50f588067cd159c159fc88735d4123d3ce180b0708d6e2535b048add8
SHA512 2e3d44c486d41ee24ae02e0dd8fd206b3f797885ca304d40777327d61ee494b3fa77ed1c7b8fae1a2df34120efab31fe63e2053ae44b8faa7b2976adeeb094a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 03e1fb0d8dac69154b7c09a9637b0094
SHA1 bc3e2310c9f9d16e7efa591e66be3279ba5c0640
SHA256 637791eebef3acf7f3ccccbed7a417c660c367e618efbd6983be72a72559c25d
SHA512 c47eb817881130291806a001dfe9d6e514c3e4fb3518c241ce2813a3f13945d4e77782f864bc6200de41a71a5e6141df6e969eee525534f5884e7a225e003031

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 9d1e050f5fcf3a2e591cecad3c52f09d
SHA1 dd5915d8789365202aaacbe89b089ff08575beb7
SHA256 9f6338d32bf66cd92cd61e5d0d9984c7073f6b0b6e2b92819e979c34e6bb6951
SHA512 10a487db98097577e2a58a6e83a3f52fb9c0c46d3b532ae954a4933508e75776916dd89ddf92e2ded5963c0b8b438551e9f39606dadc18c03a0653332cd0e5a1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 3cc6eb5701113bc1ddd13fad3f6aaa96
SHA1 c622b92f63670dece1cf0941a6e3e0980d1596f2
SHA256 d7d2a7888b2cd68f05022f71141451a7acedf20423f3582f0b610288b3b2e43f
SHA512 1bf60e5691fd12d165153dd9ffb482a15c867c7bd84f68c0953224ae228d580823f1b4c805afa13a894454bee6f5cb452b4e41e78ca4328690e49cb177c6292d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

MD5 f646c6dd0a684d0a1a5009b313b144dd
SHA1 50e7d9858de1f5c059339bc6f39502b9c02a37ac
SHA256 338d97348a11495d559958b8dbb76eb1917f61f936a9542226d3f31de8297bc3
SHA512 32d434f6bda09bcbd7482f98fee0a3f39130068f94b71cb23c3bbbfb4a8f3930cc32bdf6443ed8d7a88f7d15257e70e7729219765d40c8e96e215c798655f896

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 3f9b59725b2eb0ad88b03d6b430f729d
SHA1 85ff35cab803db4ba7f3be0ba85e13c8b39ee64b
SHA256 602f01a1ca0613506593f671999db06ee7d61d67dc3184f8434678bd4f0819d1
SHA512 65b3292b58f497915bedf2904d92ce1012f78ff5b7567db1d5a5b1bee17cc64ae8314cf0a204fdf1e0915dbb211597e4532e8a04150c040ff0dda3ec7c81ace7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 015c126a3520c9a8f6a27979d0266e96
SHA1 2acf956561d44434a6d84204670cf849d3215d5f
SHA256 3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa
SHA512 02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 1c560d16eb7ac2d03f9b896614ef64b0
SHA1 3b52ed3e9df65675fc5f286fa84d1b0d55c81d9b
SHA256 0113c6fa72f864bad2c29d4567f58064df57d6810f719ca7601a9805587b4942
SHA512 454e2c2e4902ecc592d9aa751adc7665621db9beffe19ef1185e59f0d7a0697546e42837ec5219146fcfb9b87d30ef6b33255bc046c249f1c28124753de43684

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

MD5 424a1e992829fd5e515ae41b785b55ef
SHA1 83703970f645ae18d1bbb746a93cf6dbd7ff3ad3
SHA256 cda815ac13c62aa805a05edfcd3c613f40d32a2dfa56a0120549997692557df3
SHA512 aa64441722a17677b0a0c521c8ead14b46dcaebb4e966ac02f2cea47033701013cb52f03239520e2db6f0468e64707550c7c1488b2cd3a05d33c059c5be57ffa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

MD5 2bf72c42fc10ee1df59af1ad52f95041
SHA1 0b98c319bfe50e7ee9ae2d61bd27c1c55e6fab77
SHA256 c575b1cdd2d7c56777a8332c9af63d2d4c83ded501672401a6e8ba0ac9563053
SHA512 048e26efa5564df806cd58ecf84203072e6ab220890af3b0c20611a6d6184f61d27e50b52d87f37f8b739b60ea4bdf1144371071ca3ce311f89cece9cf1f8aad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

MD5 c03ff64e7985603de96e7f84ec7dd438
SHA1 dfc067c6cb07b81281561fdfe995aca09c18d0e9
SHA256 0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526
SHA512 bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

MD5 f79882e12fe87d482fe216d30ef3c93a
SHA1 e3031f2d694529705d8634b397815cd907fec24d
SHA256 c95d79ddd197080d143fdbaf458ce6d653621088f2d16827b3037f4417a32f61
SHA512 075f20268aa1b46fd322da5220b1705e42076d6ee681417bc95d5e900c6ed9929eca102796757e5db387db56ed2e97937e074b5af75840e55b018623c0a845c6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

MD5 44d36dfa28aa9c3cca438d311576dc47
SHA1 9fe9fc529b1816f23abc542265f81a4763040e8d
SHA256 ccfd5be27ecf4b51ce937d357325b2bbee4ecac76abad1698b60f75bd2dcd0bb
SHA512 95049aff40915d196557d3722bc697b1603f4a29377d5b457f7cc38466821d4c801bb27b3db40152f5dae4c1263ff6ec8e770a01c14945e5676d1879bc725066

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

MD5 8a4a83ffe633b03323394469bb90d9e3
SHA1 1ae7a93cc8aedf3407a8c33da21a9976fbf77c31
SHA256 c16866d8cb6cf686f8048900819cc0b00af78c39221af15849dcfe2488f46306
SHA512 65856c22a5854d5be20364c06b292f477eeaef193fbfdac04ba28dd20d49bbc226b7dd934dc03dda5ee515566b2e1e7da16e0e801b84a28ce9fb75fd792ceb1c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 e4c9e38d6d7863434d763a1a5f1c5868
SHA1 389340300f38c2e4e7452ba63b06bad7631a6649
SHA256 7bfd4cf4f7dac274843e11cb5c519b987d452286c6ff94af24a0af3214ef6814
SHA512 85f87be60a959849ae2715da5153bdf8438281bbed5cf53055a53f8fefcdb7d884417535a109bd5923910efee1d5ca32b711ff788faee0de24f001ee55592ebb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 453c7db74bc598b871abcd031c5a288e
SHA1 b312c984ded21f7ab9e810761eeb23926fc8d37a
SHA256 d40d5c1b18787727f7787527b42e7dc21162110fb14b9b262f7778cf56df2c7c
SHA512 e9cef2379a06be7143acdcf0ec4a361779d5128558546ee0ddfcb3cd8238a357574e84ab4e516a58178d2b84c5d33be3bbcf2326b9c4201772cecac9ec6cd729

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 6add51b132cc6a02f4bafd89b232bd85
SHA1 a8835e3994894cfe762e0db018779999b6083860
SHA256 dcafcee30b048cf2924f27f2fcb1100f53c40660ea9986306f3096a6e63483e4
SHA512 76aebfd00541f4f577b235402518808824c693e58d88c43db533de4a8c8e0afd532b91aea8a11ab8a05b3fbfc47724b3342f7f252953859a4beecc44efb1b2de

memory/2320-822-0x00000000002A0000-0x00000000003DE000-memory.dmp

memory/2320-825-0x000000001E2E0000-0x000000001E2E8000-memory.dmp

memory/2320-827-0x000000001E740000-0x000000001E74E000-memory.dmp

memory/2320-826-0x000000001E780000-0x000000001E7B8000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 96fffb85417228ff7dccee07016c9181
SHA1 fa40ea34404e401259c8561d18628676ae5f53f0
SHA256 87846c7d482513046bcd8a927959b29f3f4c7867c77dd610a1a91786867f2ca7
SHA512 e624a0dd36389336272e2188e291f58be04f19165e88a5d6ae830b1fd662519eb97a08814be12b4125bf3a375e87dc5ad14eaae25c3da11454da4ce597abafb7

memory/6016-847-0x0000000020560000-0x0000000020A88000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe

MD5 d083a07a3dca2d0ea5ddb0e959fb8ff4
SHA1 86f3f43729db553d45b728b1409b73d3de5a5915
SHA256 05e1c6babb787f24d8a60f8ded2c216c9bc2956970d75073a71139fe168a122f
SHA512 d16259a1fcb29def140e9e1768b99d973b434c97bf7b09bd0d223143a622ee720d2531a84dd4edf082300fb5f4f00812e418c0131b196375821e612bf34f7aac

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdater.exe

MD5 b282ce9b81f606d1c6cbda554dcd4efa
SHA1 7554ca07096a2e410f2cd3c98beb7b7e6be27f3a
SHA256 1893941e9dd1ca1296e7f575a9442fa1cc53dfeaf2d1bc94d01608ba9e7e31bb
SHA512 9e71f3cb4ea67831dbee5bb4cbb2dbd9f8ff8ffd1158fe2fcac41c89169a9aa3236c8d163f7d4e9df5e2b70ba2be20fe3af97bef70be40f45dd11acb5b4bc184

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\swupdater.dll

MD5 9d66c62b0a6b9d86b2c90d45d0655701
SHA1 93b230c4c942ed55a84c5a1e744e924bf988ad82
SHA256 ab9b3eba2befb88ab1919fe47ab74d181abd7c85851164bcf8f200e7c0db3a54
SHA512 a5484333485823db0f7f11c978e2e110294ce8e9a212d3d6c7b56a1a160cdf33a8db0146809e52e5287d75fd474307224d6987d17b482da293a4491bb1e5e360

