Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
1145s -
max time network
1146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
19/01/2025, 02:30
Static task
static1
Behavioral task
behavioral1
Sample
redirect.html
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
redirect.html
Resource
win10v2004-20241007-en
General
-
Target
redirect.html
-
Size
6KB
-
MD5
cd2b0782169a3c92e2f48c05535a8de4
-
SHA1
27029c8a95f449a0477171f2789083853f9c462b
-
SHA256
ef51be8fa647abaae636b11cad45df1f5a8207b8aece2f39a031a72b730fe149
-
SHA512
958584561a4a2bdbd4d07bea1310aea61c3d109a67ad935784ff9bebd260d5c4eebe56185826730c26bedec8492d551e35ab09258a02f518b55faf41b70bdbbf
-
SSDEEP
192:dMHLxX7777/77QF7JKyrq0Lod4BYCIka6OvXXEK:dMr5HYDG0+CIka6OvXXEK
Malware Config
Signatures
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Checks computer location settings 2 TTPs 56 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation Wave Browser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation wavebrowser.exe -
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE 64 IoCs
pid Process 5892 Wave Browser.exe 4140 SWUpdaterSetup.exe 5760 SWUpdater.exe 4408 SWUpdater.exe 4028 SWUpdaterComRegisterShell64.exe 6856 SWUpdaterComRegisterShell64.exe 7020 SWUpdaterComRegisterShell64.exe 6928 SWUpdater.exe 3332 SWUpdater.exe 6540 SWUpdater.exe 4772 WaveInstaller-v1.5.20.2.exe 5888 setup.exe 5976 setup.exe 2412 setup.exe 1048 setup.exe 6336 wavebrowser.exe 1160 wavebrowser.exe 2360 wavebrowser.exe 6828 wavebrowser.exe 4800 wavebrowser.exe 436 wavebrowser.exe 4168 wavebrowser.exe 5604 wavebrowser.exe 6456 SWUpdater.exe 2244 wavebrowser.exe 6700 wavebrowser.exe 5784 wavebrowser.exe 1368 wavebrowser.exe 6580 wavebrowser.exe 1472 wavebrowser.exe 5280 wavebrowser.exe 4576 wavebrowser.exe 3160 wavebrowser.exe 3872 wavebrowser.exe 2104 wavebrowser.exe 4012 wavebrowser.exe 6528 wavebrowser.exe 100 wavebrowser.exe 4536 wavebrowser.exe 968 wavebrowser.exe 6900 wavebrowser.exe 2868 wavebrowser.exe 7256 wavebrowser.exe 7344 wavebrowser.exe 7360 wavebrowser.exe 7388 wavebrowser.exe 8124 wavebrowser.exe 8136 wavebrowser.exe 7300 wavebrowser.exe 7472 wavebrowser.exe 7748 wavebrowser.exe 3020 wavebrowser.exe 8168 wavebrowser.exe 7212 wavebrowser.exe 7576 wavebrowser.exe 924 wavebrowser.exe 3988 wavebrowser.exe 908 wavebrowser.exe 4896 wavebrowser.exe 3724 wavebrowser.exe 7568 wavebrowser.exe 6672 wavebrowser.exe 4552 wavebrowser.exe 4592 wavebrowser.exe -
Loads dropped DLL 64 IoCs
pid Process 5760 SWUpdater.exe 4408 SWUpdater.exe 4028 SWUpdaterComRegisterShell64.exe 4408 SWUpdater.exe 6856 SWUpdaterComRegisterShell64.exe 4408 SWUpdater.exe 7020 SWUpdaterComRegisterShell64.exe 4408 SWUpdater.exe 6928 SWUpdater.exe 3332 SWUpdater.exe 6540 SWUpdater.exe 6540 SWUpdater.exe 3332 SWUpdater.exe 6336 wavebrowser.exe 1160 wavebrowser.exe 6336 wavebrowser.exe 2360 wavebrowser.exe 6828 wavebrowser.exe 2360 wavebrowser.exe 2360 wavebrowser.exe 2360 wavebrowser.exe 2360 wavebrowser.exe 6828 wavebrowser.exe 2360 wavebrowser.exe 2360 wavebrowser.exe 2360 wavebrowser.exe 5604 wavebrowser.exe 4800 wavebrowser.exe 5604 wavebrowser.exe 4800 wavebrowser.exe 4168 wavebrowser.exe 4168 wavebrowser.exe 6456 SWUpdater.exe 436 wavebrowser.exe 436 wavebrowser.exe 2244 wavebrowser.exe 2244 wavebrowser.exe 6700 wavebrowser.exe 5784 wavebrowser.exe 5784 wavebrowser.exe 6700 wavebrowser.exe 1472 wavebrowser.exe 6580 wavebrowser.exe 1472 wavebrowser.exe 6580 wavebrowser.exe 1368 wavebrowser.exe 5280 wavebrowser.exe 1368 wavebrowser.exe 6528 wavebrowser.exe 6528 wavebrowser.exe 4536 wavebrowser.exe 100 wavebrowser.exe 100 wavebrowser.exe 4536 wavebrowser.exe 968 wavebrowser.exe 6900 wavebrowser.exe 968 wavebrowser.exe 6900 wavebrowser.exe 2868 wavebrowser.exe 2868 wavebrowser.exe 7256 wavebrowser.exe 7344 wavebrowser.exe 7256 wavebrowser.exe 7344 wavebrowser.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\SWUpdaterCore.exe\"" SWUpdater.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs
flow ioc 1217 discord.com 1218 discord.com 1219 discord.com 1824 discord.com 1871 discord.com 1881 discord.com -
Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs
flow ioc 634 https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html -
Checks system information in the registry 2 TTPs 2 IoCs
System information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName wavebrowser.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files (x86)\Wavesor\Temp\GUM36DB.tmp\psmachine.dll SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\TR wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\PE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\KW wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\FR wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-de-1901.hyb wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-as.hyb wavebrowser.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM36DB.tmp\swupdaterres_en.dll SWUpdaterSetup.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\RS wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\KZ wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\GE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\BH wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_842713438\english_wikipedia.txt wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1221282078\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\ZM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\VC wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\MU wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\GF wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\CU wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_842713438\male_names.txt wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_842713438\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\UG wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\PY wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\PA wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\IR wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\CV wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\AS wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1043355887\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\SR wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\PH wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\MR wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-tk.hyb wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-pt.hyb wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\GP wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_2034200185\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_192932560\keys.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\TM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\NI wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\LC wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\GL wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\AT wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1622493413\_metadata\verified_contents.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\SD wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\RE wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\MW wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_89156813\manifest.fingerprint wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_149938008\manifest.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1221282078\manifest.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-bn.hyb wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\TN wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\SL wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\OM wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\HN wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\EH wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_149938008\manifest.fingerprint wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\RW wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\GQ wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1513781555\_platform_specific\win_x64\widevinecdm.dll.sig wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_89156813\manifest.json wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-hi.hyb wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\NG wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\MH wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1523996568\LT wavebrowser.exe File created C:\Program Files\chrome_Unpacker_BeginUnzipping6336_1840303559\hyph-ml.hyb wavebrowser.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 14 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaveInstaller-v1.5.20.2.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 6928 SWUpdater.exe 6456 SWUpdater.exe -
Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer wavebrowser.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry wavebrowser.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133817276902657094" wavebrowser.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ wavebrowser.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.135.0\\psuser_64.dll" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775} SWUpdater.exe Key deleted \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WavesorSWUpdater.Update3WebUser.1.0 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods\ = "16" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\CLSID\{1BE9D40C-2307-4213-830E-7E3CE9EDF0C2}\VersionIndependentProgID\ = "WavesorSWUpdater.OnDemandCOMClassUser" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\ = "IAppCommandWeb" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\.shtml\OpenWithProgids setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\ = "ICurrentState" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\NumMethods\ = "4" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\ = "ICoCreateAsyncStatus" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\NumMethods\ = "5" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ = "IAppCommand" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ProxyStubClsid32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\.shtml setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\CLSID\{DB982438-E7B9-46E1-AF0F-CFD8947957E8}\InprocHandler32\ThreadingModel = "Both" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ = "IJobObserver" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ = "IPackage" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WavesorSWUpdater.Update3COMClassUser SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WaveBrwsPDF.YLZVQYFG4ILNZPV3VXJ2HEKBXQ\shell\open\command\ = "\"C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\wavebrowser.exe\" --single-argument %1" setup.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\NumMethods SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods\ = "11" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\NumMethods\ = "13" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WavesorSWUpdater.OnDemandCOMClassUser\ = "SWUpdater Legacy On Demand" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\ = "IAppVersion" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WaveBrwsPDF.YLZVQYFG4ILNZPV3VXJ2HEKBXQ\shell setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ThreadingModel = "Both" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ProxyStubClsid32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WOW6432Node\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\NumMethods\ = "41" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\WavesorSWUpdater.Update3WebUser.1.0\ = "SWUpdater Update3Web" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\NumMethods SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8} SWUpdaterComRegisterShell64.exe -
NTFS ADS 3 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\Unconfirmed 740875.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 248544.crdownload:SmartScreen msedge.exe File opened for modification C:\Users\Admin\Downloads\Unconfirmed 199855.crdownload:SmartScreen msedge.exe -
Suspicious behavior: EnumeratesProcesses 31 IoCs
pid Process 5080 msedge.exe 5080 msedge.exe 3484 msedge.exe 3484 msedge.exe 4656 identity_helper.exe 4656 identity_helper.exe 436 msedge.exe 876 msedge.exe 876 msedge.exe 876 msedge.exe 876 msedge.exe 6912 msedge.exe 6912 msedge.exe 6576 msedge.exe 6576 msedge.exe 5760 SWUpdater.exe 5760 SWUpdater.exe 5888 setup.exe 5888 setup.exe 5888 setup.exe 5888 setup.exe 5888 setup.exe 5888 setup.exe 5760 SWUpdater.exe 5760 SWUpdater.exe 5760 SWUpdater.exe 5760 SWUpdater.exe 8332 wavebrowser.exe 8332 wavebrowser.exe 1840 SWUpdater.exe 1840 SWUpdater.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 5624 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 5624 AUDIODG.EXE Token: SeDebugPrivilege 5892 Wave Browser.exe Token: SeDebugPrivilege 5760 SWUpdater.exe Token: SeDebugPrivilege 5760 SWUpdater.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe Token: SeCreatePagefilePrivilege 6336 wavebrowser.exe Token: SeShutdownPrivilege 6336 wavebrowser.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 2412 setup.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe -
Suspicious use of SendNotifyMessage 51 IoCs
pid Process 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 3484 msedge.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe 6336 wavebrowser.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3484 wrote to memory of 2748 3484 msedge.exe 83 PID 3484 wrote to memory of 2748 3484 msedge.exe 83 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 1572 3484 msedge.exe 84 PID 3484 wrote to memory of 5080 3484 msedge.exe 85 PID 3484 wrote to memory of 5080 3484 msedge.exe 85 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 PID 3484 wrote to memory of 4216 3484 msedge.exe 86 -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\redirect.html1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3484 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff35cf46f8,0x7fff35cf4708,0x7fff35cf47182⤵PID:2748
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:22⤵PID:1572
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:5080
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:82⤵PID:4216
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:12⤵PID:1332
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:12⤵PID:756
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:82⤵PID:4148
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4656
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:12⤵PID:3204
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:12⤵PID:3156
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:12⤵PID:1628
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:12⤵PID:3620
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3484 /prefetch:12⤵PID:2592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:12⤵PID:856
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:12⤵PID:4848
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5748 /prefetch:12⤵PID:1600
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2688 /prefetch:12⤵PID:4584
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2988 /prefetch:12⤵PID:5084
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2656 /prefetch:12⤵PID:4296
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:12⤵PID:2244
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3556 /prefetch:12⤵PID:2112
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:12⤵PID:4168
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6148 /prefetch:12⤵PID:2704
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:12⤵PID:2104
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=5068 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:436
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:12⤵PID:5404
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:12⤵PID:5480
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:12⤵PID:6064
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8132 /prefetch:12⤵PID:4800
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7388 /prefetch:12⤵PID:2316
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8032 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:876
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:12⤵PID:1920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:12⤵PID:5636
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7376 /prefetch:12⤵PID:5420
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8112 /prefetch:12⤵PID:5844
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7016 /prefetch:12⤵PID:6068
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:12⤵PID:5196
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6236 /prefetch:12⤵PID:3944
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:12⤵PID:5292
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:12⤵PID:4704
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6500 /prefetch:12⤵PID:5676
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:12⤵PID:5660
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7624 /prefetch:12⤵PID:2868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:12⤵PID:4028
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8596 /prefetch:12⤵PID:380
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8620 /prefetch:12⤵PID:4592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8472 /prefetch:12⤵PID:3108
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8628 /prefetch:12⤵PID:5136
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8892 /prefetch:12⤵PID:5140
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9004 /prefetch:12⤵PID:5148
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9208 /prefetch:12⤵PID:1476
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8576 /prefetch:12⤵PID:5192
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9436 /prefetch:12⤵PID:1824
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9444 /prefetch:12⤵PID:1984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9564 /prefetch:12⤵PID:1616
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9976 /prefetch:12⤵PID:5856
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:12⤵PID:5404
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10100 /prefetch:12⤵PID:5792
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:12⤵PID:1080
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10092 /prefetch:12⤵PID:6504
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=10308 /prefetch:82⤵PID:6732
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10296 /prefetch:12⤵PID:6740
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=10040 /prefetch:82⤵PID:6816
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:12⤵PID:6268
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:12⤵PID:4808
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8736 /prefetch:12⤵PID:6996
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9156 /prefetch:12⤵PID:6576
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9936 /prefetch:12⤵PID:6552
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:12⤵PID:5964
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9872 /prefetch:12⤵PID:908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8716 /prefetch:12⤵PID:5640
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8552 /prefetch:12⤵PID:4276
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:12⤵PID:3540
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10192 /prefetch:12⤵PID:6484
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1196 /prefetch:12⤵PID:2640
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8612 /prefetch:12⤵PID:1920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11244 /prefetch:12⤵PID:5072
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9312 /prefetch:12⤵PID:5284
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9800 /prefetch:12⤵PID:6468
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10008 /prefetch:12⤵PID:6864
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8540 /prefetch:12⤵PID:6816
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:12⤵PID:736
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6412 /prefetch:12⤵PID:6272
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9116 /prefetch:12⤵PID:5560
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7464 /prefetch:12⤵PID:5416
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11228 /prefetch:12⤵PID:2580
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7720 /prefetch:12⤵PID:2984
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9516 /prefetch:12⤵PID:3184
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9476 /prefetch:12⤵PID:5388
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9484 /prefetch:12⤵PID:4704
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7844 /prefetch:12⤵PID:5964
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9052 /prefetch:12⤵PID:4104
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9128 /prefetch:12⤵PID:6820
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8428 /prefetch:12⤵PID:4604
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9600 /prefetch:12⤵PID:4176
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:12⤵PID:4116
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9396 /prefetch:12⤵PID:6960
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9532 /prefetch:12⤵PID:3920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10424 /prefetch:12⤵PID:6816
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:12⤵PID:5376
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9244 /prefetch:12⤵PID:4868
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9884 /prefetch:12⤵PID:3032
