Analysis

  • user interaction
    yes
  • max time kernel
    167s
  • max time network
    168s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    31/08/2026, 20:36

General

  • Target
    http://wavebrowser.co
  • Sample260831-zdkmvser21

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 9 IoCs
  • Drops file in Program Files directory 14 IoCs
  • Drops file in Windows directory 2 IoCs
  • Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

    When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 35 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://wavebrowser.co
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1820
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9043ec728,0x7ff9043ec734,0x7ff9043ec740
      2⤵
        PID:904
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1512,i,7714547575241957862,7735582917479824777,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2112 /prefetch:11
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:1644
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,15940028846397135794,13217273452214065078,262144 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2072 /prefetch:2
        2⤵
          PID:2380
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,16677923074742577782,16854907577659800700,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2424 /prefetch:13
          2⤵
            PID:1612
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2992,i,6324330436827206185,11901689582431985808,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3092 /prefetch:1
            2⤵
              PID:1052
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3008,i,7299012316433571393,2720116516280627095,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3116 /prefetch:1
              2⤵
                PID:3484
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4108,i,4680750138941290277,8009753404806450712,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4092 /prefetch:9
                2⤵
                  PID:4840
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,561880585283422160,13416293338831841725,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:1
                  2⤵
                    PID:1688
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3804,i,2801412059476792099,7172698387465781011,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3772 /prefetch:12
                    2⤵
                      PID:3440
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5036,i,9265715915936522380,15734673799157586547,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5064 /prefetch:1
                      2⤵
                        PID:3768
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6064,i,14107606630278711820,18203914450436656568,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:14
                        2⤵
                          PID:4432
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5028,i,13043650473371675895,10316751124497609221,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4968 /prefetch:14
                          2⤵
                          • Subvert Trust Controls: Mark-of-the-Web Bypass
                          • NTFS ADS
                          PID:572
                        • C:\Users\Admin\Downloads\Wave Browser.exe
                          "C:\Users\Admin\Downloads\Wave Browser.exe"
                          2⤵
                          • Executes dropped EXE
                          • Suspicious use of AdjustPrivilegeToken
                          • Suspicious use of WriteProcessMemory
                          PID:1856
                          • C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
                            "C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=wavOrgStub165%3don%7cWed%2c%2022%20Sep%202027%2000%3a00%3a00%20%2b0300"
                            3⤵
                            • Executes dropped EXE
                            • Drops file in Program Files directory
                            • System Location Discovery: System Language Discovery
                            • Suspicious use of WriteProcessMemory
                            PID:4824
                            • C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe
                              "C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=wavOrgStub165%3don%7cWed%2c%2022%20Sep%202027%2000%3a00%3a00%20%2b0300"
                              4⤵
                              • Executes dropped EXE
                              • Loads dropped DLL
                              • Adds Run key to start application
                              • Checks whether UAC is enabled
                              • System Location Discovery: System Language Discovery
                              • Suspicious behavior: EnumeratesProcesses
                              • Suspicious use of WriteProcessMemory
                              PID:2216
                              • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver
                                5⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Checks whether UAC is enabled
                                • System Location Discovery: System Language Discovery
                                • Modifies registry class
                                • Suspicious use of WriteProcessMemory
                                PID:1536
                                • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                  "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user
                                  6⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Modifies registry class
                                  PID:5068
                                • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                  "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user
                                  6⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Modifies registry class
                                  PID:1208
                                • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                  "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user
                                  6⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Modifies registry class
                                  PID:4908
                              • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTU3LjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xNTcuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9InswMDYwQUQyMS01NTM3LTRGQTEtOTM5My0wMUU2OUJBMTZGMjh9IiB1c2VyaWQ9IntjN2JmMDgzMi00NDBlLTQ5MzItYTcwZS0xZjRiNzA2NDE0MGV9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0iezdDODVCMzRCLUQxNzItNEZGMi05NTExLUE4NDdDQjc3QTQ0Q30iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iMTYiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjIwMDAuNDkzIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7RjZGNjBBQ0UtNzFBRC00NjEwLTgwRDQtOTI1MzcyOUZCNEI3fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjE1Ny4wIiBsYW5nPSJlbiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iNDUxIi8-PC9hcHA-PC9yZXF1ZXN0Pg
                                5⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Checks whether UAC is enabled
                                • System Location Discovery: System Language Discovery
                                • System Network Configuration Discovery: Internet Connection Discovery
                                PID:1056
                              • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=wavOrgStub165%3don%7cWed%2c%2022%20Sep%202027%2000%3a00%3a00%20%2b0300" /installsource otherinstallcmd /sessionid "{0060AD21-5537-4FA1-9393-01E69BA16F28}"
                                5⤵
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Checks whether UAC is enabled
                                • System Location Discovery: System Language Discovery
                                PID:1656
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6752,i,1774380872589154461,11431327988558722900,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5020 /prefetch:14
                          2⤵
                            PID:3048
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6676,i,11831616391149445469,7269494380251211495,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5328 /prefetch:14
                            2⤵
                              PID:2472
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4996,i,12193665967353641522,1424741945262817100,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7036 /prefetch:14
                              2⤵
                                PID:2832
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5352,i,6042843743539994252,5476173946175761936,262144 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6776 /prefetch:10
                                2⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:4404
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5352,i,12415345791308696923,8734269197775513138,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6776 /prefetch:1
                                2⤵
                                  PID:4900
