Malware Analysis Report

2024-12-07 16:17

Sample ID 241113-z9q5hszbnh
Target http://waveexecutor.com
Tags
defense_evasion discovery
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://waveexecutor.com was found to be: Likely malicious.

Malicious Activity Summary

defense_evasion discovery

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Enumerates connected drives

Legitimate hosting services abused for malware hosting/C2

Checks for any installed AV software in registry

Network Service Discovery

Drops file in Windows directory

Subvert Trust Controls: Mark-of-the-Web Bypass

Enumerates physical storage devices

Browser Information Discovery

System Location Discovery: System Language Discovery

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of SetWindowsHookEx

Enumerates system info in registry

Suspicious use of AdjustPrivilegeToken

Suspicious use of FindShellTrayWindow

Suspicious behavior: EnumeratesProcesses

NTFS ADS

Modifies data under HKEY_USERS

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Modifies registry class

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-13 21:25

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-13 21:25

Reported

2024-11-13 21:30

Platform

win11-20241007-en

Max time kernel

274s

Max time network

300s

Command Line

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://waveexecutor.com

Signatures

Downloads MZ/PE file

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A

Checks for any installed AV software in registry

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\TopMost C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\ContinueOnStartUp C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\ContinueOnStartUp = "0" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\TopMost = "0" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\RedirectCompilerError C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\FontSize C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\SendCurrentDocument = "1" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key created \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\LastUsername C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key opened \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\FontSize = "14" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\Session = "Bearer 2ee5a4f4-5fbe-4b67-baba-4c3d3fdeaf54" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\InlayHints C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\Session C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\Minimap C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\LastUsername = "baby12345" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\RedirectCompilerError = "1" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\Minimap = "0" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\UsePerformanceMode = "0" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\RefreshRate = "60" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\RefreshRate C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\SendCurrentDocument C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\LastUsername = "Peeewryhyyjdhb" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\UsePerformanceMode C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (str) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\LastUsername = "baby12345678910" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000\Software\KasperskyLab\InlayHints = "1" C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Drops file in Windows directory

Description Indicator Process Target
File opened for modification C:\Windows\SystemTemp C:\Program Files\Google\Chrome\Application\chrome.exe N/A
File opened for modification C:\Windows\SystemTemp C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A

Subvert Trust Controls: Mark-of-the-Web Bypass

defense_evasion
Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\WaveInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\WaveInstaller.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133760067322886029" C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Modifies registry class

Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3587106988-279496464-3440778474-1000\{EAFB15D8-B7B2-45C9-BFD8-7A6414BE0337} C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\WaveInstaller.exe:Zone.Identifier C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeShutdownPrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Program Files\Google\Chrome\Application\chrome.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Luau Language Server\node.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4284 wrote to memory of 3472 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 3472 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 336 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 2968 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 2968 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe
PID 4284 wrote to memory of 444 N/A C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://waveexecutor.com

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7fff2076cc40,0x7fff2076cc4c,0x7fff2076cc58

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1808,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1804 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2032,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2128 /prefetch:3

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2168,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2180 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3004,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3008 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3016,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3240 /prefetch:1

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=2988,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4372 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4660,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4312 /prefetch:8

C:\Windows\system32\svchost.exe

C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=3332,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4848 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=3348,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3300 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4996,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3780 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5004,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3032 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=5116,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5112 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4872,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5436 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=4564,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5572 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5376,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5712 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5848,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5708 /prefetch:8

C:\Users\Admin\Downloads\WaveInstaller.exe

"C:\Users\Admin\Downloads\WaveInstaller.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=4896,i,13721140915457493596,9733441234943882007,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6040 /prefetch:8

C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe

"C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe"

C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe

"C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe"

C:\Users\Admin\AppData\Local\Luau Language Server\node.exe

"C:\Users\Admin\AppData\Local\Luau Language Server\node.exe" server --process-id=3352

C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe

"C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe"

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004D8 0x00000000000004DC

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe

"C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe" --type=gpu-process --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=6560,i,332700623291496735,16367571327637022140,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=6584 --mojo-platform-channel-handle=6552 /prefetch:2 --host-process-id=3352

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe

"C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --field-trial-handle=6904,i,332700623291496735,16367571327637022140,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=6908 --mojo-platform-channel-handle=6412 /prefetch:3 --host-process-id=3352

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe

"C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --field-trial-handle=7568,i,332700623291496735,16367571327637022140,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=7572 --mojo-platform-channel-handle=7564 /prefetch:8 --host-process-id=3352

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe

"C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --no-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=7584,i,332700623291496735,16367571327637022140,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=7604 --mojo-platform-channel-handle=7576 --host-process-id=3352 /prefetch:1

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe

"C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\CEF\User Data" --cefsharpexitsub --no-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=7612,i,332700623291496735,16367571327637022140,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI --variations-seed-version --enable-logging=handle --log-file=7620 --mojo-platform-channel-handle=7600 --host-process-id=3352 /prefetch:1

C:\Users\Admin\AppData\Local\Luau Language Server\shared\bin\wave-luau.exe

"C:\Users\Admin\AppData\Local\Luau Language Server\shared\bin\wave-luau.exe" lsp "--definitions=C:\Users\Admin\AppData\Local\Luau Language Server\shared\bin\globalTypes.d.luau" "--definitions=C:\Users\Admin\AppData\Local\Luau Language Server\shared\bin\wave.d.luau" "--docs=C:\Users\Admin\AppData\Local\Luau Language Server\shared\bin\en-us.json"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://key.getwave.gg/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://key.getwave.gg/

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7fff0c273cb8,0x7fff0c273cc8,0x7fff0c273cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0xfc,0x100,0x104,0xf8,0x128,0x7fff0c273cb8,0x7fff0c273cc8,0x7fff0c273cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1892 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1832,16176058662007997048,2931772053204409540,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1844 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2608 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1832,16176058662007997048,2931772053204409540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 /prefetch:3

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3880 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1872,11524875501701807461,11411097534607351353,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4872 /prefetch:8