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9080 /prefetch:12⤵PID:5384
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8740 /prefetch:12⤵PID:3196
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9348 /prefetch:12⤵PID:5648
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9612 /prefetch:12⤵PID:5688
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:12⤵PID:6660
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9724 /prefetch:12⤵PID:2324
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8456 /prefetch:12⤵PID:2420
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9732 /prefetch:12⤵PID:4632
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=11028 /prefetch:82⤵PID:5652
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=7384 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:6912
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6500 /prefetch:12⤵PID:3624
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10648 /prefetch:12⤵PID:5224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9184 /prefetch:12⤵PID:6924
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11156 /prefetch:12⤵PID:4364
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9636 /prefetch:12⤵PID:5680
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10744 /prefetch:12⤵PID:3724
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10144 /prefetch:12⤵PID:1708
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10024 /prefetch:12⤵PID:1168
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9588 /prefetch:12⤵PID:5516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10552 /prefetch:12⤵PID:6704
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2260 /prefetch:12⤵PID:5132
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10108 /prefetch:12⤵PID:3660
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:12⤵PID:5952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7272 /prefetch:12⤵PID:6496
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12156 /prefetch:12⤵PID:6492
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12160 /prefetch:12⤵PID:1880
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=129 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11688 /prefetch:12⤵PID:1084
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11560 /prefetch:12⤵PID:5348
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7384 /prefetch:12⤵PID:5924
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9548 /prefetch:12⤵PID:7120
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11352 /prefetch:12⤵PID:1192
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7396 /prefetch:12⤵PID:5368
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11696 /prefetch:12⤵PID:5764
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7768 /prefetch:82⤵PID:5676
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11596 /prefetch:82⤵PID:2664
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11356 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:6576
-
-
C:\Users\Admin\Downloads\Wave Browser.exe"C:\Users\Admin\Downloads\Wave Browser.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:5892 -
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:4140 -
C:\Program Files (x86)\Wavesor\Temp\GUM36DB.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUM36DB.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5760 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:4408 -
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4028
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6856
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.135.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:7020
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PC9hcHA-PC9yZXF1ZXN0Pg5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:6928
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{18162A9B-548C-43FC-A574-A301840446B3}"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:3332
-
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8688 /prefetch:12⤵PID:4940
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9100 /prefetch:12⤵PID:2268
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:12⤵PID:7692
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:12⤵PID:5264
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7904 /prefetch:12⤵PID:7224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9892 /prefetch:12⤵PID:4772
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:12⤵PID:8456
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10756 /prefetch:12⤵PID:9024
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:12⤵PID:7388
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:12⤵PID:7920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12192 /prefetch:12⤵PID:9496
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=151 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7644 /prefetch:12⤵PID:8532
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=152 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11360 /prefetch:12⤵PID:7960
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=153 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11016 /prefetch:12⤵PID:9152
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=154 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6204 /prefetch:12⤵PID:9612
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=155 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8940 /prefetch:12⤵PID:8776
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=156 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6804 /prefetch:12⤵PID:9908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=157 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11144 /prefetch:12⤵PID:8600
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=158 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9716 /prefetch:12⤵PID:4116
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=159 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:12⤵PID:7280
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=160 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7904 /prefetch:12⤵PID:9248
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=161 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9436 /prefetch:12⤵PID:9420
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=162 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:12⤵PID:1576
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=163 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11860 /prefetch:12⤵PID:8956
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=164 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10308 /prefetch:12⤵PID:9300
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=165 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:12⤵PID:8008
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=166 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11860 /prefetch:12⤵PID:100
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=167 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2420 /prefetch:12⤵PID:5536
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=168 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12452 /prefetch:12⤵PID:7340
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=169 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:12⤵PID:8892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=170 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11044 /prefetch:12⤵PID:9132
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=171 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8204 /prefetch:12⤵PID:9720
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=172 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7956 /prefetch:12⤵PID:6928
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=173 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8188 /prefetch:12⤵PID:3948
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=174 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12564 /prefetch:12⤵PID:9952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=175 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12692 /prefetch:12⤵PID:8796
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=176 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12812 /prefetch:12⤵PID:9440
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=177 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8412 /prefetch:12⤵PID:5968
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=178 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9624 /prefetch:12⤵PID:8488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=179 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8724 /prefetch:12⤵PID:3940
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=180 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10156 /prefetch:12⤵PID:9352
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=181 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:12⤵PID:5972
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=182 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10444 /prefetch:12⤵PID:4664
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,11769033700790239091,9454854349322490253,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=183 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9920 /prefetch:12⤵PID:5432
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1988
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3492
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f0 0x3001⤵
- Suspicious use of AdjustPrivilegeToken
PID:5624
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:6540 -
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{7E71FE74-4DA7-4383-BBA8-548825B7C9EC}\WaveInstaller-v1.5.20.2.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{7E71FE74-4DA7-4383-BBA8-548825B7C9EC}\WaveInstaller-v1.5.20.2.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui7DF6.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:4772 -
C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\wavebrowser.packed.7z" --wid=pdrk9hxh --installerdata="C:\Users\Admin\AppData\Local\Temp\gui7DF6.tmp"3⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:5888 -
C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.20.2 --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff6fa268980,0x7ff6fa26898c,0x7ff6fa2689984⤵
- Executes dropped EXE
PID:5976
-
-
C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui7DF6.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
- Suspicious use of FindShellTrayWindow
PID:2412 -
C:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsq80E5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.20.2 --initial-client-data=0x278,0x27c,0x280,0x23c,0x284,0x7ff6fa268980,0x7ff6fa26898c,0x7ff6fa2689985⤵
- Executes dropped EXE
PID:1048
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://install.wavebrowser.co/thank-you?tid=pdrk9hxh&src=d-cp21976981191-lp0-obem-wav-igoVeFbGPMkoOWbwSGvA-ab51-w64-brwsr&cid=21976981191&iid=wav&uid=aa4b7c0c-2976-4353-a8a1-2186b431e7484⤵PID:2320
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fff35cf46f8,0x7fff35cf4708,0x7fff35cf47185⤵PID:5508
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --from-installer4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks system information in the registry
- Drops file in Program Files directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:6336 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.20.2 --initial-client-data=0x104,0x110,0x10c,0x128,0x130,0x7fff2db06cf8,0x7fff2db06d04,0x7fff2db06d105⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1160
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --string-annotations=is-enterprise-managed=no --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2060,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2056 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2360
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations=is-enterprise-managed=no --start-stack-profiler --field-trial-handle=1872,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2216 /prefetch:35⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6828
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations=is-enterprise-managed=no --field-trial-handle=2412,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2428 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4800
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3156,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3192 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:436
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3164,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3532 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:4168
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=3396,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3676 /prefetch:85⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5604
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4420,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3552 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2244
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4580,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4700 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:6700
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4688,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4592 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5784
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=3788,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4672 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:1368
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4732,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4716 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:1472
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=4748,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5088 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5280
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4772,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5196 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:4576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4816,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5312 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:3160
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4840,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5428 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:3872
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=4852,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5544 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:2104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4876,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5660 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:4012
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --instant-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4924,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5776 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:6580
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4596,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6392 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6528
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6384,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6444 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:100
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6416,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6584 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4536
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6400,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6728 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:968
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6380,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6872 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6900
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6424,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7136 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2868
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7308,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7324 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7256
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7300,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7332 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:7344
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7304,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7484 /prefetch:85⤵
- Executes dropped EXE
PID:7360
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7284,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6420 /prefetch:85⤵
- Executes dropped EXE
PID:7388
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4460,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8336 /prefetch:85⤵
- Executes dropped EXE
PID:8124
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8444,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8456 /prefetch:85⤵
- Executes dropped EXE
PID:8136
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6200,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4768 /prefetch:85⤵
- Executes dropped EXE
PID:7300
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6196,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8732 /prefetch:85⤵
- Executes dropped EXE
PID:7472
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6240,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8900 /prefetch:85⤵
- Executes dropped EXE
PID:7748
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6236,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9040 /prefetch:85⤵
- Executes dropped EXE
PID:3020
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8880,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8720 /prefetch:85⤵
- Executes dropped EXE
PID:8168
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9336,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9348 /prefetch:85⤵
- Executes dropped EXE
PID:7212
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9320,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8888 /prefetch:85⤵
- Executes dropped EXE
PID:7576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9628,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9488 /prefetch:85⤵
- Executes dropped EXE
PID:924
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8728,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9792 /prefetch:85⤵
- Executes dropped EXE
PID:3988
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9640,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9624 /prefetch:85⤵
- Executes dropped EXE
PID:908
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --field-trial-handle=4728,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10092 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
PID:4896
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8756,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8772 /prefetch:85⤵
- Executes dropped EXE
PID:3724
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9624,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9980 /prefetch:85⤵
- Executes dropped EXE
PID:7568
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8612,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9792 /prefetch:85⤵
- Executes dropped EXE
PID:6672
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8596,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8680 /prefetch:85⤵
- Executes dropped EXE
PID:4552
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10052,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6216 /prefetch:85⤵
- Executes dropped EXE
PID:4592
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10044,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6080 /prefetch:85⤵PID:1880
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8480,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8496 /prefetch:85⤵PID:6896
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8588,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7724 /prefetch:85⤵PID:7948
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9964,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9804 /prefetch:85⤵PID:7556
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8816,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9848 /prefetch:85⤵PID:184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9976,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9900 /prefetch:85⤵PID:5884
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9992,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9160 /prefetch:85⤵PID:7504
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8584,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9524 /prefetch:85⤵PID:7304
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10712,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10720 /prefetch:85⤵PID:8244
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=8772,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8576 /prefetch:85⤵PID:8412
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10848,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10860 /prefetch:85⤵PID:8424
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9284,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10924 /prefetch:85⤵PID:8436
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=4464,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10852 /prefetch:85⤵PID:8828
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9620,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8324 /prefetch:85⤵PID:8904