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\swupdaterres_en.dll

MD5 4c638b6d2d9e243ee521ec29297728d2
SHA1 142b6487238f0a00d016f73eda5dc7800e687891
SHA256 4df4cf6c745ee927376ac7b1cc6baa9b7a749f60ce20e27b3bed209295849d6f
SHA512 accb61833b6c6172768d4721c1124ebe10eae77224c2f939f33988562b5a299f3a65c6dcd5c9c3169a4831ad4873a8c1ad4dfe3340156398760535ced4bdc588

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psuser.dll

MD5 db8b356ab2314b130b4b85593576de14
SHA1 f89395e6bc1ea5ec03f2a8aac940218d9e3b8a52
SHA256 8a412a690343346783c19967ed0ad7e1d8a1e6e31015c62828e792fb0a5ea626
SHA512 769eb74dec2658053b7bbfbe4393fbcaf6598c41fdc894817b2db4b0a5eaa8748a174ffc7b41958ae7de10bf8c5db930fd2d783f32ee07c5c1f234b2bf41eb88

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdaterOnDemand.exe

MD5 06dd62361bae24f8dac385c07c162b69
SHA1 ee385799aec954fe9fc3de7c81f48e7d2dd7eb71
SHA256 2700573511aa417faedc4767645ef3334f46e73195f164a960c474717a3e0b0c
SHA512 45d3c62f51f17231c561848da47ee2a9865130e98a38bab3afd4c048bcaf739ebd556922112f675b4635fb771331720bc971149168153800a6581ff20272d830

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdaterBroker.exe

MD5 c209d2a5f427b8dbd6ec71d6e57c7e61
SHA1 8340f5b41fb70e01791f1c1518d0308084b2dd63
SHA256 76a54d6c150e7f38a08032a260eb5396c8df89ce9cef27f99a2a2bdf23d9f381
SHA512 b2f24a876ed8749642ad353a2b32168f7d5fdfbf0acf78aa39bc4615a96016350f92406e8a657d289bc448a62e0acfdc57004595ef945bcc5b813d1a67d32f89

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psmachine_64.dll

MD5 d75403c05d96bed42e8e27d1e735e6e5
SHA1 7be275392bc5dab44818ddc48039bd2356605b69
SHA256 04dd87e70d8cdefae35953763a23ac30fd9d8b5ebcf424173f001e2c1889c08e
SHA512 b2e96840aabeb1677a225b2789104bb923125c8752f6e5a55d6c9074c381974b48232e0c0e419e0f4398480ba411f2e3843dfb092553fb32bb6bedea1095be82

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psmachine.dll

MD5 13ed360db95682e27c69f74912f17140
SHA1 7519f2202e581defb7be93716d461470c1d91270
SHA256 0d2e7bf4108138bd73343d7415181b20c4656e57716ca9bbb07b4ba9ed04e1b6
SHA512 0f783fb106a68f532cf5f6d4be0f96233ea61441b8785206c49f1f2dc409c5a5f3976ac3f0244231e88c9113dd04f227069501d8217f7a254e180dde5bf4ffcd

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\psuser_64.dll

MD5 7f956dd9ae7c4d18789c62f545e21295
SHA1 1a9792cd0280e20c06555e2c82df8767aedd9acb
SHA256 9362a40da1c9ee1b600311eb2aa0f732299dd68e693254ed118a4dc5273b813e
SHA512 bacb1e1f829a1f1e28527468397d45ac9010f63f810eb73ec98546dc00f967e91b37b1ed087a86f0db6aa0249551d04188f1a8f24e0c78593f3333f49be8f925

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdaterComRegisterShell64.exe

MD5 b483bb4c375468cfdae4a2ed4e40d056
SHA1 27311ef3b6a323335f46c4e81889a77ffb1b3002
SHA256 df80d9477a45eb1ff233f3d361a1d82729c368987de14c09747df0f959184902
SHA512 0116e83611626c27099a0171654a4f24d64c0c901bc597bf168f889a300a1f3aa62ef48759a78081fa1add6d82a8dd63d94eeba1d828d1aefa8ef17d2b0fb141

C:\Program Files (x86)\Wavesor\Temp\GUM649C.tmp\SWUpdaterCore.exe

MD5 c2540f15c66d32d867f8205e39ba5c2f
SHA1 7a835852b20e9721eab276543e0202465e702d07
SHA256 9b296f4894f4a969f2f3ce0c5c2ddb8eea503deb4919b23555fc3f04fa0aed41
SHA512 3e0cd859f84598a409370498ba601147559c42f77a685bb131080e92e3cb87af1fcb793711d4331ce880deae4491cef3969f9e996e17b63caa3aa1d98d6c13e9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 736afb0fb825c04aaab770409e181dbc
SHA1 aa57361f59151d454235676aca4f4c52e29aa778
SHA256 2aef800f2a26acf3d89d48df361c90c7e5d48cbaf139accbc3b13ef0930d4078
SHA512 8da58d74aac6e055b8ce83bf13ef119a41bdf25ecb1c70a99d9c84bda7f1067dc2e5c9825a3755ad22e2c5efd5409c7e1fb34dfcc44225b8dadcda23b6943ea6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4d0068106ea29d473743fbc549f5b945
SHA1 7bdd90d142d1a70578b73a3ac0f60d688a48d22d
SHA256 2fa57c533a2f60269896e8282c981642d1fe335b5c4bb096c2c6fcddbcf959e5
SHA512 f9cc9233a297c3363d38f1e33e185ceacb4fda95fe1057769c9dad02079d28de9999c28bd01cc1e10f56c09274804798d8542df40655d67e4f7096f5bf5cb49e

C:\Users\Admin\Wavesor Software\WaveBrowser\1.5.18.3\Installer\setup.exe

MD5 d6b98af80e3195aaf34a2ee9c8934419
SHA1 1d7edeb2f2182cc46de5475114d6f250ac36c2f6
SHA256 08fcffbf9f6b2a76c51daa787d590c9eb02602c8671952641719ac68e5f4440c
SHA512 d6442cf595dc9c8fc6eba3ade22e770775e28c32c68624da5b4df76400d82b87c59b50ce8cec8f36aa1109012b3b21b4312e403bef000d136e0bf24df8d6efc7

C:\Users\Admin\Wavesor Software\WaveBrowser\initial_preferences

MD5 85753477ce12eb27bf38067c6c230068
SHA1 52fd03cdde1cfc04d86f22be851a58a629865cda
SHA256 aff2f276485f94e47ded0cf070dc18d58961fd58b0cba5a7b43c0693aeaae40b
SHA512 fab9543351f022b22a557c31ab0fe1e10fad04325f4205a66d4f3aedb913ca8a5fc814f9dca63d604fe5c2915c4e4b54d7ca713940e4ace5674f2717c8be7651

C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WaveBrowser.lnk

MD5 7857e48e9a2fc7f17e3aef67dff8544c
SHA1 2607362e967d38f52ac066d2c5374394e50ac598
SHA256 ca9b84a2e495391fd2aca7f3ce212775e55d3b00d1ad6394ab1049cdd958b51b
SHA512 ac0a6b0fc91a99a7c93f1ca875b70122d674818e149434b2a7b3a165427ff3dd25ee572fabb92fed662ad24bc916b7118db23eab78f528cc7bd9f5037787a15d

memory/5376-1094-0x00007FFFBF8F0000-0x00007FFFBF8F1000-memory.dmp

memory/5376-1093-0x00007FFFC0D00000-0x00007FFFC0D01000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\52b88b44-daaa-4bd8-ba2c-b61e592d823c.tmp

MD5 f3d32d9918947cd0ee98a95e6782ea0c
SHA1 7d352e9a4799b5a180e11eaae4a7ef1a6ae51d2a
SHA256 33845d8a8dfe591b8eed4b27f2c47dc856b11d86c6bfec08074662c559ed4d01
SHA512 e4818c7e56b2a7f28610f14f738fe92018528517182e5cfa2e17750796bbdecdc2bca3af71afaad2e27a19a17e487fc321e8e20c286268dfb7a126135817804d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_0

MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

C:\Users\Admin\AppData\Local\Temp\scoped_dir5784_766645856\Sync Data\LevelDB\LOG.old

MD5 d969fe9a650fafdb24ff97d049c4c5cf
SHA1 4462aae44d41a0d1fecca3b817cf3cf6dfb5e0ee
SHA256 94c7ebd15ec9e8083853cde17c681c892364c9644bb5b820f047cfe1e617e52f
SHA512 d79a177b22c33694b15b4076928c1d388c7143504faca573a0bf497a8fadc8aa60202044aa193b617c8256e3d8ac1cc01efae5e82f865bc602b49c7e3a2a5a7d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_3

MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_2

MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

memory/6552-1250-0x00000208C9B20000-0x00000208C9B50000-memory.dmp

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat

MD5 c11582e629378ceb82f2c77df1a283a7
SHA1 ca49746ae7fa046cd23b5c4ee3cd865536de283c
SHA256 8cb05b2c2a31caefdcdfa71b21c0249a3a42b59210426afcf73c7f0e6b05c62f
SHA512 04e19e5fc00b1105e50ceef4c471cc803599972f90aeb103f7061c730cab49ed925df00083c702811b1de05ef21df280bf6d0f7d3b53c73cfc7d456e5ad090aa

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\https_ntp2.mywavehome.net_0.indexeddb.leveldb\MANIFEST-000001

MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Temp\684d6cca-1b79-4026-9506-be8813d50fa5.tmp

MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00000c

MD5 8e433c0592f77beb6dc527d7b90be120
SHA1 d7402416753ae1bb4cbd4b10d33a0c10517838bd
SHA256 f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
SHA512 5e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3

memory/6184-1422-0x00000261A4510000-0x00000261A4540000-memory.dmp

memory/6196-1424-0x00000208019A0000-0x00000208019D0000-memory.dmp

memory/6376-1429-0x000001A5019A0000-0x000001A5019D0000-memory.dmp

memory/6304-1428-0x000001F20C0A0000-0x000001F20C0D0000-memory.dmp

memory/6248-1427-0x0000017D4EAD0000-0x0000017D4EB00000-memory.dmp

memory/4168-1426-0x00000193EA3F0000-0x00000193EA420000-memory.dmp

memory/6312-1425-0x000002260F350000-0x000002260F380000-memory.dmp

memory/6224-1423-0x000001FEB62D0000-0x000001FEB6300000-memory.dmp

memory/6964-1551-0x000001F837DF0000-0x000001F837E20000-memory.dmp

memory/7056-1561-0x000001B681990000-0x000001B6819C0000-memory.dmp

memory/6880-1560-0x000002525EBA0000-0x000002525EBD0000-memory.dmp

memory/5412-1559-0x000002073A040000-0x000002073A070000-memory.dmp

memory/7068-1558-0x000002555BD40000-0x000002555BD70000-memory.dmp

memory/5268-1557-0x000001EAD6B40000-0x000001EAD6B70000-memory.dmp

memory/4664-1556-0x00000212BD260000-0x00000212BD290000-memory.dmp

memory/6660-1555-0x0000019690110000-0x0000019690140000-memory.dmp

memory/1552-1554-0x000001B7660F0000-0x000001B766120000-memory.dmp

memory/6916-1553-0x000001DF819A0000-0x000001DF819D0000-memory.dmp

memory/6984-1552-0x0000020D8F390000-0x0000020D8F3C0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\53d2a5a5-f548-4b83-89fb-f1b435112678.tmp

MD5 797684f924e5887fd19bf3e3db752b77
SHA1 e19a6086c2e87eac03c802737f40e7ff842fa44f
SHA256 1dc3edd13c8c702426d614addf5ef1b5380cb78b7bff7886943c21c354cada0a
SHA512 bddf7202395db21d5dceb3f91338dab3f85586abff64ce78ab7df369b8b17b5fc337f2318822701c652383f7cb009da2a1e931f15676cdf1f9b3011b815625eb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\assets\index.ts-7d59b331.js

MD5 64fa826b6b9bfa910fed4a18c6a12c9f
SHA1 265f312f8187d56522441f869714b9d76229bbeb
SHA256 676f44312864a5e6e41bb8b70412ac265b6a293b791679be10049c17fc62d4f8
SHA512 32b7d2a64ace406caec91994f6eef6551fe982876e5ff3a5d694929e0fbed4bcd2c7c53b879ff5a32ada0ebd35672e50db30a0a17f39abcac34a1cd13a61abfb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\assets\messages-86fb7e29.js

MD5 6d62c5de88a2381b5627e0d2df7b9a30
SHA1 08c76dfb73e09780b0b3f98e5da414494904417e
SHA256 068f97ff81dc092e4d201f575a2d330a0f5830e847edc6e0e80f8a97684ba75f
SHA512 a193d284bc5c017353e8ce1a51f2449e2e58f0f35fbfbe8173f812bfaa91840f2cdede70897c64d271601f8836ef4f694dc099c2271c18b448b9892e5043e291

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\assets\index.ts-5c6f3b83.js

MD5 52ebda260d370e60901faff13e8c9828
SHA1 4681cb8093a4159560a8103dc32787ffd55bfa29
SHA256 8146421645c3f1f6af4e87a3fb22107220ae417717d7613bb291a0fd330f8437
SHA512 283e4308b2e9a93d3871853a0cd17519b39fcb29fd3e1457af8897d9bf12ff5e3430164c63f4164768ecf936e4cd2c48b8b86037d872a9e3c9bec29a9f91a5a0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-48.png

MD5 2184400582c25500a74577359a1f7e7b
SHA1 e69eecf84f7d2d98bf236edbcfc143fa42d01bc3
SHA256 c6c3593c7d0af5c9a7f2e26b98ef2629e392c5da87df80653d94ebe412d5c9c0
SHA512 24858ebec11fc0bb586eb2d6f555f5e798ec9708ad89b0a94957a1537dc150a584b70865d7fed53d3f122789812d390eb6af6b68ff4cd93296b2b0e5a21b103f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-32.png

MD5 9caefef512720012470700a11b0bd456
SHA1 bfc11bafa996fbbce1566a569a79d5d72b08f1e5
SHA256 82c0a843e1df5cc10a8c6beabee8416281aa89c73798d7bb6a2cf4a237a24ae0
SHA512 3bb42b23babd54cb902e595b84a398ad5b2c9bd2e4bd4951a8b0cdfdbf91f6d0e04bb1fa944c54d673babdbcf0400c1947d0e12fba8057c3f69ab1e61b89aea1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-16.png

MD5 46c4711e8452178b9c2471f9c59c2667
SHA1 e020f7ba4a787f840d204525e8eeb21d0c21e2be
SHA256 4e1aed06fc4105c64aabe9580069d0cdeec3464a693241e7c02771e1beda860f
SHA512 42f2161205f28003aff9ea4a8bb33a0a0ebbdbb9bb5e9446efbca4f000a4315b2bf7184d79254c148da40597cc15bf8f22a02a3da78cf5c9026ae35e4bd695bd

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\icons\icon-128.png

MD5 af719a0c95789b088fe4b9f82dd5ee98
SHA1 cca49d2a728cd456b450cfcc20f91acf781c3105
SHA256 5b861963c613fca1dc4aac9a416e43b2165b05a4277478f74b7f6562a378ff5f
SHA512 4a6f77684b3bc459897ab2709754849868bac64f4e099c1e74970339c944738278454d6c043ee8a2a0337e9891e7e7126bfc41e6fb0f5fac544b978ae36f5082

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\[email protected]

MD5 e86f7685206ae12b271a4c50620f1f81
SHA1 b5a96bdd23787dc994406c408c8db08cccffa646
SHA256 28cb433c90e6ca9cfa6aaeb6ec60ee2c98d02a255d671c7c47689f9799cdd14f
SHA512 fa2fb8ca2050b13193898a48da639673e706b156b666e8159b6a71d417aca7490c4faa8953776fded46226c7ac0b6465c44729cb452fd93fc961ca2bcbaedbba

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\weather-qr-1.png

MD5 5cdc09bfeb0cc136c4b8e45114c8b910
SHA1 9d15f710e94409fc854c30630d70c66959871410
SHA256 70697bb3558c12efe9b34ca34b05ff39dadae04df9e4928e0de6811b3efb3a99
SHA512 29b8d495506291d46554e0a3951cdcd6fcd5f3c43fb52ac15c4bc13180d88fe91495c616c3e12a2c7edb7a2d64f90c391faa539199ba7532c45fcb827270e131

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\[email protected]

MD5 d336d499edc3d7205948e09647ab5826
SHA1 797b756310da1f67d3df61c821377992a305cb6f
SHA256 63f3d2622f4927d830412c8b089dfbdc77dbb880f9c49f072c6c8dc0b3cdbd00
SHA512 fc0d6b3c8ae83f3db7c5f9ed4a999b090b2a1e8fd80f4b91ce1a42f804cf8c8c49d03dc0f362617c0df130a7b607b5ffe36fdc0edfa5f4a18b308a4a66ca8472

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\weather-bg-1.png

MD5 8f158754f161c02baf061d230c993455
SHA1 41b21d1c3e2aa029ecc77dd6aa5b174d0eab34bf
SHA256 0055b3b2ca2078823b01d4cf064d4ebfac5cbce03fa38c8b5e920b92b3b47f6e
SHA512 8e417897690aa540ffde4ecc541a7a0a7071f355b6b663601647e6099f67310f540a40b12f6c0a2984965123d9ff3ac9e78f0be7b4abe2d6bc9ae941fd869106

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\src\assets\images\adblocker-bg-1.png

MD5 404ead15b3040c2a16cada6a18088aab
SHA1 57d6d1b3d601532d1825c738ee51d0971f137af8
SHA256 bd474396ecae2864798b9b33062afe3b599dc834db30b6a2f4cff0d0cbb9f9b8
SHA512 12173b41f487987aceac82c13f63b1318107c48d6803dc1f89053245c1c08d092761399ab397da44f0ccca5d9ee3c79ab98081cbdb25a78ab5b97f0b52a4f784

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\service-worker-loader.js

MD5 b48149d66d4bde2196c003629e79ae5a
SHA1 276944b5796793effe150b05d0e9a8c9af89bfde
SHA256 22002a97ade52f1ede27d832dceab496337b59a6b6e51699d4fa231502fc9f5a
SHA512 89edbd1c24a13c6516cef4d23421bfbaa61a7ab37662e393fc27c4a21c94b02a71d348b55f6f2aba66b6cac7cc2f0894487241664672bdd92f113a07984c7555

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir5548_187267564\CRX_INSTALL\manifest.json

MD5 d1b209dd9c422ea50135dc2bb716d238
SHA1 fc13c64e6b1ccb9561e8ee0378dd1418b39e401e
SHA256 14abbebee800bc6e73c8302fb892faf2c9ab6df5ac2a8eae66caf583915b7d0b
SHA512 f9641b3f7bf52d4dd9f3e223e220a97924ab8fef6d472924f30b15c91414df9d72ec4de00ffbfe9b17c06d8398cfdbe80095b1da06c3b0683ed6a751cc0f8c8b

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1131475925\CRX_INSTALL\assets\index.ts-loader-13a0f470.js

MD5 37ba3a70722df270b2f69dd60db8f1dc
SHA1 8c61f83d7e13b5efed2335a14bdfce2463fbaa9f
SHA256 13a0f470c87bf4ac0613fe1c0fd3fbedd5ce1606cb2d491fb93b3cb5bb2e2d75
SHA512 75d1e0556a2ecc24cc3a06619b1894973d391fe089c59bd33033286de99799968cc2137b0c0099d3cc63545ef317ec82cf3534a2739c909644bb01137401d10e

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1078332766\CRX_INSTALL\_locales\en\messages.json