Network

Country Destination Domain Proto
US 8.8.8.8:53 waveexecutor.com udp
US 104.21.74.149:80 waveexecutor.com tcp
US 104.21.74.149:80 waveexecutor.com tcp
US 104.21.74.149:443 waveexecutor.com tcp
US 104.21.74.149:443 waveexecutor.com udp
US 8.8.8.8:53 149.74.21.104.in-addr.arpa udp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
FR 46.105.201.240:443 s10.histats.com tcp
GB 216.58.212.238:443 fundingchoicesmessages.google.com tcp
CA 54.39.156.32:443 s4.histats.com tcp
GB 216.58.212.238:443 fundingchoicesmessages.google.com udp
US 8.8.8.8:53 240.201.105.46.in-addr.arpa udp
US 8.8.8.8:53 238.212.58.216.in-addr.arpa udp
US 8.8.8.8:53 32.156.39.54.in-addr.arpa udp
US 141.101.120.10:443 t.dtscout.com tcp
GB 142.250.179.225:443 lh3.googleusercontent.com tcp
GB 216.58.212.238:443 fundingchoicesmessages.google.com udp
N/A 224.0.0.251:5353 udp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net tcp
GB 172.217.169.2:443 googleads.g.doubleclick.net udp
GB 142.250.178.1:443 tpc.googlesyndication.com tcp
GB 142.250.178.1:443 tpc.googlesyndication.com tcp
GB 142.250.178.1:443 tpc.googlesyndication.com tcp
GB 142.250.178.1:443 tpc.googlesyndication.com tcp
GB 142.250.178.1:443 tpc.googlesyndication.com tcp
GB 216.58.201.100:443 www.google.com tcp
GB 142.250.178.1:443 tpc.googlesyndication.com udp
GB 142.250.187.193:443 ep2.adtrafficquality.google tcp
GB 216.58.201.100:443 www.google.com udp
GB 142.250.187.193:443 ep2.adtrafficquality.google tcp
US 8.8.8.8:53 cm.g.doubleclick.net udp
US 8.8.8.8:53 creativecdn.com udp
US 8.8.8.8:53 dclk-match.dotomi.com udp
US 8.8.8.8:53 um.simpli.fi udp
US 8.8.8.8:53 match.adsrvr.org udp
US 8.8.8.8:53 sync.teads.tv udp
US 8.8.8.8:53 c1.adform.net udp
US 8.8.8.8:53 bh.contextweb.com udp
NL 46.228.164.11:443 r.turn.com tcp
DE 80.82.210.217:443 dsp-cookie.adfarm1.adition.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
DE 91.228.74.159:443 cms.quantserve.com tcp
US 35.71.131.137:443 match.adsrvr.org tcp
NL 185.184.8.90:443 creativecdn.com tcp
IE 34.249.168.140:443 pm.w55c.net tcp
US 151.101.194.49:443 sync-tm.everesttech.net tcp
US 34.96.105.8:443 tr.blismedia.com tcp
GB 142.250.200.2:443 cm.g.doubleclick.net tcp
GB 142.250.200.2:443 cm.g.doubleclick.net tcp
US 23.192.21.192:443 sync.teads.tv tcp
DK 37.157.2.229:443 c1.adform.net tcp
NL 63.215.202.169:443 dclk-match.dotomi.com tcp
NL 35.204.74.118:443 um.simpli.fi tcp
NL 208.93.169.131:443 bh.contextweb.com tcp
GB 142.250.200.2:443 cm.g.doubleclick.net udp
GB 142.250.187.193:443 ep2.adtrafficquality.google udp
US 8.8.8.8:53 192.21.192.23.in-addr.arpa udp
US 8.8.8.8:53 118.74.204.35.in-addr.arpa udp
US 8.8.8.8:53 229.2.157.37.in-addr.arpa udp
US 8.8.8.8:53 131.169.93.208.in-addr.arpa udp
IE 108.128.191.47:443 pr-bh.ybp.yahoo.com tcp
IE 54.155.111.174:443 match.prod.bidr.io tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 185.199.110.133:443 raw.githubusercontent.com tcp
US 172.183.192.203:443 www.nuget.org tcp
US 152.199.23.209:443 globalcdn.nuget.org tcp
CA 54.39.156.32:443 s4.histats.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 172.67.73.56:443 key.getwave.gg tcp
GB 23.215.232.238:443 clientsettingscdn.roblox.com tcp
US 172.67.73.56:443 key.getwave.gg tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
US 185.199.111.133:443 raw.githubusercontent.com tcp
DE 142.250.184.195:443 beacons.gcp.gvt2.com tcp
DE 142.250.184.195:443 beacons.gcp.gvt2.com tcp
DE 142.250.184.195:443 beacons.gcp.gvt2.com tcp
ES 34.0.206.140:443 e2c56.gcp.gvt2.com tcp
KR 34.64.233.111:443 e2c5.gcp.gvt2.com tcp
KR 34.64.233.111:443 e2c5.gcp.gvt2.com tcp
DE 172.217.18.99:443 beacons.gvt2.com tcp
DE 172.217.18.99:443 beacons.gvt2.com tcp
GB 23.215.232.238:443 clientsettingscdn.roblox.com tcp
FR 3.162.38.113:443 setup.rbxcdn.com tcp
US 172.67.73.56:443 key.getwave.gg tcp
US 104.26.11.174:443 scriptblox.com tcp
GB 23.215.232.238:443 clientsettingscdn.roblox.com tcp
US 104.26.11.174:443 scriptblox.com tcp
GB 2.20.12.94:443 tr.rbxcdn.com tcp
US 104.26.11.174:443 scriptblox.com tcp
GB 2.20.12.94:443 tr.rbxcdn.com tcp
US 172.67.73.56:443 key.getwave.gg tcp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.8.8:53 dns.google udp
US 8.8.4.4:443 dns.google tcp
US 8.8.8.8:443 dns.google tcp
US 104.26.2.170:443 key.getwave.gg tcp
US 104.17.24.14:443 cdnjs.cloudflare.com tcp
US 104.26.3.170:443 key.getwave.gg tcp
US 104.26.3.170:443 key.getwave.gg tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 8.8.4.4:443 dns.google udp
GB 142.250.180.3:443 tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp

Files

\??\pipe\crashpad_4284_IBRUUTKCXSYSFNRT

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

MD5 05fb4327a344c2e3835d4e71f478fcdc
SHA1 10d7e9443f8f508b363dde8d7ee2723edad9f7a4
SHA256 a891ca726434b4ca443de5f743f86bafc579f27b1668e85211db83686ad4bba1
SHA512 1074502dd46ed1fe5daa45bddf1425c11c95736e24156076341af323e3279b126699d0d1447259df2def6aa004028f260b96d2ee9e25f4d4583ea71570f9d32a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 e49927d34cc7ece0eec379937ce29995
SHA1 137ad244d6a82b41070d3ded30eed40249489a1d
SHA256 8e76cd8d498d24476f8fbb4339df6c18aa766c73f3cfc39bbf9a69258061ee7b
SHA512 1bb22222a865d9823ee0ec3516ad785b8202ac884e389f5b8770f1c9001b12df10b514fccaac74c6cf2b974c064803e1edc85e5238284ad70af7cc805b0d9944

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c4c0bbe34a0d598db3ee0a9972714043
SHA1 135ac24f41a48a20aea5fa1d7d4f02d6ade0985c
SHA256 a59f2e60de1ef7eff2292b430604fd6d3763935c75cd9b477cea3f0bbc196f29
SHA512 c98278758548ffa231436c185420b4ffb9ce08e63b9120be1d16e06536911f9ebf86e0eaddddafe28616b94532974d97a36d4379b045a6e92538367d4f8b3509

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 7c903aa01f7b084e00a73d4e925b8aa4
SHA1 90f5c61d3f64dd577d955735f713c7d6bbc0a55e
SHA256 8f0ec4f26e3db83664eb2f155a305e658310a7a50c3ccb9aeb5787ef40872e33
SHA512 59dc57eba309bf3d95d49b9b6e01c00905d95852aa7b2c27c730a316db74fe292b379e0df5fb53f80cd9e2fb25ad594631dc9cb67c8f24a1619bf4bb65c94c75