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9712,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10976 /prefetch:85⤵PID:8972
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10964,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8436 /prefetch:85⤵PID:8380
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --field-trial-handle=11208,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11192 /prefetch:25⤵
- Checks computer location settings
PID:8296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7400,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7404 /prefetch:85⤵PID:8628
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7336,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7500 /prefetch:85⤵PID:1912
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7392,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7564 /prefetch:85⤵PID:1840
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6764,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6756 /prefetch:85⤵PID:8416
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6576,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6552 /prefetch:85⤵PID:8608
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7580,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7064 /prefetch:85⤵PID:9180
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6452,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6524 /prefetch:85⤵PID:9184
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7104,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11388 /prefetch:85⤵PID:8548
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7092,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11636 /prefetch:85⤵PID:6036
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11396,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11660 /prefetch:85⤵PID:8440
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11404,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11924 /prefetch:85⤵PID:8464
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11412,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12048 /prefetch:85⤵PID:8612
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11420,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12092 /prefetch:85⤵PID:8620
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11428,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12236 /prefetch:85⤵PID:8772
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11436,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12384 /prefetch:85⤵PID:8824
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11448,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12528 /prefetch:85⤵PID:8776
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11456,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12672 /prefetch:85⤵PID:8812
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11464,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12908 /prefetch:85⤵PID:9000
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11504,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11472 /prefetch:85⤵PID:9364
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6784,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14832 /prefetch:85⤵PID:9624
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --field-trial-handle=14852,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=15004 /prefetch:15⤵
- Checks computer location settings
PID:9708
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=13192,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13080 /prefetch:85⤵PID:9848
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --field-trial-handle=6652,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6644 /prefetch:15⤵
- Checks computer location settings
PID:7188
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --field-trial-handle=11248,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7476 /prefetch:25⤵
- Checks computer location settings
PID:5548
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --field-trial-handle=6968,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11572 /prefetch:25⤵
- Checks computer location settings
PID:9016
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --field-trial-handle=11676,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6840 /prefetch:15⤵
- Checks computer location settings
PID:8280
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --field-trial-handle=11704,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6464 /prefetch:15⤵
- Checks computer location settings
PID:9080
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --field-trial-handle=6536,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11332 /prefetch:15⤵
- Checks computer location settings
PID:7452
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --field-trial-handle=11748,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9872 /prefetch:25⤵
- Checks computer location settings
PID:8236
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --field-trial-handle=11516,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8520 /prefetch:25⤵
- Checks computer location settings
PID:8636
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --field-trial-handle=11444,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6492 /prefetch:25⤵
- Checks computer location settings
PID:9304
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --field-trial-handle=10320,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8408 /prefetch:25⤵
- Checks computer location settings
PID:9316
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --field-trial-handle=10412,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10368 /prefetch:15⤵
- Checks computer location settings
PID:4760
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --field-trial-handle=7248,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9196 /prefetch:25⤵
- Checks computer location settings
PID:9520
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --field-trial-handle=7208,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6436 /prefetch:15⤵
- Checks computer location settings
PID:9424
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --field-trial-handle=9888,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9800 /prefetch:15⤵
- Checks computer location settings
PID:9560
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --field-trial-handle=11012,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7192 /prefetch:15⤵
- Checks computer location settings
PID:8676
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --field-trial-handle=7368,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7512 /prefetch:25⤵
- Checks computer location settings
PID:7288
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --field-trial-handle=8724,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9952 /prefetch:25⤵
- Checks computer location settings
PID:1200
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --field-trial-handle=11104,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8424 /prefetch:15⤵
- Checks computer location settings
PID:9992
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --field-trial-handle=10640,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9440 /prefetch:25⤵
- Checks computer location settings
PID:8420
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6904,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13168 /prefetch:85⤵PID:8768
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --field-trial-handle=12232,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10916 /prefetch:25⤵
- Checks computer location settings
PID:9412
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=13160,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12652 /prefetch:85⤵PID:9368
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=13100,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12648 /prefetch:85⤵PID:9416
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --field-trial-handle=4700,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11804 /prefetch:25⤵
- Checks computer location settings
PID:6488
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7480,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6792 /prefetch:85⤵PID:9204
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=992,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7620 /prefetch:85⤵PID:9416
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --field-trial-handle=13148,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6108 /prefetch:25⤵
- Checks computer location settings
PID:10012
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=7100,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10424 /prefetch:85⤵PID:8908
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=12884,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11056 /prefetch:85⤵PID:9688
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations=is-enterprise-managed=no --start-stack-profiler --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=6072,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12600 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
PID:8332
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11908,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12592 /prefetch:85⤵PID:9360
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=700,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10968 /prefetch:85⤵PID:9952
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --field-trial-handle=1548,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=784 /prefetch:25⤵
- Checks computer location settings
PID:8316
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=12656,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8744 /prefetch:85⤵PID:5196
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=12920,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12896 /prefetch:85⤵PID:9484
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=12568,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6116 /prefetch:85⤵PID:10100
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6120,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9668 /prefetch:85⤵PID:5808
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --field-trial-handle=9188,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10968 /prefetch:25⤵
- Checks computer location settings
PID:8924
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6176,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9456 /prefetch:85⤵PID:10164
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=11112,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4860 /prefetch:85⤵PID:7180
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=1232,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9232 /prefetch:85⤵PID:8072
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10896,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3680 /prefetch:85⤵PID:6720
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --field-trial-handle=11192,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11200 /prefetch:25⤵
- Checks computer location settings
PID:5524
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --field-trial-handle=11480,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4708 /prefetch:25⤵
- Checks computer location settings
PID:8644
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6180,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12820 /prefetch:85⤵PID:3700
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --field-trial-handle=8348,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8744 /prefetch:25⤵
- Checks computer location settings
PID:3736
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6884,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6992 /prefetch:85⤵PID:7136
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9120,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10048 /prefetch:85⤵PID:5428
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --field-trial-handle=8744,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9092 /prefetch:25⤵
- Checks computer location settings
PID:9432
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=10488,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9596 /prefetch:85⤵PID:4976
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=6108,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6624 /prefetch:85⤵PID:1732
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --field-trial-handle=7560,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8960 /prefetch:25⤵
- Checks computer location settings
PID:4624
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --field-trial-handle=9496,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6512 /prefetch:25⤵
- Checks computer location settings
PID:8864
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --field-trial-handle=8496,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12600 /prefetch:25⤵
- Checks computer location settings
PID:8076
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --field-trial-handle=9916,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9472 /prefetch:25⤵
- Checks computer location settings
PID:8292
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --field-trial-handle=9568,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9596 /prefetch:25⤵
- Checks computer location settings
PID:9908
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --field-trial-handle=10936,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12576 /prefetch:25⤵
- Checks computer location settings
PID:6516
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations=is-enterprise-managed=no --field-trial-handle=9100,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10048 /prefetch:85⤵PID:1896
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --field-trial-handle=13564,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=14196 /prefetch:25⤵
- Checks computer location settings
PID:5540
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --string-annotations=is-enterprise-managed=no --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --field-trial-handle=14184,i,15967162499509843523,12006642857179184363,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9444 /prefetch:25⤵
- Checks computer location settings
PID:10128
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9IjU1NCIgZG93bmxvYWRfdGltZV9tcz0iMTA4ODkiIGRvd25sb2FkZWQ9IjEwNDA2NTgwMCIgdG90YWw9IjEwNDA2NTgwMCIgaW5zdGFsbF90aW1lX21zPSIxMTc5OSIvPjwvYXBwPjwvcmVxdWVzdD42⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:6456
-
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe -secured -Embedding1⤵PID:5784
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:8180
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc1⤵PID:8076
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:9536 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:1752
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource core2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:4784
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ua /installsource scheduler1⤵
- Checks computer location settings
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:8552 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /registermsihelper2⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:3272
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1840
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:8180
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x4f0 0x3001⤵PID:3964
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
73B
MD582bd4111745c8a653cc0355e8816305f
SHA1b7bf21d43d4e5717199415301c4cb8495cd9730b
SHA256fcf10c7298470cfc233e8b87e4765cf4afb8fc3d84048bb84f7f441f7d6ad868
SHA51219bc6307ec4274cb3a399450b8fc9d877ccfc25642e529faa87ab1ab85ba2317eee21c9cbbf8baefc2c3a4315a66cb19e479d27b800d1ace737b32b8a479f1d9
-
Filesize
108B
MD5312e4f3903c4c44432bba32d05890b50
SHA11c43d85b5119f09224f7def6054fcb141c08a4ab
SHA25644ba2dcd8dcdc22358d9e178a17ea739b2712565b088bba7f665370afdf7dbbb
SHA5126840d317d2af8c1f0da8f1c448a276228c1b3250c5216c03316b78c26e0703cbcd335b3f11d499e12800328e40f4eafb238552cbc4e038cb8c1ea89142f9a304
-
Filesize
1KB
MD5ee002cb9e51bb8dfa89640a406a1090a
SHA149ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA2563dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
SHA512d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
-
Filesize
94B
MD575bac99501cab84fce2fb028c32fa9ae
SHA1c2b014ec0de321f5427cab7d4051ea1a4916a6b8
SHA25667672f961745bb370ed5670a9bd15da01f8bf1b5d5dfaeb8fc915f5fe03ce8c4
SHA51205404f954ad3a2bc23c9d76d4daccf264aad26ec2dcaad268c4c6ade968a455443454a0f40a77160546a940e3caa5fe54687efaf9f865dfa14b57287dcc0a2a7
-
Filesize
111B
MD5fecba6c3128a97f09a1173779924be7c
SHA141645675ff089fc6059bbe1ed4b049502241e7fa
SHA2567ef57c6645a8d144047d276b5d41b153c4dc63cf3627c32db018ae64b4e6d92b
SHA512c1193abe0bb4a9359e8e73332475995bd042149f62a67e67d37549993c7130589db809c53657abb7a0f9c518f975f270debeaf7fa70327a81b8bbee233035aad
-
Filesize
108B
MD5e18559220221e5596d098b932d0e6ea7
SHA11eaee24d723504bc0b1764973f0b4605ed85154f
SHA256510dde6e414269b6d976f6fede631777eb8b3f9c53649aa2608db50205fc570a
SHA512870bfa77ab54bdf0e4bef0d6114b2b159f62ef6f23f2f2f88a21357c880d03164421c7013f278b087dde94472b822dde5d17dcb537c3e72123301cd0760729ca
-
Filesize
114B
MD5c5cadab1f82f9b71621c1e776cab86cf
SHA1c98f0a50560d2d6c60105426a0435f95023a7237
SHA256a311aa850be76b377f9cf8c39ad706e597b0e52ebf27f5a05dab425271f6652f
SHA51204dfbea8d35ff5fb2b9926ae095a5243fcafb8bd2ac269bf09cae2daff03d67e777f157649a25ecd388566c54219aa85eb4f6db213c8b1fa001526c5397cce80
-
Filesize
1001B
MD52ff237adbc218a4934a8b361bcd3428e
SHA1efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA25625a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542
-
Filesize
98B
MD505c5976d715ddd3cd7c7cfb35ed3ef25
SHA1814895d5d1b3e221dd20fc175aac0214ada6f83f
SHA256a5f3d847ebeea9c9e21bc1640672ba84c0f15f0010758a50e384780f337eb119
SHA5123951a45638e6f615eb022dd65b5e00fe5d4d77b79c18fc4cc5714a59053125b3b14ec7655b3405193ae27a035f2b3dc9e98bb76d7da6fba1266549ec709506fd
-
Filesize
72B
MD59a5a99da362e84f6bc53460440088105
SHA13f423954c63ec8e57c00dfac30b15059f96ba7c0
SHA25683944ef33ffcbeb4895d21cdb0b65b0712763d7953d6689a659441f378ead1eb
SHA512d69bc1ae132dec4b28046f66845f572ff552e8c650c08d6dcfdfd8d71ba04904e7771b959cecfa145909cdabeaaee4102ceaf7eeae71f59954b03a07a47585c0
-
Filesize
703B
MD58961fdd3db036dd43002659a4e4a7365
SHA17b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA256c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
SHA512531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
-
Filesize
687B
MD50807cf29fc4c5d7d87c1689eb2e0baaa
SHA1d0914fb069469d47a36d339ca70164253fccf022
SHA256f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
SHA5125324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
-
Filesize
141KB
MD5677edd1a17d50f0bd11783f58725d0e7
SHA198fedc5862c78f3b03daed1ff9efbe5e31c205ee
SHA256c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0
SHA512c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff
-
Filesize
82B
MD52617c38bed67a4190fc499142b6f2867
SHA1a37f0251cd6be0a6983d9a04193b773f86d31da1
SHA256d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665
SHA512b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0
-
Filesize
300B
MD501f3de10093b3b262105724e85817fa6
SHA197dee66ece41b53a27cbd4579f44c204e35d19d6
SHA256be1b2d4b5880584961c46ec8ed276b6ee43ea595da56720268e05bd3d5c95340
SHA5129646b13e23c4214bcc45715fbc60eb9afb29f934d5d33b3471ee89a6f399a68d83b5bdff14748f73ce6a7c2c9fdce782a4ce849f855a900514636b529e9b400f
-
Filesize
79B
MD57f4b594a35d631af0e37fea02df71e72
SHA1f7bc71621ea0c176ca1ab0a3c9fe52dbca116f57
SHA256530882d7f535ae57a4906ca735b119c9e36480cbb780c7e8ad37c9c8fdf3d9b1
SHA512bf3f92f5023f0fbad88526d919252a98db6d167e9ca3e15b94f7d71ded38a2cfb0409f57ef24708284ddd965bda2d3207cd99c008b1c9c8c93705fd66ac86360
-
Filesize
76B
MD54aaa0ed8099ecc1da778a9bc39393808
SHA10e4a733a5af337f101cfa6bea5ebc153380f7b05
SHA25620b91160e2611d3159ad82857323febc906457756678ab73f305c3a1e399d18d
SHA512dfa942c35e1e5f62dd8840c97693cdbfd6d71a1fd2f42e26cb75b98bb6a1818395ecdf552d46f07dff1e9c74f1493a39e05b14e3409963eff1ada88897152879
-
Filesize
85B
MD5084e339c0c9fe898102815eac9a7cdea
SHA16abf7eaaa407d2eab8706361e5a2e5f776d6c644
SHA25652cd62f4ac1f9e7d7c4944ee111f84a42337d16d5de7be296e945146d6d7dc15
SHA5120b67a89f3ebff6fec3796f481ec2afbac233cf64fdc618ec6ba1c12ae125f28b27ee09e8cd0fadb8f6c8785c83929ea6f751e0ddf592dd072ab2cf439bd28534
-
Filesize
69B
MD5fb195043cfc35ce711b45934e387267b
SHA16f1aaafee57a3da2687e9fc8defe2dbc7cba0e07
SHA256aeb364b60303212808fac02eb490ee5b054ae843ce084376e5981ef8767e5198
SHA512bd7fee1d6f8e51137c849d76ff53f3b501d60ddce83cce18f3a217703d3d8b1a1cc7696b656c666d4f6de62a17ea2407c857137d12e0b6ac7bcdde4b3c8ff86b
-
Filesize
108B
MD595a4ce489e7170e41dc74ae984787097
SHA13aa6ec73fd4620fb7a2e1946c42e443a887d07a2
SHA25664f88606e2e32380555b12f0a3c8ff5a262f35c676cec1faa36f1f03530a9744
SHA512d1a3b453ce6d40cbc2618eca75e68c952d483d299316cfc9b9e111cd9de2aa930f55882401383e04b77ea1bfbf2a44f47d0ccc98b84209c59ebdb964fd62a089
-
Filesize
152B
MD58749e21d9d0a17dac32d5aa2027f7a75
SHA1a5d555f8b035c7938a4a864e89218c0402ab7cde
SHA256915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304
SHA512c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a
-
Filesize
152B
MD534d2c4f40f47672ecdf6f66fea242f4a
SHA14bcad62542aeb44cae38a907d8b5a8604115ada2
SHA256b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33
SHA51250fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6
-
Filesize
47KB
MD50d89f546ebdd5c3eaa275ff1f898174a
SHA1339ab928a1a5699b3b0c74087baa3ea08ecd59f5
SHA256939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e