MD5 bf28ef9468e4e1cbc5f3e055adfa69e5
SHA1 d5cff2ec3851f3fff649d688919f9f4f8511420e
SHA256 0e86dc475bac19122a3134a18cf8af26b83831df3346bcf5093739ca2891b4b3
SHA512 7b37e27f56b8ef1aeec6f25bbe7336ad0bec837af4390e47932adc67c9ed873c6b7cb5d643b39d0b6f383d79c7ee0ab8aa39e70f894ce8f2b90a884d1325c3f5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 850c8cc5edce55825cf22dae193158cc
SHA1 5544da01bc2996a3e2be1895fb3b41e126f3a26b
SHA256 b5b5b318f88057e7e83aa449c3dee24af9b79450a3e48329c1eae66d5000d731
SHA512 88dcda42cde1bac88194b434571e4b82dbe413b8788d1fa409c6158a18993ea833073b6bdf87b1b74a9dd20468a2607e659ae58bd76470ea2d1136cc3251f8a5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe59f284.TMP

MD5 65163361ad84d7fc8362352ebc99f557
SHA1 183c1aa8eece55ff3b5c4ed7722d37c86dc506ef
SHA256 b79243c81f8a9ea335ee888b3514eac0364f9825b0648a72b58be43c8ee28ad7
SHA512 6535e64073806319d6ec3559f7feef80938e42aa161fec229745cb62160e955c2778aef7d2c1f6f14c18f0733e6a2ec2dd678c8cb82e795873daf5548b542fb7

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 b24374c20027b3d58b488554e9893bd1
SHA1 e252ff68c64e2aae44fc9ca3e0fbd671bb800ced
SHA256 0c3ac4c6e1d0aabcf75127188df1965e8b04db2f8f91408a32b0d9b8e6ba5add
SHA512 b788141e6576e42f70a64e6dbabf045683604abad362beb739c45c041c74484616ff3755fed2f1f3a1d6e7e1ebafe498b5b3733f9e6664d7c623f40caa2da024

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe59f294.TMP

MD5 b6e7034348a5a03047aa7406a53926de
SHA1 55703c739a59b92614edcee730f7594bfc54ca08
SHA256 d1826103abfe45f557cfa447d42b477168dd40fe725124fbd05ba3cd97a582bb
SHA512 e4499f7d28663bc612b650b4e983fc99e174e5e565b470616d5744aaca633ed598eae1bfa187c1ddc854902b4cc8b9026c429d4d37ab8fd38a1e77f0b026b1ec

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json

MD5 a192304f63ef26c80086f835cc4b7ada
SHA1 6963e90e752209132b728a938844c4c64dc94d43
SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512 be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561

C:\Users\Admin\AppData\Local\Temp\19566d04-ccb9-4cdc-a5ed-2ba5db8a8155.tmp

MD5 04398d23bf4733785de3a5ca05ad80c5
SHA1 72b193836a47aa3f0b7182de92a6a3f6f862131e
SHA256 a89ea036242d4e3345ad54ea9bcdb5c73ee5b78fa320996398bab4ae46cb578e
SHA512 1e7ba8e738c16af9267e7f9da427c23f2159214839d6e59bff66228375e9c7aea0f86c1ebd352cae248fd8508f762c1e81dd680e27cf7c1b5bd8084ab383148a

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1776636303\CRX_INSTALL\css\fb.css

MD5 c862cbbc1b82064465f98482ef73948b
SHA1 0e49a12b9d1fd903e0c44cfe9c9db0ae7a5b50fc
SHA256 988dfba4289e28ef42d0ce93bae58926ae7a9528de7bdf97898d1c2cd2f2016c
SHA512 12befd2966f25464dd21377d89b5d3c9b8fd9abaa8f257fe88bd1d80759fc5375439e6160f99dff7ec7a61135d9616992b611b63d1a6e094fe2eb29e23420559

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1776636303\CRX_INSTALL\js\cs\yt.js

MD5 8e84151e901f61a135d941979efd8ff9
SHA1 52841c4272dc039438ce59943489367d1f2e4482
SHA256 738e199707a5027486e17e9bfbd50a1dd295d2d6d5c48ccac17fecaec91b70a1
SHA512 c2e2c027d3655bd549ec59d75cbe307c8e6b66838c72949b965ce2c7ac3c730ffb873a948cc055f6727964cf048d403262e8262c6c6559410ae682e2963c013e

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1776636303\CRX_INSTALL\js\cs\native.js

MD5 8307716154566dd5d4b7f87f7e536824
SHA1 5b746f1c97a036b190d4cf1db76760902ae1ed87
SHA256 a7e44db42aa52a276edb6a2dea7dae1a8d1f683ae67d0179b5930271e3138d12
SHA512 8dcd2e9dea6c147a4c9578b42fd1613a55e790d3a6ddf98809f123cb06270784b0c0e3ae27bf2957e6066fd8bd831cc09777270e2bb8f6f7c144721f95e3c5fe

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1776636303\CRX_INSTALL\js\cs\fb.js

MD5 35a10dd7924dc7a4205fb3807812896b
SHA1 53583f9a14b35a9529614f7cb8c2f26a3a2a31a4
SHA256 43cdb582f3881db7584ba1cab29ca88c74bf51819033ea88a02b0614e398ee8d
SHA512 a7220a4c8cf583c334d78c108b7da9402a79eb2c57c428c5f740f8b2c6c19ac1c761da8d57074f2b9cfb063da84410f6558a8b61f978d536d9ac48428448a681

C:\Users\Admin\AppData\Local\Temp\scoped_dir5548_1776636303\CRX_INSTALL\js\cs\lp.js

MD5 b6ddadfa381c9d9297812d2dca3d92bc
SHA1 9f83febb785d4c87730164f7cf020d036e0e11f2
SHA256 6b2d97ac7dff812bbb826852feb506a4a300b7876fd6985e6b8a16ad710efe89
SHA512 d89a308fc1b9b6ba055e88ac91a830169547c8aea734a773762767fe4c6a76033a8d3f20b8e82c094239d25c8e2f17e4c9b1bcd083d294db368aa28f2cfe85f4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon.png

MD5 fd727c2aaa8b364faab1828aae2250fc
SHA1 bca5b2548b009ccd0b2f79c09fd628fb3119231e
SHA256 1a32dcbadab7c91a690879b5425f6815c07dda1aadb6f6a7942b9e895cdecd0f
SHA512 7d21b3133beea16a8713ab8a87ac7b84d8b2a312e4f017a9988e970f7281b9c41dec3f909d5483bba387e5ede366e80c210da93a78ed72b108f65934eef07c15

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.0.8_0\images\x48\icon_a.png

MD5 c05285aad074c0872dd78908176b1052
SHA1 b8a5926d153dfbc503a38a749baf9099903c289f
SHA256 9a4a7e0c2969562d5d1299f80317d4560265b4a843cf17491c7d36fa74a91cc1
SHA512 6006b22ff83d0afdc346179a4c2dbbf927efcc62fcf9105fb45efd768bdba62af5839c3efb21e2555e0090639ab2dca76397d294b51db0dca768def53ce00a1a

C:\Users\Admin\AppData\Local\Temp\5bcdb2bf-69b7-4173-9e29-db89661a04b9.tmp

MD5 7a3bc6142be9b7c9664464759974c08b
SHA1 7055fe5cf3e31a24687c3fcbc06394eaf097c6ae
SHA256 446839b455f486943d42e46c8230b6b00d59943de94449fc418ee626aba4dbef
SHA512 c881916068cfbd73425e1a6662d1049f02b8f1ed34b8546a9555d43b2b05ac3507e94f996435123a7694a2f2ddc4ef9f97d839b9a9584ae3ebca37f1b45d63cc

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 2f565e02ba7fd13fd0bd12b5f256af41
SHA1 ac60befca1d3f385d4b2937c6e9a0a67d7db0a35
SHA256 9fac4f998f05aae352ab5d4870cbd5b5d716528ffc56654e67bb67823700a6b7
SHA512 0a5a89c839ee5bc389c7316c117a70af7f4d2e9b8fc9a539f920e934a16bc92df3b8f429be0b77c83fc9cdebb114c71c08e1d8456b6fbee96adb6ca3ab30b9ad

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\ebe28309-a186-4245-862b-217a341bfb6d.tmp

MD5 a4d340afc4b1278e8eba2bd1cd192ab0
SHA1 0b671eac1c5058a4635b8bbe860409e321447454
SHA256 38707bb90ca4b23b681af26484a3a9d6bd4aa88571d43bbbdf6ad54c0b810ab3
SHA512 d007bca8059beefbdff6c2f32354e145f1ac845359cd166f83e8c8faf9da790e54d8283b23a6a9756504b7368e6283f16ffff5bd13876db3ee266fac616f768c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 a452ac5e5ba710f6173fe5c0c281765b
SHA1 9ab54e6a024ef64ca0ca2a37df05d0d45716231b
SHA256 ccc7470dea3a0bfe22c2d4f263b562cacb56561c9790ed9f7e7cf1eddebf82f6
SHA512 085158ade2d11a8c25e60c8fd303823afa40e6ddd15471b7bdf92e55b7e4f60c5c3d35482fa08386592c530f5fa8dcebc00d8be8683e3b8b6b42442e8a4fc0a1

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity~RFe5a1c05.TMP

MD5 1bc365f88f26396daf359d4fb7f80886
SHA1 5634e3d8e94d4b587cacbe9491e7d500fa5241fd
SHA256 dc89352bcc928b04716308b1a2d7b76f2b83146062e3692a266b3de7b1f7ec39
SHA512 b978960721963b129e78c878f939d8bb75a5d9b0a7cf51847171db5a7e4c66212574583c5da08381685dda79d0211f9f33ef7daf5c784585f0a9692921f92cb5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 319b1c04c50bde6ef4260419142c6f0f
SHA1 a8f32bd40de51616f671fea32cf94cc05da37763
SHA256 7ab966dd731a128b3be73abf11f03e52c4f26eaeb0c4e3cdec5336d206f1273a
SHA512 053a55503bef68c9decbaa6e7f80cb3b4e142da757e33bd657df79e6b540eb578669f98f4547362d38dd4568007685b620be5e57ed29d53a92b62c86c58d779f