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 1a5c8611373f6bd6194a9817fc11ffa6
SHA1 5981cf5585313748013dd126d0a699d3cfa49d96
SHA256 953334fab837273d55e3e6bb9df8a3c027a4c6f5ca3208e60ae64044be9f4bc2
SHA512 cee1fe2d1934b3b9a5119909a41e2407e45ac0b08545ff49682a10884e3c4572da28be50a538dc29b990b5a43f473485cefcffceac3c59f1db1e906e753510d5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022

MD5 215d509bc217f7878270c161763b471e
SHA1 bfe0a2580d54cfa28d3ff5ef8dc754fdc73adcd9
SHA256 984dfc64c10f96c5350d6d9216a5d7abfece1658dfc93925f7a6b0c80817c886
SHA512 68e615dfcb1b7770ad64175438a913744c14bdd3af93b339c2b526271bdd0d23334e78d049fdae8ca9fe66672a8cf252ebf891be9ab6c46a3d8f1fb00fa8c83b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5 edc9d0ea1a5f4354a72957091d044ca2
SHA1 9155b15d5a84d010285027e68742a13599296923
SHA256 71fee4f7b270e3746ffd2e9eed9a4d5dd72c859f76de3a3b6ee01df97af9ea3e
SHA512 741c3e212023213a9a6678c313881bfc59e7b85823ccfcce41251ebe2ad867782b4be0f12264e4b59728e818127671ffc2caa761c077adba3724e2cc5b63f2f8

C:\Users\Admin\Downloads\WaveInstaller.exe:Zone.Identifier

MD5 fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1 d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256 eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512 aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 d130c053aefb22432baf67220b0dd67b
SHA1 43f47f676f1b199b8ae390055a023df1ac578731
SHA256 a227b637025c1ee8727f9da63f4f62501e3af574c057bde26aeb08fc660fdf75
SHA512 a9c43b1eb7a9a638216798615f72c8b7561706bf190446f3f0847620fca19caa07233f86ad6acea4dba1a881a9e7ab37cdc80db8e8810b29826a1fc827c5cbf3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 323023c23c30174a1849db4e1ca1212c
SHA1 1629e141adfff0e394546e3d90fbb5c64aba6194
SHA256 43660f312455667002602741b4d9969e2d1c6ee8118f285b7b41d7b374703afe
SHA512 dbd02d680dfa3bf114dd4aeeba861f2449caeaeca36c39406a7daa7c9ee79feebdbf917975c12136ed2caeba914853310cd27218fc872b97d1c4a1852dbc0f78

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 f7f492dfeebfabcbb6b8aa3ee949a2e1
SHA1 312eab612dcea420f6f2d73fe0f36919f9f7a665
SHA256 629ab6ceaf59a80ccab6f3551063c3ce594917e4600feb08794fbab73c3f2a9c
SHA512 a62f1f49b0f4b0a7e93bfa5864a5d01bca714c733969b1e7d7d06d262de15d10099c42e112001418582cecab30ae9df5a3f9d19db626f1d40d7926812015d183

memory/5100-239-0x000000007478E000-0x000000007478F000-memory.dmp

memory/5100-240-0x0000000000080000-0x00000000002CA000-memory.dmp

memory/5100-241-0x0000000074780000-0x0000000074F31000-memory.dmp

memory/5100-242-0x0000000074780000-0x0000000074F31000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5 c3499473f6f84702f4b62731cc012dc8
SHA1 07d3da34b62ca700e2af95dd2042983a95d5fd10
SHA256 c77930042de190d78f23592f854708d37eb84d2d5818c9a01e9a58519ae1460d
SHA512 d374f8b4500bb070a6318eb9db75145089ac8b3546bfb8ba21c31a0328607903e39e015a360dd07755763b1977c263cfc4c5b155fe31ac48601facec8c9d3916

memory/5100-252-0x0000000009410000-0x0000000009448000-memory.dmp

memory/5100-253-0x00000000093E0000-0x00000000093EE000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 e289be032f24197bde095442d9f0e78c
SHA1 1033b6053a89c898b0d29aa032b418e6e0114724
SHA256 6d8dcf57f267c0c419801a0127b479c1534eb561aa86b1691462ea7a21674812
SHA512 a529edb838cc814a8dc5e84f7af65c0797ba69da1ce227232cdb26b9de62581282aaa73cdbc32cec8d873fd02eaba56175b4af6b2ee7a0097691c12b12886d2b

memory/5100-264-0x000000007478E000-0x000000007478F000-memory.dmp

memory/5100-265-0x0000000074780000-0x0000000074F31000-memory.dmp

memory/5100-266-0x0000000074780000-0x0000000074F31000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index

MD5 f2d94b2a3f2a3cf3f2b5d1be1f426a28
SHA1 4e99f4b9fe5f91d460066d1bc84abaa26f814e26
SHA256 5fb33af818729d8781683186454ba34f0d9d1fbd57890ba7ba051385611c8cc5
SHA512 5ed28eb8dfdca9fae2079481fccfcc157dbacf5e6395eaf96d708ae6086f14ec324b72def8a9ee44a06d3a9a9abe300b77df63ff35f7e2addc1703186368c6ca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 402c86de89e81540f6ffe04014de89ca
SHA1 4c675f6f466e2b91a230f7b8a8a23753c34959ae
SHA256 9c1a6e5331197737e9136dcca3a21412dc84a0c8818b7d06432a85e7b6a85617
SHA512 d32d433a4ea763ae69fd293fbc84b8a67d5a989bcfc9640be4dd7bbd5c1e9f66412b127fbb878674b06ea8c0e7162aaae5f0ec53f2355cb46ddffee4945dade3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5 bbd46f1979517a6465c4c5728c1897f1
SHA1 ef0b1de8c1474cff6954e4cef2cee788b2cdb360
SHA256 d86aff8a030e006c948c72354d36a532e2e7a7265cb6f2d29da9fd1973d7315b
SHA512 3e7b70528be2b9001186d760982c3e86e75df8dee8d9a49e47ce3e524da45559452396221fdb227fc1e94261f2f396f689495737dbfca542a12ce753a71449e9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 c34e67c59f42ea51243b69170b5d504f
SHA1 0e59cab9400beeda3336cada5eaa23f8ee7b9d2b
SHA256 d92cc664531b67f6de3a59020a917e9bba2a85e1865363c1c674630d5b7dc245
SHA512 54cc4a654c5e355f08effa1bb7777c21161bc2f33a5c0096f169611357dc052b1b0f7f887432e943202b039c44a577621c0f2ecd712a65cbbe9767f9318363e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9df3be240cf8f3af10d67111ee9a82be
SHA1 bb2875980b79c9aba4ec6d582d5320d689e0b3fd
SHA256 b9cbd50811c82f75e2a60e93409a029dc53629f3c22b48594949201d4f6504d0
SHA512 9c45adb514cd81a6e3d32d656c74bb799903bf21b2f798b98ee14df25542aaf5e8a057505466a5d663599592132068bfb066a4f141d0e8ddd67d5a875a70d58a