SHA51226edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690
-
Filesize
62KB
MD5c813a1b87f1651d642cdcad5fca7a7d8
SHA10e6628997674a7dfbeb321b59a6e829d0c2f4478
SHA256df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3
SHA512af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b
-
Filesize
67KB
MD569df804d05f8b29a88278b7d582dd279
SHA1d9560905612cf656d5dd0e741172fb4cd9c60688
SHA256b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608
SHA5120ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e
-
Filesize
19KB
MD52e86a72f4e82614cd4842950d2e0a716
SHA1d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA5127a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
-
Filesize
65KB
MD556d57bc655526551f217536f19195495
SHA128b430886d1220855a805d78dc5d6414aeee6995
SHA256f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4
SHA5127814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb
-
Filesize
26KB
MD58ce06435dd74849daee31c8ab278ce07
SHA1a8e754c3a39e0f1056044cbdb743a144bdf25564
SHA256303074dab603456b6ed26e7e6e667d52c89ab16e6db5e6a9339205ce1f6c1709
SHA51249e99bffcdf02cfe8cef0e8ef4b121c75d365ab0bbc67c3a3af4cf199cc46e27ab2a9fdf32590697b15b0a58ee2b7a433fe962455cf91f9a404e891e73a26f59
-
Filesize
16KB
MD511825cf6da869d7589201092299231bf
SHA1b650151674a230700dc66352a0f002ad5db6d195
SHA2562f315c341e2ff775fceede3d1b5dc2f8124a866a382a2c30b760ac6c2abe7bdd
SHA512e5902c14769efb05fa457dcaf62d4b0d126cf3b71aa9be596e3609e1b63f83d6bc2ab3d1aed9a077a6fbec3e7f6a633b3d0b1a8b77d7d0161af60ed7d260a6b3
-
Filesize
42KB
MD523d5f558755a9d58eef69b2bfc9a5d99
SHA1fa43092cb330dff8dc6c572cb8703b92286219f6
SHA2566e5bec69b1c6424972a7f5481ac57049811f0f196535b707613126c11292c5cf
SHA5129c56c94d059a27dab9f69c9dfd718382a8eb192b8c0ce91cd6db6ec0769b8756acf9c0956a35561474b87d6278b13fbe88a6e4df6260c278b1ae06e9be55dd6d
-
Filesize
33KB
MD5b3b8a8e3b92a3b61580bdc65e951ea7b
SHA1727c3247a9d9fd5628cc5e698b037bcb6808d521
SHA256980614a3383499a90b6ca276e50348545850bbf612bbc01f63a10a79682f1e91
SHA5128a6e87eb1ce24a0b015d7472c92c7889b1661b7e86f9352948deca299ce86bcf3cb40d4f0852e4970dce047c3a439f3a32709eafc35dc7f45a8d7aade2cbfcb5
-
Filesize
21KB
MD521d961d47bb72d74aa4a5892dc76541d
SHA1e3e899b43980b316267e52b069ca5055849f7abd
SHA256c2b348a2c6f69ebf483e97d531a9416fa841763c007fe7e099b350ab2359d5cf
SHA5122bf383b3333ea2785901f358c1298b8e87c65c27d1dbdc53b0928d37d334355b56fa7628a2401c72a54f014fb6b338373e21d431ff460ac14c85c08f1a7cf895
-
Filesize
16KB
MD5bd17d16b6e95e4eb8911300c70d546f7
SHA1847036a00e4e390b67f5c22bf7b531179be344d7
SHA2569f9613a0569536593e3e2f944d220ce9c0f3b5cab393b2785a12d2354227c352
SHA512f9647d2d7452ce30cf100aeb753e32203a18a1aaef7b45a4bc558397b2a38f63bfcfe174e26300317b7df176155ae4ebaee6bdf0d4289061860eff68236fe1bb
-
Filesize
20KB
MD54f45418761264b0518669abb3872d552
SHA1cc09cfae03fde26e0b6d7d24e6427f278a421776
SHA2568d72fd76d38dda8f184c1c35090ed5a4eb6a237df62bef32250af13805a6976f
SHA5125874873cf1c6a7bdc5bf4663428900ff80b71da8a8d70ef3bd46c10ab57925a54201818086cb92aab1b4a44144cb7a419bfd8d037c9fbed6335e27d7dd3f23d4
-
Filesize
17KB
MD529b8ae1d50ef8543dcebf4e9f53089ef
SHA190297279de99683b3903534459bc9962924d79fa
SHA2562dcbd24e8f78b008251a1a0499c981a79be59fdf154ff9938a28ecb7e64cf12d
SHA5126de295089b62bd50ff955c2e381be6bb0e59b1f0776946c5d3b5109fffb84ee2a673f49d2d5a56e5600d3b09fd8e9cecbcd0e677234a6f96c1194dd1e1c27c94
-
Filesize
50KB
MD5ee819f411bb067a0aee5723cb1bd62ef
SHA17c2df809bdbbf4e6c3213c994346c7d775adc58e
SHA256d48d0cde406e3f22de1e21de0eca2f7ecc1e0ef04b540679f2b28f72afd7594f
SHA5125de77c1619451c8f241cbc6176d9c3d3f1380fc1ae2caf475719ce1335b0e9407df64f78a15a0aa59608d33418a5b4d60be133813876af53aa1dfbfef2bbbf9a
-
Filesize
151KB
MD5bbc4ed6731a2d9c6d81c605475580e69
SHA119df2f6385f8fa2b0639868329642f1eb4cdd37f
SHA2565d53dbc5c825a91eab6bd0b9e25d3c647e394d1b4ec9eafda2472d345c673653
SHA5128ea3aa5048c3d9ce0c0babe9471cbf470cd4511b4aee82b3362576b91313a0d65119411a2d48b550957607d20b4e84778553cc70f9329ef0c7b665e72f7e553d
-
Filesize
103KB
MD5c12602b8ebdfd5ea5113f42ee978d526
SHA11159db5c354e5c9a73b2e072b3c0c5d02f3ff07b
SHA256412aad14e7b55e51c4c56a88949c8f5ac81e06bd1d9b23da4378b1d9711a0794
SHA51200ba76a1f0f08c969a96f4418c158d482eba611fa5984cec234ded9c7a1aa2e9e4dc2a69816c2940783289767212ac729cb7b3ae4cd002f772a5dc5d45bce3db
-
Filesize
94KB
MD578b68f915a610f5cd01f96c50f20b0a8
SHA19582f1a1e8fbfccc8d40e8f56c3049707f9e571c
SHA256e30badfaed1d5846b3072786bd1345b558cbe4de5effb11546f68d914e8a4775
SHA512dbda45183a480423f497999a3ae48a9d00ca9ca3cb67ec60ee467cfb7a91cacbc9321137e911621485de6731d2ec41438257cca76dbe1c3eda6b1dfd70518ad1
-
Filesize
28KB
MD51752326ce45c039f4c5e81ea24c27c35
SHA14a22a9151c3c94d170cd3d23659e8e1a5a6f0070
SHA25613dac981c708b9d1c6d7be7666ab5ff34718fe7d1362428217e88c75530774ad
SHA5127ca5eb8b11184b97b7ecfed373420f7b9926839edcd36ea6bcc37a09190478175c49d7cfdb6dcbf1ecc8f2570feec9a0ac8aae08442fddef7986330043ff2d08
-
Filesize
91KB
MD51e9c90d6c69e018b20238aaf86921c6a
SHA17f26ff714fdd5232aaefb5227f8b928189132580
SHA256d1284545460eaae90afba68b3a2bb40531bfab276fdafa99347d11e904393959
SHA51299e56f0ec41eba63c8600237c0edd253b834dfddfc4949a5a2be7589b8ea18eeffd25aef2eadbd3a82c9c7904663287107a12bd1052c9290f021b8cf8e516fed
-
Filesize
138KB
MD5b4809ac082f61ea14a88cc86ad6b44db
SHA14b37c6cc84788048f6b940c8806c863301f9f3ff
SHA2566dd9bbc7247a0a76ee2d32a326c1cf77632f2821fbebd16c955a70302d023ffa
SHA5127fb8c6edb61ceba3b0ab4b259d76ab9d55cb2afba33a160aefabd40f8f40a5d62aa897f25d8bc3dcb09abfd425458bef6f94bcc72c87e589b089085e314a14a7
-
Filesize
155KB
MD5b74f4cb813f220bd09b6b5135c6f0c51
SHA1efa7a95f97b0c38f400d429ad0316592af9ec964
SHA256c43ead694533f49b58beca878f3f63a66218d73d20e438b00181d777f8718824
SHA51202ab093546c152085788f5e4e9424224d78e249dbe65f2161c91652bd6a97f355a4e7813528cd9b03ef129b12ccb37312504fbfe7c19d378d689c74f58719b40
-
Filesize
20KB
MD5e051fda9a4f2045f30b1bbb384714039
SHA1fc9dc55b28e8ba83915343c734bed5937f3443b2
SHA2563f569a7476e2187330dc593b7981f0291391181c609d6438973d690f463b6f4c
SHA512a6388085504a848f6c4681acc91391e105a041c8522a95d0045c8137a9899eb87b9bed27ec53f6f8529415f422596ee66a3557e430437b6edd58289b25c2defd
-
Filesize
86KB
MD529cf46b41b0401c926c2efaea8669144
SHA135bae609ec64e939de4213363e4cbfeb24a3326c
SHA2562540bcc4b129e814ee6016e2c202677d11e048c78dfc79261d458674086439a2
SHA512f6ccddbf38c9729162c1067ca9e8f4df2c949148aefde6323f3a602da0b2582f56b78f1f9d63fa0c9ac88924141a190bac6d85dd56c84e12d9c6c1e122c173ae
-
Filesize
91KB
MD505d85acb9718f40d173043d98731d3ef
SHA1d46aa8111d827f30586079f5d743a3fd38bb3776
SHA256a51122160bf9d8265da45a57d229770e67d99c4690afc4fc6a63ef0aafdad504
SHA512ba618ba10168b772c99e541eeb5a5cc06d8ae13f6a710e568a37af114b4e77d58af57a00523965f67368c1dbdb7df9ca6124572064ecdea37ea247b91aff18b3
-
Filesize
28KB
MD59ebf52e1e4c1627a5b060601ffb483e9
SHA11cd01bdd300ccb77571251dde0be74a907e2ec6b
SHA256216ea1737cacccb1a0e1a0c506bbfff5bd0c68aad94822fbf578cb81c7d72f49
SHA512b029afb97638d132521022952ff84aebe822a53fa0fbdfaa359c410b03c63c72a23a9602cb64cf927e142dde1d3746ab7e0420c8cf7ac0c02af09eb11818a4ad
-
Filesize
48KB
MD573a453ea5d4a2fb2916473737ffa7224
SHA16401625619addf96a9a64c7c3a8c3608b15233d1
SHA25688d6624cced4fc50d398d759513b1475da2c29dca62572afa65859bea2950dbd
SHA5128ecdda35045b2ecd76d08c985c87a065a152f7a2119fb50e5102a48f7bd098377ab2f772b19c6049269612a2b4bb3279de94b26f787705b98ad0d9c723e2a29c
-
Filesize
95KB
MD5d3f107b782a7144bcd29e9d6ec3af3ee
SHA1b78b1529f7897d8150ec60a36c287b30f5ed68b7
SHA25638945e662c8a915c6f32d2994ca7c7bfa47200fc717b9d93db27a4e1094912ed
SHA5120eb299e38eeea69c0218b0aad18ae095196281cc7d445a3ffe580fbae1074729f89b512cbcc86b567df25d33ea9b6dcdc594bb6108fc30962725196823570496
-
Filesize
20KB
MD587e8230a9ca3f0c5ccfa56f70276e2f2
SHA1eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA51237690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8
-
Filesize
127KB
MD522ccf72dafe9f2ff210d807b3fa7aa49
SHA1087445734baa45ae2393cda01ac4a5accd69ed90
SHA25686a7c310893dd671c16265506495435a2b88cf8c46bfd643055302ec2c6e5bc4
SHA512fc4095753d82da238b925777edd99cf82caa532719d223d51e6acce52df80f67374de95acc242198d2f1ab214ee9a82c04422b956449fb623daa6dc15ceb6ab1
-
Filesize
215KB
MD5d474ec7f8d58a66420b6daa0893a4874
SHA14314642571493ba983748556d0e76ec6704da211
SHA256553a19b6f44f125d9594c02231e4217e9d74d92b7065dc996d92f1e53f6bcb69
SHA512344062d1be40db095abb7392b047b16f33ea3043158690cf66a2fa554aa2db79c4aa68de1308f1eddf6b9140b9ac5de70aad960b4e8e8b91f105213c4aace348
-
Filesize
41KB
MD53bc2b6052ff1b9feff010ae9d919c002
SHA1dd7da7b896641e71dca655640357522f8112c078
SHA256483a3494759a05772019e091d3d8e5dc429d098c30007d430639926c3ffa16e5
SHA5120b1632b73fd87e8e634922b730f83b7950e9a39697a46a3429f0bebb3f1ebd14c815a4651ee8f663a437d00ecbeb6ddaa47b2fcad719777edf1b1de8a7cad0f1
-
Filesize
66KB
MD506702fdff4205590c1caa29b580e9620
SHA1966017a8f488ddc3707f7d2c22a6c7eb51f58f29
SHA2567586590346cdb9520dc3cf7131e5662b3c4407d2624ec22dd0e1c1eb9725ce36
SHA5127c39333eb130eba6c9f57c50b8b6fbebf90c3cd49bbd7a967c6d31f7b997ea085770b84caf4ae2d984898a445535a20777c671e382e2da01e21e1c40248d322d
-
Filesize
20KB
MD5b07da7aa3e4f363c5cdbc11312239e8c
SHA147bf5b2f24ea4a4caafccc89b9d2a6677ef9e3b8
SHA256e44c11f4834bdd4d6b6da7b8ee5eaebc8acb41250cd6bce5cc82ea8262140eaa
SHA512420729406b315d8af34b62b78f39e763f5cf33cbf94467457b393fde0573dd7ffc6a23f25680988f9b82a4a3b719876ff76f3e1db047ce82615f544fc3a82532
-
Filesize
39KB
MD59a01b69183a9604ab3a439e388b30501
SHA18ed1d59003d0dbe6360481017b44665153665fbe
SHA25620b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
SHA5120e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
-
Filesize
20KB
MD5bc9b04cd87d3223d73540dd3db0478fa
SHA19678ea03e663a2d751f83d33c964774af42cbbe1
SHA25629f3cc09f4346ea6d9db0106f5c3c3f7758471c35a2ac581c81219502c12513f
SHA512b2b975d3d41209fb5c879cde22936a86ba81551dea3e943a4d7dfe9110e5ce012ca2b54e0a3749014bc141bf01b84e74e8b0be575979afb3ec294434bcdcc691
-
Filesize
60KB
MD5b145c1357eb028397bff7a38098b910a
SHA1ff905aa566aa5054c622d31c1beaf5234e7c2d62
SHA256682b3f37e4ca680de6afb7647c27793b4c5f16c4d73a816c1265518ead6525d1
SHA512d799b3be705984f4e725a364b47f1f133eceb0bf02dc1cc94d6652d409c6d11e94a4ecd6e0669c731bafd51e160ff922dab59e7ea408873b4108e0e8524070f3
-
Filesize
39KB
MD5d4f76bbce61ac3dc4b136f66c8902dc4
SHA1554443b230a247bc6abdae11494da3ab71fa9ebf
SHA2564d33139ef61c6a55bc478584ddca58593be4b50823e025f4d0c746477abeee4e
SHA5121beb254357f2b55728bb1c7dcc98d34f9655699438cd2f7ed85ee50d1e94fe6391435494eaca1a37f8898003d439480c8f1e28f8b5a345ae14fcfccd95d20842
-
Filesize
20KB
MD5760732f59eb4b6667ea7abb23565cd9f
SHA11091bb22993c329339b95a007b890fb68ad2aa1f
SHA25609353aeed9bbcb92f5c59024b36912866cafbfd5fba5ba7f248a51817257396e
SHA5120d3686556737c58ef71113a89e6a9cbdb698754a5c38d4399e213d97061d0c9a677e70131f4b3e4e6aa5a290be21408597206d7678ec626128694676d2158096
-
Filesize
20KB
MD5ad5ba988c6b43e47d94213bdf8450f11
SHA13a358e528fb24047af807a21f8f172b7d502787c
SHA256ca4dcc00bf65d3ccad01ae7626e42e81006534d1dd6cc71de09c9dfcd6fb3d4c
SHA5129d8ebd63510af6509211135928235d2841a1649c017acde8ae15caf9460340957ba79b25899663b49c015f6fc93d1018370cf9ce7d61cbefa035af1023b0f8d2
-
Filesize
31KB
MD5befb4d1fef667b6025929f89799508a9
SHA1ba9d70abccea852ccf8b06d9bfce323a98e784cf
SHA256a715efef0572b88933579984309b85825a1305e3f358874bd868e8e8cc69f878
SHA5122210d93a925653cdc6432225b48bee1c9f51c5c593c7b02f88e462b1f726b0de147c33e1a4d6ab650f78564a7aedde136f46455224a81e62ed927bf4ecbe8acb
-
Filesize
55KB
MD568ecc58a934636e32b60461c4ee4f930
SHA18e8f1a3a09f4ea7aba307f4f23890eb0f867e4c6
SHA2568b61d8c123333fd1cbb0eb7aa361ef2220efa43dd08e13747b68d311de4810f1
SHA5127d4c8d057a8fae7168b6748a0179d46a0fac5c530b9747941aea29667d07b2a9d142e1171a63eb6bf9219906313ea3e283c3fc2803b534b7a782a7a284a8dfdd
-
Filesize
23KB
MD52199e3e638d58e9e35676f749cce9b28
SHA1d1cc977e8a3ed2509c47ab3a9d161afb1432f04f
SHA256b9ec5daa6d5209f3c2637cae46af487a82c6f9889f788cc63b12b21e37e711c7
SHA512d390326850b45edf11074e41a93a79335fd83ab5b6f54051f2b47946e3df9736ec190f58448c80641a34d50d287d43778ee3e8ed5d5c040aecacc2a93be18a92
-
Filesize
17KB
MD5e786d96da47d0720f404e753c216897b
SHA1ad5037120f26e864e7b10c18a51c47cf11282a7f
SHA256bf3db29896c76e4f1f7db3f3fb950f77085100fe06779cfa35a014bbc19a6cc3
SHA512a86f29fb49a364c38543caf54b47a135cc10bbee821fb0752ae3110fcf49f70693659dae85f337c5f93f2af5c1602dfe22f807c14a4b5efae53ff7a1aa39089c
-
Filesize
62KB
MD58db9e3d59e35425c9738ab4c927fbf7b
SHA1e69219212b3ab89a85c15c43915107ad9605bd18
SHA25610fbbc6d547c070f1df3554b1d6d9972c0a680ba3c43aadc962f9548dc0a2f2a
SHA5125d9e0fd889ea5ea5c84b085d6d368a202f3b7d397f921e45a6571df37f2f70cb6af82790ad817421af0317510db390d5d1581462cd85da45441c37da7ada7baa
-
Filesize
1.2MB
MD5c9db6b5c84be13a43ad23cc204e4bc52
SHA194bd6634303205715fd04f8aa10d75158390e4d9
SHA25677200156d4773175d341aad11ab23bd52445065cd95060348da17d083dc27688
SHA5129273493c5e5ea24b2f5ee219fdf849546e85b3f5cc24c970f1ab6fdcfe961d96ca6fd41c96f9d915892ab24ce7ff409f0f5a6569b0225e95d36afba51615f8d6
-
Filesize
40KB
MD53051c1e179d84292d3f84a1a0a112c80
SHA1c11a63236373abfe574f2935a0e7024688b71ccb
SHA256992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3
SHA512df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff
-
Filesize
53KB
MD568f0a51fa86985999964ee43de12cdd5
SHA1bbfc7666be00c560b7394fa0b82b864237a99d8c
SHA256f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f
SHA5123049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7
-
Filesize
370KB
MD5ef4d9ac6875a380baaf7c491cb6e7caf
SHA165f390154cdbc5acaff94ce8db784b46da9ed69c
SHA256ce155c2d8178337aaab2abb69845cdf64be7149d4a20ac2271dc0a2d00b4271b
SHA512f224bd3edb6e0bdbeecf6e608f8a5eea82cbf1af94e82a9814e1b5be6187011a844bd27b19e8464753103c5c73fed19e656599edd9d3c1e7b8476326988fe011
-
Filesize
16KB
MD503db78b7731cb614081980a423fbede9
SHA119d82fc84079bb3316088ca9de31841fc216b2e2
SHA256413155c9a04ab11cc3b989a58d5277c81f947425009bcbeadf8b030689df938b
SHA5124163656c505dad5050fe457b61589dea2505b45df14df321e36b79a33e2d93549feaf98097bbfcf49e7d9fe29043d6824d7174f676230bc6d5692a54f998c333
-
Filesize
65KB
MD51cfe94cd3243889e0e6608e9cefa1cb6
SHA1a1758bba85a308fead2a53b6c0b8f46128e3f4a8
SHA256a8fa99b3752e74349a3338e4afb37d65b9af8a8e386e2d19b06299382fc00361
SHA512289ed5c3307c034168f713054d865850421d624cd02eb840c8b29219702f15f3656b033634016bd4791abdd7fc447992642d499ff1a227d3293359a43c65778e
-
Filesize
24KB
MD5062879c187789c3c79171bc891b18eb4
SHA125b28df936f9fcba89a5873cc566c7268707bd61
SHA256d5b46261ed68cebfd7ca1a9fe33769b7e3796aa1cf7e8192d3d1709085c41a51
SHA512af4609e0ed3c32a2ad11fc0903568a878ba0b9f62de052b924e1024aeb4371467b0d380a31e04614234252884d0e48607f3089ae5d6dcc2ce47f0edf71b9f753
-
Filesize
21KB
MD542a5e9298d6889e310f22aaccf7b3240
SHA147e958c0204cfb8a890895b79154c5ad1ed3a4e0
SHA256a6ceb59da1aaf7a6dd9fca8fc67804c95b23d3116372737685aefa96ee603e96
SHA51234bbf73ec3b8ddd777202c0d4faa9cdde1841d4865309f76cae29d89b3fecee1723d39957d6ee0662c8d4e792613108f6e0bc417889f5caa0b79738aa5fff268
-
Filesize
16KB
MD561bd6eda7b02e0bbcee14004ddb68946
SHA19ae2e39ec13d4efe89efaa6db14988aa79e6c7aa
SHA2561d0c8ef1aa9d5969ac34eb43aa39410bcc3c3446beeed2e8eb22c09f5ed20c77
SHA512d5f7dad3dc6b08d2c309149674c70425352b1d587ee2d7cbaa7d578bc379b1543b69744466491de83797a0bfc50ee22c17829ab5e66c7a6428caee9720210a17
-
Filesize
24KB
MD571ca830ca76d1c99c3233e05b3b67aef
SHA15f9d393190df10720086ddb5b68e0994933aaa0d
SHA2566b76679f68d8bcda8761b42dacdcc17a1488490521a7c8b29fcc3553cc4ccefb
SHA5120ed4754cb715e309241d9c5bb8e7bc4a72ff4cbe3aa56fd1dce94f50eecab52b4e4d8db82a70894ca4e7bb38532874294230c9d2d73e27f1ec569b941a1d3ebd
-
Filesize
34KB
MD5650b395573d3a70c6447a7a039bca4e1
SHA123a1e0c9d8f84caa45673e4d8f4e11b0581b807b
SHA25683b0060182c8e582b7b2e336dc832f9b465bb4a68bd428106c6b4f1f00bbe85b
SHA512cd4f6b74a656d8f7f76165007834489a9cc731af33d402cb13b6a7c0c2b65c4805dc0d8019003730e98aee33a495c0186b8b122c9e690f3b9bdb29fce27eb714
-
Filesize
28KB
MD580317fbd51a0fa4d0277e5930bd903fc
SHA13946fa1b019e65d517248bdc2f73c6a70019be0c
SHA256e09f554f0a37e20c6d9ff84139c60e7209b6ab5c6d5d988e044207c5e5409a3e
SHA5128a8ab70bf4c1db6811533bc7d4c9b9e5fc63bf5036507cf60581f5eaaf441be67b45d5dc409afae24486f5ca834cd4ddab5949b1a4ebaecef6e0648ed922c65f
-
Filesize
26KB
MD55ad6acea76f6ec8552e8c55c60c682d6
SHA17c89242147eac2e7ea907fa6295ef77da857e0b0
SHA25686df267afd5ebe600d2a7e7d630de5d0884c46ab0ec67ab357973b31d63f7c69
SHA512f602e5680eab654f5eade687bef8c3cca9f991ce2f046c6f6a7bfddbecf59d96cab3e82a9379f9a378f1486d20057343505629726ec46382ca1910f70cdf0d41
-
Filesize
47KB
MD590048d747346b71e54002d03c8160009
SHA10ab7584b53eef546f051bb127839f3e0c69ce9ea
SHA256eadf152b8ca8f11492e7c525ddadadb7f5b3971f52b3961b52fece8b72862b19
SHA5126a1426769957e88e012922a4be6e8c91a20f2208876ee9e3d67a7ef1e2add81d4536142f008250a4c89a9015ea2b5358619d4791a76503bc9cc650b35c77851b
-
Filesize
159KB
MD5d5c4c66ec48bbb4f0e0ebf02ccffa424
SHA1e26fae6bb90be6c3da5c2d38c30bb07d1832dc79
SHA2565deedf32a097301df9744caed3483b5547802f908a710b3c11b7b8f9cc76c0c4
SHA512c124c9296822b87ec6d55cbce97b20d213080308a2720f4bebd50edcc95d625972ecc0bb0a3f4c7e49810f20aff3364b4a3129395f3449a301c8d7f4766e0a90
-
Filesize
224KB
MD5a1eae7076695ef66bf2a15c83b7dd7fc
SHA150fbe2430648bd119778d78d80762ab3779d91cf
SHA25607123482e21c991b8fa31fbf80fd4a5a002c747cd57c24231589822f1522ea5b
SHA5122c16e2914ea0a3284f009d02bb22208dcd425997d8352353ed5ead9589a186d599fe34ccbb4461005161d4fec142042e0595dc66bca78c1df023d83579941df6
-
Filesize
280KB
MD5bae9c3b3496c2cba6ff5019fdeebe7ae
SHA1209e80108394570cadbf4bf25e37041d27cf2c7d
SHA256ebbbe3f791c821a2aafe7031fae3ab0b40c4640025b1c94c3747b4074b446b4a
SHA512bc080a188abcd6005d47e2e68853e8abb13835cc17803f2edca75ad37bbf156ba39d61c8fb98de1075e3564dd75f2324ccc6d471dd48e7f8f49f165d295ad2b4
-
Filesize
25KB
MD54fd3aa00fcb9ed00cf78a7b945c0a372
SHA19d42652558947b90454de6c487db98eb065c9742
SHA256c3e4b123cc3ab07fd752cb07a7edb1411bab86ce63fdcdb3014b6c600437dd5d
SHA5129cf390ef878be3293ec36c7ec153918799fc0793914495329fb9d92b50640f5afb29630d03c03872ab2f6a4c4294c69b41a42e4b5b1ea028508c2d67c2fdcecc
-
Filesize
144KB
MD52be1a0f72329309e7327c9a3a68f6e02
SHA15c157226576d7e957e119eaecb0236de1195f91c
SHA25616e570f1ec95194e501e81bcf0323b9f45fd8ee049c198cd1d14303971e2f438
SHA512e3fa72cefe024ae62dfc9bc088a8bc2ccc433a5392cb0d16d3d8c99e64c28c22f3a4d4950ff416e0565dcf62822f335376c3ad9d0917356e10d374fe0c137be6
-
Filesize
134KB
MD52b48234c2909bd08fbc6eefb76cbe565
SHA14ed35b96eac04f2a78c80db0e7d7145c06512b05
SHA256af2faff103d4287e8ca085f9fc61ad68bac435431e5f7c039868688279a586c8
SHA512ad28a6a9132aa6923cb0f19527eb3cfb2d4250b101f010471993757ebddd6ba216e6cdb1170c6632269b32b2ce23c82e4287a9461f34cb1ab2593d59d8176f31
-
Filesize
38KB
MD56f9bcbd9790889389f52578f0c27177e
SHA1941fcd07ce8c21efda837ce99c2c0c532a153115
SHA256f83e87421cda34647dbbbd00cd215a7f86445af8b2e550fc88413a757b89caa6
SHA5128e20dee4c862b915790779e05fbb8bcb61d686c6f11f9bf74f459ebb97979e590c5fa4aec6bd83d9eaa68b2cfd6629144b4123c2a9c6757f777593dad313a0bc
-
Filesize
71KB
MD5d89f25ddc41c3250a801be3d608ded32
SHA178d9ff15c5cc931d60910385e707b1d57d8722bf
SHA256a2ef01b25a4f3e873e814b242809e19f745805403ab05be78ffa379b8fc7b517
SHA5129bf5134b47eec1a592753fedcd1ff075d6c095f08144115abc1225b7670e717412a6a930f661eec77efaffb8bdcf127b5cf3e2e1e05e30829ac0305ec371158c
-
Filesize
93KB
MD5beba4ac58b0c5c5dc8d88788c17430d1
SHA1760c5939a9f32bf79013afb1199ee2fa18bc38bf
SHA2569b98dd39b19acc84aa1d490cbc00359127d63a0722997ed7cf22c59bfd535b0d
SHA5123c32678b86b92f238db72d72c86b554c7d9d0f977d907a34e2e84892b65de962a49f72661d73c3df24223af3edf865b5a53f2084a9ab04d92015ff91649dbdc1
-
Filesize
393KB
MD57bd9b3cd87cd2fd6e710405371f7b05a
SHA14ceec16dcc4013362d2930caf0d63d92705c71bd
SHA256469979c9cfd020d98cb2c879068c54576e2df30db89da93c735db37d980b886a
SHA512a0d1c38325835cffcac08f4f56ec2923eb4400b2dc9e9803c06856a4c70c035b1990f7db3a30f063923fd5d42183004d27347f52ce8110905cb3e551720af0a2
-
Filesize
31KB
MD52102fc9306556e907b7845de552c641f
SHA1e29acacc0186e3056966455905eb579b9c76be5c
SHA256d73407b21a360f24baa7cf5227485178f255bbcc1e71cbf0e26b80713a8b40de
SHA512887e6ffe96fd4339400acd8139c5c264e385ec96fad19cf31e8bb6d80d6a704708374b2ccb85576b9a52793107eb78fed61e0a2e248d27b8e1d3efb2a97dfe73
-
Filesize
148KB
MD5fa091fc92e33c39b43fec93b176fc045
SHA1442c6002433471f295868b32b265ec1ce34efabe
SHA2564e21a6f1f521b8b18d22df343528c4c024ca5969562b8600b3c9b7ed6814d9ba
SHA512b999944793967514a9b820b974650d6c25dd223fb3bdac7b56dcf2a604743bdf61c3e4d11b4dfb9ab93ee9a860b36b687210cab55e435ee89de248bd1d79a252
-
Filesize
2KB
MD53219d94dbbb79a89d3c1341fe08ab748
SHA1ea515024467642a9fc59e0c2423089a407cc5cd1
SHA2566ccde3ba963c35653ca8d089450416939f2e412c4a84acacea2620faa138e1b7
SHA512ea76550cb1e8361f9f77867c37897f39a9b5c460867f56c8cbb1b5238d46286a0e41ccf513fcdfe3c980821f5fcb3976ad347271bd491ec911b71171591215f6
-
Filesize
3KB
MD55b139e1a4d6afadeef1ee5c01d538b4f
SHA1c8270aeadde61b53ceb9c481d8bf1a96098ae9db
SHA256f3f4c6f9cd69f090178be1748f01f30a8690a7987903b8653ed8f4ac5f604468
SHA512d45c6dc9ddb0587063888a1682cfa06cae4c4cc25240ee6c9095a30d7d145346ee33b7d02861405dffb2c563c4e3619130198d046a6e62e2663d079ef8939d48
-
Filesize
249B
MD51134a2ffecdd3d0edae21218268d28df
SHA17e99b9f0b3de8a35b2a2d2f3882cc536cf7d62a3
SHA2565e28e57e0879da2b2e3935eddb944dc68b68b846c410c7af36cc117bfb4d17ca
SHA512ba420a7f3602f22a8b17e6ddd6b5fb2479498a35ce4dc3ab0fb23243a4fe1b85152a0bb157c17b6889075b8ce629f50a541a36a38a8ab5db3dde2a57ec6e6ea4
-
Filesize
5KB
MD5509e541108f90e8f44db2fc4e11d40b4
SHA19f677b41754b193167f18d0a01807fc5d20b0bf3
SHA2562176ed04fe6e75e29534f2b7ab12889dd36f6803370136b23d8865fc47d78377
SHA5127ebfba7e4ec20350591ce3b16f676e26bd2f0bd4f675573c190fa83f68ce2b6d4211178e5c91fe6e73ca6d815d6066cca6c2aca07e62d53cccf5f61d41d593a0
-
Filesize
252B
MD57aa29450c5fb1600f5b92d4516e6ac04
SHA15c0d253b75d247124af7c630da5abf08f3fd3b2c
SHA2564f44f373b576d2d7d25a5d9913ec4071c195826de3380bcf717ca6f487848ade
SHA5123e02c0ae588a0bf8d35c819b71396512e9b9d7b2389ff9e1e6fe748599119e344736c5ee8e9af0d175293ee0cc1ea9827210f34adefbb71126b18de5d2392017
-
Filesize