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 db9a318c61a60bfedd5563fe72006ac8
SHA1 f269f04d1c528849b9ad3393c4cdf13b129315d4
SHA256 bbb5d0e7c7cb19a29373cbdab27264dcec42b5f5f2045ae2868eb0b733d81b66
SHA512 addea1db4f8138cfa243655b06289c13bb819523b9c10c70bcb395b837059f02d7b920ec8b12e6c33edf9908f0c4a1bd66324f50e036e52f1bd0aea5d4c65450

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 26325f25f4141df8cc51a14ae09ca36b
SHA1 350fb1e904e95cad487af676e226ce7f82e3855e
SHA256 78bb73eae00fb0bd7452cd1ef9eda12905163af4144640e28034b400d06fee75
SHA512 1fd2540cea0d990a8d099441f84bda5f0dc50e2ee0f7c0463e4f7920447c4c4a69a585d9951fdd06105e226e6422d3a633cf82aa0f389053cb97e7281d707afa

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a4e02.TMP

MD5 e502bdaf98c7d91215140787e851b28e
SHA1 0a46ca7258329987521940ddc86fe19d79903296
SHA256 28d5bb2ab4c3d2eac7c9b48970adeb69f4e8643eaa4696c3d670344747c83fcf
SHA512 61503992da7fe7236dc769a5ecf40864158c4c6ee1d39ea766c662e0eb48f021f399ef76269f7e0ff2bfabb3016e8b74c48f80dd469df18536ccbc09b0d977dc

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 71d18c6b042a8dc78cdbc9695cda463c
SHA1 a216058bdaaf71733d2a469f99bdd436bda08904
SHA256 24ab61080768463bcb34f35e20f2ee2e0b5a225bd4fdd22e8355c56ce197cc73
SHA512 490113ec33edac7c8a2f6e83e080fcef83ba4d9c6648bf3e5e9423caf35046d3b9021d0bf40ec4baa5eacfb1d344966799418d7d0261205734c0bb6176e88750

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 d741491860f7e6671b4ca4c1d8d67c7b
SHA1 ae274d38fc8760657151808adf00d23d52b14f3c
SHA256 9facfee78415806d80f09ba9a963a8ed6462b1f8ccd706af2954953ff4d549c5
SHA512 dc24b6d375fe4ec7ac08cc8641fe31c6fa98187d9cc893136c58daf5d67f9b7b472e5a5a7ef18e9c81be659f71603993461c13047c1dcad974e0b496fb58d682

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

MD5 643cc68dc52ec3cf1d05c106d5186627
SHA1 745bb77671ef1ef4d004172bba218699ec09b87d
SHA256 05028d51e9dffdd880f411c28ce0c3e9ed6d22d2f07f9543f083bc79003a07de
SHA512 344024ef750975838517bd1418fe32410ee0a389c7398889b080a7f686a5a0c71a32e159944204d30ad6ab5e65633b9d7714f157197af1b847c9578ec00b09d4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\https_ntp2.mywavehome.net_0.indexeddb.leveldb\LOG

MD5 341029c9e7830de3f051fe3cb473afea
SHA1 9ba751487c5b4848958e43707e44f3992503ebb5
SHA256 278880215c3d88883312f4dfb7cdaf63aa8344b75ce3ca902ee94c74e2444cdb
SHA512 17a5f861f0cc101a6c91f1dec2359210499c792006b404dd71d9958f4756f27c4662621f8f476834394fb8f5ed6ea3f55fc0584d90d54d80560c66132305273a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\https_ntp2.mywavehome.net_0.indexeddb.leveldb\LOG.old

MD5 82f01bf00e96ebf806b0ebe8e7009ba9
SHA1 6e36e4e0d2716cc1cefa260e9c99be8b1b7cdbd5
SHA256 52be0fffff1ddb8e76ceb01c929d0f9d2a8426a993922d3c51ad219c1f30e619
SHA512 28162cf76563da81b25668a4c5194f329f5a83f701c364ca26d4841475215da4151e45303ca07a10160b77f552df228d7df4b23c457ababcc24ffe2747fcef4e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002a

MD5 8f1c7f5187e8e78fdb31a5e6c688e803
SHA1 64b1ef52851b1c5b130bd7fc12576329d1738f0d
SHA256 0598e13041b04bd01dc5e5849abebac0e253bbac3ec6bdc71ca62b84100717f4
SHA512 b5f744e0af9d4736b542060471404e074fca5769ffebef2becd0a311329bae985b97ffb52247e571ee0c2a9b7a99cb3fd5d91f21bd807a09d0a45fb651d12217

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000029

MD5 f35ad0c20d2f7e02b99e4866a98989d1
SHA1 7e9960316f3eb5bc7b5f2fda0b761acf0ca898b1
SHA256 86145e56e9b4bd3a42e3ddf6b7cb6bc8e9372891aa5bae35ea0f3facda3c99aa
SHA512 253fe78f7ea21143f4c8d0fedbb29eb3debf6b08e5ecab1cf2a4c0dee1f80d9a870e6847aa9fb9a39d8d2f4e601594b633869b2fe77f8a1c3363372e6ff477cb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000028

MD5 f536e8f265fbbd76a5f7b9fc0ea0ad69
SHA1 8db474f6ca6e7548d47cc3b078e66abdd5719066
SHA256 63678162cb830afba8013a29be9148c72c3dd90561f1b0e7a3cdfbfd883912d6
SHA512 2d8d79bf7dd4ddd61b871b3e54e61972cfd2cad17f11865707e006a4f9ffada7b9b2524a1f7ce056aefd2b36e43264a813fd9ece00b3182d034aee5fb84a75d0

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000027

MD5 8abfe6dfa7b0d9a5a4b7268155054740
SHA1 fe841d96c94923c7732014a81bcb574fe2c10584
SHA256 75799b61c8d93b46365ae3a603ef508acee921adbf2abf4ada583fc4e0e4bb82
SHA512 a6a475c64d5e0bc3cb94bd38b38da66f5b4470f50738286f2d42030d2e32ef15d6c795dfa8da36502e536819dababe9386ca7419f2c6cb0e8580053ace1166d4

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.0.6_0\dist\contentScripts\style.css

MD5 a2de90a2190cef036f2c6df8ab8f00e4
SHA1 d2c76852071c134e386b54d0163640233e8b854a
SHA256 8bb83055b42d5b706abb9b10afa55c189f2e451acc976c78430c3d91f555c817
SHA512 761d49c55530694df775138dd078c5b7ac91ad2ff561d00df824bb70ec7d63b6e886ff75e195eac6277c535511618bc2c034e2db7693329886b4b87696f7dce3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 e6f236a99edd2659d3cd49531af7a985
SHA1 386e2005cbbf938e68552a7e0237432feeeff463
SHA256 cdfb4f04236260d15081d9d8cc230fff9bc015c42528c1203187eec4402535a7
SHA512 0ad4cf97456a953294da2f077711b7f41db2e6992defcc14568e75a8c162f54c5bfe25edcee84072a122b4997ec63dddc3e7e779dbed6c3f7985f61c148516ff

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 51bd698be289f202ea928341d908416b
SHA1 07cf5cd938b49dcf493f3c061edc6272f427a01e
SHA256 2cd5116bec5090d8bb0b3ce494abd6a99351bd93a19a07e1ab72884107073ad7
SHA512 6593916f1e6c88833ec087f444b9223ede6902792ce03041196d391c58094c432e2095cc3a37a7b8b14130539ecf320da4b9fed15963a66f993f4ee7a1d44800

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 68fece3de3257d22233b833e71da47d6
SHA1 7ae71895364dbef3b21e448f59d06d6e5e511ccd
SHA256 39f5529c63dd756305213ed7ebf3dc29c9448ec78d486bd7c10b042bd6cb5a81
SHA512 10038ffb21511fe2a456e20e57d87d97ccc40dad74db48ee183d42cbedbc72308c0facd1e5e32730a094efb27963b7be3c57228beb8ba55415ee029cbd11a65b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 68ba661d0fed20f94eec0658de71bc2c
SHA1 d0af092d1b8f837d22fbac187ce32d55a353b93e
SHA256 886e990f88e670397f0463a20fb8b0566fc273e677b693aae2f4bc3c0ef073d2
SHA512 55639882b2e9ab2ba374b5a0a08e1ab2a99117993747b15a0da517d7da348f6bf80b5d30713a3aade418622151da4db7883f4b1cbc91a1bbf08c51af5299cbfc

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\fd2ca52cf9ce1204_0

MD5 54f54dbe4cf611217f8bb94840927f4f
SHA1 9ec527710750e5d75c9595a67af5d9c92af0bf69
SHA256 26608da826d20d4ddca9079de40709adf69ba0eb188eab67d7850148d48731b0
SHA512 fde727dfe605a34ffd1cba5642ee08302328d11d2a8878d9dcfd66f7a601feb3d18000a65133594710ec314384aabfc6b9ae861a8881a37c74e9cf6daa3e74ee

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\e5556d1d003c7ae3_0

MD5 205e88a6aabdc4256733ad1c36b234a7
SHA1 b6d2a69091898eec0d68cb99f28766e6486aa023
SHA256 f6e3df08dc0505bb5bfd235f79ee5ec14aaed02d40a5c7ec784cb8540f4c706e
SHA512 a73e66238c7bf3f545a5afa31de6e3256f5af2aea8307457ec98cfa6b2151e97567a5d354b5f4407ffdc6e74d610798243c7ee8761274b00e95513cf6d193849

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 842e69ee4fa27d49de828ef49be5fb65
SHA1 0c1b448f77a2d338eb9a98193ef9384a07e52e16
SHA256 c1470606bf0e41535b40af97cbb03ee826db6d2c9b9857249f5972191ccd069f
SHA512 9137d5b49cc6e1efad3a5c7fc743e3e147a604d990c4a3096ec9503c62cd8f75580d91dd7035b57b849b3bb4f69ab4afff59f86f8d6e4e42e0f482a5ff404f68