memory/5100-315-0x000000000A570000-0x000000000A606000-memory.dmp

memory/5100-316-0x0000000009D80000-0x0000000009DA6000-memory.dmp

memory/5100-317-0x0000000009FC0000-0x0000000009FC8000-memory.dmp

memory/5100-319-0x000000000A6D0000-0x000000000A742000-memory.dmp

memory/5100-327-0x000000000A610000-0x000000000A61A000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 bcbf6d0c1c61aad3ae21c6edaf8cbabb
SHA1 659550ccb3246336ef78a4526ef19165624e6643
SHA256 0fb98099d2ab4ab19d52e56dc04b6cc3b324215666a83c71ab3b16a12abe2a4d
SHA512 2dc4403e9f9a2d33bf2b4b12df484a8227abf7fb1c3155022d01e0a35bb481317547774a831f7951e0fe04687f52f05fd97eff850c7949e3182ea522d525b5c5

memory/5100-330-0x000000000A620000-0x000000000A62A000-memory.dmp

C:\Users\Admin\AppData\Local\Wave\WaveBootstrapper.exe

MD5 495df8a4dee554179394b33daece4d1e
SHA1 0a67a0e43b4b4e3e25a736d08de4cec22033b696
SHA256 201263498c60fa595f394650c53a08d0b82850349123b97d41565e145ddf2f42
SHA512 ce3bef1038741f7a0f90cc131a4a1883fd84b006654024d591f5451e73166b4cae546e307c358b5b90aa0e6517bf7b6098f1f59a3ecc01598d4feb26e6b6af33

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

MD5 d222b77a61527f2c177b0869e7babc24
SHA1 3f23acb984307a4aeba41ebbb70439c97ad1f268
SHA256 80dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512 d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

MD5 b5ad5caaaee00cb8cf445427975ae66c
SHA1 dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256 b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA512 92f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f

C:\Users\Admin\AppData\Local\D3DSCache\cb00da9ba77862e\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8

memory/3108-560-0x0000000000290000-0x0000000000382000-memory.dmp

memory/5100-562-0x0000000074780000-0x0000000074F31000-memory.dmp

memory/3108-563-0x0000000008320000-0x0000000008424000-memory.dmp

memory/3108-564-0x0000000009060000-0x0000000009076000-memory.dmp

memory/3108-565-0x00000000090A0000-0x00000000090AA000-memory.dmp

memory/3108-566-0x00000000090E0000-0x00000000090E8000-memory.dmp

memory/3108-567-0x0000000009140000-0x000000000915E000-memory.dmp

C:\Users\Admin\AppData\Local\Wave\D3DCOMPILER_47.dll

MD5 3b4647bcb9feb591c2c05d1a606ed988
SHA1 b42c59f96fb069fd49009dfd94550a7764e6c97c
SHA256 35773c397036b368c1e75d4e0d62c36d98139ebe74e42c1ff7be71c6b5a19fd7
SHA512 00cd443b36f53985212ac43b44f56c18bf70e25119bbf9c59d05e2358ff45254b957f1ec63fc70fb57b1726fd8f76ccfad8103c67454b817a4f183f9122e3f50

C:\Users\Admin\AppData\Local\Wave\WaveWindows.exe

MD5 b8631bbd78d3935042e47b672c19ccc3
SHA1 cd0ea137f1544a31d2a62aaed157486dce3ecebe
SHA256 9cfda541d595dc20a55df5422001dfb58debd401df3abff21b1eee8ede28451c
SHA512 0c51d6247e39f7851538a5916b24972e845abfe429f0abdc7b532f654b4afe73dc6e1936f1b062da63bfc90273d3cbc297bf6c802e615f3711d0f180c070aa26

memory/3352-573-0x00000000000D0000-0x00000000008D2000-memory.dmp

memory/3352-574-0x0000000005350000-0x0000000005402000-memory.dmp

memory/3352-575-0x0000000005400000-0x00000000054A0000-memory.dmp

memory/3352-576-0x0000000005330000-0x0000000005338000-memory.dmp

C:\Users\Admin\AppData\Local\Luau Language Server\server\index.js

MD5 6b1cad741d0b6374435f7e1faa93b5e7
SHA1 7b1957e63c10f4422421245e4dc64074455fd62a
SHA256 6f17add2a8c8c2d9f592adb65d88e08558e25c15cedd82e3f013c8146b5d840f
SHA512 a662fc83536eff797b8d59e2fb4a2fb7cd903be8fc4137de8470b341312534326383bb3af58991628f15f93e3bdd57621622d9d9b634fb5e6e03d4aa06977253

memory/3352-581-0x00000000090D0000-0x0000000009182000-memory.dmp

memory/3352-587-0x0000000009E90000-0x0000000009EB2000-memory.dmp

memory/3352-588-0x000000000AF90000-0x000000000B2E7000-memory.dmp

C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.exe

MD5 772c9fecbd0397f6cfb3d866cf3a5d7d
SHA1 6de3355d866d0627a756d0d4e29318e67650dacf
SHA256 2f88ea7e1183d320fb2b7483de2e860da13dc0c0caaf58f41a888528d78c809f
SHA512 82048bd6e50d38a863379a623b8cfda2d1553d8141923acf13f990c7245c833082523633eaa830362a12bfff300da61b3d8b3cccbe038ce2375fdfbd20dbca31

C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.runtimeconfig.json

MD5 d94cf983fba9ab1bb8a6cb3ad4a48f50
SHA1 04855d8b7a76b7ec74633043ef9986d4500ca63c
SHA256 1eca0f0c70070aa83bb609e4b749b26dcb4409784326032726394722224a098a
SHA512 09a9667d4f4622817116c8bc27d3d481d5d160380a2e19b8944bdd1271a83f718415ce5e6d66e82e36819e575ec1b55f19c45213e0013b877b8d61e6feb9d998

C:\Users\Admin\AppData\Local\Bloxstrap\Bloxstrap.dll

MD5 6546ceb273f079342df5e828a60f551b
SHA1 ede41c27df51c39cd731797c340fcb8feda51ea3
SHA256 e440da74de73212d80da3f27661fcb9436d03d9e8dbbb44c9c148aaf38071ca5
SHA512 f0ea83bf836e93ff7b58582329a05ba183a25c92705fab36f576ec0c20cf687ce16a68e483698bda4215d441dec5916ffbdfa1763fb357e14ab5e0f1ffcaf824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 440d7681455292541282b500b8713646
SHA1 4790d683b00ef1a581f9519fca5ca5d75315065e
SHA256 a4d01e1f24f737d427a5d5e790ce2a54c05b6732839472fd21ee0a9bfafba511
SHA512 a583e69b91df7993c2225f879f0f6008ab5f3a927b5108acc366e9a461ab42390af6761870c219add5f914d9cce349f1408a08d8e26d73c1ccd6a1ebc94976b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a83d178bb1a76ad338fe6e10c9eb741f
SHA1 d113304d80b684fa9e7325b6d5aa6d9ed66b8d8c
SHA256 26698e1d47f6894769323486880480e2d90ccc4a1edfce51293bc46c10a6aabf
SHA512 3ff7f0d74fc5a92eca4e42eb2e3f760ab0b13b0ccd7993b7313d26c1c2ebba47c5b6f7b827ad7a173de44838f2ca7861f6f25364f31b415f4398ff685d8407e0

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\configs\DateTimeLocaleConfigs\zh-tw.json