                              • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                1⤵
                                  PID:1088
                                • C:\Windows\system32\svchost.exe
                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                  1⤵
                                    PID:5112
                                  • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                    "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding
                                    1⤵
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    • Checks whether UAC is enabled
                                    • System Location Discovery: System Language Discovery
                                    • Suspicious use of WriteProcessMemory
                                    PID:3972
                                    • C:\Users\Admin\Wavesor Software\SWUpdater\Install\{07FB25A6-5D59-4A1F-A8B5-B973E2CB393C}\WaveInstaller-v1.5.24.21.exe
                                      "C:\Users\Admin\Wavesor Software\SWUpdater\Install\{07FB25A6-5D59-4A1F-A8B5-B973E2CB393C}\WaveInstaller-v1.5.24.21.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp"
                                      2⤵
                                      • Executes dropped EXE
                                      • System Location Discovery: System Language Discovery
                                      • Suspicious use of WriteProcessMemory
                                      PID:1604
                                      • C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe
                                        "C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\wavebrowser.packed.7z" --wid=3jie04ol --installerdata="C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp"
                                        3⤵
                                        • Executes dropped EXE
                                        • Drops file in Windows directory
                                        • Modifies registry class
                                        • Suspicious behavior: EnumeratesProcesses
                                        • Suspicious use of WriteProcessMemory
                                        PID:1500
                                        • C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe
                                          C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.24.21 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff7df2f76b8,0x7ff7df2f76c4,0x7ff7df2f76d0
                                          4⤵
                                          • Executes dropped EXE
                                          PID:2100
                                        • C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe
                                          "C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp" --create-shortcuts=0 --install-level=0
                                          4⤵
                                          • Executes dropped EXE
                                          • Drops file in Windows directory
                                          • Suspicious use of FindShellTrayWindow
                                          • Suspicious use of WriteProcessMemory
                                          PID:4604
                                          • C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe
                                            C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.24.21 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff7df2f76b8,0x7ff7df2f76c4,0x7ff7df2f76d0
                                            5⤵
                                            • Executes dropped EXE
                                            PID:856
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" https://wavebrowser.co/thank-you?tid=3jie04ol&src=lp0-obgc-wav-igWcwHRvCTGYKhwOig-ab15-w64-vttt-orgn-brwsr&iid=wav-org&uid=c7bf0832-440e-4932-a70e-1f4b7064140e
                                          4⤵
                                          • Suspicious use of WriteProcessMemory
                                          PID:3260
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9043ec728,0x7ff9043ec734,0x7ff9043ec740
                                            5⤵
                                              PID:4140
                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --cd-upload --from-installer
                                            4⤵
                                            • Executes dropped EXE
                                            • Loads dropped DLL
                                            • Enumerates system info in registry
                                            • Modifies data under HKEY_USERS
                                            • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                            • Suspicious use of FindShellTrayWindow
                                            • Suspicious use of SendNotifyMessage
                                            • Suspicious use of WriteProcessMemory
                                            PID:2504
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=iid=wav-org --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=src=lp0-obgc-wav-igWcwHRvCTGYKhwOig-ab15-w64-vttt-orgn-brwsr --annotation=uc=20260831 --annotation=uid=c7bf0832-440e-4932-a70e-1f4b7064140e --annotation=ver=1.5.24.21 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8e5442708,0x7ff8e5442714,0x7ff8e5442720
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:4532
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2036 /prefetch:2
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5344
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2100 /prefetch:11
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              • System Time Discovery
                                              PID:5356
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2536 /prefetch:13
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5456
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3244 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5556
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3556 /prefetch:9
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5660
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3740 /prefetch:9
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5700
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4324 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5468
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4360 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5540
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4404 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5484
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4940 /prefetch:1
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6140
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4976 /prefetch:1
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6132
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4224 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5472
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5604 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:3052
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3636 /prefetch:1
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:1124
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4468 /prefetch:1
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6028
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6020 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:1772
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6224 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:6124
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6068 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5848
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6088 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              • Loads dropped DLL
                                              PID:5488
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6132 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:6104
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6712 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5820
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6792 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5508
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6920 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:4080
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7088 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:2752
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6188 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5956
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7372 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:4960
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6620 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:1772
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6216 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:3612
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6444 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5352