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\0b11fec212f6cd43_0

MD5 e0476a443817a1bae7ffc480b8addf59
SHA1 a10d8d8fb8fd9afd9d509b3e32f472e1a65033cd
SHA256 8409efd8f08931e9ed461a86cf32732b42e82d5a740b2f3f0afa01954980cc06
SHA512 e5c67b82c6496973f60672786763b92112a254747027e4851b6635a000dc1596e1d7e7768dcc7d7781560291c36aabbc537d7a9086fc95776145b04c5c1ce6f8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\57a4ae575e06b3ff_0

MD5 2d92e1e2c4e5a9e88658ece0af8f6b08
SHA1 196a97f2f5f0208cf590efac4611a69f1fa2d5f2
SHA256 11bfd10cb4e63e407f7638bba6a44cf91a0279e5b70489bb6ae2314323531397
SHA512 970103c045dffe11e156d8440f4ba421402e6b790f97c9a7888e3936595a3f7d26e1ac7361c26fbeea1f1bedb72bc4fc63a79f280b0f2da18553ada234f7c3b8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 5b31be6448cf94712f57bfba48a9fc56
SHA1 2f3098ea42b23b62724fb256c4bcf6bf21145f4e
SHA256 bdc01827b44543e1f00bb8e8a6856f695b2e71c08bf630475898130663fb26b1
SHA512 ec54473d6fc8df0449f941fd3f135c4e84ef73fc720155b02875571c0d3a48e0ffcd78f00ec93f7c0bbf9b02bc13469ff7b9a1963261faca5a1daeccb442cc4c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State~RFe5adf17.TMP

MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 b635e369e14a8cf44ef5a537d3a13ca4
SHA1 7472987867360cee74b87e38de2dda000839b4d6
SHA256 c04e2ebb880cc84dd15ccd273eb64580336d79aa00d3d557a01ec952e0075c10
SHA512 bc021b33d5e373b56c710f7e131a589ff162879ddabad69a9d4351adf594051853f9ad27c0ad46466667ae74891d7098da08a6daafee2b4b34fe85b356f8d8f5

C:\Program Files\chrome_Unpacker_BeginUnzipping5548_656480185\manifest.json

MD5 4aaa0ed8099ecc1da778a9bc39393808
SHA1 0e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA256 20b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512 dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\SSLErrorAssistant\7\ssl_error_assistant.pb

MD5 e2f792c9e2dd86f39e8286b2ead2fc70
SHA1 8a32867614d2a23e473ed642056ded8e566687f9
SHA256 ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
SHA512 6a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 ef2570bf88c1295d4c348b21c6bd647f
SHA1 75169227e208096c082692c74a35dc3ee6ef54b9
SHA256 4af1a066f502022662fd20f9564b7cd7aa74afc10e612dc85a46c998cc2745b4
SHA512 f836209fd0caa55a62befbcd324e11822e668f574279f04c18cd53392746a73974e9b4f0f6277da53186b1af9aeb7d8c8364bc03c060eba0c7ab940bd2a20791

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 7761581aa6d4dd8f37676af9de18b47d
SHA1 2e30cd9a3db5a8a4688f6755a6c872a23004cc19
SHA256 b43e2fd039ee0cde7a65e0e95ab757a3ec51890caf74e766406e487a569c0332
SHA512 532b76a186849a6727868b797b11b5e37da1ca42a6a316e99b6eab35bdf35dc466dd3461f4ffe557e5f576fad42ea17b3d39f5b6080143c5b0d7814b5be06cfb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon128d.png

MD5 1e56327668359bfcae26c27defb340ef
SHA1 c91bde25817086d9b1319c20b1710b09365a70e4
SHA256 7ed951f0a157dac2b42a2b003fe76e085017cf425c827b05bf759ebb55db3d6a
SHA512 5cb98cfe15c3be976ee6144657eccc05d2104bcab2b8368d1a570395c1c726fc81fe4aa09236fb8dac12c43bf12020449403ec6400c4d9cabff879f4dcd656e2

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\d7bbdac2b0aade9c_0

MD5 c20208921bb1781c1c5013cfe89cee2a
SHA1 1d6a5bf1d1500610a424732d8200149433b74a84
SHA256 88b6708c67ad582a8d80d2472e47ffdc98fc89ef5397f666e8c5bfbad79c5f73
SHA512 82d4ae884598b6fe08a6c71cf5bf92ee8f04b66f8112c6d3879d9d4bfb2c18efdf1fe188ac1fb67b9c66270c08b478cd4995638f3149994d85b18950af7064d5

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 1be8882177870945104f155f870625bb
SHA1 fdefc75166e82a79745e1b7ea5e3617a724b5cb8
SHA256 ae6aee5e4cc13638cff9dfa0b69a757ca63dd7375e990bb9dd41a2d0d43a9327
SHA512 ad28f9fa1794d9e26e9b715e39c69316f239bc55b284b3f4e9ac7e3a6ef4cb70480f00bf67567fa0aad32af1a26b4ddf3a0a3e2b756530ed20968bca240373c3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\12e302b30576ee78_0

MD5 4f4aae5d21abad8c6f939c5c400f6c6b
SHA1 9285d5a1efe672d1c27a5030105f0d5884ce2405
SHA256 3b795d3fe04a46435f9f4127e61743e2d5fbb472741fc25ff20344a090fab19f
SHA512 bd437c670ef6979579ff879a421a841821f118ee5ac05c7c200b004248c72e206c23daa6e732f2753e267ed2f8eedc9c6a0dab362bb121be7592fdd32f4720c4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\4eb0b12cd1f37818_0

MD5 ec0552631d8c23ebaff2a3c68384fd84
SHA1 064e4ea0ed96d32f1fe6db228c906c597289680a
SHA256 176004eb5bad80cd29bd6118120c2156cc9187687d87b9ea7c1d4343bc600d82
SHA512 3558c9013ab91537065dfa53d33a7da46744fd549e1379b934e96b566cd536531ad127e5b8fd00832ee5245d1aa8440fb52c014b71e37a7efa8e23088f0a4e50

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\3336bcd4a0d04a75_0

MD5 3418b9b27ac0a07ba926d5046bf31542
SHA1 0e54e673aa50e355212886f74710860ffd763619
SHA256 d5b3dbe1775d3ad2a6fc5133810dfb3f6430db01c1eb6d49323d705175941cdc
SHA512 3ae73a5dd60b65972bdbefff57c6091c693e4f9aa17458835cb00a496c81cf64ec455bcf92871e52671ab12be874605520f285ed77de8f3ee551763b0b50b46d

C:\Program Files\chrome_Unpacker_BeginUnzipping5548_965243136\manifest.json

MD5 2ff237adbc218a4934a8b361bcd3428e
SHA1 efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA256 25a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512 bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 39810b14d3bbcec61b4c16760b059988
SHA1 9f6a9c9b092e3116e994ee990e816f06b1e048c9
SHA256 07f89c785b208d85b19f8c0a5f5c1159bad4187be234e8bba47abec601f5104d
SHA512 5d34f4ac38cd2afca065f4489e95d1ab3c9f122714724abeac4feb2cd8d49efee787327decf10ccfb1f7ee9b69003c53fe6cce05436da69c200952d0399a25cd

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b8f8a.TMP

MD5 aec35162912b2dd022d6d52d2cc9f593
SHA1 aab30f367e819e7b70448aab5325bfeb059f422b
SHA256 d050aae45604612488d33d2f3b1b504bcbe7b4fbbb44dbc45eecdf8bbd2d918f
SHA512 35be54333fdfd0c1444e79d079111d48f9d5d2e66585b5c7e5ccc025db998e03df28a882888d0b1572cf42b52c96bd0d0040825a63bc5017e98ecd9f0e838a5d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\CertificateRevocation\9259\crl-set

MD5 086a5c225049aa5546da410037871b32
SHA1 c2fa675fea84c0db0d1bbbb8162ef00503c211d3
SHA256 1a258e94eb1a858d782d087adff912edc26030b266e06a88d651ba33ac94aec0
SHA512 43587f201a709a88f702f3620df52bcf87488a77a1e6d085118a062babe56b7a8491451f6e132b39c813013d910cb9164f1d5aaf84a971cfe63076be485866d6

C:\Program Files\chrome_Unpacker_BeginUnzipping5548_1400251971\manifest.json

MD5 b7db5e1ce1be54e2d4e6ed9952300a04
SHA1 d3370911b0fd09fe1b07ca84eade9b64262c5181
SHA256 c554c8b271339f59438d33e264a19bb51891ba45eaa350c4c6250c2624a09d3a
SHA512 0a74d1679b20d8016a68e2c50bcc48521a5a3fe2f31a1f37e3f8059064756d35c114c67a574044b9203e655d04b7088461fb651d873c67af6e7f03b437f8479a

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon48d.png

MD5 947bc5e0d15be2926c11d5a68a4b67ff
SHA1 75b60440ee2045545759d4e8f1720623afaab0d5
SHA256 db48f163264c1f4aefdf6b4c26d9b5423e4bede72b99ec3ab85071fcc42068a6
SHA512 adfd785a41eaaf4e73334cfc2bf766e960c21679de48af8b8a23a9f6a44e728833c0f7180e009418d80f48ff71fcbf752fba709fec7d1f200caf5b25733625c4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon32d.png

MD5 7734bb666bb9fba04c15c759f9fe35af
SHA1 16aaae66e98153ae52b90346c6a4559a8e3b6fed
SHA256 4d6b2fb743bdc348a3babd96a96cd6bca6cc191bfd02524737a491ddc99a7ef4
SHA512 093209ae6d0a3aa9f909be1db3cc3be46bce496c42238f2e9ef4bca3c63b5d7c68de915a23163ec655069f81336357b281d5f830c1ddc8f0a3324d0d247de106