306B
MD58b77490e564cd674258b56830169087f
SHA159233df22fdcedb80a161725763f86aeaa7d6ccd
SHA256146a8faae8084fdb3126092c8d835bb5708c48019fe0498c177c148332f434fa
SHA51249860538bd6791b2f68485ba6407c97efdaf74fc9dc12e7107380338a95af38ecebb49a48d79dd81d12f962c427996c7556d43be662ceeec33d3370fa1879e79
-
Filesize
1KB
MD583c76c30b6c7741f8382c81c7504e04e
SHA1f50ad44eb72e9ea1c5339d60827512a589c07bea
SHA25688d967958caed34fc716140b44b095ec70d3b7aebe04638c88212b4e9be9e6cf
SHA512c2016cc468b30b8c45ec7480ab1de704dc2bcb8e92048e7289f52236e0f572463ed8f2cb99cb85da7e0d82834993546e704c7b55059f18b7875c1a64309d25c7
-
Filesize
3KB
MD5300ac98215a4347317c4bdba639a9e53
SHA1dc5c6ba9d54c07170348a5b27f8c69c4c37a5579
SHA2560a4c04aa7d27eb5cc0edeca381a9461c20948c7146b21e536feb9f41fe8a46b4
SHA5129c6396797d1325a599532d006e93bbd695fc78348bc932409e76fb19fe6edf47aec938a498e1f1c212ac2cba3d646017dfc76bf97b39c8b9e7b18a1d33d7e2ab
-
Filesize
262B
MD5d536b48c7b703cdf7466621f7e08dc9c
SHA14f90a01f0de1fd5896b05fd6679e5231598ca1ce
SHA25613a4ce74bae6b46c0c82cc71212e8c90c5356290d376b5c74d97d19547fb2b07
SHA5123ddf7aac3b1b18a70bb0bb86738505feee5cc065d6fd3b202d1bd581ef8c619bea90aec4ad6d1c109bea2739a04592861d21be1c79078142ead45faf9f0f3f4b
-
Filesize
294B
MD5a66203ac69ba17565266fedd56317c19
SHA1cb93563be4863d83e69a0087f77a69ef2a928a04
SHA256cc2ba488be834d966cda7345cf99ae8d2b12a6437efbd995890e2d7148c5bd40
SHA51270941e9dc3a1a63277cbc869c87692fedfbb145affc18d778e6aea8e3f590dd400982c0dc0b2e5fcaf58ae9066ac64b2ac927675bf1e70633ed7bb9a4b457419
-
Filesize
55KB
MD50e428ef2676041399405fed8fb7f6e0e
SHA1ab2b74f1f419a39e7698fa4a71f5abfd300fc352
SHA256f985ac45f1aeb0ef2d7fc7521a52376fd90d35d8544ee5218506fa9a85f8d831
SHA512dc0d0ed60212e0bf5e37a8e1ad50f6a6ad674305acb0bbc6d4f21e461a958a3e80f6b8115867b1ff8f4a5e8c508d5504c03289016514ded2c31b7883ac1943ab
-
Filesize
9KB
MD53e4ec86dc3fe2f56381fe0f4548436f2
SHA13ed4680edcb6bbc0dafab80bf2e50c0f2f63e20e
SHA256c742ca03ef2a161a8a4671ef67928414fbbb3f87c8e5f1f5308fe1c9f44ca5e2
SHA512fddc501b671622677141cd9ce651410d7f487ef6aa5a9456f48f82d06237e2ad5425f115870e86ef63764116880b870c62ce69174c9f8959508642a25ae4137f
-
Filesize
309B
MD5fe373affd1b02a87186b491784712b79
SHA10eb06ef2579190817b2e8550a0467a8bbd5e1014
SHA2564bc4f7f66c6cb553a3eeddb81b888bd5fb12b228cd16e19c54170b618cddcdcd
SHA5125fbe052aa12331519e480b64dc5ba08dab3baddbd190699e3ba1894f653f1145eec060e09384ba0b6224f8d9488af36c9532185435febf85ffc1e04663bf5391
-
Filesize
27KB
MD57cb7e8a99c4d8ce754e7d12daf434deb
SHA12482a137309e0afaedfb6fb4e138ac292b654d5a
SHA256b31b8b20bb716a8b0bcc278c5398e4b62051cf37d379832e872b41285fabd57b
SHA5126e86b14d44c54e7c102ff51c47376b28a700d2ff494e9eb597fcbbc643d6571067488d231f41e2b237bd6a1f0e8ab5455738d9aacb1de73eb5f2c527e2cfba41
-
Filesize
6KB
MD50bcd6b515daa651bfbd44fd3ffc36ef0
SHA10308261ccc6aaf86439c1e1021c6b52f419dffd7
SHA256db84d5ec95a7b721da78cbc9eaa86fb4d3288d6d1191b793a19766ebb05ca920
SHA512f5172e0388f8372746f3ad9b5c921d6a52910006834fdffe4eaf146ed16f445ba6f5e490107d9766c8ffc89424e057fa474f7384d99b2cca8031890a43a47f15
-
Filesize
1KB
MD5b5c441f8a24a7bddbca4e6b49920a43d
SHA1a0a81cd3d21204225346e61114e11b09cb86e546
SHA25622a5dff1d83135b804eb96ac83f4d0066788e2c8f9cafd62f878d483df6a4ffa
SHA5125e8b65fb5409bf70c50c62e3339ff3a676827a4f5b1e6d1579b92ba462d2f4b4b9319dad58c333770dcc24d60a1dcc3814bb8bc05bae8545323d23b68b6a8808
-
Filesize
337B
MD544300de4a64173a031d95d415d12abc9
SHA15d9728952a1b47989873d82ec008ffffdce13952
SHA256f787d426a096a37bb081f32b25754268719f11242c37bfa9c2ddefbc5ae63f21
SHA512e72e4b5f99c9c3d399859d50b569aae3af306888aa3f31ba252764b64a42a79b84623b0bbd562168c6de2f15391902a1e96bf5004c8be558448a664b9cb51f8b
-
Filesize
429KB
MD547e6baf2ad6de4ca4ec3f04ab7a373c9
SHA1af91a3f5aa73577ee7004f98c1ab3b5910f8144b
SHA256d2c496a5fc24e2c96861af71ee183058f0ccbcfa1a629d6927c9a768a2b8f94b
SHA51216426c6d06c40456029c929710a511929d6efbb9e6462497217309c2312fef5af2d93a8e1d84a366dcf23e9f9bb341e17a37921a1b8521d60b867438cb5f8bb6
-
Filesize
23KB
MD5aef35108874519ccddaa775ebe296c8e
SHA14135e379e919d1b556f68a5dfd26a0c0ea1a797b
SHA25684b49c5df0c3734d00525f8a8ba681fba6eb571620c3d447e02aa8c5bc80599e
SHA512f4c2e66592bd977d3d12c994f9882adadd543121501844983897e14d72678a9209200e907622c6a8104e42209686ab966189c482c9a55ada680a7099b05428e0
-
Filesize
1KB
MD5bee93d6d05f3be0c68b1a8bbf5fd9568
SHA17166e29d038d7a547500d05207ce9067f192daad
SHA256d5255f8b85cb1ba1660ef5d2d1bd96d26f1ceb1760a127d20eda2129774b7ca3
SHA5129043824d10ced728fc310c0385a0b4f4c088ff890ae92e224fdbbb39b4ac9363ce5ee198bbe644dfe5faa4c28a3dff6622db2f9d4000b9fb35e15ecde3445080
-
Filesize
74KB
MD563b9513f835f2659290cdff1242afe01
SHA1fe340fbd5a71295bf01cdb13f1df85ee9c55ca51
SHA256620b6f14d856dc2e8a18ca5dd495789715d3ee1bc63b735525db8233bc614678
SHA512a7b52fd0cfd7a54ce77e99666c197b71b9e908f9257931d3022ab6890bdc53ea73cab6f8bfb3a46cc561380cb668617366b0fc9c9e5d32cbc651866a630a8c5f
-
Filesize
1KB
MD5e75f533a485a8458809f79e9b5c5f720
SHA1e759bf747babeca50c9f8a4594379b04db6bf1dd
SHA25658f446e542d142c5d649edc2b954deb185b6b975ec852fb97421f6a727ba2e79
SHA512a036e18f93ed914245154e1fcceeb98c2b0be61cb3d5fe432178dd5cb2c8141021e69552e0d70845595ad22162eee84d1fbb9581ea79e55ed1ad3f7c0ac5dd04
-
Filesize
2KB
MD569abbcb0df06b8993cd582c2a02876a4
SHA1db3848e7bd0c3a5e25acf8a635acc1496c649567
SHA2566f9c299bcfbb2e95ebf2a5c8c029fed08b634aaa783737dfe8067ba484ba14d5
SHA5120bb1233fe95b5a4d10007fc99c7d05625d58e298c038809910bb021457b5ba92e09141ed55cf92173efc4a8e51ae79f9b3f111d9e4faf5b27d3abf3d02137ad3
-
Filesize
72KB
MD5835b764e6bcfcb92b522bde74fb4db57
SHA1611c5d3701bdd55c1e8668bd2b6f482b8cb1a872
SHA256c49bb59adb8b8c42447513928d224b0a543e4ba157e1222b29f34f4b209d30a9
SHA512aa4fcc3c95157cd908d757ec193d341138519800b16ba75150ba0501de18b1f0c0a18352cfe6f3bd21f68522c47b6dcc07916bd8a3caf2fffbb0aef1755f14d3
-
Filesize
2KB
MD53d4a074fd698190bc8a598a10c670b9f
SHA15aee500f308ee0dbf9d40c4509d43ed08cfac234
SHA256307417b8dcc297d0bd5b03e35f6247a642e67980fcbfda8ecce7c0621ac73670
SHA512e1c43216c80967e8bab3b05c14e325406911feb69e20a86d140d9cf926dabf08bf0ec773b8280a547217a3e1cebad6f9d44d1edb079bcdabb10e8ee77b2c4871
-
Filesize
4KB
MD53c2915cff0b4ea32f42b81b79de61bcf
SHA14bc83b2d8382d752f45a0787c522125a385dd016
SHA25635594405348c8c95217b6271eb18323b65c62c63daa69d0eb5a16dbbae517007
SHA5123530b45dc4b325d7fac1a4836aeed11a9de3e4d6345256cbe754b772b1b8dbba8da3a32e490208eaeb519bd8bd07124ad5b810831e3a53926c23ac60f50f5d8c
-
Filesize
1KB
MD532397bcbbd615dbe8f6e4a4ab44bdfc5
SHA150d9ea221ccb0b58d01ddb25b8e62a76d7803613
SHA2564348f56df3aaf5887cdc9a95097e718188c1f51da000c241045941d773b87dea
SHA5121a0054b7151e6fd54713bf07f9cc07cfe2cb74328947eb2bdc15ee05498a871ccf488da558cd919d2f61a93a74dd58391052e6693af7b2e8de1a73f46e11027b
-
Filesize
2KB
MD5600fa43de70b1f8a4e9d62593e48ab40
SHA1e42f87007af7fe6d771b87f0e2c130293887539b
SHA256921c3125320aeb4006e3038cd3a5dac2a512949cf21697500e09a265455db6a8
SHA5126bdc564f6680f2241f14d358428f5910512231c4f1c46425e30afda376fb7560461bd692b3fd8bcdf69641d02866d2edf499abbe6aaddd811b5d7a66c79978a6
-
Filesize
5KB
MD516450d1cded0ebc1ef7d69a06bd7b13c
SHA159ba4ce4f120bf4b0c1963ad2ba4c3a3b55fa9a2
SHA2561e92dde92ef804d824fa685d87062160e3ce1fc9093ccbc273f59ffb8ffa9acd
SHA5124f486fe7dbd9bf5506cd0418e16288baa6f33ffecea9b555e7b99210c6741c79bfc139a9d3ce3738a6f8cb226388b981d74b0f7f723cff6fc9b11a5566e2df6f
-
Filesize
9KB
MD58f4291fe97626951ecb4f237a1ae5912
SHA1381748be332e50868b87e0c737e0e705abca803e
SHA256875b00686bc24d2b406da4e24636c823e03accd80271f0798ad824c927328a95
SHA512cd32439f45ecd86088857bd76070933c2120b6ffcb437218d3b06e5dfe5d0fef74e6ff83771c41ca4b3b93254fff29246d866bc898ede312fb8a087ada64b5c8
-
Filesize
364KB
MD5ad8a7f34fb37f50e0b1761bc3be8b9b7
SHA1ac59ca9c34e1ab3ec6dc733fee7fb68a0c5cd742
SHA2565e0ebc8386d51389618ce7d1dd59fb34a55eaf9b78960559c2436b0b43c22194
SHA5121a2d4052704829576b8930954180f9582ebdf2a986a3f47aacca93f4617736aeffbc8c5a38c9b1991e5ccc44c6fe770c84d36e34795d3398d303e49b15cda59b
-
Filesize
6KB
MD558fbdc798785dd6a1ec0e52da8626ee7
SHA1cc19c6e1501744860f536f46c3368a9ee6cb1ed9
SHA256ef9084acbfa3b4c4394f657650f15c7fc6fea975730b0c13c00f45cfcbf5f25b
SHA5126d69b88fa20c19c38098cbdb7b94715c76f50b21e6754d5d36bc05f4220911cb07662c7a62e3000f55dbbc387a3256da4a3c81a5e4ce40e7759c0f2c58b32766
-
Filesize
289KB
MD5f3736134d02f1d844d8b8c406f63492e
SHA19466662f7ffc71d25e0f5f01d9048c9eb4ff070b
SHA256fd4ffeee0c1b703dc4c1fd85791b3936959b53bfde87504f1b761675f42d15df
SHA51274c4156d719eee789e31c2348134e4baf7d71aa7d41c998146891969780a7af9959285f2603c029d48e54123c906938fb7f83ad9dc294c7131ae9afcfabb1c72
-
Filesize
1KB
MD5e101db975f8d322c120621e3bcebc01a
SHA16f2e66c074bc2c721ea72434a2085e1ad1f536b5
SHA25650b078cf66de140d618a3b66f6916b65ec21c9b8ddefe69128c8a564a147790a
SHA512ab9d8fa018572d10b45ef43928808eb05ef525dcc4f86c7d0fecdccdc9a69fc9e5bb01c7b419d3bec4a9024a727255822465e90f8bea2918c54a68f08a63ac79
-
Filesize
262B
MD55e6c80c483958fb1885f515abb9fe180
SHA1683131d23879874e48552b0e9d0d827c2c62e73d
SHA256762201cab759ffc3fba2e0f43c06d8035856288b6806a51995e9a1328073add5
SHA512a52ce5a6c9f81dd68b1d22d13c1a0faff017c5949f9b1df1bf2f9bdac5de2f135639874276baacd99c89e4a3ee82d6fe3dba8c79a278465846a740c68c21429d
-
Filesize
32KB
MD5f22e582214c38e3fdaa5226f7fa99534
SHA15c5b1471ae4665e3eef2917d0e005d7e204388fd
SHA25617d9f01470e29a70a18310c48238c5f891966eda0089719a48443577c13928a7
SHA51251f68ecedc9c971ca7976d6a7027a62e0138f08685d921cce14eb321fac9d6de3fc2278e8da4c5a67040f24f1de933f9857daa3ba3458eea5e88772d0309b22b
-
Filesize
892KB
MD596b8ea717e7e47b462c85ef6a8bccc39
SHA19f8b129dff68fd16f3ccf1b87f75c1cc7a008ee6
SHA256cd372ac75b5728d744f24269cdded3af5c7ba24340281443ae02a96eb4114ad8
SHA512dc43e68a7607d00301441e05ea8668a24499ff0d48645cc957eb1bdd3182e538a66b930db6fe24aa8462b55c3c2ff74696cfbfc020c8e5f170b1727330616bc6
-
Filesize
1KB
MD5969d9ada37c2fd6a4621dbec7c179ea5
SHA1c23086d403e096890366bea89fb1f1ef295c719d
SHA256003354c81642fd6ca447ae471f9b6b566354357dfe6c4f72e7dc19238d056532
SHA5121d16f2f52964154148f9205055746e016c462b4f7e70b4f9252dfe4c8eea34a140620297b1b31ca5a0bd08bb328042eaf5915e6d9dd39020fc010e3a751584dd
-
Filesize
2KB
MD51cfde13bbde6080e3ffe4fcb639e666a
SHA1a3f1f06f436842be539fda4eef41aa95e061fc7c
SHA256663ffa5089006de50c7f263076e9dc9d1187d693fec0b8b23f0ac480250da674
SHA5124c0a8325fc01478047180c51332c65ab2b6c5b62b9aefb7e4d20f70e6bb25f2b2747da2b33555a7521f4ff8fa5be3b807a4edff59c9873c4d577117c6dcc7908
-
Filesize
260B
MD5223d63326c6c0a76c49573078be07478
SHA1be6851b5540e950051a6dc22bea033c354bdc697
SHA256e70cf6f261ad00f858d5d94335957c56e14dbb8bfafdf8131c1c8992e2f00068
SHA5123c185ba2fbcae1ea68128bd0d804929cda6364f25d8d748b08fbf02aa754410e0641f713324d30e95614eeb84d9697de8b6602deabc8447b8a28cb5db1b82c46
-
Filesize
657KB
MD5abb8120caed4b1a668938298a747725d
SHA1c361882c950d4c9ec9270553c08f530aecdc3c83
SHA256b1a36cfa9fe33c0748a210bb15bb87b1ce51050943282f43e90d17384ba60158
SHA51247c9bc017720f463bf32b18ecc82bd8d891f91c2ec6760d957e15a1fc1280b214c68a103daccbfe04e4738f73aa1ab51d4b341dce6ab7b2a6790e0f132762a77
-
Filesize
363KB
MD51a420eb3537638d3578344fa4c8f3d35
SHA1e742c914821836bc28df0897acab499cac055ec3
SHA256432d6361ef0432364354960d342e1339ae6e532d9efe639b4a01d5b3dab08a1e
SHA512aa0760c2ac07ef5836abbf77e6e02c7bf9570a5c894434f11ba83700bb597e247d6c6a29c94ce7df4538261c1608171a6b57bbe306cafa2fd8bac1279ee87371
-
Filesize
175KB
MD58f55946ceb0dbb6e48b5024e28bc4df8
SHA1cedc65251b12b0cdd0066fc84f853887bef9c1a8
SHA256eecac92e2e74163d6fb28c26bf83106533f6d86e9531f847507ccc9a83e30039
SHA512ab7b80e5d69c7a2aea1f8a20e69e846bd21c48ad462ac98579542b8685f47b9607e6c20996f39d250b03a482fbef38cb58d959c4a3eaa94872ca0de9d4e78e0f
-
Filesize
251B
MD5da1a886b0cebdfe9ba5c3059ded27860
SHA1603643444d4fd57120a58771a627ef261bd39ad8
SHA25634e1b84bf173e0edffffa74bfd1709c19f721b40bcbfc73f4965272a59c1ad10
SHA5124e30af4ee921623a05409599d42b87830481354afd1102c1ce88ac55ad3ccecbf35f34393dd10c25e26b2b66ef12e5d1999b9e8ee725733c01d57723428234d8
-
Filesize
259B
MD5fd074c174f49d2335ee2e93a33d9d187
SHA12d904a201fef44dbd74cfeaa92b106c3372f004a
SHA256cdfcbe6fdb88d4b7ecbe27c6997f4578208e1ef619797dcf801d71c979763758
SHA5122a57ca4e8399fcfd00096399d380f67a8d3e46fcdbbecc8230791e3b74ba31afe43c208e5c29ba1467d5da57cf21f6ba56fc26e3022ab54fee9fbbce2dd942d9
-
Filesize
1KB
MD582bb12d15386818adaf82e69b158f92e
SHA1b2c37073ccb1ae1076236cb97534fd9080fe7b12
SHA2561095313631fb37f2743c0f607a6c661d14c10127a5399d76a099442de57ee659
SHA51290d4d474eb3f2098cd3b4c624bc84d6b1635aae2a181a8d9419047e52eaced5c36dbf419274e4c00828928f83f94ec56e8f940c61d43c18c583ecae4291f6792
-
Filesize
553KB
MD54730849179e6731705b78acb8df622b2
SHA10d8ffb30fae0fd61f5f324cef274ba1afeff977a
SHA256410818465199a3412b40e29139b1b7c9f651940fbc685ff3519853a7b02ac85c
SHA51236b3a55d93e2312cc03a118ecdabe9443311d8a70feac48ad07259b165272ee06039dc616e727902de08aab1579944db06409a89218749476e2a4f48e31350e6
-
Filesize
289B
MD5606a1def0909e9ee67459718d86f53d8
SHA1d3c344e153e10174c2616294a730c8bffb7ab988
SHA256dfe42d726b4085f740676eab77f74e41bc7b92f7863f3355d459f297abf6c2ff
SHA512cec3053049682b3cde03fccbd7339f0225fc0c31f093ad3888b6f92658b5c04ca4dd0e9075c727ef829c6f540a6d3f6617ba70f30ae5e1caa2425b079ccfd2ed
-
Filesize
939KB
MD5f46e3ad9469c19d7070e9cb20be37d70
SHA13bc7f16baf887e14d555cc791ff588f9403781c3
SHA256f4f070c116efca6b668131b5ce31b8bccf6701d55d6e444167b33eb2710db493
SHA512135ae80cd3611179d94a5456cb2d9c220e783512c28609e3619e6d741b342e183c67eb272e4ff183f2bb3756b57d919efa41b0847e2fe234cab4c6e2512f1d11
-
Filesize
270B
MD54100b9b410f57ed7ee755899c30da9b4
SHA19642ab1ac530ec8a9d62b2a24c35196d65a91469
SHA25678c758832f7a571e39ce7283ea73b4034eea649abc5f79d3ebdb62e01ca2f978
SHA5123b4d4682e8f38cbdb243a5e401566e43576e4023b796b3987d778c461f4b1f53c2535324092f09738da753643ee7b0739a7f91644d465a7dad984474a71c2d15
-
Filesize
131KB
MD5b4dbba1a2790bf88a4730cfcb77caccf
SHA1add20ae7b12a913f54d484dc27da5c69e39b5548
SHA256f070a0553f52ce58b521bae7d563933f7e07813f9cab1d1f4534d65dfdacae26
SHA5125a61043134c175c9c6a8dedbcd41d1c734c8ca9f1d94504b13e8730f31cd3747ee20aea5e37eadc617d94dffc39f5b0daf34c6af61092ce729c570a3a3a785de
-
Filesize
415KB
MD59e99afd698d3e912a1b4dbf8db98d49d
SHA127d5a4a46a044aab8d918924b9d52a2c07515b4b
SHA256c0b203e5c131a088a6bcf393e7637857ba6220369644e3ee2f82a05b77f69a11
SHA512c266f4c4046f1357408ba0437aa39d0aff9da3749b4310cfda8f5aa9d977bb03486953f7b9cb17893dea0d38b60fdd294092b401b3e045ff54d15172c495324d
-
Filesize
252B
MD5cd39389b3f6c3996427c2dedb8e623bc
SHA141be69d742fecc7eecc1f00d6f864b7dd6ea8f39
SHA256445062a6838eca61e35927166ec8a3586cbec52afdab10532c3a0962732c0d34
SHA512dc01e2cc95c589e5cf3d17c0f3f613004bc76f37995a71eb895879774d53d2bf5d34197867b8191d29618e173fe4bfda07ca6b76f31232893a31cd166f0e3fe9
-
Filesize
262B
MD53034f86bd13e60a3bbb31c910340641e
SHA14cc0709a7bd288cbe79575d781b8f95e45a78b78
SHA256d165ae62cef63158acd936879d03d012bbd6300a9bd4e17cdab8e15d6567bb2c
SHA5127cd699ce7949a7a441806a29e70c4959bbc749a3990e1cb01bd7b38c1cded718d8968a251c9247728782cb491fc2c02a5dd498b0e8dbb407e8e26966db9b4b27
-
Filesize
75KB
MD540d42b2ed9d7b6afc8988e8c8173bfa1
SHA1d8664672b08efad145cab169df8a885792ad0321
SHA256db061b7918e55af7d1313affde9e04b2ce4218cbe4094f2c3dddbc1f973107b7
SHA51201044d445a92097c8b40387f8c3ced63ec3be5701aba0ea04e28916a1adb1b9d2a7c98e15ec4d251a5c8ac310de4e5636716e39e9f3f9087d8b65d59b98de097
-
Filesize
739KB
MD53d7dd5d205f30c3cafe3471f4580af21
SHA1fedc2c1ca8c5f87d9c6fd940d5a5dec7a69cca3f
SHA256d785b1c10efea8de67a0097b1573ccf85c79b53be99eac90f4b668a9b1f3fdb9
SHA512aa6c98dde10d30f5dc9777de35c432e4e6d7b2b69b224e5fac586f9b3ac7882afdd840c9d21fefa0dd9edb7a4450025a361447ebb0a0a0693a01b4748282e76c
-
Filesize
6KB
MD507aa4f6aabe9664add734ae29a8b63ef
SHA12955ed19c38e66f25fc0956be49df1d5de8af67f
SHA2561cc5c68c3ca781ef71296fed6e2af9e5869bd21566429bb0fbe7ab3517f745b1
SHA512c7433e1b3598208a726c43c9b3c4c5dd813196ef486aaac1810674cb8229060961c82121d02d6757ead4ada60108d30dba7ac26bab6b99cb220c896d7f6361f9
-
Filesize
22KB
MD55219dd27d741e794138aa4610f763683
SHA133cdf8001577539797a4aec3870c10404890bf4b
SHA25628cb6e3662487ab3a5b72f08e1f0eb5b7ad18d2a8187bf05a6ae86f1c6738ea7
SHA512b4dd22ce8e47fdb9cf9d76dce85fe195e098178c4b683645f9ab82e3269673a5a39fc556c6f1b99ab386cdbfeade9633180f25222e527685977bd1c9ce948b80
-
Filesize
307B
MD52189f959de21adb271892ded21874579
SHA1c2f35d57056d5c56a373dc958f66e032c444eeb0
SHA25683cb05c1852f4e19bda3ec0c5f605b05e55b061c7d66d247838bd9417b678de9
SHA512378b75a490bc9fdc829803218a979d0b2121a311e22de82315313f8c4f8d66591c2ebaab56b482ba77c13bd4f8c8da068cfeccd75321890db7ef98ded9139ddb
-
Filesize
3KB
MD5ff2d9eda943fe397629c7ab7b819beb0
SHA1f03e39aaf1432a2e3e67190145071d6bc6bb4a6e
SHA256afeb494d81f78db66bcc7b1223643c85b33d7a88f90b918e0401225b83e906c2
SHA5126e12841a065bea893ddb1f583b48a84e7c07ce33bb4339a3703c3f3202036dc1a159c5ae1fa13c6b4d0d1fb7a1229c67529e41c14b195113e963ea2ae99d9c90
-
Filesize
47KB
MD5258497fa87c0b1fb5cdfcf61b04cf8df
SHA10a982c59da3e4e36d5f94a123502263265b2f372
SHA256d0916daaa19b31383f9b894ae938716a365411661a9d3e4dd72d727a189bdbb1
SHA512dfbd5d8592c425b68c44d9c15aa70c0c3d5d634d52ba044fa1b8dae83eec76b4bd6c09b4c004f4ebec80417977414ea20c588c78c1b11f4d13ea66ad3cff5c58
-
Filesize
269B
MD5d53d3ff1ff7d59a1e9b28862db485a7d
SHA12ffc0b58c8557b554f6f7c9dd82aff3f9eaf86eb
SHA25611e896e1421715aa56fbe2cb13e6f371a11a3e1b4261b3af90557f486da68b07
SHA5125181bed047db3bfdb530847d093c37b879e6f4aa3a7e8b288b63d9053709e7dc761088345e8ec3dab63754f4ac21d4c948d37ba3047a5b96155ecec2913515c6
-
Filesize
2KB
MD50fc46d6577249aecc8eecad6a52b1e55
SHA19dc0b360add15f807fcf891d05e6ea86fc867c0f
SHA2562a23013217713b6925287e1819bf4117d1867af3e6872bb3a4afe039c5cf1137
SHA5126509ca261edef8e30798073609ce27c648e5d4803119db2ce96424245044bc7e5cb57efb1019fe3074076478f899c3d9966289ab200d80d8dd4e8bae4266dd6d
-
Filesize
2KB
MD521d47d7c6e7542dc76bdad4afbaa948d
SHA13e7c727de768f23dee55e604c34ec5f8bea59aa0
SHA256f1a66eeede40cbf0fc3d0ef944db832f94c246b932102c434c9ad6e0351a3e54
SHA512d8bc726d12268a32002ba2d31252e2fa4a7360ef9ad1485dc9af0871c9a787fc3bc9f46301a2b43363254483d1420e7ea44049d9b0a1c6133ff95125618bf77b
-
Filesize
198KB
MD59407014b39ccfd32b544ef8f0847852e
SHA1217890e998f29fbfaabc8bb7dfd38541bce067c3
SHA256a12ddd5216f58b4c99e10caee4ab9192c894765ba04cf575d4ebbf95c73ae026
SHA5126606802a803227b87ae262837424dfa52fb5bd86caad4c709a4db5ccfb54ec2069ed7545534fa2d3d4fcdd0af14dab05bf77631930bf751178a2bcafb27ad946
-
Filesize
134KB
MD507e5c95e8eb09b0d808e2af632ac3e1b
SHA1dc97625a3a8866ef2e437afd30a55b79593750e7
SHA25644b7088b5e3704820ccd5cc8b03931042f8ae0e73207eedec13f5d1b262cf5d9
SHA512f31f356769e9035935ddc9142310593f4ae0d4e20999fd89e984c8a86e6473983ec6f453b7f2cb4a9e89c2ffb0f01e86e95254236baa539784d1075f6659fcdd
-
Filesize
308B
MD57d95e476205253148f1e2a27cd187426
SHA1c2478f1ba5f9e02413e122bd34bc01de3de5e12b
SHA256f278e7c71a6856b0e6a821a2034167418aef848627f4e5c576fa77061b0e97ce
SHA51222e0c18dbe8ddb576acd8d12cad5ef4313ee1090599b573db785b9d8dfc43ed01c975b8286e7470e4852c003d208cf198a3c63b5bee48e3e242d3fc5af82836b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize9KB
MD5ed4dcf0aee217467b1508baaf936e113
SHA15de0ae0dc3ccc11d49ae537f4f456ee8e41764cd
SHA25640a0f860bfb754985276880381712b51a75a7e24e629858a57d93491c98d27a9
SHA512ba167f0267b5a0278130cf9fc7709e0159be38781bb322b380cac976d94446f35dea4b5e215355e542cf5a411b2a874981848bf0defa77a9389495139f3281da
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize9KB
MD5de6bfe1b6f99aed52554709457201215
SHA11faa8cb713ba4c3631b812a279bf89cee5897d49
SHA2567c9d3e53656e24e2d6ae4c29a1de4e638574937db2f966c603fdfb62f0430ce1
SHA512d494ad756e8dd84346afd8cdfff8df4a210737e0445439dcf105ab9423f27c0ee002df1cf0b879b247157bf3962c6e615678ad5a50e692e00ba16b62eb77b2ec
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize12KB
MD5093a442d6dbf3d454b22969bd4d846fe
SHA176f077228b7c8783ff5bf4e4cd269b6069191b8a
SHA256f941c2ace50df9fc6640d58aa8e8890e03b7c550feb1f96f3a21056eaf8895d4
SHA51295854149914145a1b7a9faf5bf88fd6d95d2d4d9bb657f64676ce1cbb07400e7f61ee37473d86a4f8af5d4e370cd0f67ca2d9bde641c3d7886f6e55ae1c27552
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize18KB
MD5e080cafe7bd76b92b02e64b23a0827ee
SHA13b5ac43fc13b987317e91c12982c35c7d989006c
SHA256d5cf9227dd54c38ad459411b9b6d5b491d16d69831ab618c4e210cacffc58c13
SHA512eaca08244f61ea77c1173c607dae9174587f115f4c12752b7dfee5d7ea79b481e93449cfd54121f16b3cb3674dfd9e80abfefe6bb07d75326691029b1c6a89f6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize18KB
MD534e853c9a2dc5a3de5579c4b0bff48e9
SHA1fc85ea31532a2462ba7607969f6ecf188645682c
SHA25607514e553744170cc722ed50a6b530929bbc7c29a52bf28bda2d312bd5414293
SHA51275d98dfa705840795180c6d98e4bc72430479c6938f2df68d4c58c6020d89059f27850a78fb67635105185c2d15568664ac06b5633f39b23ec3ffecd404c2bb4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize12KB
MD592541970101028257ad81c1e42944ad1
SHA10c39167fd66ac643fc24c9fed2bf90c4fe771731
SHA256e901419a2dae87d80c682c0cb0fd90cee1ae186059cc91610db65842e8f0cf0a
SHA512004e972e5d98490113cd48f7990ea321e3c1d3488885070a0751ded9df9249890241500123e34b0245965c6bdd8acfb2d050a232232b15145e7177343db1500c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize14KB
MD54c934c8f49fbadffc9416c85213074aa
SHA169d8cf57729f6d1a84603834954d8e1fc75006ea
SHA25690ce509e5949194dad30f7b93fb5e92683d469555f3eb829fde848a511e3c7f3
SHA512419c7d6fbfb62acb4a4df7616986ef8eefe5b989e14b7d039da5bc99703682b856300992f6bd83404064b403a1cefcdc560ac68a947106aae2f25d9d14e1d3c1
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize19KB
MD59bf99338b0ecb29f1130c2a020370817
SHA12ab07816059ec10a28e13cdd823811a468c348ee
SHA25617dcc3e78cdb1e9376b00dda83e3ee837f15b8df3b51b1ed98194acd6eb98f9e
SHA512448c237e5181e07a41a01637f67da2be02df1f366408fcfd3e4021c1a2ff2203a72a4783c1be7c7b9e48743a430854c2979263ab94a60fb0f6de5fbc4ef1bb03
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize13KB
MD5b521dc4f48cd12373169e57bb11b9e2b
SHA1aee1b7e97a16d3a124d21382979f9c8b58c01168
SHA25633cebc7a2397d642e9d3e7d751b18fcdfb6843c627d51077a9f359d863828835