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6428 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5740
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6476 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5364
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6492 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5820
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5744 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:2752
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7420 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:3304
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7144 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:4960
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6108 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5168
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6116 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5472
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7996 /prefetch:14
                                              5⤵
                                              • Executes dropped EXE
                                              PID:5712
                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8156 /prefetch:14
                                              5⤵
                                                PID:5848
                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8184 /prefetch:14
                                                5⤵
                                                • Executes dropped EXE
                                                PID:5720
                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8348 /prefetch:14
                                                5⤵
                                                • Executes dropped EXE
                                                PID:6204
                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8492 /prefetch:14
                                                5⤵
                                                • Executes dropped EXE
                                                PID:6252
                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8516 /prefetch:14
                                                5⤵
                                                • Executes dropped EXE
                                                PID:6260
                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8536 /prefetch:14
                                                5⤵
                                                  PID:6272
                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8944 /prefetch:14
                                                  5⤵
                                                    PID:6292
                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9080 /prefetch:14
                                                    5⤵
                                                      PID:6300
                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9132 /prefetch:14
                                                      5⤵
                                                        PID:6308
                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9524 /prefetch:14
                                                        5⤵
                                                          PID:7116
                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9500 /prefetch:9
                                                          5⤵
                                                            PID:5736
                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9820 /prefetch:1
                                                            5⤵
                                                              PID:7684
                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9896 /prefetch:9
                                                              5⤵
                                                                PID:7696
                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10164 /prefetch:1
                                                                5⤵
                                                                  PID:6776
                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9836 /prefetch:1
                                                                  5⤵
                                                                    PID:6784
                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10220 /prefetch:9
                                                                    5⤵
                                                                      PID:6792
                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10588 /prefetch:14
                                                                      5⤵
                                                                        PID:6892
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10744 /prefetch:14
                                                                        5⤵
                                                                          PID:7884
                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10916 /prefetch:1
                                                                          5⤵
                                                                            PID:5488
                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10972 /prefetch:1
                                                                            5⤵
                                                                              PID:6576
                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11100 /prefetch:9
                                                                              5⤵
                                                                                PID:6152
                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11452 /prefetch:1
                                                                                5⤵
                                                                                  PID:7192
                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11472 /prefetch:9
                                                                                  5⤵
                                                                                    PID:7196
                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10900 /prefetch:1
                                                                                    5⤵
                                                                                      PID:7320
                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11996 /prefetch:9
                                                                                      5⤵
                                                                                        PID:7512
                                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12148 /prefetch:9
                                                                                        5⤵
                                                                                          PID:6424
                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12336 /prefetch:1
                                                                                          5⤵
                                                                                            PID:6772
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12344 /prefetch:9
                                                                                            5⤵
                                                                                              PID:7432
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12304 /prefetch:1
                                                                                              5⤵
                                                                                                PID:6332
                                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12508 /prefetch:9
                                                                                                5⤵
                                                                                                  PID:6812
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6260 /prefetch:1
                                                                                                  5⤵
                                                                                                    PID:6364
                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13008 /prefetch:9
                                                                                                    5⤵
                                                                                                      PID:6660
                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8476 /prefetch:1
                                                                                                      5⤵