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon64d.png

MD5 01e4b6ec21791d162c92f49d7763e0d3
SHA1 3d752663c717f363328159a3094b66a4d2a5c027
SHA256 2fdfb515ccb51789e74df228e98001430e21ae5b6c5e431272507bf2b9b00539
SHA512 542b0c35e08dc981f06ad3fe4a3069b239308266527a1d26c5cc5a6e8aba1caec17e21781b85df4a4a81ad2f3cc795c725c05a1d75c4d9a68ca5649bee3e2aa9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon16d.png

MD5 03bf7997beebdef943da84b05cf298c6
SHA1 7cd4ea284ef975b358c8dc668391274edc8cd1c2
SHA256 d5ada7064d7ee67144d11a33a3c28b7856912f4989c5213978659a4ef965409e
SHA512 77d68841d5c3ed12f91f8351636feebcb41f4e6984b239f72462ff5f45f2d7fb92162d2f54c32a1c3f229038f4b0a73c06054c9adf9b0a6d03f20a5e9cef68d4

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 921debd99e9bfee08b2e51207ba18c16
SHA1 5c4d4b5503c47874d4402b6cf63c0ddfac9df061
SHA256 c451c1c0372d0f6283d99a18ec1acf53e9a546cfb6c93c8c6a612b16ed2e4b56
SHA512 eec74aab58df78600f52c03befbb5747cc969265f5c016cd8a60aa1bd39006684fbac8cf3300073b436c54ad28fe6e16152abd54a3917f654a0785151f0a679c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon16.png

MD5 c63f512ccf8d6ef497fccbc53c1f950e
SHA1 f04e832d89b4eb315d6979780ec6dbfc25361abb
SHA256 09780ea3eaa0a432b03214025febb59c28fd6e105a775f065037c5e9720fa150
SHA512 f4bd4dfb891c49a36cae8e796e6333984ecc081d259c496fd5015683f9779cfe1ccc53c31185f6d2f14c46ffc66032f6a69e9698baa12c5b9b439a7200fcf5fc

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 14510231fa8acb4664d8723a5c64aa85
SHA1 3a5d1f28eb9937e7c9ecc71682b939ce5f0abadb
SHA256 2e50e8a6e7eb6f059cc3b9078d7d03afb96cab5f3c3de5314ab40f1631c46468
SHA512 d963ad32ece3c57d915c75f3d42ec0f08860871644f7ac58bfcdc848bbca3a67a77c52a7ff4c79dda3ab40ac925c4003196e2cbd1e1bcc1f470e0aa7605a52a2

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 d76af02acb0a419ebcefc2ad35f1bc6a
SHA1 4b908c9fcc14bd6f689c2be21f33a627de1a5d6e
SHA256 267af1467413686385928a7f68f0080ee69c13d21236db0eddab5d51779f9250
SHA512 45b3acfce67485a205f7deca4954e2fac3cf4ad831bac0def619da95263fcfb6dbb1f15d6d4be839e5bc9e877d0b7dfa5f18bcee77c5249caa5afb8f54753051

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 b2ec7d5a616d29e971989538e34f4e77
SHA1 32a456beafdb7ed341128794a43837bc93c8c90b
SHA256 fceaed92d90818bd475d67930646e6555560cb70ee979ab826c135ff8cde8bbf
SHA512 a989091c8b5ab524dc5aa8b43b45fcf93bacd36f0d72b5dc705567f3613317b4fcdde37dbd66b071be2c0b0d66a7bc76a52298cf91e90d71519a5b72982e8729

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 ab126dfbe9c952103335c21931b8705b
SHA1 b0d45ecaba8f562b9f74fbde5aebfe35a52b1991
SHA256 4f93937d44c2a6d474b015dbea4b81fc6d1ae5952b00e536f4b3de1ab3118d68
SHA512 94e27dd4e3cbbb137524985f28f2e5c53f39b780e878eeeb1f9e9d71fea2b12a08304f814ce20b28881da1c3d9d9ffcbad4236df31a88e8b2668fa1109b0e449

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old

MD5 3e7fca1aa1bfa70c4bf2edffdae2474d
SHA1 ddb4c4842e83b831d9132671ef1d5f623cbcd18a
SHA256 6048d9d11360d91f2be83e7cfaf12cec444c72cefd8eab90ca35d6eb5fd26cf7
SHA512 ed7605e2f76f7c50d8d5bf05098db4fad35ea37342d387eb6d4be7501cf527686895ab9ec5df697a5a0657a4946e35733aa0761f16aa93c520963445d58a93eb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 8bc09404fa309a87c1b67cb634b64af8
SHA1 b3431c0afc77d4a53acda5c7d315d04a3c099d18
SHA256 2a3f6791a3561bdcba5eeb40cdafad161e2ec877aa86ea10ae394cf68c12477d
SHA512 6ec796ff8b2fdda12132ec7963bfe58a6de66cc69d63e4abd7e528a84d338556e33fd6ad1c05b15c3f16652c77a9f5eb30b5764e8f042a2f7c0f995d118410d8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log

MD5 658a50480c8304379c1d36dba4f270f2
SHA1 908140074665234707b54fcdfac389f9c62dee0d
SHA256 a293922ed7b5838cfa50ea353f64afe0fb98e91b2a0ee5b456d66c6313367303
SHA512 ba99600de8982956e3b999d6b0045b342f92f8ca012b8d60ad4946685cf4d5593b61cbd6909899435c8619c24d8cad2984880f2e58a258e032a5f20455a4a942

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9ff65c9267005a4e748e70d4b2c9616a
SHA1 366da17175d5ada9145f966a2f3d39f5ca056191
SHA256 62b292a665e95120fb00dbe39cccab46682e84ab735882d1d20d99e6616ea68e
SHA512 77f593c887122fb3c3b0e9b1af079a8b91d4a228534aac5640b74290dd88ad4cc3f422aee7ec88f05a02c6fa25971d4170babbab112251cd5567c351a205f3c8

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 21a46575cbeb4ad85317dfc8e1096c60
SHA1 1856ce16f8b6c964c211736f61f2901dfa5fcf37
SHA256 85ec307676e4b6e122db5565e3d295d628ed6b0a626a40bc931d0826c4a6118b
SHA512 a7c0a80a3a9dc2978abd1e7c85ba809ed1e548bf8724d5e03d409d5c186dcde248df87d90f4a52ff0f8095651c8145f9820e798e68ea9fa19d732d4308377b66

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 05eacae047c8ab88feaa8657e3512fc3
SHA1 95e240594fd223cff3ec7299793bcfdebcc82e52
SHA256 bc7133d8504a5847682fad05db93172b5423b7139faf0cc7ff3fe0801d6f370a
SHA512 55034375d4421be4d25f82cccc370c3f38297f75d9f7bd9dbe107d32fe4fc29942426ea0ef05678de950028d9866bb15b067fa76581d9051be924ff5e8ad5eb6

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\js\background.js

MD5 71215d3e85aa687d34ae441706bc3e9f
SHA1 597bbec974c3f5f5b2eceffb1dcb870b7bff84bc
SHA256 55345b40109f7c1ee0e67da02202919b7b23e47b14651a19986bb535d2d8bd8a
SHA512 2d19ea31a5903b6d638a6f0dbd27d69b61dcd4d9e8e1f916de8f4cee9c1fadc2370ded95b93443493b718b30c16fa5ac61004caae9d144dc2f8ad77144a34b12

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.0.6_0\icons\icon32.png

MD5 5978dbf06abe1f283514daf84bdd0c54
SHA1 29c2084e859686315331a94c0fe080d6505bdda5
SHA256 9fd76e5d4ba12a800a2368f26639a0d81b542bf65fd9f7cdf9376a9e50e0d66d
SHA512 67d24797dd143c2657c8a0055e2b82bff76f297c72ff7ba26fc8d71c761e067ab14a0354958710f6660ca614bb21afb2fdeb34d1fb5d20c1981d9a723e784cf3

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\PrivacySandboxAttestationsPreloaded\2024.10.30.0\privacy-sandbox-attestations.dat

MD5 d870ae21d5872f145f30bd1f887cff84
SHA1 7e1d9cc092c38f9e0ec91c9f8d30733c75c71761
SHA256 12684b9ba04525d62d94a5c706e168b2b170c31ee9fa7587901c1690c9bdbec3
SHA512 e0054e77a1a3ee7513bb32932ab55509646f40e096404e5a51e4d400a8658c851991ad027a235ec6d9a37c5f4012c6cdc304e3f402ac4ad23d6d50002714b1c8

C:\Program Files\chrome_Unpacker_BeginUnzipping5548_419895823\manifest.json

MD5 4dd9ff84cee7313157e72fe5e2477eb7
SHA1 b0aa5b72af2940c10f761e2b981df5b56ec8bacb
SHA256 953bfed324c6cd16befc4d9537f8972014ff33e22ec1d8bad14c543e6ed3b531
SHA512 bf79799e252cfa48dd8d921325f7d0da0e341a0553ccaa1a501ae7131b11e0cce772fe4ce18f22834a4e15a21833ae1a02037155bd622118e3ac4ff664eccf85

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 f52d5947ffff2d0b97f4fb66320089b8
SHA1 3c2e830c87c16ca550cbd8fc075e4110087f4610
SHA256 dfa69031ad86d0093a7eb657a0416829f348eb651a9ab028fa3001b1e889e1cb
SHA512 a23bc0f852ead9396f34c11335ac4cae86573e8a7b1edbcb5d72325638eb0530887a2915a54dde57afa19449805f97d35cc013579446905c89810199b979aae6

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 da52eaee4404c7f26ffd25e3b1909592
SHA1 035a2187bfdcd3f85d17e889d2abcfaec2bf897d
SHA256 d3f79fe829b24c020bcb815521a8df1c2dbaba7e83596c42a1dc19e74b81bb90
SHA512 2df400226fbfb55bed9b06b61f0209a0ec2e3b6246d7c7c2c4f8d9cb8fd474a40713b9f26da394f022fc57c0a6e6c6a85968fb4a83220590d67be18d8a2bbcc2