MD5 702c9879f2289959ceaa91d3045f28aa
SHA1 775072f139acc8eafb219af355f60b2f57094276
SHA256 a92a6988175f9c1d073e4b54bf6a31f9b5d3652eebdf6a351fb5e12bda76cbd5
SHA512 815a6bef134c0db7a5926f0cf4b3f7702d71b0b2f13eca9539cd2fc5a61eea81b1884e4c4bc0b3398880589bff809ac8d5df833e7e4aeda4a1244e9a875d1e97

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\configs\DateTimeLocaleConfigs\zh-hans.json

MD5 fb6605abd624d1923aef5f2122b5ae58
SHA1 6e98c0a31fa39c781df33628b55568e095be7d71
SHA256 7b993133d329c46c0c437d985eead54432944d7b46db6ad6ea755505b8629d00
SHA512 97a14eda2010033265b379aa5553359293baf4988a4cdde8a40b0315e318a7b30feee7f5e14c68131e85610c00585d0c67e636999e3af9b5b2209e1a27a82223

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\DeveloperFramework\PageNavigation\button_control_previous.png

MD5 6e8a105456aaf54799b1ae4c90000ff1
SHA1 5a9a277b6ef822caaede13b34c222fb69451c141
SHA256 fac4a9e1c49c9f3fc07dbce40f4648987cf90f4c2ed0a96827630341621e9845
SHA512 8e74329066b3c0c4b8303976cc4207b94ebc7ee38b74dedd490c2006feb53a99a0671e407ec649ec9da6a4d3ddff46bb7150963dfa8254364ab619db9ec3fd54

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\ui\Controls\XboxController\[email protected]

MD5 55b64987636b9740ab1de7debd1f0b2f
SHA1 96f67222ce7d7748ec968e95a2f6495860f9d9c9
SHA256 f4a6bb3347ee3e603ea0b2f009bfa802103bc434ae3ff1db1f2043fa8cace8fc
SHA512 73a88a278747de3fefbaabb3ff90c1c0750c8d6c17746787f17061f4eff933620407336bf9b755f4222b0943b07d8c4d01de1815d42ea65e78e0daa7072591e9

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\ui\Controls\XboxController\[email protected]

MD5 83e9b7823c0a5c4c67a603a734233dec
SHA1 2eaf04ad636bf71afdf73b004d17d366ac6d333e
SHA256 3b5e06eb1a89975def847101f700f0caa60fe0198f53e51974ef1608c6e1e067
SHA512 e8abb39a1ec340ac5c7d63137f607cd09eae0e885e4f73b84d8adad1b8f574155b92fbf2c9d3013f64ebbb6d55ead5419e7546b0f70dcde976d49e7440743b0f

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\ui\Controls\XboxController\Thumbstick2.png

MD5 a402aacac8be906bcc07d50669d32061
SHA1 9d75c1afbe9fc482983978cae4c553aa32625640
SHA256 62a313b6cc9ffe7dd86bc9c4fcd7b8e8d1f14a15cdf41a53fb69af4ae3416102
SHA512 d11567bcaad8bbd9e2b9f497c3215102c7e7546caf425e93791502d3d2b3f78dec13609796fcd6e1e7f5c7d794bac074d00a74001e7fe943d63463b483877546

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\ui\Controls\XboxController\[email protected]

MD5 499333dae156bb4c9e9309a4842be4c8
SHA1 d18c4c36bdb297208589dc93715560acaf761c3a
SHA256 d35a74469f1436f114c27c730a5ec0793073bcf098db37f10158d562a3174591
SHA512 91c64173d2cdabc045c70e0538d45e1022cc74ec04989565b85f0f26fe3e788b700a0956a07a8c91d34c06fc1b7fad43bbdbb41b0c6f15b9881c3e46def8103e

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\ui\Controls\XboxController\[email protected]

MD5 e8c88cf5c5ef7ae5ddee2d0e8376b32f
SHA1 77f2a5b11436d247d1acc3bac8edffc99c496839
SHA256 9607af14604a8e8eb1dec45d3eeca01fed33140c0ccc3e6ef8ca4a1f6219b5dd
SHA512 32f5a1e907705346a56fbddfe0d8841d05415ff7abe28ae9281ba46fedf8270b982be0090b72e2e32de0ce36e21934f80eaf508fd010f7ab132d39f5305fb68f

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\ui\Controls\XboxController\Thumbstick1.png

MD5 2cbe38df9a03133ddf11a940c09b49cd
SHA1 6fb5c191ed8ce9495c66b90aaf53662bfe199846
SHA256 0835a661199a7d8df7249e8ae925987184efcc4fb85d9efac3cc2c1495020517
SHA512 dcef5baccef9fff632456fe7bc3c4f4a403363d9103a8047a55f4bd4c413d0c5f751a2e37385fe9eba7a420dbdb77ca2ff883d47fcdd35af222191cc5bd5c7a9

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\TerrainTools\checkbox_square.png

MD5 2cb16991a26dc803f43963bdc7571e3f
SHA1 12ad66a51b60eeaed199bc521800f7c763a3bc7b
SHA256 c7bae6d856f3bd9f00c122522eb3534d0d198a9473b6a379a5c3458181870646
SHA512 4c9467e5e2d83b778d0fb8b6fd97964f8d8126f07bfd50c5d68c256703f291ceaed56be057e8e2c591b2d2c49f6b7e099a2b7088d0bf5bdd901433459663b1f8

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\StudioUIEditor\valueBoxRoundedRectangle.png

MD5 521fb651c83453bf42d7432896040e5e
SHA1 8fdbf2cc2617b5b58aaa91b94b0bf755d951cad9
SHA256 630303ec4701779eaf86cc9fbf744b625becda53badc7271cbb6ddc56e638d70
SHA512 8fa0a50e52a3c7c53735c7dd7af275ebc9c1843f55bb30ebe0587a85955a8da94ff993822d233f7ed118b1070a7d67718b55ba4a597dc49ed2bf2a3836c696f6

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\StudioToolbox\AssetConfig\[email protected]

MD5 97788161324392fe1af78ff82b9c953b
SHA1 e9992beba9b73f7a03e7426dbf12fdd219633c4e
SHA256 cf2c4273a398e58620f7f751ab9ccae36da95fbd39055184b4f3cc96393ebadc
SHA512 447fca7cd7249597403de54621bb53663f3e378fa043d439ef1abd4363775d28402c6670d4a06d23381073b7585b30661dbf9aea35eef66ea92c8a2501730266

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\StudioToolbox\Clear.png

MD5 fa8eaf9266c707e151bb20281b3c0988
SHA1 3ca097ad4cd097745d33d386cc2d626ece8cb969
SHA256 8cf08bf7e50fea7b38f59f162ed956346c55a714ed8a9a8b0a1ada7e18480bc2
SHA512 e29274300eab297c6de895bb39170f73f0a4ffa2a8c3732caeeeac16e2c25fb58bb401fdd5823cc62d9c413ec6c43d7c46861d7e14d52f8d9d8ff632e29f167c

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\DeveloperFramework\PageNavigation\button_control_next.png