SHA5120c7f4ea54aa1b512c9efd4a6c309d8dea9e2b37fed24d9ab8b57bfc930dcd9ce260cc763b828e0d8b330d5bf03de7fabb8d951986614151e0d772d69a4bf90c7
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize13KB
MD591396b5848bd19bde5592ad303dbf9a8
SHA1d6cb46b97c179b65637a65cc1e41ffee529c2bd8
SHA256da973b5ad3089662f4215e9bc1717c94c75bcb095ba5860b2e2abe463342121b
SHA5126a381edb1908d8f5ae5c5604379dea5cdb3d3c3734812190986f6eb5f2dd7ef93b97768febd7120b65e4227a14a49deb4cac744ecc45cf1725475947a3bef7d6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.eneba.com_0.indexeddb.leveldb\MANIFEST-000001
Filesize23B
MD53fd11ff447c1ee23538dc4d9724427a3
SHA11335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA51210a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
-
Filesize
6KB
MD5cb167bf261b9181db442307b416ed04b
SHA106391284cd17b9f845f084baa2a3106e12f1137a
SHA256a48068fc099a9f00f4afff36fba800fa6e45bd1a8efaa31e1b807629ae56060c
SHA512050e3378af75d72835f42ed3f8750b483857bdad34e84b5ded8e45ecda4d9edfcfa27b7a758a478002d7480b1dbaefeeb077a2169a5be1f775a067aed9ef9163
-
Filesize
17KB
MD59e6defb233074dfe282a87a8a74a162f
SHA1b52d70adb59eb128bbc5842c94a6e7ff20fd8162
SHA256922fd2656a788347b144cad1eb34e420994bb15dddc7701cd1f50c598f7139fc
SHA51237d73c4696bf487a915abd145964c149c64f432bebc7dd9685ae639415a5a21697643506702af7c2cd3e64505fe3a36f5f6bfb070106cd243b522cc547c679f4
-
Filesize
27KB
MD55a48c65a27cd79934eb6148935df3765
SHA1feafcf9451f6beaa0fe614ed9d9c39dbdd9d70b3
SHA25658fb112f9a5eac1f787053ab2a48f9bc22fc393e21f0beaa1b2f19e322ca89f5
SHA51232a1a26d33e213b632b476fc38bcace781fe70dce94979ee2cbd94d9111445f1b55f3a377f6163f86b603a1ba53e1374ef0108d1b4d2e24170d3dbf9a55a3812
-
Filesize
27KB
MD51f110717498e15d977c318f18dd414e4
SHA1a684be95976a96f35adefbce253001b268420e6b
SHA256d24431a5b758e2e62f24f86428fe14a64e6d972e072a7bab32b83c170d75b9cc
SHA5121ea17fd60b327b0580bb5b1bf22c9b0737ffcceef64775df9571b0bfaa1cb620133249394971febeb6d47cbe9e6cb4ad0cbd1a7aff38c41ffd3d9e49e4653300
-
Filesize
25KB
MD57fbf4409832371485246069ebf51d587
SHA1c9dcc788be54a33b6e5ddac94aa1feebaafe1417
SHA25658a77547bb1677859f1291d7e61270c55089285dd8302db2a06bfd95d6508e7a
SHA512eab30a4c91f83ff08363be8fc501c2059a2c25fce8fa2cc4b2ce347e1506e067ed39c146a3a772d6e5e4a656d0a6ae0412a1451ca81b77d679da1515f4d95929
-
Filesize
28KB
MD5bcecef005e9ddd87725ab21d91439e30
SHA114f310eeadb75df5187be7bb678a10ba78ecebad
SHA2561fbf785d37f010326305aa353786458bf939f200b65a7d25a3abee93e54866c6
SHA51295a9f9b1e649a63f46d9636e8a615fb365c8472befe3a891a083600d9062ad0d809479f1f8be7641218633568dc0d5468c8241cb1927035ac4e3285a513ef07f
-
Filesize
21KB
MD5a0687f3a6e7422b37a58af78e8028c7d
SHA13157a85ad65d4f3bc3a75e742872bfa45adb919f
SHA256c4cc0d4763b23a0526c3fd1cc7bb13e70cd02cc99e90148eeef33cc647bf2ab9
SHA51216bde797aadc72c4f489f6535e97b685d6141fa434a18deb22e6bcd54424636b4e6e0f86abe3db9f44e4961f03b8c04d5c9144cdbd5a4d515440dd52c810f92f
-
Filesize
7KB
MD5b8f5dcbedd247001ed03d504da954e7b
SHA11d0d0d6ba4bd1d70793de055c94450f8e94bfc06
SHA25632dba0762d7b629e4bad92b58cfb9ea9d426916a27ee620fd8302802d9708f22
SHA51239eab7373fbf7d9da40ded4858d40e508eb9693510b592ca389f154114ffe3f1f7d409d97090e1a01d7eadc3359589d132afe5386d1a1153478dd445dfa8b107
-
Filesize
12KB
MD5f5de3834fefa362f5a4f8d21f5ea1c4f
SHA118502ec104d1c903c17000fcdd3930492db55cd9
SHA256c013b614b3fe2edcd8bf64a8cb45d6a70709d106cd2e8ae6ac2e1df1084b10cf
SHA5122c2f2962352e044b726813673f9c14b357c0c9f2bfcc8e8039fcb6e43920181ccbfa1d8af9936c541818305f8fd0b25e4dfc9ad5ad49da9efd0d7301e8ac3689
-
Filesize
21KB
MD58b049a1b09d24f57565ce0642883e246
SHA195f0666ed9a101c79da27f729bd9365e1400ab0a
SHA256afda788a382124f3cbfd2725edee9ba323fb1558f97772635caeba8693731412
SHA512a73a16a807afe0de487a92abfbf06bb26c2697dfedb1b21d99ef4211c5b2cd031e5ea05a328c07e354cbb37aa2c8aac3136e476da2f910d2150e592066575d28
-
Filesize
22KB
MD5c2de9bccb56a5c8636cbdf3ce1aa4037
SHA1b7ecd30b47702704d7b8521f1b40feb7073bc78c
SHA256728b1506ba3f60da9bdc25c2e55d02c17c8dd6e8158fb836ae3411fcc9fe2ef3
SHA5123345c21b1bd1004afc26c662b9757803aab6082200fb7dd2eb3b71c4e97ee9cc4ff190105a5b608bbbeb9fecae94f04e2189c0503ccbd616c299921b3c831b5e
-
Filesize
23KB
MD59c98940f2cd43c337c44d5de261d80d4
SHA1dfc3a59c345ced8ec6b63fca59e0670295929e8d
SHA256281ab8bc78744165845bdd7104948994efa4687d53687bb2c64c3943236d7dbe
SHA512a77ef979392d8590c57ce2e4cb31c3a37af846a2b067a06ab60aed14f6a43d951d834dc31406ef1d99cb121493c5c8656847fa11f3c2b369219a5a9f4514ff2f
-
Filesize
25KB
MD54c1d0739d17ffc06c711c1a234aee1a1
SHA1b244f5bcb36ea8ecc5318be9bd6f022366ae286f
SHA2569875c0fd3ae695838d9ba4e6f2df8b41f695259dda97fa96f12b2d0e534583d8
SHA51295f283b569e10fd6be069bd2c8d13a6585a141419974a6717b3b0c30e4b950ab04d214708cf5506a93a5eb2791c504c5122304a1d1e7b1dff6db55ccb7e93c4f
-
Filesize
25KB
MD5560fdaf5d26384edd11cd657f4d36c5b
SHA13ab074ba23f85be510aefcd8b0cf3237cbf5de6c
SHA2560816edfd04f027cb8d5c2396893055c34169434fab466b7a0ed02c1db9ef66d0
SHA512b3d86d842ca9a74c23b9957478644455f7f7b4c47786e6d93542187d098ba06eac857a7c0cd0919d02e9a2cf112e2f26a4b895866f9b2960d43751e80ee46832
-
Filesize
26KB
MD5929e2ee398ce17caf33d1b2e86a60967
SHA106e4b0982b9252e03bb1433ded25f7b187713c21
SHA25615e294dc55f1c7e256b06b4c174750d695463fa61cc80b928a176f5abef1ef61
SHA5121b88917b2cd7bb2918b96cad7813b616aee5616f0c6e2c01ad8c900c20b13b7f255cce1a70a57d71c6ca0e02d7d8334eb293675dcf9a62dd83d2b2d467cae93e
-
Filesize
27KB
MD587d972771a1cd7fdb6f8be2d0ebc58e1
SHA125f14006c80963e41b77db2b3cf885ee8f0d32aa
SHA25640240269fc0daeff00313de51d2da5277d22b07e0cdedfa09a96da6173bcace4
SHA51277b97909efae3ea0fe8e2004b18707dc4d8d6529f8597b46ceb38edd557b05a3ce9adec9e41c314da0939f1b5f9491ccb57c67f159004a6ece827583553bc1f5
-
Filesize
29KB
MD58687b2d7339350baba9bdd0cfa75a2eb
SHA1ed03a5226932261b0cf6cb59d0a1cdade54f3d73
SHA25670302f7cda06b15abf7e15a3322becb91b9fe87d825b60c3596831f0cd306fab
SHA512235ca7f00e391a4e4f502045f375a7845b6099faffadf5a4189853ea55b9749823f96f0b34ce4a2232699c34602c2664c0d2fd9e97d3ac59e33c49de33954fd1
-
Filesize
29KB
MD59f98cee3c98d59f94d4323f030e912c7
SHA1e36cf7fd8bf5da714eeb0fa52b688202d54b91c3
SHA256f3c9c7bda69720b9805920e98f7dbc71b69f62665c22168e6263e1d468f9e07c
SHA512f663fdcae1fb471d7028424a88b37d383ce9e86819099d17bb34ea98c0b3d2bfaadf22835ce89d49f36198bd6fefa6b0a5df1bb51f3ae9a5378a935a44c071df
-
Filesize
5KB
MD593fad30bfbb4fd05f37dd0b76dee574e
SHA12f2ffcf33037dabaf8b4f487cbfab05868fbb4b4
SHA256a40703c6796c47a97710f18df805f1c0a6742432d78f6e76ad912c2cd5ef9313
SHA5123f8e033ae41dbc22d0c6e645c06641ed39d669205ee00ecd3d6333ed5cb1274a4003639d3eb92b593f1025bfa5fe021389fd1e43383c55f112eab4858c675fb3
-
Filesize
6KB
MD54237e46c09debbb964bac31a5a1cb00a
SHA1beedbc5339a9670ed16ddb4d00db510d45fc4e96
SHA2560711bf16eaa2faaada95c7fc59b8ad39e0389aeea43599cc2d98214bfa8c3858
SHA51214a24c3649b34085142feab24ca6da781db663590b4ab3cd3fbc4837cc8dfb314102f14810c413591cb4b5cf1cdd820f775ddd39728487ff22c2a64b7a432dcd
-
Filesize
6KB
MD5490d360cea95b65de6698f3e1519e14b
SHA128cc2e158d0d2222a16d721bcc2fb24f774fc3b6
SHA2568f5245999d101e028e21ae263321d78765ee72a4ff842eaedabc2b05d1f7c3ea
SHA5124c4fcfc5142163e571489ad2f0ad1ee29cca1d49ea333d7208f41ebdb97d0cc895d2d87ebedaf8dbe1f1c43c5c377d917f6bdfe2ed36362a324bb50e2e4ab0ea
-
Filesize
24KB
MD542780d9769b535370dd2b27b8c08bbe2
SHA1fbcd0735bd100ebb2cee3285c242550b8360c276
SHA2567342ea1681b7ddf3a653591b8fa4f0979deab16481c65933bc777fe1ef33c241
SHA512b39bae30960d18737d0915c92e84cd2d7d6d6eb2eba76f4e2c6530e7d052c8876cbfd28e47266f974f0021febfb4edf40dbfa9da4797e6cb4d975450eff58c3d
-
Filesize
26KB
MD5054cfe1519f035221210e54536af3497
SHA15e767543db276899f5b545e6a6c386c5c833fc2d
SHA256b720ae0e4923dc59fc96159655545f83d38d212f69eaeeae8ddb196519da1142
SHA51214b59d2a39e7c008264160e51ebfc0528739535a13ac1c89016152e1fa9995b3d4fb45b9b5f2821941c248844df62743c4c7c4dcec71e62bdb39a6a198ecaa4e
-
Filesize
27KB
MD56728e2b958f2f8dc19efe894a68a9d56
SHA1d2ea3f879d41c72442615233ae4978b9e7cafde2
SHA25682a4733d189b39045aaed6c6660582c851bec3dcc14ad7051860667c6abcf06b
SHA512c4dc9e867dac93f73c929cd2adaca4dbb30b23327a334dfd855d77ad78fc9388d80ac1f96bdb62d6c41282b92187fc9ff73e42fc3695fe29ac25979ab7e2f622
-
Filesize
29KB
MD566875a1f42d08444e33641e46b87869d
SHA1c6c15c6f907c978ba57d306cbdc25ac8204e4659
SHA25617e22b0c2282add83658e59a38de8de127a4b91cb303d5332e08511a3bbd37c4
SHA512e7136a9a2afec38fadf015f07898bc38fbd1727269cf6f7affa5ab42be40084c098d0b6fbdfa5c9cde3fc0e6a913b0f34721551a6feede1416a5893ee3a0f930
-
Filesize
30KB
MD5dc981ef1022025a04b5b7fa49efa483c
SHA1f7dd7efdf6ea248decf6151fac187fa88f91ff4e
SHA2560eb500d84427dd1e71c9c83ccc3cfec8843752c59c7116add1121948850b3fef
SHA5129ffa2794da2d1dc4d756741614dd3df752558dbdc6e85a5007e94fce4789ba9d7da05f0e625e36c63f74d3248c3080fd865705279c93993cbedc70c7847e28b1
-
Filesize
29KB
MD503dbb5f73872622da264f153937739f2
SHA1e14a738b90cb8fceb7173b3deca1a92914889a2c
SHA256f892dc6e87f0fa81ed3508fe5de3c30c0097f8ea40f9cefca2ecfce7830e6d4a
SHA512c39e34c4780a7afcd4d85ba5bb40341c5b55cccf80ec5f399deb9167ea0eaf9674e8a4d437f8cb5b1ae475c86e711738d1b896556d1815a562905c295b1d2b57
-
Filesize
26KB
MD588b25a495a7f2fcdfa0c9eef7c314983
SHA1418e9fc1d9a68f70530eeecee01db0138093190e
SHA2560699de7e0c8954bf53464a4c8981f51b2208b9d7c4d354bab90606758fb19a64
SHA51213402a166ce7644d03d3ec4d539b628f57f110c4f48711947e9d402e1ee145996eff550224d70daf2978d9eb1f72f304760f6558a363f77a179533236c34c108
-
Filesize
26KB
MD51ec8f1340ceade6f89298638092b706f
SHA18b33f3e7bda31d47fb0704b24b7f36753167c23a
SHA25699fe75bdd8523f1ef4dd9a474cf5b5a593f705201c741852e67c89ce2b7f9451
SHA51250e014453c296fcce7c1b01841f97ded84194325632e2e74abff1e30fb5a70ec483816f275afc6097f2ace1376fdf6ac0f62d45b498e9bec208b5a8267ffca6a
-
Filesize
28KB
MD5294c5f9fcce8afa0cf8b070ae41752d7
SHA1766a53ab028043e63c05199f8b215a24e090c813
SHA2562b98c62e31857074074fb8d746fb9e059cea2c41c07f3aad02c7672d83444dbe
SHA5124f7d9cf91d89f142550fdcc70b7f38cb3114e21ba23f068e303d5ac66cf64c480d5ad14e7d18d817518e17a556a92d83cbc021a68ba7f87c2c4ed6458af9ce2b
-
Filesize
14KB
MD575ed8fb1c76f60937c2045cc7e0b4a4d
SHA1e1e7c3c0ac58699d9d05e98a992a574a116049e8
SHA256dff540838c3e90297095846db695bebfa277f745e2ddcdd14a798609027db668
SHA5124508ae44600aa8f13f2cacc310a7d83d868ab6bcd493d650aa8c574d34303a947288a77fab3ea3e9b7e6a25e5bf413ea054112a433382d251871e6c97dd80ee8
-
Filesize
28KB
MD548d3d69f9b525b14d893fe7ddbdcb919
SHA14b13a693b5d505397281bd3c7b9e1d0558546825
SHA25676eb67594eee0bcd7fdba1f88c7bfc5829f80ed3b535860457cd15191e2821d2
SHA5129e6a3be762c12a3cec5ca1a6cba63f136e54b0cd1e7e16e30db8b5d2a477ba5af7d512b4d75cbf631b40776af0f9802089d00d33631a4b755fdc67d923a27c11
-
Filesize
26KB
MD5d2b214086461f0630f5e9c9ad633bf49
SHA146d7e1e39e596d96080bfb3be40bfe6f7d83f9f0
SHA2568a4def2f9644e3548f312f76260a9ebf46a75d7b43a3f91a3ac8ff4418562edd
SHA512d9e59e064a6992ebb7239a48d515ae96dc3c684b9b4e03298769de92e0487c37b8e1cb4a6796a00bc3df57fdbab3b2c6dd97517328ce89e6b4991454d7b13c41
-
Filesize
27KB
MD505e349fb7213513cabd32ff1836ecf7a
SHA14ae7f3721c0bc38d728c50e0d16560d677a9731f
SHA25646795fe3e6590742aedcfe3615adb1ae82a887e073d8822d82eb787fd465035c
SHA51277ec34d231806454ea8273a199f297add7550c00118968da9440a6d38da0980e146720191aed3efd6986f19638e961792006afaf9d0448f318469a49583f3894
-
Filesize
6KB
MD552ac42f07fb200a769b81f13e63213fb
SHA1344205adb37777ce7b43c6605c31a8ce9a2ef484
SHA2560c320f03418cad3a9889de896c39e296bdba11498ab9d35240114b8eddfc007f
SHA512b88a3d45cd5db7518fe94e0ed704a52a9f03c3e3087bc03cf9c2f0e49745183b8c06f09caffe3a3753348b889d762eb1a81c613db22b50ee7847ced8be238287
-
Filesize
27KB
MD52ffc756a1ea9db488e3683f8a9091551
SHA126dc23f363cf237b88a8e048c8fe5931ab7782b3
SHA2561700d75776a7df9a62b57d6a78f216e4073c7561c9274030542df7c205f245ba
SHA51220df699517d7695d1f2d2e8e45e4f44577d111e4045952a152ac32cb29106eb52988d8db71cb651858adb64f5ec538088f048764e3c2e0f7c1f95245fd773d5c
-
Filesize
29KB
MD5d17ff4ef96a950d87d6ff283ff587322
SHA130c16f583064f5f7fcfb635664ccdf6c860b2f3e
SHA2568d72f7650191ddade29b9166059f6e77afa8eea3112bdc6795606739b79aa82d
SHA51290380df39b559a9579442c316afebe6383be8f23686289e8d7460e7f7116fa6ec15e24687fd687cb1b0f66cd1e81d3982ad5665c74281682e220f41b611aa1f4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt
Filesize26B
MD52892eee3e20e19a9ba77be6913508a54
SHA17c4ef82faa28393c739c517d706ac6919a8ffc49
SHA2564f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2
SHA512b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe629b50.TMP
Filesize90B
MD582a11370cf833a3abb804f54c5f5b8aa
SHA1a40f3057a6e971788e8151e7996e0bcd08d3e14b
SHA25697f543655e0ec739ad71d4c104f9e38c6650131b2b0ce6f56533f6f351364254
SHA5125b88430934ca8878968a3e57ab08b4e99dad9dc4545ade356b3d2ea4d1f66eb791cd65d86e8ba80a07840115cc3ae76cd8cfc2f9ca90a95222fdcc4f9096b309
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\951a8e07-46fc-400f-8be5-b4ecfc335520\index-dir\the-real-index
Filesize11KB
MD56ae80ee91ca483f38beb501b6b1b7e00
SHA1851ee9b6e3c1c10f7f009beeaf4fffcc6de89410
SHA25605210ea059bf6fb0e20b661de2605a6e2870716665f2879c3b3f5ea0a412a758
SHA512d1dbd07ee0b97b644c5a9373bf3da55546e238004062c4d018ee4ab36fb569f5cce242be953a3678a4a7ace4d18a60170f8b38675f22b60c5920e79f5ac7e7cb
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\951a8e07-46fc-400f-8be5-b4ecfc335520\index-dir\the-real-index~RFe65cef4.TMP
Filesize48B
MD5ebc2c97403fe6e583bbcf360dc2db309
SHA1db3ef3af61787f71fc98ba3d5cf12392703ee4f8
SHA25651a02c115d50c74a01a9fdef44e179670a9341422543d0f87fb746bd500178b5
SHA512aff8b1bf4c7915c46483be700efd91a206558ad768b8251202912d63a72ad4ba052de3b2cd49a6bcb94011593edb05c01e817884eca7836e8c7b8f7b72251238
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\af8e5ddd-06f3-4d4c-9351-cee9ac09c707\index-dir\the-real-index
Filesize72B
MD59536915dd7ad7c68c7b67ccd9c91f971
SHA1a43185bbcff3bb9463f4e1fc6d9a77de27911efc
SHA2568793c4a21d913f404a079db63b52f164d4f3a4685b5497693f20fed363e713d9
SHA5129725da287f12318eaf04b57ede6b41924f04e0443f19fef1ec8f70cfdebabe004922c8d2a84d6b32470a8c5592f5986c315850f72d20340c2488471e3ae68ed0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\af8e5ddd-06f3-4d4c-9351-cee9ac09c707\index-dir\the-real-index
Filesize72B
MD5bc74991341800e7c09b30771180a3c84
SHA1cb88bd312bad120baf42c79385880a543403c650
SHA2565e4c088b9efb1e780a186ecda2cefa7ad05b862f2f37a18720504a5b8693f589
SHA5129bab95c58a9eb025865ca4ddfdfa347c2229a78147177e9994c1ba0562fa461d813d1366577f56cce9d6573cf13532f25e5f1c61ce0dd73b1effa504bb329e79
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\af8e5ddd-06f3-4d4c-9351-cee9ac09c707\index-dir\the-real-index~RFe651902.TMP
Filesize48B
MD50d976fcf54585779f337630cf527591f
SHA1a2005623d8d5f58e61c41fbfe6e7e02922ffb915
SHA256643c4d45b4eba33d944ddc195ac17b1c67a993080e05ab4cde164c546e98b31c
SHA51234d9cde4205c216282bc3f0d420380c28d7fd1f6482241b38b169ba6316d6498629449f9de9a770108578950472a592d457161f91b9ec8af2c943ebbe5f8d055
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\c3f4e1d9-c424-40e8-99a8-98bbfced16c7\index-dir\the-real-index
Filesize1KB
MD5e122ff35adb4434137810cfcc6bbca82
SHA1ba7f98237b04738d1b9742910134b052e07184b3
SHA2569fa3570c21ce3adb54ecec2d7508c91ca57611e7abaeedcb1e9148ccead4fcfc
SHA512c13f076eac10b032f6c0278dff822abad0cf42edd8c00c014edc50ec0d0b4a1441affdb0f033c5b5ae6ecf56e0dc52d36c231a2d66fe0736fe6a4a9f37045ead
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\c3f4e1d9-c424-40e8-99a8-98bbfced16c7\index-dir\the-real-index
Filesize1KB
MD5863a3be9ee1b9150357c764dcac2a9f4
SHA177ad6cfa054f160ca6f891bd598fec86bb3bd5fe
SHA2561a7db7541ade069e68051e4bd9927a9b5e17e44bd7a92f11805ad75873ce2a2e
SHA512d5ed2537b011631e445ea082765cea6fc306938d66e87bbb8efb9a399fafa08e2e9db4de15014c019ff749357e680ad85634a5fe71cd4af964645586d44f62be
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\c3f4e1d9-c424-40e8-99a8-98bbfced16c7\index-dir\the-real-index
Filesize1KB
MD5ca0ff247e8f2fc2676976246842366bd
SHA1d88ffca54ef55bf55b1e7aebd0f299eb40f9ef45
SHA256578e0144462263139733018194584abf2d264b066072371175ef0d69dc33e4bb
SHA5128ccf85f80024eabd1e3733ebf59d70e02e424f3733f5283647fa9379ae2427f6df0626c3ee6cd9b79cd7d0389bcbba8e032f56d2ff1e239a95cc1bec4fd76006
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\c3f4e1d9-c424-40e8-99a8-98bbfced16c7\index-dir\the-real-index~RFe6598a2.TMP
Filesize48B
MD59b6bdf3d7db64d6e20cf2dfd8c271232
SHA1058305b88e4baf1e90a2521acb6f0078348fa2d4
SHA25618f0e41c52cd3159f7bae2d3c443d08edb46e0c3ce7b0b107506dd6cf4606b85
SHA5123caab0c87c852ae0762e2ba0917875168334e516532946bce7e958940ed671f678618876ed50cd4f7d5be1c1aad5557b05a99d318313cde768e04b5c4373fc2c
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\eda6b5da-79d2-491e-b8be-63ff468973c8\index-dir\the-real-index
Filesize120B
MD5681759ca50c471b435a739e4c7056833
SHA1324ca731ac196702f66963d38b4b6f39fd206cd8
SHA25668e3fc44ab0233e6941f00c53bb77ccbc85567a2cd513103ac7bd2acb19e0e2f
SHA512a7f123b1c4f1249dcdae0c95b603d56fe3b817ad1bd96cf1cdd06859eaec02885223f8de82ae51af213d289c63fa278860a48f8323372d751d57e5d7358fcb2d
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\eda6b5da-79d2-491e-b8be-63ff468973c8\index-dir\the-real-index~RFe6518e3.TMP
Filesize48B
MD5dcab1d387d9295d9dba481bf38491617
SHA14de5319b9615d6f204ef04c01e13f347fdbf0499
SHA25630f7b63d577b3777a5981baf03ca95eb7a5bd7858780d65d3189b1ebade873b6
SHA5126cabe4172d6013931cf0e011444de95772491521fa374378882b742779f36a892324cc4cfe5a4b0097c74db9a3aaa623b912b03a2b71550d2f235257a62d515e
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize129B
MD590b18ad5736cbcdbf011987300a51af0
SHA1e26240ccbf7b719a8de432408ef9ec6f9b2b040c
SHA25698d3e1751269cbfc407be0dbb09003abd0dc8e858d287fc15f1e7f223c564eac
SHA512b0b6b9a86bd60db921be58ef4e2082f78c69275b0de1386b544ab9fe7b6d05c2467544e0973a5dea3654deaf406780b436ef33cef6e795f69065dd79b79dfb30
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize225B
MD534a4f3da220f220238da08ab7f2b048c
SHA1c22a369d131d86c3ab0c30737381c48f23543b02
SHA2561c317bcddd38d5f152f6f394a3512178da66fbd362f158c9fb5fdb95ed781f93
SHA5129d684dc970a484717b504d01996ec9c98b56cab9863dc0ff68f4fc7b6bbb740ce1dc9d724073b4b332b41f96fce73e9fa0c7ba7196a1e59f45c39c2e3f8644d9
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize289B
MD5fd16bf88d6eb97f8be1cad54db396975
SHA148531086f1a6d5cdd8857969f04e0071b312c92d
SHA256b730801b4c2c678959043934899c533b93b2ba7f07afb9ab9eed13fb40d5b139
SHA512319b6cb7c54bb6df81df2df8f86976c39ea7335c9dc7011b7e935174435369fb5eca4a2f586681cefb9daa976e2091369c0e33180e0c8a337a124ae256831bd0
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize358B
MD5ec798b2aef55e38c1258e9c58426ecb0
SHA1ecf77e09119d30ad1bd2ce9d817d28f4bbe40e33
SHA256cb113a00c07df8cb0af4700831171166006f46750305375a837344d51026a531
SHA512f3788a34c37d9ca406bafd1e8bd3e240aacb89285643be5a9723f38284b7521a7c06c33e66f2b1eafa2835ab36bfbe32ee365aa9d8ea3aa606082b981ec1a147
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize353B
MD5fe8b0efc39e41681c569bfed674d9d83
SHA16770f362188695d806b9c7db52d3aae58f463eee
SHA256cbe69c750d1f1cfe6f12638a62b0fe145981fa3841dc5e170ef2dfbe7abe8452
SHA512d09a376819bfccee6fc8d080256111711bb4763ba86a48fcaf8bd319276ee64b1ee2153df44ad33553dfcd2a2a1fa2489a3c5b7972129c1007547396be17d1fa
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize353B
MD51946957b62514be2fd973452c72b8195
SHA12d1028f697dadeb608a16c5f33156bc012b84ad3
SHA25631b99bbeaf879aabb2e7b33792a8f8275683bfb55bedfe88fee8a451e75c7d09
SHA512c20be4e59ec3a73e45445471ee49c439a4a9bb89e5819296ca82b81baa341e8a187f363fa76c8f5886ab5b9ce19e560b040139e7275d6f54338cff41a4828478
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\579544fd7d0441717f082c9eb123588966aa57ac\index.txt
Filesize353B
MD54d67b246dea7b7da3e0aa24eace8c551
SHA19a6cc28a8d522dcd5237e64ab8232d3f8072c3ab
SHA256ca0677bbc4623baa77bd95dd3bc5cd2c3cc398c38df68650fc4b5da0636d3d7e
SHA5126149b6097e2232a5a2847a3f86f4881bfc721f00834b4c32d0a8f23dc0b84bc2db398c865f46465da5a5edb5fa079ed44aa9186dd07ed325f6f37f4e0ee3bca8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\af8812d5163ff7ee51961e20f1aa54187aae43ba\6f46c80c-4ad1-4037-8357-5b016c4e9f1d\index-dir\the-real-index
Filesize216B
MD54784a4a1d8e631bf4a4ca36986311e34
SHA11efe8371a92fe2dd20c726c9858ce88a86425903
SHA256104bbe45d80e32063898fccee68b81dd85d31644955502a55e06ce123607bdb7
SHA512ea5f70015652a4886d76d34322788dd7cfdf380a52cce5eff15c72adb87ad851846e9d101a9f4ad2f5b406371d41dfa8fbcaca4fb9233fb9eee65dae844aa7d4
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\af8812d5163ff7ee51961e20f1aa54187aae43ba\6f46c80c-4ad1-4037-8357-5b016c4e9f1d\index-dir\the-real-index~RFe59bcfd.TMP
Filesize48B
MD5de4da97b00d49763162992ff3da364ad
SHA14bad2c1b123af8a679c8a6e28e1ec7a07e5dcf35
SHA256274a858354a6ccd5beee7fb1047b445c38e60d52e48e42ef8b18fe2554c367aa
SHA5129884faadf1f39e35c66752bfbd6634269c8f18fa8005525da906da152d4f537f0f76f313bca5bc9e739f213026572e44c63eaa9ec405cf30ba788a491c7d7faf
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\af8812d5163ff7ee51961e20f1aa54187aae43ba\index.txt
Filesize98B
MD5c7809110d186fe42eef644e3ab4537b7
SHA1235be81ac04de5654b0473fce5139e57af8875a4
SHA25614ad519f226614c2f2aa09f9143d3cbbcbdc01210ccec5f703175ceea2e6c877
SHA512526e3c8a81be76ac9080c654c7438a5ceab485566e1d6857e84b4703a91dcd16a65beb6ae03a2f9f551e9d7c89b6ba2cdbc438523d4700b8c29f84725f393679
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\af8812d5163ff7ee51961e20f1aa54187aae43ba\index.txt
Filesize93B
MD5e6808524dcdd643d9e8511c1c0845b76
SHA14122d027128ac14cbc94abc4ff4273e011135e8d
SHA25675af3fae990ff0b2847137029acc71be2e20589de7d4cb15a6f1eca107968a55
SHA512e40c7086f6ceb3198cba0664807e3de84ba536ae1ef95a84d55808a3ea542cc060e5201a1ab7df84c5042ae0d4119096c1e7917771d1ed4901d5bba851dcaff3
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize72B
MD5f86d7ee6f3b0a0e01c79fe36eb704804
SHA1ab82988c450bb3ab5fa5a0cd5c9ff31966c08f36
SHA256501d5f6e0147ca8598e06a667b7e857c68a6be4351f28f37bdeac5fc660a17ca
SHA512890176412d4328274172b240a12001022f21f32d4b5e349132ba112db360305cb8de5344732b564f917efd530b044a0f8711d8560a3a73f65266ac3308b4c497
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize432B