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State

MD5 5c2762b5840a6607f9fa0689ff730944
SHA1 aa120afbaa836927be650cd10c16e9f7c4a724e3
SHA256 3cd9b8d6eb03d7b9bd5aacf9aacc0fd2e9ce594e32850f65f4f0b3434f3bec71
SHA512 40cdc39756844b8861dac8f57beed3aa2e8052869a03849a59955f6cff2f50e8f503f71631d12f2a8e34f840af05124acfbc8e1de7169e21fc3540a4d64bbbff

C:\Users\Admin\Downloads\Unconfirmed 574610.crdownload

MD5 a97a5e396912cbc2f3cfd4ff210cad24
SHA1 712535213bc8d80adc300ae67dd64714c38e4818
SHA256 44eddd0003f129cff1e4352d94baf90eef5490d7b1bfef2f4f7b6da637140101
SHA512 611955eb84dada37ca8831488f2b937ebd631f3bcbc97648cff8ff310ef458fac4987ff50c0c99972ee24f01ca671b850945ea71f14465f442b41f72f04f0d00

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata

MD5 0fff1121693361f6ea660926d2fac988
SHA1 3c994c7283099d3c4c945926c3edd1743d395e96
SHA256 d2615cd6ee7b77615be053c884236bb5de1eb1a2f7a6326e47b42ebc439cbece
SHA512 81ad992594eebfb24363674b967ccf9bd47c327c0dd85a2b4ef275d712d7f462c2060241d8994cea7b543d71293cc66f75544ffa3735b098e92e0086b475aafb

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata~RFe5d0c28.TMP

MD5 3282ee64f7fbae6eb2815e501a15c88a
SHA1 b19bd0ceba4686ceec569c51a7611e5a21cf7b22
SHA256 97998aeca6c534eb484a421fa8a95edec50ce3b0fc28e70a35e61baa65a019c6
SHA512 adddeb23f621db1caa7b24c2c8eaf58cf4470b9d7a6c401757f59d6e3c668405f0463561ff43af798a1adb372fb9671610af025d37f008d218e6448e57e1f793

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 af1b0c55a37af781488df9031c9801ad
SHA1 eb6e7eb09ba866ec35fd98c9f28e194d28bd0efa
SHA256 5c53404ab28c919345d8674c9037b705b0992b4e872553a92101651859667910
SHA512 9f64c3a70f130c2175ca7c445167331c3924af16b422225c8714c8ec0b4e5c3330a322e23c458e8c4cf15ee46d0b2d711a08482c87d9811fcd791b1c109d1f27

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 ab0b4c706d4873b2c367bc5ab62aa6b2
SHA1 7163e70ce1a2d26b6e355583a1028c639afe3f53
SHA256 38731f380a1037e57f66467952ae5b65883674e5a85d383324c993c976cb082e
SHA512 c37e4112c6fba760aa71bbafc9b65c279106a4fba33316755eabe9fb74d4cc47c35e90e03efdaf2c3008cedea02d8cc5338e7b893d263251b237d164c0f7377e

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 6cba3a15ccd48b3a97ee318602a5ef36
SHA1 1d7309727cafa911d0de4876a2353abc718be1b7
SHA256 463b23fc2e9429e0673cfa7b70efa4ce6a0baf1b50685af6d5dc10cd807a8897
SHA512 e2ab15fff9385afcf99b8c3e9c2f4a93df1c281f2be14f5b680713a611803474c042c09d4d1c6b17e2da5e51ae6bad005f7f7b6931c193c6bd281e83e4bdbb96

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_0

MD5 3263784a317da549ccaa744a0269a333
SHA1 0915ba40a6a6fb0e6dacc2d33d3b4faf06fbc023
SHA256 432713f85eb5da1e558e30e3d32af9efaa18cd5a41e5953ee8cd1d49f71d025c
SHA512 dd9c7f708b6f458aecee04d95915640398d1a3a56e5bb75e3d8d2c7e3b99c910970293bd5f6c422e9229bd44849cedd68fc6191a9c199fdb4b49bcbd6c4a28bf

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 b51a991b99c68bde0a838ddf4ba4013e
SHA1 d848925f4e813bfd8d5143b47b13bbed8c017a9f
SHA256 42cf106d6693e627ec22429b97bea0215762dee542ed0c265bf91874fa041713
SHA512 aea891fb7d36f598bfff650e9b885d2987d485be7a3ca247a5c1d5ebf4d4d6a9b635e6cd67b99579b1a43defa118978ca52b84d59dbc7e711c6177c1646e2831

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 64b9d115284d5127f1d0da2f419d0274
SHA1 570bf85d1daeef73ac2d5f48ca39b77258890bbe
SHA256 587341a67cd368c0fa1c1eca1ea0fde8b2b52436cffd6eeb4a538b2b8e535f2e
SHA512 8896336093a5143784093a52af28b6a91d97add38844ceea03dd21e17af3e8b4d3ace5cf7f73d1523fd4049975fee6e0b8456ca505a249d8b219966a7eee5d60

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 e879c4384316eb90edbc38ec9da1b90a
SHA1 5be4cb7528e8c659c650002011c7072dfb8d25c9
SHA256 c6b096f73cb87489e081898003996603f9677177bbbe570715d2b295f2624cde
SHA512 34ca9a199efef1eb6c9679a035790c7052a307b28b269fd6751e94aa6a4b08030a74b38ea1b633a1b0a6113cccc01a0d36aa1b2217a1d941b254062b66e2a94d

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences

MD5 40074fc549ca87f7e6cfd2066f8c2564
SHA1 3a9e7bb1b03c2f5940c4c2f732000c46ac150ffe
SHA256 157017e4816f1510271e878b01ffa510625f9bf1d7e10dc2a0e4d70cbcfcf7c4
SHA512 cd0d97e1c01ba01b38b6bcf947149aceea4b94a0b73fc0ce49dbb882dafac9f4ce79433c10110331199d2cda6f5772fd729961ac9048ea5124470d67a8028c32

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 47d0bf859e1f2f96964a6dddef827479
SHA1 6651b449f730fc982e079ed43b4bc99c4d59ac8b
SHA256 3452d9d698807756127b2681ca92e8103dbb996b343f71077e71127ea9b15e59
SHA512 33509d97bb4d778ec3e9b35a4d02777d9ec59078e732e41c74febf1633d0a65e8d9846cabf1cf2cf830f597d9fbac62b93594c947a19670a637dd20f5eafa58f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d81e1a5a058f2599d2d08ad6cf11062e
SHA1 86f0d7a448f3fec94dbb3e6236db83a3ca2bc3ac
SHA256 19db1d75ed4557e7082bb2405d078f5a5b9311f58567493849aad7a39e9a8f25
SHA512 c162d2e0718ef2b0fd14432707ca3fb3f4c34994c3463d2196896e4992da457a329d5f9ecbfb8b4058f214d92df47fc2b66ca26dfdb4d16db244e9a1456b8935

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State

MD5 d58bb70a5b8f97506b2e400835de2ad2
SHA1 eb80c552f1b777f8967f5f602742182a1f4a1de6
SHA256 98190b4fb68375cd1806a875abd6117ecb9c22e9e6b8ec0fe426ea4dd73de5d6
SHA512 d46b7a5e3f9854c77e506d2feb7b89f3209895d3aa90e59aac9261e42eed593e5e2f959d96118b5d1064ef0639cf6a644c95bc39f1494d88e4e28cd2799d8e38

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\b6c28cea6ed9dfc1_0

MD5 5ff21d5d0dbb126cc3f0db52fb7b569b
SHA1 406fb3297b1f61b109ba578b94bbd8c126a092ce
SHA256 d8e3d37c58f45e6328e0c1ad75d6eccf46a2af3c47e7f71b0be69304889fe730
SHA512 620bad2ada6c31a2bffc05767eeec4ce327b3334169dc349b00ace0df5042ed9238a69c519cf58730f2d6255620392b6f67fbca8af2f397ec7576f86c7831b0c

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_1

MD5 4d160f4ba6ded8e0be1a52b62210261a
SHA1 4f5276843d0aa39d4b48f1a74ed922d612e8604e
SHA256 d032702f39731aca3008e7695e2c4a361821ad84e184ad439bfbbd0f22e3d98b
SHA512 2f9a522995c50d62530ac7c3b3bdfad9560ed22f9153bf8c900702fc0dc33c7a68299b6e8a48a014963c472d6c770c2e807a0b686a540e5712ef5c541adc47ce

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG

MD5 7f0d13248728fc5a57ab6644436d98f6
SHA1 d65b1e8cdfb6ee72d5153e8fe3f03f9e6a91cdee
SHA256 0737899432a75d0d13470b5a9f777b4409aebd520d81ab43d6c25cf13f546439
SHA512 2149e2a5b5e22b1395a31a55e1b25804303f1131b3402c0809762f7f1a5a787e80cff0ae574e4c975009b101d97cf1ac43ae928edb6a5bcd36a76190de5d5ae9

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000036

MD5 c2935832073d69b70a3369efbd1490c1
SHA1 9c008bc89c0b6d50c89c6246e2061b58a9242f19
SHA256 aece29ef481c87f8fa1b6f0042637f0a8d721e0805004df23c13a96c3f1a214d
SHA512 e1f0e4b05f92e44beb4e7b3a39a113836cd1b8064658c41ae24a2d0f43df61334d0f4659fc48152c426cd1cbebccb6372328d440867e11fe4a047a2d3ac9b5f7

C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\TransportSecurity

MD5 025501c21d614cd1619b17d00f4af70d
SHA1 97b87432ab65f7d65f40426b588ea76213505d3a
SHA256 5ba4565a1833ca55d2ab2b3d694d902ad502fc1e6ff89d96f5e234732194a5e8
SHA512 7e4d11e8b977d85c498c0f8c9e658606e12368afed71d5251f58d9fa73bed635eb3dfff4c3e1b0874885378b057154b134e24d013a55fb55c852aea90befa30b