MD5 34a4a4801e02097cef3e46e6b9c67c41
SHA1 2f271ae04352f39bb72c677a16da03f19a51f672
SHA256 7ca0bdacdebc16eace9d67078a5ecbc8d9f6098fad80e0d8c09fb5f708ad389b
SHA512 87a29f06c2539a6df2f043fbee747812f0672a9a6a97df906d8a38b9ede7a7e7ad2a61850888e39ad6b45f422680f4c89cc40c3724b1b4a0312dde8c35ed2a75

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\content\textures\Cursors\KeyboardMouse\IBeamCursor.png

MD5 464c4983fa06ad6cf235ec6793de5f83
SHA1 8afeb666c8aee7290ab587a2bfb29fc3551669e8
SHA256 99fd7f104948c6ab002d1ec69ffd6c896c91f9accc499588df0980b4346ecbed
SHA512 f805f5f38535fe487b899486c8de6cf630114964e2c3ebc2af7152a82c6f6faef681b4d936a1867b5dff6566b688b5c01105074443cc2086b3fe71f7e6e404b1

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\ExtraContent\textures\ui\LuaApp\graphic\shimmer_lightTheme.png

MD5 4f8f43c5d5c2895640ed4fdca39737d5
SHA1 fb46095bdfcab74d61e1171632c25f783ef495fa
SHA256 fc57f32c26087eef61b37850d60934eda1100ca8773f08e487191a74766053d1
SHA512 7aebc0f79b2b23a76fb41df8bab4411813ffb1abc5e2797810679c0eaa690e7af7561b8473405694bd967470be337417fa42e30f0318acbf171d8f31620a31aa

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\ExtraContent\textures\ui\LuaApp\graphic\[email protected]

MD5 3fec0191b36b9d9448a73ff1a937a1f7
SHA1 bee7d28204245e3088689ac08da18b43eae531ba
SHA256 1a03e6f6a0de045aa588544c392d671c040b82a5598b4246af04f5a74910dc89
SHA512 a8ab2bc2d937963af36d3255c6ea09cae6ab1599996450004bb18e8b8bdfbdde728821ac1662d8a0466680679011d8f366577b143766838fe91edf08a40353ce

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 63962842c2e735f19cb2f4dd3a1f4811
SHA1 1e939cad5f75cb17fb215e258b866caff91e8d00
SHA256 de2a738e98733213efc0f5570100ee4b95fa9963fb787df3c076276888ccd4a6
SHA512 f89264988254d5da89ac14402d916c4562cbc880b48c7136244df47958231a0ce2b733992cffb71ae3c1e10acaf8925a74ac575f0326b368bd3bae77a423f350

C:\Users\Admin\AppData\Local\Bloxstrap\Versions\version-b7eebc919e96477a\ExtraContent\textures\ui\LuaDiscussions\buttonFill.png

MD5 81ce54dfd6605840a1bd2f9b0b3f807d
SHA1 4a3a4c05b9c14c305a8bb06c768abc4958ba2f1c
SHA256 0a6a5cafb4dee0d8c1d182ddec9f68ca0471d7fc820cf8dc2d68f27a35cd3386
SHA512 57069c8ac03dd0fdfd97e2844c19138800ff6f7d508c26e5bc400b30fe78baa0991cc39f0f86fa10cd5d12b6b11b0b09c1a770e5cb2fdca157c2c8986a09e5ff

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 0e3ecf896cb15bdb32873f4390a65e95
SHA1 625a58d7336587d66fcf421200152173180d62b6
SHA256 ec37b2abc204a2c3026041904f23a641a436fec1bfbf8e15b0238bcebce6a8de
SHA512 4e8b93cb14a616fdd1ddef868e373e76bd1712a9efede2c8cf1c5251a3de142768c1a52207a69fbf8ad98f360a716a158f7002ddcb9f6d652accd329cd772087

memory/3352-7706-0x0000000005920000-0x0000000005958000-memory.dmp

memory/3352-7707-0x000000000CD50000-0x000000000D27C000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 cb12f8e613d6bac46b8a78d1471b16f7
SHA1 a4be558bd1677bdb6fec1e119852d25957dfce1f
SHA256 d910695949b99980ced0160cbb1c2a34002a8adff6d71fab2504435b1a32c66f
SHA512 cc11c88453f03b01d5d22412531640aa0e3563722a6560002f1f56377d5a5e4c89321366bb53c74035c984cbd33f512956cac8ee7fd26198d2bc102c3643deab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 a15497ddceae15bde0e918ccb5c074e2
SHA1 341657b923face32314bf1941c5ab055e36f0b46
SHA256 5fdbba39536cf5868a9f13034c99ec13db22a37e1c63ac536da8c658574a1418
SHA512 ca934c9db97335aa03113a6a110eb9a464cc6b643e7c51ec3b6f5cb09b020847dfb4b168c5f3471b0430dc32a81e5e24da39777f34e13f999fa3db9f38a475a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 96904d3d210576b06bd9bc2ab9afbde3
SHA1 ecf35cb9c76f12e06731b534680bd13309ab6fb9
SHA256 7019ce700cd7a0861e2d856b5a014531a0873313b4559557d0d40d49dadd3d64
SHA512 7f53aaccf066dbb63934c660ba434065c98b044ef5f0de0fc77a1d4c4738db945a4c9d75a1734189632059ceafade9839c15c3939601097295661614c1e05b2b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 372825dd7df4f8160bfeb80195fcdb27
SHA1 5538a86ab961aa61332782c5e5ee7e83402a7dac
SHA256 f8d34194df46877f715a113c4c48241f9c88c0aa4699809690fb0a9bd8e45573
SHA512 623f58b36fec26df72647260271276d6cda28466e9612f96bc300f4e9da956e2a48658be27d3f40ff8a9457cda04e7714c9ddf798eb119e8e319c8f81c89eceb

memory/3352-7753-0x00000000059C0000-0x00000000059FE000-memory.dmp

memory/3352-7754-0x000000000AE40000-0x000000000AEA6000-memory.dmp

memory/3352-7755-0x000000000AAF0000-0x000000000AAF8000-memory.dmp

C:\Users\Admin\AppData\Local\Wave\bin\Background.mp4

MD5 9782180eb68f73030fe24ef6a1735932
SHA1 589827fe098ba048c9f871a28db8eae3e3537ff4
SHA256 3a1cbb800f8f25c2ab703ba8bfdb01e938e4143c3bc0fea8ca734fb5ba779ba7
SHA512 dc768638bae2d6d47d8910252ae64a656d8a6fd88efdf24165ddce51b7afdb4acb3fddd41dfe788737a2cab4fab66174db2f0d2f48bc8669af76d1656bca8be1