MD51c2b0e95c30941a59435eb6082d7b1df
SHA1e1a4ddb841e4215a18aca38bc273c1f755a40f99
SHA2561aed273b77e4261d2f20b10fc92a2d13d302b9babf2fab6981256a1b13a63959
SHA5122198e8f5b66a15250de3b6b2469a822742753c5aa96cfc8df86f08d2c2bdb3215632521f5929beafabe1ee38f24bfb1c3ee29d2bf7894cba758be70def519c57
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize528B
MD5d7e9d095f790d4f9b45c3e60be3ccabb
SHA1fdd346e97674649041747594e68c17b9ed4f5066
SHA2567176594f4d5ea0cfe485e7c807b030daf1ef990474cd83193cfa9acc677e9eb7
SHA512d1d9d07da66a3dab1b184fdafa061486ae09f0b3a2ae8cc2e03cad336a23eaf030061bc7561c9efc8aba12e30b9eac6d64321440419cff03ea8ecd99244fe51f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize480B
MD5440d1a7aacefadb6fea410b6d39de6cd
SHA15e6a0524d2400a3aa4d1f81006b7a373762abe89
SHA2564b4b2ecfcfab823bde732374f7be8fdd47535a6d4ebefabf17b2d3a0af689c6a
SHA512d94dc8b52689dfb94e35e898d00a9861aa369541c4d23e0b432749049d1149f5cde291b92d35970c5566ab104d7cbc342b7c37c78e9720309640cb52184358b8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize504B
MD5718b4813e2681c1e2adc830cbf673dee
SHA120d560582764bd495d1c82c17d11898b7022f367
SHA2568f810ece38351e90d6fdb4d753af2a193f187a26f7328fe9b746fd7983ee1f01
SHA512c0d1b8fdbb0bc197d7e4b55c521717b688dcdcdac564efa941545c9ee8bb2288ca100723522a98a2caa4f8c738f191b853335e6037883b7cb751b140ebe2b245
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize360B
MD508320b2ad20c86fb3ff57e394218dd74
SHA1ba65927b15f1cfa33c89ff0d1010d29193c446a3
SHA256555d8e201953cdd43149968df3b6b0a9da2cf79a51358adb2eb0d2fa042fab91
SHA512f5ffc917dd1f54ec00898cab742ecd05999c717763b8bbca6b2adfe7cd9b8d37ffe26196b8c1a655a0908bd958eaee2a6ed7c22e43a5cc92601283f462448a18
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58e829.TMP
Filesize48B
MD5432e919ce4c17b2558f3e31403d0aade
SHA1cf20ce4bccd8363df49ba1effb005ebca137d996
SHA256e4140502bfcd671066e46b97a690fbfbc3a6c1e3aba628dc350a830763daba13
SHA512b8f95d37f01350aac133b928eb9859b221bfb9098d3da1572b3df3684733cc319ff458daa9d426537d41e6875a5a335b2ded4934f0cf171ff5f3fbbc3b953c96
-
Filesize
4KB
MD5fc8b33120bc28ad261c0c584b85b3b28
SHA160e29f4290bd27a4ea94139d29b36b069e2c3a5a
SHA25655c7c18c6a0755105fd55ad913c9070232b02a7d33ac8bc8cd28e24f8d9c89b9
SHA512afeee52b6c3ef0d9661f8707783f7be0c2a08904d436f65cb1a0c8fa74edb27cb188989ea9063e757917c720449bbf5cce744e4164102f99c9f5f247e18632e3
-
Filesize
5KB
MD5ed269429a52b1234a7b4b4fc7a93c8c5
SHA178dbdabb6dd7260d0d3e7a998c82978e2267e500
SHA25637abf8e6d2bcb067b483b67f0857f46236f41f801123f321098d08c86475f202
SHA51210cbcb57ba39c8f6cae22ee71c95bfa0186bc5b055da4110396c58532b0686035297c196fba7154bb992111a1a717c51dd343dd4f5f267e300e185835c2fae1a
-
Filesize
9KB
MD571ff9119e750717f78fca1b12822818f
SHA16825f722a220e3a3887775affe747df72807dea7
SHA2564ba739c017559b4f874980975e42855cede9f3c657317190b0f3c94b41476705
SHA51262c01ce1814b02614427d0a1ad6227d07908b097db92f3ef3d13671fba344057df92ea36223ce03420e6fa2722c6633b28241634a9cdcc5de34a2750cae98bd3
-
Filesize
6KB
MD5df86d0cf38cb81261fcb632623220b46
SHA1e683f7e2999f54ab1f1361d7664edc8d1ecee2d5
SHA256b822e3bbda7524a072ecc1b6783f0124c34625dbb0c32da8e58e4a26df887dbf
SHA512047a102fd0fc42e3a264da900f1763984f0552a0bccfcdfa7c51f4851b417c9228aca442422ad0ec18416e2037858acc447b447eddf51da93bf605a186a71669
-
Filesize
7KB
MD54017fdedd425e0fcee0b2cdcb9dca771
SHA1e02448f14a6f3f9ac994fc64b313e11dba0d1a68
SHA256554979ac2187ec326b8e7e517d3874f2d38e8063f5e1ba0de9f3f906b4ea96f8
SHA5129884304033370d5666a2423b5476679abd1a093abfc0864a039c27df4cb4b13f1a407795193d25420cecc1d6114b596170d3971b94b122c3e4c852353d6e6e3f
-
Filesize
10KB
MD516a944abf47380df8949209647978331
SHA1e59e874a5b43159a5e0bc8c7ac46a79a98ea080e
SHA2560ed7cd95253a3fd7588ebcf2d9818c7d63e08e50885444522ef3331bd6a4d47e
SHA512be59aaabf4d72a7d4b37c0df4d01a804c2c6a430b7dfab1df88a7d3334f0ffe0ada118d5cb3117aa89bdb0f31de96022a19aa295e4de89847fb9d5a20e58587d
-
Filesize
10KB
MD5d98e5f4535cfe1c1cde2bf4c38b2a578
SHA15f42f20d9cdd05bd802d0861fac519bbeab7769d
SHA2566a141374ba114852a4b10ede62ec03f48277c72b31f6b4e7d5d6792f9903b4e8
SHA5120c904548930f35e4839ab0bb4dd5522b7f0672642f0f0877d77c04968ec857b2b5c05297bd11bb643af411435dbfe280cafd7a9bec450fafeaea886f85b69f71
-
Filesize
11KB
MD5b1d6060566e27acd2ded489551e15d9f
SHA1cd4f8fc0602d57be92d45968088eed0a2958dd0a
SHA256de501a1057d63ce7121de978b069c8b98a12fc7b6c094e362c813d740f3f483e
SHA51235ec0e38f69f75f88149ff5038e82df580c3782461974d0083816e94a985ec010286ae19eec0635e307c35df847f835f3f15a8e25eb5bf7bc7528708756eef10
-
Filesize
11KB
MD5a008e99083927801617509403b2c2f38
SHA18a9b388fe5f8cd090ca45e1f6dfec6d54e070083
SHA2566cbcbe0f4c916d7cef04f05447d541c15079a8ea0ed7f52b1328e5c0ff48b87b
SHA512920d457e5cb8bc5643c8adb3ad7afb20aedc4b08a04ea324e4b0c241e61721c6244836c2e2b2fc6dcae2c2e311332a5deea6fee5488f4c25e7f47f6b4759de05
-
Filesize
12KB
MD57fcb4ef2289738eebe52bca3ad903187
SHA1663f9d0943cc3c8a89449d2dccc06b1525f235e3
SHA256c10448540a58806f8939a1b4166e81596a62bda58385cbf3fb417ba222b341d2
SHA51239d20d9bec192b852c343cda0c60008aa71ddd1fd914737e4107f1aed6b241b8ec5fb8d3c3b89b562382d121c98854507bfc6edd056682977e61650692fb2b05
-
Filesize
12KB
MD511d55ec3f360c4c4fb8cf128156c2e53
SHA122bab5e7188d31dfca3e0eae711d2ad441f9b430
SHA2563cd75b9a28442d9dcf72eea275e78e5b544c29ec8bd596b33f1b597fe1b354c0
SHA512db12f0cefb517e623c468bad68dbab4bdbc3200a64a2b6448bf94f1fa90e1977b8d58521a1ff7c46eb8ee12d193ccea0cac91d4b42bfa2ea9584413d25e2e8c4
-
Filesize
14KB
MD532e5954558e6f7e6cef3bab10d777e07
SHA1e62f14c0ba26cf62561407e42083a92736da257b
SHA256ae3735f9dcb95948e10a5fe7e1a7f68af9af3dfa6ba97ef63d65acd6ad85b543
SHA512a78933b5fe6bb485a52f0f34f18b50c32c61364313c440a16ef17c4d510296ab96b1f5a55fde6bf0328c1f3b31177bde775c9f5fbf25fa2cd1977db7c1ca5484
-
Filesize
15KB
MD584711c28ecf913ad592c10f37006573b
SHA1cec81ced2aaeabeac5a51a2714e4769289c1be1f
SHA25691be48f722e043b232864d83b607878bb6a53f022473cd31f94c74bb5789f795
SHA512ac48a356603dda9f28d8311e8811065d81c24688a41c0b41c68365031b92dea87a2e51448efbd90f79917313dcacf09fb3e05347ac3d59337e3ff81168368fa1
-
Filesize
15KB
MD5c9070c27b7319513a11d44511dfb869b
SHA10ef69504b874b7be4adc88ea91275514dd47c520
SHA2568b3dab6f4daf1d2fde9d78f93e571c1becfdf7851210c088e12d61090e830039
SHA512ed025e70f64c0e43856a7dd2cd2f902ae39e0c1312088e77f5f056e2698d11193e93cc0dc4294fcfcb21721225bc32bbcad319cee0c4b4dda70672607200716e
-
Filesize
15KB
MD5bc862780698d2e3f5160bcaf77867f82
SHA127191c78a159a78f1b8396abe45f99c7bab86d36
SHA25654fbd432ff0c4920e1c8b89239c359a4061abb0342f3b78e0e0fd7a7257cc812
SHA5124e66305a83ad9b6a2ed7f89b8184e7123730691709b302b7ff6ef40ddf5e09632965b91189eb6f88a02bfeabde079f916408b750c3a708d165dd6700731bb942
-
Filesize
16KB
MD5d89cffa3d64e0fcfb73b4bc1ac2680f7
SHA137ce3f0d24f548848757812304bd931dffb08e32
SHA256bea0a5e8e6e529191b65612f16aa21c27005702c18ad8a983d823986e1dcb93c
SHA512a44909566ca6a8e9a6a67e7c5808896494125448b2864d4f8256873fd3fd9fa5426c043940eb4206bba8c45409aaecec3d680c5b305c798651f455fc162cc4ce
-
Filesize
16KB
MD5f3caa73881d46d2fc043b55c1606a8af
SHA1fedd1f9592f100db3101829fa7378a87396c59ab
SHA256db88a514ad63c922b689125aa3044a3503c1835dc96402ff9d3a89ac637c312d
SHA512273acc4ca885df7beb7256fe7b9f580218a87c482b0ae36164714559daa4fab483859f322f6e34e0b73b5b88de11a34108f3a3509042c95678c7d3649ba46b04
-
Filesize
16KB
MD574a22ac712badd7803315cefdad3b377
SHA1e1a9e35fbd89f687fb4b3225e3b12f24c79d3ce8
SHA256142ff8b4d310a678846a3b0e3c1ee2324938ee71d22437bd79a4a0c1230a63e4
SHA51262cba151183655664d06cdbfc31440825877b44d8cec816ba8c3cab8d3bdfa3a9b69f9411ccb6dfe1f5010e54bc53e96b1efc781635f4c8edd50242f6f3a07db
-
Filesize
16KB
MD5ef25012239458c64de3e937be71547a2
SHA123de429e8b08aa2ff6391306b11dd56c69cfcedb
SHA256c43ba060e2441d5f4e9a86ae5cfdfd020136c1bd1a24963bcf94d212012beacb
SHA512cdba1cdf7663aebb57294545a08aa06fb32d32966fae086bd10e66b59eefb310e17957a9de13df87a469c436175e7e914d5f6fece3498c01b9658604b957e572
-
Filesize
6KB
MD5cf024c7c817d79d0a6129705711551db
SHA14edf501d08a3ea94cde3e0d99bfd096b1b00b623
SHA25619b85d40c0cdef853fb2e21e6d3434753d65d435515c8ca923c2396f6c75210d
SHA512a2a0a33e664d120664ae502396b70a85853003a4fe2fcd71d6b02651137923d24817bdb23ae551f4da5d5bc71f9f6fd2ac050e42ff9dd40c224855854c61d22a
-
Filesize
11KB
MD5d4a968e26bf4c332b9d1f3d7ba7241f1
SHA15a732b578d952f79dc71fad48722c8e991f34ff9
SHA256898f3e759602944e5c16be2a6acca8c9c7c0f6ba5a1e7d6dc5fc6e7e1248993c
SHA512dc69585b721aab9a8f6a9a67f29534aece6c64d4b19ff808d3d1b8de672ff85fee07341bc4e04f6eeb9047e58101f919b13ac6dff897def819accaff061b510e
-
Filesize
11KB
MD54c5c4f1fc4a4f6927062014c82009859
SHA1a295a0ff77823538a51fab5ce8944a1336f1d9cb
SHA25628421e3b1b5e7390eec29338210bfe86a2248e7351768af7800c0ec7668ba0c5
SHA5120c0a2436174f28fbb9b30db86eb4c7d33a0a786181c15e52886e3cb5ef49972d7617b4a34459bab7d5fe1df745bd13c0c690f0984a55283a951263b10f202934
-
Filesize
13KB
MD52bc6fb1ec35a19574f4804684cf75a55
SHA1b8362dc07d314797d46c426b7bf2b9aa084ac353
SHA2561b963fa840eec2dab5dfc27f0c22b34f91d3aa3aaeeada0515086db16b0612c0
SHA51292b32706fd1a4386e28b3f4c59821030c9f62c6d0c089ff0517650d8be84ee139a8fbb3f955b1a47eadfb1a3a7e0f74a42a75f2bd29f199b8a3c4d01fa52ced4
-
Filesize
15KB
MD5763426ad6dc4dbd0cd2f6444e715c330
SHA17d582d79d8e79d1e75a2ec1586a5d49a9d936624
SHA256b65291b5922ba92123615020b5c02273d983f9a9adf72d7b21917ed42c459245
SHA5120fde55cbb8c96ed814fc299b0fffd2eba692ad3286d578576dd3a71c5318e71b1c92b88dc2be065ce2372876b154811cd0d3a3824233ed54873ebc7e568abc05
-
Filesize
16KB
MD5c32698f5ff868ad80f8cc8ad958e1d2a
SHA166c297628999420875c33adffeff16b2416477f6
SHA2565c0642a1e280a170a30d6135ada832c8d25784d15709cb0a5591c75948e5b399
SHA512193cddddb67762afc5e84794de6e31f6ce7d3b7b7b23d25159dc4fcb2410a0444628dc9b794b403da678aa056bce666937db35d96d66802b31d182b96cf1e89d
-
Filesize
16KB
MD565a1af39b7c9e92a2724f2660d18acd6
SHA1e5ca45096e4764ec1886b92d0f271365f5e92bb7
SHA256ff3810f9305c2ec6b03f57d2a5152520f3dec13797d711e5bfd2b1b326b5f0de
SHA512996398fff27a28950565099415f5332b769634d72b89b2ec50dc359fba9c3c112840b737c807148436cb18bdc59925040eddedc1b9723f36b6d93027f21ef926
-
Filesize
15KB
MD5ef4a4ef94ee7ab1ed99d0ce27e98397e
SHA14f46c41f3333bcc77fd6d1e0ebce05e3b7f0c05c
SHA256eecbbb4771cec9bff327ceaae111bf47a3d59d2f2e6c163b81f0f35fabe43c4c
SHA512f70a8297c8d287b28ab1e0417d057251ff67ee07be7d44f242a3de791f4c517225ee5538e46eb3ceb8e71a19323c00c49d762cc1d0fdb1798ce9d1a8beab00f8
-
Filesize
13KB
MD53fdc3a1daded15836e7c10415e4edb9d
SHA116a8b73747c2a4544b6ece2a397f8162c4593fb3
SHA256ebe06543731cf3ea4d1f52f451417ae48d12cdc323df780eb03a8abda28a8d1d
SHA5121315f90a941d3a57cf3643fc0148b25a8f1cc554a4d2c21a90b4e49fc333d1f79691784b19b2bac1842718483f2c6dab5b5261a2edebfdf6e215bd0ae37e2e75
-
Filesize
16KB
MD558a9f9a24f1db49a4b930af10a3fba50
SHA19965751b876d97554041634ee812a2da4f2cd387
SHA25650c7250e80825e37cbc09fe829d2a7b23bb6b5928c15148c6d3dcd9b483961d7
SHA512eb697560a218e703e2829f2312b2c06033871859937013ceb6523c058f64170f55a47d3423c1140863826f487ca3552994fb5cce4655e1147907f897c37adc17
-
Filesize
15KB
MD582d95cc60483a7434cb12f339888645e
SHA1693a97e8aa0edd2e6334526ff6f1fb394f928e02
SHA25622a11e1c4b1082e29824cf254197bd0bca194001cc5326a7d2fe7c612f4c53d8
SHA5124f4c9b475341e334fe1b990fe2bb7e45e40a1b4e74e71257d2cf7efa2bc2afd9e0ee3736886493818b2a709a5014337b0bab0401485fccc6f1bfa7bb5fb894fe
-
Filesize
12KB
MD5fe4be2e3358c844668e471d9d4da8cdd
SHA17672bf05b4de9f5486a91c2a3b376ed4d57ee19c
SHA256e953a21535b244a0aa28b9647d9980a42f745ab9c1c4d2a7675e4a408b9bb0cb
SHA512583da4e4c8a54942d0d411108863adeaff102c6118005fd76f2ae076228b14fa32c478799e8e4eeeb132cc4fa2885481bdde7f7a22da17510792699da9f22170
-
Filesize
13KB
MD50a60b9680a3ac1924ae98624f44d4b54
SHA18615ae5efc04f1a7a86950c736fc76e1fe1450c2
SHA25644a9dfb4da7637e5456a9eacd786ae488ff40d69afe0369d11043b48cf1a09ae
SHA512ad02c02ed4f16243a7497a3db04cad838c625ffd210e8ea0db44bf518c008f1a7baf6b716bb582c10ae2581ec68cdd76f163c6bdaf7ef787d24661191bf76d1b
-
Filesize
13KB
MD513ca9004ec6e15d86da0f215ab499adb
SHA11a981d73613d59a64f9d817a8d3d4a99701d695d
SHA2567031ab96de724788fc358232cc8b4d26a124bae730a99642e86b6e4850eb845f
SHA512ccbdb64a8850606af9921e4d0001a07df64d7763716d2a9334bc407feeef4c892ddbc63099356876672178c17d56c51516daf0032b5902817df96e4d7cce028c
-
Filesize
13KB
MD55f6b634bc7ff6f514b6789c3614bf48f
SHA10db1244ee29d659ae236eaaea9c1593de0f8fe2f
SHA2569824379ba83a1664762b59741644a5d262571fce7adf4bf6db4f4fa1ec257798
SHA51260e9d5ca7ffae60223cd3dcb7747968e82b649bf5c479aa2bc747d3e4632545f61f6088b51b2959c4368eb2ea837a4f644da87738db3d7a65340cfad995aed61
-
Filesize
9KB
MD5393294bfe6bf3c7e7bf29448e163f67e
SHA1dd615931a4708b55a0148dd435c0b432e1bb3173
SHA256b071aea16daaec3089a815efb93a0b22d0681415cb7bde3755db1086115bd246
SHA51258d9cb8527b9bc522832d52b69d0d519654f1dd9e10fd1bfe0380841ab1b32c77380974816b4532ec25a6abc167b632685a3467cfbb0eda944bc3f6921738c4c
-
Filesize
4KB
MD56faf841360fb942a47e6be48d80707e1
SHA12eef565bf5e29f7789cf4fcefd0fa4954953487f
SHA256ac1d218e752a501e34c7440ef1b24e13f304a993d9bfa4e854a8d5484b70bb5f
SHA512d89f2c46aa0c340a138395ffcafdd29a635e5908146d8efdf2ededcfecc47bc7cba157b620afa79c62a32a11fea73b381082a9a8bfc13dd9d6533e3f8c7a6850
-
Filesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
Filesize
11KB
MD5c9968137d8b18af2fea2de002cba7471
SHA1bd58cae013130bc8d2a24c0c373db0f632e435e8
SHA256a905f4b6fd23bfb9ea630afc363abf27643a06fcdaa76fd214e3d61bfb0ab9d0
SHA512fc80b22634b09d564afcbbb76a9a9dc95762ab16ec0b4d1f9b48371178699e2ca6a7d9f2e0e19115c2eb973140af571d1b4e3fca605ecca850abc51fc96b586d
-
Filesize
10KB
MD5453e7ee8710a3edb3772bb5ab881ae25
SHA10a4df6b0b32323d7ec1cbbfca283e5c875ed5cca
SHA256424a344bf0acab50dc409f6548b3f04bd9a721e818cefc1d542ca3d214a87804
SHA5120ff56c95ab28e1606425ff63dbe43eb62bc53e0240fa1f45f249fbdf17a87c577932126958993a1c8e96399f10261397e78729a0beacafb00ca952df5ff6fd97
-
Filesize
377KB
MD5797684f924e5887fd19bf3e3db752b77
SHA1e19a6086c2e87eac03c802737f40e7ff842fa44f
SHA2561dc3edd13c8c702426d614addf5ef1b5380cb78b7bff7886943c21c354cada0a
SHA512bddf7202395db21d5dceb3f91338dab3f85586abff64ce78ab7df369b8b17b5fc337f2318822701c652383f7cb009da2a1e931f15676cdf1f9b3011b815625eb
-
Filesize
797KB
MD5d083a07a3dca2d0ea5ddb0e959fb8ff4
SHA186f3f43729db553d45b728b1409b73d3de5a5915
SHA25605e1c6babb787f24d8a60f8ded2c216c9bc2956970d75073a71139fe168a122f
SHA512d16259a1fcb29def140e9e1768b99d973b434c97bf7b09bd0d223143a622ee720d2531a84dd4edf082300fb5f4f00812e418c0131b196375821e612bf34f7aac
-
Filesize
1B
MD55058f1af8388633f609cadb75a75dc9d
SHA13a52ce780950d4d969792a2559cd519d7ee8c727
SHA256cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA5120b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
-
Filesize
323B
MD55d29ccde7b20da80ec27f25c270234a4
SHA132156138e57f7b476092c9c802deaab1ad606695
SHA256510d9b082d791cd69b131cab643ca630616c478038b7604992d1c13f766d228e
SHA5123ff65d9aee5376a7b4f2cd511cbb799dc6116ffdee1c77de596af957ae5f168ad2f49571942625b3867ea0d585f91a4fc99e590617a4e99824a54c47c9ae2533
-
C:\Users\Admin\AppData\Local\Temp\scoped_dir6336_1600607632\CRX_INSTALL\assets\index.ts-loader-13a0f470.js
Filesize341B
MD537ba3a70722df270b2f69dd60db8f1dc
SHA18c61f83d7e13b5efed2335a14bdfce2463fbaa9f
SHA25613a0f470c87bf4ac0613fe1c0fd3fbedd5ce1606cb2d491fb93b3cb5bb2e2d75
SHA51275d1e0556a2ecc24cc3a06619b1894973d391fe089c59bd33033286de99799968cc2137b0c0099d3cc63545ef317ec82cf3534a2739c909644bb01137401d10e
-
Filesize
612KB
MD5364933a93d70ae36e265c035c93ff08d
SHA1669fbc4839ec8988aed143984f44ac199c04b52c
SHA256f3202ede68189ac18c24966905bfd406273a29ff1a8c99cb7a328e5e1c8d6e87
SHA512a46f78191036ff81b8c5ec6351e29ebbfe078d0717646749cb6e9efe93e390aaa7207547477632f15ce3cdb939c75c7ef61dd3801ac01417b1354b747bb39551
-
Filesize
40B
MD5b77699ecb36070da3d45f4cb51c2de3a
SHA1e306ff3c271fccdca227604d82bbd6f5a55c2656
SHA25681db8c5287e975eee81b16e1921f8b9beb8e93447f268c96e81f0cc065de8e27
SHA512573add6605ce2214783ac634493754d9bde1d00e5284e829d2c72a4fa7a11d476c15f4f026a07ed51ed306b358bc1d2e74006d5ca21fe04b745f5672c53ce6f6
-
Filesize
16KB
MD53c97222c910c2aa1fab0c39a1c8d2b11
SHA1c794a8758b4fa74c7aa9536effe9bfa774822e7a
SHA256c7b91efdd09d75b47036e241eb55a238065ace2c26cd8f31328e8a9f4b4102b4
SHA5123220065c655bf174c466d9ac03d3040e419f30d081983c23a757d2c0c5e4720aed2c71e88befc0d8b6987d6abd6a25289731d7f4fc9ed6348a1d762f67032153
-
Filesize
45KB
MD5495efe783c81a78ff9cb591f108ccd9c
SHA1a1562edefcfa912e3a6d885339a90cb661bc0871
SHA256b4441bedce3910805019deeb8cdaa1a4febb9a05d5f94e6c81ba298196c94d93
SHA512ec9c8be9a920613e4495226aeee9d39953a99a93f4a0aae7017a13b573336bd3f0a875e4395df0024334b657822b22172ef23677933bc5b445a7a4cd11e2ecfc
-
Filesize
173KB
MD5c30a3e8f3e6a8a236cdc1d58adea97c4
SHA1088c616ddd1e0ac605a0cde72f91b484db404853
SHA2563f6c91bbb2b842af6d53144f0767f6db735a7b7706e1c40e6bed7c4ce2a0a9fb
SHA512d83e01aea95d890a1dd6ab1fb006f6b58e975af87078edbce844b5dcaf972735064a36c5098cebdf14efbbfc5c7dd5d3840af760eca7564f96137c6f2fac5cc4
-
Filesize
47KB
MD58e433c0592f77beb6dc527d7b90be120
SHA1d7402416753ae1bb4cbd4b10d33a0c10517838bd
SHA256f052ee44c3728dfd23aba8a4567150bc314d23903026fbb6ad089422c2df56af
SHA5125e90f48b923bb95aeb49691d03dade8825c119b2fa28977ea170c41548900f4e0165e2869f97c7a9380d7ff8ff331a1da855500e5f7b0dfd2b9abd77a386bbf3
-
Filesize
1KB
MD5bf1beeb81189fb42481b51d184caeb7f
SHA167ec54e911cd215b895608b51fe9f24899158691
SHA256d731f26a4abaa62e91bd0c92639f74237cd5782fb07ef3ed7b801406b581a7af
SHA512194f03fc2abf54628e93a0e243f34f6a18082503e8a8152ec4fdfc165780247a7fc9237d17cf09af48d8382814d3b6f4d7563f677560d4b78963bf6b15b95029
-
Filesize
1KB
MD573122e417c217a63d6a591a07657050f
SHA1a5fdb0d613384f23d7db1c2fb929cf56a0fbabe5
SHA25690b1c54852aea2669f2ff4a54ccc61166d78d9d778150eaff0f6180e22355023
SHA5123869e83af1b7e17409c52aa9ca47f46282efc39ad8633dedd6790de40ea8451f6c9683e175634a7deb0d9ecf488cf39235474baca9201c5ba07561fe7784edca
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5c3967.TMP
Filesize48B
MD5e56b23e4deb0880438631a7049185c7c
SHA1d06b5f35ec177ac7530f4ff442632bd161714141
SHA256b0af4365c7fa7cdb6109e4db0b0a93d610a83dbcf07f7783235efc84b1b172a5
SHA51244d19a0f8b78511e5f43ab3579978ad759da3566251306fd1a1472495f384817c387262093745b7e9cfc9dc90dd9eb5bcded0bc797e08f43b502e6eee15cf69e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\assets\index.ts-5c6f3b83.js
Filesize56KB
MD552ebda260d370e60901faff13e8c9828
SHA14681cb8093a4159560a8103dc32787ffd55bfa29
SHA2568146421645c3f1f6af4e87a3fb22107220ae417717d7613bb291a0fd330f8437
SHA512283e4308b2e9a93d3871853a0cd17519b39fcb29fd3e1457af8897d9bf12ff5e3430164c63f4164768ecf936e4cd2c48b8b86037d872a9e3c9bec29a9f91a5a0
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\assets\index.ts-7d59b331.js
Filesize16KB
MD564fa826b6b9bfa910fed4a18c6a12c9f
SHA1265f312f8187d56522441f869714b9d76229bbeb
SHA256676f44312864a5e6e41bb8b70412ac265b6a293b791679be10049c17fc62d4f8
SHA51232b7d2a64ace406caec91994f6eef6551fe982876e5ff3a5d694929e0fbed4bcd2c7c53b879ff5a32ada0ebd35672e50db30a0a17f39abcac34a1cd13a61abfb
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\assets\messages-86fb7e29.js
Filesize21KB
MD56d62c5de88a2381b5627e0d2df7b9a30
SHA108c76dfb73e09780b0b3f98e5da414494904417e
SHA256068f97ff81dc092e4d201f575a2d330a0f5830e847edc6e0e80f8a97684ba75f
SHA512a193d284bc5c017353e8ce1a51f2449e2e58f0f35fbfbe8173f812bfaa91840f2cdede70897c64d271601f8836ef4f694dc099c2271c18b448b9892e5043e291
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\manifest.json
Filesize1KB
MD5d1b209dd9c422ea50135dc2bb716d238
SHA1fc13c64e6b1ccb9561e8ee0378dd1418b39e401e
SHA25614abbebee800bc6e73c8302fb892faf2c9ab6df5ac2a8eae66caf583915b7d0b
SHA512f9641b3f7bf52d4dd9f3e223e220a97924ab8fef6d472924f30b15c91414df9d72ec4de00ffbfe9b17c06d8398cfdbe80095b1da06c3b0683ed6a751cc0f8c8b
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\service-worker-loader.js
Filesize40B
MD5b48149d66d4bde2196c003629e79ae5a
SHA1276944b5796793effe150b05d0e9a8c9af89bfde
SHA25622002a97ade52f1ede27d832dceab496337b59a6b6e51699d4fa231502fc9f5a
SHA51289edbd1c24a13c6516cef4d23421bfbaa61a7ab37662e393fc27c4a21c94b02a71d348b55f6f2aba66b6cac7cc2f0894487241664672bdd92f113a07984c7555
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\icons\icon-128.png
Filesize3KB
MD5af719a0c95789b088fe4b9f82dd5ee98
SHA1cca49d2a728cd456b450cfcc20f91acf781c3105
SHA2565b861963c613fca1dc4aac9a416e43b2165b05a4277478f74b7f6562a378ff5f
SHA5124a6f77684b3bc459897ab2709754849868bac64f4e099c1e74970339c944738278454d6c043ee8a2a0337e9891e7e7126bfc41e6fb0f5fac544b978ae36f5082
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\icons\icon-16.png
Filesize425B
MD546c4711e8452178b9c2471f9c59c2667
SHA1e020f7ba4a787f840d204525e8eeb21d0c21e2be
SHA2564e1aed06fc4105c64aabe9580069d0cdeec3464a693241e7c02771e1beda860f
SHA51242f2161205f28003aff9ea4a8bb33a0a0ebbdbb9bb5e9446efbca4f000a4315b2bf7184d79254c148da40597cc15bf8f22a02a3da78cf5c9026ae35e4bd695bd
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\icons\icon-32.png
Filesize764B
MD59caefef512720012470700a11b0bd456
SHA1bfc11bafa996fbbce1566a569a79d5d72b08f1e5
SHA25682c0a843e1df5cc10a8c6beabee8416281aa89c73798d7bb6a2cf4a237a24ae0
SHA5123bb42b23babd54cb902e595b84a398ad5b2c9bd2e4bd4951a8b0cdfdbf91f6d0e04bb1fa944c54d673babdbcf0400c1947d0e12fba8057c3f69ab1e61b89aea1
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\icons\icon-48.png
Filesize1KB
MD52184400582c25500a74577359a1f7e7b
SHA1e69eecf84f7d2d98bf236edbcfc143fa42d01bc3
SHA256c6c3593c7d0af5c9a7f2e26b98ef2629e392c5da87df80653d94ebe412d5c9c0
SHA51224858ebec11fc0bb586eb2d6f555f5e798ec9708ad89b0a94957a1537dc150a584b70865d7fed53d3f122789812d390eb6af6b68ff4cd93296b2b0e5a21b103f
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\images\adblocker-bg-1.png
Filesize16KB
MD5404ead15b3040c2a16cada6a18088aab
SHA157d6d1b3d601532d1825c738ee51d0971f137af8
SHA256bd474396ecae2864798b9b33062afe3b599dc834db30b6a2f4cff0d0cbb9f9b8
SHA51212173b41f487987aceac82c13f63b1318107c48d6803dc1f89053245c1c08d092761399ab397da44f0ccca5d9ee3c79ab98081cbdb25a78ab5b97f0b52a4f784
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\images\weather-bg-1.png