C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML.bak

MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

memory/3352-7767-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7768-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7769-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7770-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7771-0x000000000AF70000-0x000000000AF80000-memory.dmp

memory/3352-7772-0x000000000AF80000-0x000000000AF90000-memory.dmp

memory/3352-7779-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7780-0x000000000AF70000-0x000000000AF80000-memory.dmp

memory/3352-7784-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7783-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7782-0x000000000AF80000-0x000000000AF90000-memory.dmp

memory/3352-7781-0x000000000AF80000-0x000000000AF90000-memory.dmp

memory/3352-7778-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7786-0x000000000AF80000-0x000000000AF90000-memory.dmp

memory/3352-7785-0x000000000AF80000-0x000000000AF90000-memory.dmp

memory/3352-7777-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7776-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7775-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7774-0x00000000061E0000-0x00000000061F0000-memory.dmp

memory/3352-7773-0x000000000AF80000-0x000000000AF90000-memory.dmp

C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

MD5 5c64aac80b4838b97d657c85994a2dec
SHA1 db2dfafae6ac0a4026876d54860e0a7bbc8abcd9
SHA256 7dc9971135500628a0ed457c27023c90d04d4ec26ef83512a7731c863297e1b4
SHA512 04d6b1c55487580763a9d921e18a19ffa5152b72b7ab95384042741dcad33b107b18970060bb4544e498d50ead45818d9166c37e292104046d810da3c1956393

C:\Users\Admin\AppData\Local\Wave\CefSharp.Core.dll

MD5 1bb24b22d9bd996c038d26b600ed18a8
SHA1 c2629a8a26c9c0969501923f84874838087cca2b
SHA256 944b987a0b677d354e24ee15bba65f73b0f051338f576234a975a49493399873
SHA512 38578e0d1a39ccc9851ff80d3a0f5342a34303229e2898c3ca32dad11017d4277720f54b472c2f1a0b73f47d5ba6352aa7be8ae2ed72b3b25a01dd8292591421

C:\Users\Admin\AppData\Local\Wave\CefSharp.Core.Runtime.dll

MD5 09cba584aa0aae9fc600745567393ef6
SHA1 bbd1f93cb0db9cf9e01071b3bed1b4afd6e31279
SHA256 0babd84d4e7dc2713e7265d5ac25a3c28d412e705870cded6f5c7c550a5bf8d5
SHA512 5f914fa33a63a6d4b46f39c7279687f313728fd5f8437ec592369a2da3256ccff6f325f78ace0e6d3a2c37da1f681058556f7603da13c45b03f2808f779d2aa1

C:\Users\Admin\AppData\Local\Wave\chrome_elf.dll

MD5 7191d97ce7886a1a93a013e90868db96
SHA1 52dd736cb589dd1def87130893d6b9449a6a36e3
SHA256 32f925f833aa59e3f05322549fc3c326ac6fc604358f4efbf94c59d5c08b8dc6
SHA512 38ebb62c34d466935eabb157197c7c364d4345f22aa3b2641b636196ca1aeaa2152ac75d613ff90817cb94825189612ddd12fb96df29469511a46a7d9620e724

C:\Users\Admin\AppData\Local\Wave\chrome_200_percent.pak

MD5 1abf6bad0c39d59e541f04162e744224
SHA1 db93c38253338a0b85e431bd4194d9e7bddb22c6
SHA256 01cb663a75f18bb2d0d800640a114f153a34bd8a5f2aa0ed7daa9b32967dc29e
SHA512 945d519221d626421094316f13b818766826b3bedddab0165c041540dddadc93136e32784c0562d26a420cb29479d04d2aa317b8d605cd242e5152bf05af197e

C:\Users\Admin\AppData\Local\Wave\chrome_100_percent.pak

MD5 ae195e80859781a20414cf5faa52db06
SHA1 b18ecb5ec141415e3a210880e2b3d37470636485
SHA256 9957802c0792e621f76bbdb1c630fbad519922743b5d193294804164babda552
SHA512 c6fef84615fe20d1760ca496c98629feb4e533556724e9631d4282622748e7601225cf19dfb8351f4b540ae3f83785c1bcea6fe8c246cf70388e527654097c1c

C:\Users\Admin\AppData\Local\Wave\icudtl.dat

MD5 74bded81ce10a426df54da39cfa132ff
SHA1 eb26bcc7d24be42bd8cfbded53bd62d605989bbf
SHA256 7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9
SHA512 bd7b7b52d31803b2d4b1fd8cb76481931ed8abb98d779b893d3965231177bdd33386461e1a820b384712013904da094e3cd15ee24a679ddc766132677a8be54a

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.Core.dll

MD5 100c32f77e68a2ce962e1a28997567ea
SHA1 a80a1f4019b8d44df6b5833fb0c51b929fa79843
SHA256 c0b9e29b240d8328f2f9a29ca0298ca4d967a926f3174a3442c3730c00d5a926
SHA512 f95530ef439fa5c4e3bc02db249b6a76e9d56849816ead83c9cd9bcd49d3443ccb88651d829165c98a67af40b3ef02b922971114f29c5c735e662ca35c0fb6ed

memory/3352-7843-0x000000001E680000-0x000000001E808000-memory.dmp

memory/16180-7839-0x0000000004E60000-0x0000000004F4A000-memory.dmp

memory/16180-7835-0x00000000005E0000-0x00000000005E8000-memory.dmp

C:\Users\Admin\AppData\Local\Wave\CefSharp.BrowserSubprocess.exe

MD5 516ff62b2e1f4642caa954c0968719e8
SHA1 e349d0ce82e2109dd0d18416d9cf46e8411b7f15
SHA256 19da58849cec5933860116e60a1e94b08e30d90e0f955768270b47998d612045
SHA512 7aa4a0c87b29c2a84f585a884d8208fc2352a43f2cdb549c100e3b121837ad5f8dadb1101f57d1d3fcb7ebec9d9f22e07dc14239b7d2e2d25793c999becf288b

C:\Users\Admin\AppData\Local\Wave\resources.pak

MD5 4933d92c99afa246fc59eef010d5c858
SHA1 98d443654e93c73dd317f9f847f71fba3d5b3135
SHA256 62f4674daa15245ee081920b8ee191e72f36ca8fe24f6b986a832f45676915b2
SHA512 a3a69523c8e7310716daeebc06c2ba4fce673eccd1958e824ff179b82f4502d0ec095190179bbb387342e4150f952ea7533182fb6ba90377d17dafba8f4da623

C:\Users\Admin\AppData\Local\Wave\locales\en-US.pak

MD5 4430b1833d56bc8eb1f7dc82bb7f4bc9
SHA1 dc15e6306625f155683326e859d83f846153c547
SHA256 b44ddcfac9df4934007e6c55a3c7f5e7f14c7e5e29f35c81de917fc3b22aabbc
SHA512 faf93bf371b2a88c1b874a5e2c54e4487fd152ad19c2a406a46f55ae75ecd421a779888c2e4c170857b16bfb5d8744bc1815a4732ed50b064b3cbd0c5ffad889

memory/3352-7814-0x000000000DB80000-0x000000000DCDB000-memory.dmp

memory/3352-7810-0x0000000017DC0000-0x0000000017EA6000-memory.dmp

memory/3352-7806-0x00000000089D0000-0x0000000008A1A000-memory.dmp

C:\Users\Admin\AppData\Local\Wave\CefSharp.dll

MD5 9ca06a8f9e5f7239ca225ab810274023
SHA1 e1a219f567a7b7d3af9386df51b14c76e769c044
SHA256 5fd00ae3e83e6ca156647ff6df87b49ffc7cad47c23fe3ae07c067c5adf6f74a
SHA512 430c9bceed5439b987d5bd4840cfe32411ca61594f18597aca1948aa39a22c9d70beadf3bb9b1dd0373f81a94a25dcba17fa8e8c73abf06cba28d0971d5614c5

memory/3352-7802-0x0000000008950000-0x0000000008974000-memory.dmp

C:\Users\Admin\AppData\Local\Wave\CefSharp.Wpf.dll

MD5 ceaf0bad83fac8ce71853cd820e4ed9d
SHA1 4eed686fbba7d4603b596fb8e494b8f452a05886
SHA256 eaced1f76adb8ee756033baee29a47b1f4d4b657ebd105a7e25c8dc4fbc48cba
SHA512 4ed3f83e797eade8f0d1c6b80ce49d18f00daaf5d69421a4920e3cea2e7d78c3622193ca65b6ab1dab14c57e7f893a7b1edb27b83f343ea4df731d80aa21ff82

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 fe24167f7d933bfdab1c78c994ad76a0
SHA1 33fb37ea4dfe73f2a48fdb68f3b7f36db9055846
SHA256 a8af2ac7ad98b3d59f18b64778dc82792eb05af0d8d4add520f73fbc47322beb
SHA512 0d9c624fe27de1475cc8e6540b858d95455fc58717eb436889e27235c9ffeaf80555b077852df9eaa869b1b25155549b564ad9108eada671a7e80f968aa64380

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3c4b89f530eb0cb2fb4313996a907587
SHA1 c459ad7677598bfbaab8723f960b2cf334e54cee
SHA256 54dd2ee9afb41b25363565fd5dbad29f287a29cda325d6e5eab578568837a417
SHA512 86d523b0e7c9b7f26cb60b8cb0034040ca5a7a1954780a1f43dc1a14ca37e7d194ef56b8032d8ae6d457b555045c0b69f1fe87200042fc6383f2a48f8d77e17e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 46e6ad711a84b5dc7b30b75297d64875
SHA1 8ca343bfab1e2c04e67b9b16b8e06ba463b4f485
SHA256 77b51492a40a511e57e7a7ecf76715a2fd46533c0f0d0d5a758f0224e201c77f
SHA512 8472710b638b0aeee4678f41ed2dff72b39b929b2802716c0c9f96db24c63096b94c9969575e4698f16e412f82668b5c9b5cb747e8a2219429dbb476a31d297e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 fdee96b970080ef7f5bfa5964075575e
SHA1 2c821998dc2674d291bfa83a4df46814f0c29ab4
SHA256 a241023f360b300e56b2b0e1205b651e1244b222e1f55245ca2d06d3162a62f0
SHA512 20875c3002323f5a9b1b71917d6bd4e4c718c9ca325c90335bd475ddcb25eac94cb3f29795fa6476d6d6e757622b8b0577f008eec2c739c2eec71d2e8b372cff

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 cae66cd5b4c44f89dda9f86696a59871
SHA1 e06b84c9df8e332ef218fb3b4f5c04eebbb1eb1e
SHA256 751080cffda7a4a505701e9002f661ac691221512e7249505e35aff01b0dcb35
SHA512 923c9b9fd115bcd0dd98e1abe96e99bf8597846bcecc71d07a0d08c6ae4c7e73bcafe71f0bbcbe77532c5fcc8a48dc5a32c14655c3c34257880c4250c8610581

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 a7d1568a24c5244394d62099e4e271d9
SHA1 a1c5f9e64a80a8b2951c29c86334ce127da2ce50
SHA256 e6a14b186c5e218dc3f39136f29f18a15af64972388b5bf764037b9e217d375e
SHA512 de8dd79e2202e68de0650b8aca07e3601bc4c6e32ba71d0f1b4abe6bf40f857f666165bd64857160b3afc0dbc27f18d8e4197897fb69006190517da2ff648bb6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 5ff69d26534cbefd837c49f76a7e2f79
SHA1 c61d6b248be6f29e5fa4748230804092da82b585
SHA256 17d60ccb10d094b276d556b0cedb1fef2fc0a8fa3c1c06819d3a35b6d68a6fb3
SHA512 8d89537c69cd6a59a3fbcb705030dcf8e41434457315955de1e199756bbbd985d6fa1a918fc27a881642076f3aeceaf8941f0b8632672b228eca7ab855d7cc62

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 3819165d1d5fd8647363957a3d62813f
SHA1 6a978a4cf3f2093327cfe3aa8f7acc02f3bd4b03
SHA256 069ad7896361d14d97a20593b1af766d7e5173787f6199d1bdbd5c4d84ca7fc5
SHA512 b5d167e2c861583299bfa0fb95f4df1ddf203dd757c0f7e5a3c65326abfebc499d88994f43f08a35d7d8c74f51fc665ebd5e49a9669f12f3e83d174b4d14867a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4ad346c55bd593296a68d5415ed9bba1
SHA1 bc2cef94f3e269a809a9147becbe6aafcd6bde07
SHA256 a63fc6f643ff798fb878beb19fd410baeba5da6ce973ab5ddb3bc2ba21f7241d
SHA512 c9a52ca8ad9a7a480aadda37da32595874d3c8b81f9145a2af723de9e65e03d523a9463dff69efa50093ac9a79c9e874bd5685e21196f5f6be3dc6a933d2d201

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5 82b03f239b58044f1dc310a32f0f0cff
SHA1 58184e5e351719ec9b10bee1693260f4f34e37ee
SHA256 18a1e3a37e5cb38d38d452d2f0ea83b78b915a507ffa9860cac9c33575a3c105
SHA512 884d2835624980f8a8c4eab8da57f93f3b2de8dc4978070d48ce0df355db8a82c291cc8bb7c42703aa55fa11c7180ece5d5bd1877e77ac875fa6155e64576cd9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

MD5 f5b12a8dec9dafc2b8ab9ce7a02c3869
SHA1 70da0f80a5e12fb5648f91b6c707633a57ecc49f
SHA256 24899e57b28dca37e2a6d6313e44c053cb7b563bfb708a973e10302dd1db4a1c
SHA512 3df79d3f234da28257f5520ecdeac152c65676e3dd7488ca263376d4266161684b1975d424610bd4b141a323f7add136044d1ce1731ec4ada92519b2bce63305

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 7a9ab6467c7d6f7bbe529ffadfe3270c
SHA1 bb7cb8dc67f91ea3d8e4057bf065b9bee2860f13
SHA256 785a88cf7127004c5671de0f7ed2a8f14f4c9a84147fa34825ace89250ff1ce3
SHA512 745a644d637b599d71c9f191d63762c2fca4fcf94dce87dfb4cd75e2b33f0e922326361add29d05f0529a0311574572a3b7cbe46280636b1c73dfd8d5b1de5b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5 9c41aea371989b5f99012bfb591b633a
SHA1 4d5ac8e89c654da2d7be52c2508b5cac4944e9bc
SHA256 caefabf09e16954829bf30779ecbabf1389e5831965b90677d74d180fce043f3
SHA512 a3babd2d90d5695e418c6a8c2ab02fe95e44f79afce83f1b0edceef7022926529eb984c101a86ff20fda3b09f40516fc341fcbb8f931537ccbb0cb43e08d0366