Filesize68KB
MD58f158754f161c02baf061d230c993455
SHA141b21d1c3e2aa029ecc77dd6aa5b174d0eab34bf
SHA2560055b3b2ca2078823b01d4cf064d4ebfac5cbce03fa38c8b5e920b92b3b47f6e
SHA5128e417897690aa540ffde4ecc541a7a0a7071f355b6b663601647e6099f67310f540a40b12f6c0a2984965123d9ff3ac9e78f0be7b4abe2d6bc9ae941fd869106
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\images\[email protected]
Filesize234KB
MD5d336d499edc3d7205948e09647ab5826
SHA1797b756310da1f67d3df61c821377992a305cb6f
SHA25663f3d2622f4927d830412c8b089dfbdc77dbb880f9c49f072c6c8dc0b3cdbd00
SHA512fc0d6b3c8ae83f3db7c5f9ed4a999b090b2a1e8fd80f4b91ce1a42f804cf8c8c49d03dc0f362617c0df130a7b607b5ffe36fdc0edfa5f4a18b308a4a66ca8472
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\images\weather-qr-1.png
Filesize5KB
MD55cdc09bfeb0cc136c4b8e45114c8b910
SHA19d15f710e94409fc854c30630d70c66959871410
SHA25670697bb3558c12efe9b34ca34b05ff39dadae04df9e4928e0de6811b3efb3a99
SHA51229b8d495506291d46554e0a3951cdcd6fcd5f3c43fb52ac15c4bc13180d88fe91495c616c3e12a2c7edb7a2d64f90c391faa539199ba7532c45fcb827270e131
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir6336_20091648\CRX_INSTALL\src\assets\images\[email protected]
Filesize6KB
MD5e86f7685206ae12b271a4c50620f1f81
SHA1b5a96bdd23787dc994406c408c8db08cccffa646
SHA25628cb433c90e6ca9cfa6aaeb6ec60ee2c98d02a255d671c7c47689f9799cdd14f
SHA512fa2fb8ca2050b13193898a48da639673e706b156b666e8159b6a71d417aca7490c4faa8953776fded46226c7ac0b6465c44729cb452fd93fc961ca2bcbaedbba
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preferences_schema.json
Filesize7KB
MD5a192304f63ef26c80086f835cc4b7ada
SHA16963e90e752209132b728a938844c4c64dc94d43
SHA2564f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
SHA512be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log
Filesize26KB
MD582f1f53dbd9d17691148d7f4fbfa0e84
SHA19e65ad2ba47bde884a261cb23b56d9c600ab4153
SHA2568eff632ed48c415e298ff5508990711b6f1b91e237818ec23955027b941447c5
SHA512d79215145da449e0cdedbd8bd64ba46ae7f2255143ec583b6f1c00922f4ec7e07aba590521381a1994d3e5b351c451bb956923af1d3bfc441a0e0950b97e3842
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000004.log
Filesize6KB
MD5857a0d67230ea7dca692ca2e5860967c
SHA141904bb8c205c1cd5a87daa48ceb64d4b35959cf
SHA2565652b2f19407b97b454d0e040e0b9fb61aec870357c166558e5c102230e2461b
SHA5126fb17653c09bcc3fdb501693284b20eb5e85a509fdf332911afa5ce5b7b3dc4eb583a92f1e54d9cdd19208fcc4f51d6fd9c1e8d9315dffbd7767084f5eeef932
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000005.ldb
Filesize11KB
MD569bdfd2eec75074f592e180146d64048
SHA1cc09f081a7374d71a0f041ac34202d1b0370720e
SHA256779963f7fae0db0b9f8763c920aa3970a71bb4d351f6354da1e732b3b6e36fab
SHA5122d85b7f7fc4750c8e83e8fc5069dff2e642951971542d28e653d3012485306da085f6531662a56d54daa9494942221e67f0d060f5d6dbd5955a393cfe3d9b73d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize441B
MD595b9bb47c98ebad0c1564637366eb726
SHA1db3031489fe1cb699a54ba66e326c2a327ac9afd
SHA2569d221e6f3216553f4272709efcb77d77fb39d9ec2bfedacfdf5109415fcd4923
SHA51299afa0dda0c328ea7beec442eb18bc2ac915868ac8aefbbfa5406956aa45b3e00fcae548d7b3fbd514b2b80624cba608ce6af0f8fac391fed65457144d2394a1
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD588ffe6ca0d049f1e1ca042b86bdde422
SHA1a94cccf438491744631912c1cae9f1bebf89c43c
SHA2567018dbd69f14811a60400548ddf32f96ad5d2cce78c9d402acf7efa2448c89be
SHA512b401ebeaabfbc5f06b0cb6e728da03e81fea014b03bc016ca07a15f59d4c796090fc8345b988e982c4bd136a66929bfc111a3431590010303bb69330fa357583
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD534502156fcea2a3111c79bede51010b4
SHA1f73f56bd1fbed0cbccef70fa5539eaeb2fd4ffaa
SHA256acb3d89fb44d60e5557d268f5839b82400f584e7e706f8e5309ba2d6e007f722
SHA51264f836d08cdaea1d27dcd604be2fed3599d3319dc53ac90544eb0810db8c5b6b91c15f00eee3d9b83a2f314b2a44655481a5457f6afbe7663fd264d30342e650
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5e4c734e11a13ac2d90955fad324126bc
SHA16ee28b8ed874330f14dc620004b622a5fb4473e5
SHA2563044a7a519c080d0260d805e7623794ea635f67e11b49e8dfa29a255c79821de
SHA5121b6cf3270cb541e889e8634f4d73b38983cf291ea4cf25cd5a8eeb5351df1d094749a4533b3aa9e14587ae48f9fb6db8160e64d3c4bd1780dffd03cafd642c9e
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5c7fa9f6148e9865a66172a15bf12860a
SHA14ac6e4a72194eee5c9ac1b848a8a2b9409570ef3
SHA2563ad424f3743ca4a58ed4450f15f740ad99a43329a52cc3bac59d46db5c28c865
SHA512431b56da8928cc0787fb172fa39129c20729f0ecfafd26aa66e5a03edc62ce48fe8cf5287994b26ffbe8c317139f9a68833b7cd23e2bb20db03199cf3509b1fb
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD57a7c39efb902d375c81825cd03b1b7fb
SHA1564e40f7ef6f5fb25b005c5dfe1abfcf3033b996
SHA2567d0eadcfe4803b4f9526c9816e3bf004e9b64fb068920997395240c218ac1e13
SHA51272d1b0de20a8386368a6854da6106953e231ea89b688a645f21df7a8870338abc3c52060882795175ee2e2fc55f9d51a07534d745e36e16be31a980ea75947da
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD56e59e5c85d906bb7e550a811e3e03f6c
SHA1ecbf7cb20b3b9815b7c08c042050750987530f7b
SHA256a21a9753f633072ae35a8bdfa317aa2f97b31321e6dc8c68ea7187658d6a529e
SHA512357bcc9ffd59e481ff609b7f642a7f633a9aabc5d969b88b2ebda54760dbc0ef45f9c48cb868ba901665ccd9dc961af5d200275557c52eee4651d82943044618
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5ff6d382a702b4adb675635df2c742fcf
SHA1df266c6f771464a7b3976addbb3c553eb6407994
SHA2562cd7b776db23214aebba717201c50cdbfc46956c00b4a455437d9efc1ae78acd
SHA51297e4e0b7a2a1729962164381e687d8054f392ad8827d509c5c9de2a8c1286dc7f0c807e52d997c1ef0d0270dfcdf25eb321251ca4be7e7f6c2799bca64a73911
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
Filesize444B
MD5ac59409bdf4c40d9c6b0532fc5dcdab2
SHA107c1323fe1387625bbf7e5b5a9a9a6444c9169e0
SHA256bd0f7bee6f8d601db752f258145d444b3d366bf4876a7bd28565848e04e82aae
SHA512e759198b793d77e7e5f45c061b197d6661f7c663fe6f0691930b09629295a6c7af8fdf240c04c18d87c2dfdb133e5ed80b7ae5b756262ba1e57be739c06afc46
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
Filesize403B
MD53aa5edc0e72ff75c7f0c2a359ea9fdf8
SHA1067b55d924021c0bcb7f6c596209728810b49dc2
SHA2560a3f572b97b1191778fecf64194603dbe2bb2249840e1b69febf558ff0668139
SHA512002f70334dee3372c31e5a79a11be6794b0896693d857348173ca49774a18906f5c465e3e6070eb8629a2c02e006831ded028540c90f1560b433494240aaa494
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
Filesize703B
MD54e231777bc9bdaa975c61a28d76b7de6
SHA125201745f158c797e3c821fda4145e6f0bf7a395
SHA256ed2a1ca8d1bb6182be780a4ef9533bfe0132477a9a35f8ef4f6522c9f2c34825
SHA5127efc1fac68508be8810dc5802cb97d4d6a0e806a92a916322951d68aa2ec5197f2d76f6ee230d3801ff3a1e02af69e6d59b835860bcf9d4b81bef1b1014e93a5
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\MANIFEST-000001
Filesize160B
MD5d8d9890bb4c0d2f5ab80c5b4bee58960
SHA12f698008f6f4856dc31b5e528b1127bb02cf8e10
SHA256ad3becd7024bfffebe996eb9c2d33d13302c14e1c0577b25a53d7127fc0ddbf2
SHA512b5f6ca16aafd37c2ab963236c93e85ed70644019f8d5b86023b40d07915385cc6e7c5acfa8f5564e875bbf2563aab9c80cba9919285a1fae1e8583d7cb7e9504
-
Filesize
9KB
MD5e8fc4818a15f931a0ff4a51b2cf51813
SHA1d457ce5cf62fac8699bae37483bb5d1ba9c0b455
SHA2561c01ca44f12d2fedd93b00fff54c37e72f30cebe4a49f6cfd22282c560119940
SHA51225206dc20eba5578121b45831a363b585ab2e8c8245b8b0f45aa08593581833172c6ad7eb549b32ecc3627814fda21b053390a8237e39359b64d6c8e75cbb107
-
Filesize
10KB
MD5f19bdac351387b24a97ca2d184dc68d2
SHA1babfa24b23af74a5cd2db29ec17532ba44cda3ea
SHA256a484b8c8eea0794462f064b4b167040c749e14f0f50ebb20dadf076ba4a4ff72
SHA512ea064019b2f7302a9f5cec51a712412789fc607ca5d804ed0db33aaa94b554fba46487e16f5a489d77f64bdc2f6a158761afa6d87ee107dac9c59e44429c6ce2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State~RFe5cc1a2.TMP
Filesize59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
2KB
MD567256e48d0c9185437c640cd66bcfbb2
SHA1ea1152ce34d0aa2e6748ce14ec6632866a9fc690
SHA256798411ec71aa9cb1a74d01e55d787870cdee302367ced0d3c514a8df4c3eac65
SHA512e4597baaa3d7a0f142f79a3e342be399923584b01bbd138a8819a275a610123dde205cb1e2e6844fa0a2929747631960a037564a96a3e62bcd6a53b72f0c2bd6
-
Filesize
2KB
MD5075390da2d79ffdd7e1f747312ddefad
SHA13bcd58897fefc766560e43dde89855953bf2379c
SHA2567dc8940b295512fb336ec1d6ace25767c59557233317de422f96b66b7961cf6a
SHA51232c816f31c6182cb2b50c28c5c1bdbead4b5af069480a322e8c891d48db180e39c7b9aa7bceb92780fa1b5d5cc7f2bf951108ad7018fa6febeeeb64039b8c5be
-
Filesize
2KB
MD5e04920eba121c80b6e5230f7128855e7
SHA1c9b72faeeb5a60b6e6a67da4c94ec3379bfecb6f
SHA256a221939d87c34cd5073c7a8ad6afca3468add0ee41b1fe60540a7f2d74df54dc
SHA5120cca849078ca35fbb9931314cfc337d41522c0e1e54d6bea5a55971e6f266f2fd6a6bce3e4365852fde0f5c12fe06ca6acfc914a6ad815d9317a1d33e49ae6d2
-
Filesize
2KB
MD52e0cf9365dd5e070c57b398d6f91909d
SHA1c66c1eceecdecb9dd6cc925f368a8c72c4a7906d
SHA256ac42d6b6c6506387a989b0c012a643c595b822ea51a79b8229d87b11afdb0927
SHA5128d3f707e82efaedac94526a8dfca2afec4b1cc3765dd8d0af5fb0848669ca3af5ff588f15a4536a12e2befb13dbd67686cecd80992f164e3abe63832bac5e367
-
Filesize
2KB
MD5ba0d57e2735362d24dfb94689fef6766
SHA19841332125af72f2dd84bf8e7f3b9909a2b88ffa
SHA256f2e005aac9b82d8d4ac4f733cdfa57ded32776af99879872fca88bc0790854b9
SHA512e92cecc71be1027f74fd67f6b31a3d19d2c65e36f619012e75bd9d65200b41d080d095c96037c543774b29d06637f8114374df3bd2ae2f8e470dd9fb068b0151
-
Filesize
2KB
MD5f345283d274f8e6e657f5fe2ab3d8ea4
SHA1be5d7d343132a95a219a1873874b21be64aa4aaf
SHA25653755ba98f002fdc2e973bcbc95869bdb19e5695b6e2d6fdd8cee2d28b4c7f6e
SHA5126ec2199172dccd94c662dc6ecdd627ce83e36cf8bd1b9e07e34a5394d3dfad2f5714ff72834c832847517674a50caca68f806e3b6bb7790433f50d2d16e7d785
-
Filesize
2KB
MD5d97b728e83b4b5e9b003cc9b81179714
SHA12f7fcf9c56f3df05fe9504c7e6a197b7e0d822d7
SHA256f62cd416e9696c3d1f1cab27d8d0e01b834d2b7f108ea8a9dcded2b7eebcfa2b
SHA51225696df7f9028a935110cf30428dd19421738054f03836bd31ddc94f75eed6ea1bcaa9bb2bad244d7abb7a75a9980bd24cb44eb3aafffe7e15dfa3cd6fca2349
-
Filesize
2KB
MD558c968efa21ba3aa4ef9a158e305928e
SHA17486ec476d3934eb912e6f7276f77c0f054fea02
SHA25672714a2217aec574fd4b5903e073b3a8504fb5ba07f5f53f9f30b0e4e0d9f325
SHA5122c589b44168adea26dc7e03750a9dad2afcecb9c0a3e2e9ae674f678cf21de65e9f294e4645a17cbd7ef7c9216f90ae0aa1b039a92d60c1ec6b62833f3e2f283
-
Filesize
2KB
MD57e1d8eef340b770baa5d4db169e56fb9
SHA1dd845913796f4766417cf1c83f9087b5f8e220af
SHA256d55bc28ffb937c24290f9523ac76350d8fc1deb190194cc0c549944f9810a8af
SHA5122ecebf483653a3d3f46f26e8cc8177705a108e63ec4420e6a2156665b9c80614ba1bc74308f55be94f63eb88027f525515e5d2591f3fd6773f97dfdbd4386839
-
Filesize
2KB
MD5c73fad948b234621f8c6041d94a2bb10
SHA14574f604b5bec2dc094a616309b72279579e3381
SHA25652e31aa2c6ca71c244d0cafd5c87560c9f8877220bfc5ed4debcf89ed384e48a
SHA5120d713d16391a8ae074189674b555a1668921bf10300e11db1490df9de594092eda113aa454e7eaf3f1af47efb82fad51e18a35c4ae3260a5609d79bf0d5c3b62
-
Filesize
2KB
MD5ceca8e7cb08da8ca7ff0c6b0ee520b3e
SHA11549a2e521cd82130b1a9edf657f37cce2e17079
SHA2569106295840cec3ac8a2928c0a5bf0ac59fcae2cdd82575ff86dd9a33a559e9b9
SHA512ba1db70680c3836bc4a9d89b07ad332061ef0b406386a0fe5e4e141525e8cc7cae722727a3a79b1461858d7dc99c3b1028bf76312ec993fb420526334c7ac90f
-
Filesize
2KB
MD5f75ea83415c7c28584aa453502402c44
SHA1d8348a502f2adf808478d2b9367748d4599e286b
SHA256b8dadf08e094a29c70ac12a98c21bb7d520d521e25370d602aeb9e37b83d8267
SHA512401807dce0dc2aa27d133ba761b6de0b54110e7039e65ed9ad3e72b9a3711be3c1a95c9c84e8221aa3ba817bd3aa4ea94c3f7e723c2cc207c8a6d4ccd0611c1b
-
Filesize
2KB
MD53eea9dda16b42a1ddb893ceb26816533
SHA1c9b7a09699fd5b56f5915dac92b598f3f0e952aa
SHA256c9b8a0525efbcc79a8e98fec55fe416025a0f72e22eac2bcde997df7022d10e3
SHA512bbf51143c25c00a4d7a70636a58fab5e1c64e615d017eb08a5ff2159ae88d0517c14e50c067138b5c85021295d09eb52151635b1e1fa7271328ef37dc9a3e6d1
-
Filesize
1024B
MD593ac77629344d75ae506821461229bea
SHA15086334968ce9ace45c242bf6b5711dfcab169e0
SHA25615d17608652c25b3b0728035b1d9d8399aa80133e0c6f75dc47f5fad9b4438df
SHA512ccdf42c174b138770ce81fbba0d38a5820c3907b0201d21fe400dd6f33b4af19a3ce65fba6f26d69b5c3c19362aa6b2f427a365e4e784f4f6b30cbc43b776c51
-
Filesize
14KB
MD51a6321f1581f21d4a51144db7b6a5a21
SHA1cb055e6e0912f1eef30b922791297a56def312bc
SHA256da7837f49de91572969106ce79fd6cba44aaf5bdacf050d276d60ba4da721a72
SHA5127041e43e41b2b7840f94a08850f32ed01cc5a38dc59ccec827ec686a69da00243585655a594104687b35c4bcda65c39ed836f00c49826ed6a73f797e35edc3c9
-
Filesize
18KB
MD564fedf37c989d516629879d164bf662c
SHA188187ef70d9a9737be86ee556ab9fb7cd58c11a8
SHA25639882f82ad62cf63636c781961c3dd80f2b7d0548775f83cd1b6cda630da1b82
SHA5126d28f3c0d3e3fd9118f48808fc821320273515d7b83fb280ef91363a15c519f7dc8e2d1381e8f542360e2e2d0fff14ee428f20d16358fecb2cbf21590d568d27
-
Filesize
19KB
MD5e52369e8ee77f20f3e689b1c0f2a1e85
SHA1f5fe53e54642671fb667b877450c0a75b0827b32
SHA256dae33e5cba5aed3cdc6dd3ea71f33f0fd2843d3414d1e38caa2f3ea78d37c328
SHA5124732a57581c32f4a9e9ddaab3368363d6597950c87d94bf3ffe01a8090fda04c05c683bbcba8827b632ef705232ce129c8c494c4a9492969c8d2c26299c335f1
-
Filesize
18KB
MD584e96e2ff335de32e5f98fde7360b59a
SHA1a6d0b7eb2f4faec90595fb7f20ac4898fee13514
SHA2561d6827080206df49684858a18874a5a204096979b12dc3ad32faef6f4f6b7902
SHA51221d5c6de0bbf5a6e08043e811f617bc701da16faec4c5c3fa339b00140807287ebf40f1490791aaeef07798009514195e9a8f411b932d877a1e100ac43d4e7f9
-
Filesize
17KB
MD55e22a9529e535dc36f9afc5a98d7679f
SHA1f509cc18a816c59514175577a71307062dc7fa66
SHA256e1c161cdb4ca9e04730e2c2bffc548a525279ac5a7448e6e091fce9f7eca3a52
SHA51267d3b9a163bddf0665f56a2e1673175ece601ceaca8a88e265c38935bd96b6fb533b44b3b907d321deb129d9a9af7f50a2d0679becb000718d81b5d6e36279f1
-
Filesize
6KB
MD5238e89e1268df648750b68a314ab55c6
SHA126dc8bbc3a3dafdd9416ee9113fd9fae74c2a5ca
SHA2567a36f82bd4915e044316c4699a84acfee973f4d97dfa6d74df203005e4ae6509
SHA512d54997ea013a89e542df57960718244fe84fe94f1330f847f480daee0b2b18f09fdb50f52d685f0a4a4ca7b3f80f9bf46ad7c705b476e1941c3bcf7a5398f386
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_0
Filesize168KB
MD5aa026c31d8bca19c4627e92c953aaf5c
SHA1491f776f11148f98a5188c05e20909ca80cd649a
SHA2567ab905110f39307971bc2a522b87ce1f8701b262a9c2700f98addac7eb879df1
SHA512a4359fa67429cb6d060c315d576afbcbda79b33cb8b0f26356f844f30ed4addb27cb139671ca4ac17dec20e202ec72a26e7774cc6ed8c3dc3239d9bf83528931
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_1
Filesize372KB
MD5bd24fc5b10e6356514cea7fbeea745b5
SHA18875d4f87fbdbd7b6a9285de7f24bfa926ebae85
SHA2569163bf6e203e54ae31949548b39e048119e6e62f633b586a361a88e4b30d0d2b
SHA512fa0d0810ff0152bcc0535a5fff56f387c36c04b9955b0f155d3e99bb8a7ec1deacdc9c2c58b415bc365bb51c19173854f459ac76a1e5b02bf8f9586580b929f2
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\7b4fd8111178d5b1_0
Filesize450B
MD500dcca204b669ca29c66e0e871b9d3b6
SHA129193c3d3c5b28457d37821b66af727d6cd84674
SHA256c3070df61a6e6cafe14c05ffa2f0bd5095c931f09dfa95037fbf5c71003f1dfb
SHA51290623ad48251f47727043eddb3fed64631ba65985a4a83e744c930b214674edde6a25ca0bfcaefcb69a724adc7c9043c1312eee685a89c22575ee4392bfeb73d
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Filesize336B
MD54ec297bd7234de9d55b9cb7d5b7d2eda
SHA1adf75e9816b5a9d5931f944b9b7941a37bfc2dbb
SHA2568d1e1cba9c2577dbbba0b5d1e8eb0f2b6760710f28491c2bd66c00fd102693ee
SHA51236704e0c59d1fe74b8d0011e5ae9e0accd9cd54815a5ec49482e156d3cebb44a19c10a3a91c3aefe329fb32d932284f9adda7417a6eed2ea9df68489a4768b72
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5c4648.TMP
Filesize72B
MD57333c09cd0c8ded555809f343f006749
SHA14574f2baeedca64b0ca620b639a768ddb1a3520e
SHA25655c85703b2e7302aba60b836026258d50b071bdb274ad0e7b5f406b69552ea1a
SHA512f530235fead4045ddb392ff5882ee9378ba1654ac3db4ab24610bfceaf3db428655b686264daf00e9fdbf0d2bd9d2daa19024ff9dd62002387947c72cbe171cc
-
Filesize
24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Site Characteristics Database\MANIFEST-000001
Filesize41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
8KB
MD5cf89d16bb9107c631daabf0c0ee58efb
SHA13ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA5128cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
-
Filesize
264KB
MD5d0d388f3865d0523e451d6ba0be34cc4
SHA18571c6a52aacc2747c048e3419e5657b74612995
SHA256902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
SHA512376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
-
Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
Filesize
9KB
MD56e4632a5d48ec83161dc0d57a3bcefa9
SHA18c7a6f4d130ff16b8954d5b3b107fa0ac4f0750b
SHA2563bb80bbe280be8677ba145983bfa0fc9678dd647350da015b21558fed5f1cd63
SHA512aed25afda11e3918c4cf3ccff5d9f7a25166301827d5301fb450fdf3a44a426569f36e106b837035a217ecf591e34aee9c6520e7e89a726cfe57f5f1b22f4f34
-
Filesize
9KB
MD5ea3b16c0046df140ab1861bd62fd4014
SHA113c681334d8438df7821fa9449906eda8c34971f
SHA2562045f4bceb05ef65a7befd0aaf274d4d2a5dff005102d666b94ba4c44d241de2
SHA51206e4cd0d37f3eaa0c4c8a252208cc3770090378ff7ea840d6dd3f6a2407620cb72f57f305c303f890da31eb33c6281d4c4d929fc3dda7df533882f65357de198
-
Filesize
5KB
MD524b2a2745d5c4d51ccc1556cc2d039bd
SHA1678288a46df71ecfa02402d532a5a7486c334ec5
SHA2564991e8dbd786ca39958121f49db75d0c4c39d4f199908c78817b40eab650a6a4
SHA51229f2dae9af8e1e855a2ccce2881d95b82450bfc368d64d70acbe90e57f627d7b8d785b868c99969eefb2f7b5d0c42b08cb544e6bd0c216e894b00499c30c433e
-
Filesize
13KB
MD5a7ca82c13790102cc031779f62c5d752
SHA1519b024425bb1174939c74ef4c3dd0c84b8817a4
SHA25637b1762f0ac6255483068651cdf478e2a5e57f804003769e02329d8370414a2f
SHA5121b7d402f2860b69f14c1005b2269e0c1b99d73c8e5f3895d1fb2f7d7c8f2a6ec1e63ad07a89977cb34ba202542d1f513c067ec845af254312b1658c52ca38123
-
Filesize
5KB
MD5c092bd647c8a7310a3310465d2c33f2c
SHA175b9b6a283c6b8590eb301daacc7b13a69ba1575
SHA2568b90e7be8a05ef0fe151de8decff4f1de77fb9331a4034fff70b03fc889f2e8d
SHA51295671eece31335178d6b6e68a41ad2e65dbf81fe48af2167c50c574dbf66d868d1a860523c21ca57eb86f084afba68dc74fe6616fd1a4dae8ccd2fc9f493a87b
-
Filesize
52KB
MD51d826b5f9603bdab8d9f7afb72ff4362
SHA1f6de64adfd6913e836a4e101a5498e361838cfb0
SHA2566e19459a2bd18e8bd5f6b66d26f165cf98146adc75ccd7e21dfbc0285f66d226
SHA5128d83c741b0f2000162206c884b326b47d3676f8393e6ee50883e26221061a83b8ccd225d044fa759d5d400de0a424795b967b6a09534ff81a6abd41591c3e086
-
Filesize
141KB
MD557086b02f74c3fe7b79a5e2e3d852322
SHA16420387225ddcd5210175de4f3fdb0ab2be8ee9c
SHA256a1b5be8d4aab349aff58ed34e1f3bc6647cf440830da0a12a8bd5a1c976c6407
SHA512b195eb9a9129863e75be603b00b85ecfe46360910529fb38513af6940f9d17efd56f234b47963452329cd85b16bebb5a85ab5d304743e57d33bafd5b59900468
-
Filesize
11KB
MD59620a48bfaea2e0f26b9092c7636e2ca
SHA16142d9c77ba11cf12ec2fe746659e9ea95a8ca53
SHA2567605c62c020ebd914e6942b8468a6c33f0bd6b14de7a3eef361bc770f74bde54
SHA5124e921cf69a6508b8d43aca6f301a9d96594492650c8f34c00d08627f806df7a364da7277af8ce5d291fa0658eede15c70cf9b19115a0147eb9e8fbe8a52b4320
-
Filesize
2KB
MD5e2f792c9e2dd86f39e8286b2ead2fc70
SHA18a32867614d2a23e473ed642056ded8e566687f9
SHA256ac354a4723aaa4f06bec385ddde4a4d0983ad51456f52b31a8068ec97d5b5ea7
SHA5126a7af0ca1efa65a89a9ca3b8df0d2e24f21d91673c60cdfeeb02d33647442b01d535497249542f40e66e0d2dd3e9f8ed1f4a201fd97138d07a2b71366737e580
-
Filesize
163KB
MD59b8d5611372559bb0c5ec7a5d3f5096a
SHA198cb279b6e94e424faf9f6baa86a0c84140bd569
SHA2569dece439a4472ee74f0a5e239172e6bdf9b05ce85a9f6eaf79598d0817eb6902
SHA512da044c7790191df4354585aeeb31428300fcd1478191b2d8ca445f90d79c3c61967e777b6dd1e098f2fdbc06d236f819d74392fdf94bb164c1c152f2477195ab
-
C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Subresource Filter\Unindexed Rules\9.53.0\Filtering Rules
Filesize73KB
MD5eabba602ad039867b52e30e3e59edc38
SHA1fac94381cb8bd64d6ee5247060a3a3103fcd6d56
SHA25668ef948a4727c058ed027c201eed5f749a508ae2732518188043af70e6e41e75
SHA5126c3fb4155fb43a544a4847794511a903a2e2b0dee2fac6c6378c735d8194ff0d7b095dc28eff96f01e42b97e3bac6c68b88fe25d6520dfab131acfdcf88adfac
-
Filesize
33KB
MD50f83ea8aad2d94a32037e90f2812611d
SHA166a2879b881176df793c94f6833441fe153e5135
SHA256628b2de57b5dde868a30e9c45ffc6ff35a820c93a90d3f4ff61a1ff5396eaf54
SHA512e676aa774c099e43c00ecd42d2f10ae194910d9b694629abdba763aefc1d2c541cb1133ad3bf74df08fc6f8fb32b3f3047c07375977ee8d0f8bad9eddb7bc388
-
Filesize
6KB
MD5bef4f9f856321c6dccb47a61f605e823
SHA18e60af5b17ed70db0505d7e1647a8bc9f7612939
SHA256fd1847df25032c4eef34e045ba0333f9bd3cb38c14344f1c01b48f61f0cfd5c5
SHA512bdec3e243a6f39bfea4130c85b162ea00a4974c6057cd06a05348ac54517201bbf595fcc7c22a4ab2c16212c6009f58df7445c40c82722ab4fa1c8d49d39755c
-
Filesize
865KB
MD5959460a18173908111523bbf4c39073e
SHA1c42a9a7042f6d87a6a9de7f9bf378f1fe9485fcc
SHA2565820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
SHA512291decc0f58cf71d7929a52d2c21a07590c02bcd202b73fb20391d6d0c7dcbe3aec24e02606f22dbd589ee2546a0eb8414c232f74ec646a1f26496c280705600
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
2KB
MD5edaae739979f3dd0fcf8b330b9a4fda1
SHA14179baa40aa058db022c20e5bf623f02f5cb7a45
SHA256b775d9fe9f98520adc7592cb8a727f7eaff1ca177d25df1ae34de8fbe0d4badb
SHA512a003cb7cd8fef2697b44d333fc1c333ca7d8747289c46700b21c27452e2f561ec844f89a75ae9e15ed12368a9c74bb2a6fe832206a54df6764a9b6a9782d7dbf
-
Filesize
5.3MB
MD5ab77bf4193e20a1af8bf52cafe057d29
SHA1fd7fb2c5d29f89cafe5dae054f421b00f7da0815
SHA256d00bcf7f27a6e97e26d2f57ff89a65a9a6f6b5f92d8dc1e892fddd4cce74481b
SHA51229b9cbf5ba4b465587ee2ecffc57837e17a12399d09259e95804623cf8b9b54a6800a2d5769ad5640fe7a67e88cd95a79e85db53860caddca9d3c4dc1083f441
-
Filesize
108KB
MD5b282ce9b81f606d1c6cbda554dcd4efa
SHA17554ca07096a2e410f2cd3c98beb7b7e6be27f3a
SHA2561893941e9dd1ca1296e7f575a9442fa1cc53dfeaf2d1bc94d01608ba9e7e31bb
SHA5129e71f3cb4ea67831dbee5bb4cbb2dbd9f8ff8ffd1158fe2fcac41c89169a9aa3236c8d163f7d4e9df5e2b70ba2be20fe3af97bef70be40f45dd11acb5b4bc184
-
Filesize
5KB
MD550538271d575cb519bcc0b62c765ad55
SHA10f3f7e3be914a5036bf2806a753b2f59a8b6a348
SHA256d9f5fc713470bb4e9ed71d2c8d3cfe023a23ca007bf5d8f8fba5839718efebbe
SHA5125ef14007796a5e061278c9dbece7e42d56d58c8ebba60729f7d97eee1f7b28d48e8680258d70cfb7dc5baf078fbfde1fabf476cf5528c5a263950e0500303138