                                                                                                        PID:9652
                                                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8348 /prefetch:1
                                                                                                        5⤵
                                                                                                          PID:9668
                                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8288 /prefetch:9
                                                                                                          5⤵
                                                                                                            PID:9684
                                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9920 /prefetch:1
                                                                                                            5⤵
                                                                                                              PID:9844
                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3240 /prefetch:1
                                                                                                              5⤵
                                                                                                                PID:7456
                                                                                                        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                                                          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjIwMDAuNDkzIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7RUIxNDlBRDItQ0U0RS00RjUxLUI3RkMtQTE0OUZBQTRDQ0FGfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS41LjI0LjIxIiBsYW5nPSJlbiIgYnJhbmQ9IiIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJ3YXZPcmdTdHViMTY1PW9uIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGRvd25sb2FkZXI9ImJpdHMiIHVybD0iaHR0cHM6Ly9jZG4uc3d1cGRhdGVyLmNvbS9idWlsZC9XYXZlQnJvd3Nlci9zdGFibGUvd2luLzExMjA5ODgwMzcxNDEvNjQvV2F2ZUluc3RhbGxlci12MS41LjI0LjIxLmV4ZSIgZG93bmxvYWRlZD0iMTE0MTcwOTUyIiB0b3RhbD0iMTE0MTcwOTUyIiBkb3dubG9hZF90aW1lX21zPSI5MjQzIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNjY5IiBkb3dubG9hZF90aW1lX21zPSIxMDIwNSIgZG93bmxvYWRlZD0iMTE0MTcwOTUyIiB0b3RhbD0iMTE0MTcwOTUyIiBpbnN0YWxsX3RpbWVfbXM9IjExNjU3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
                                                                                                          2⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • Checks whether UAC is enabled
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                          PID:5328
                                                                                                      • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                                                        "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"
                                                                                                        1⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • Loads dropped DLL
                                                                                                        • Checks whether UAC is enabled
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        PID:2252
                                                                                                      • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe
                                                                                                        "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"
                                                                                                        1⤵
                                                                                                        • Executes dropped EXE
                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                        • Suspicious use of WriteProcessMemory
                                                                                                        PID:3668
                                                                                                        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                                                          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c
                                                                                                          2⤵
                                                                                                          • Executes dropped EXE
                                                                                                          • Loads dropped DLL
                                                                                                          • Checks whether UAC is enabled
                                                                                                          • System Location Discovery: System Language Discovery
                                                                                                          • Suspicious use of WriteProcessMemory
                                                                                                          PID:1876
                                                                                                          • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                                                            "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr
                                                                                                            3⤵
                                                                                                            • Executes dropped EXE
                                                                                                            • Loads dropped DLL
                                                                                                            • Checks whether UAC is enabled
                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                            PID:2472
                                                                                                      • C:\Windows\system32\svchost.exe
                                                                                                        C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                        1⤵
                                                                                                          PID:4592

                                                                                                        Network

                                                                                                              MITRE ATT&CK Enterprise v16

                                                                                                              Replay Monitor

                                                                                                              Loading Replay Monitor...

                                                                                                              Downloads

                                                                                                              SWUpdater.exe

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe
                                                                                                              • Size 108KB
                                                                                                              • SHA256 676edd3695c74aac087de2e11b05f1dc2673830065d8fbc1fcfcfb5a15919fb0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              SWUpdaterBroker.exe

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterBroker.exe
                                                                                                              • Size 97KB
                                                                                                              • SHA256 76e5d19341e52ebd80fc13ad81d8bf0bccf8e599217d06058a21dd2b0d43e4fd
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              SWUpdaterCore.exe

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterCore.exe
                                                                                                              • Size 208KB
                                                                                                              • SHA256 f3d4a8f1bd4070af6bb4460f4940c15b2670719d7563192669956f4f8d900c67
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              SWUpdaterOnDemand.exe

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterOnDemand.exe
                                                                                                              • Size 97KB
                                                                                                              • SHA256 3b231a2121c07b2153b4dfe3f402308b795904827960d8c390fe6192416125e7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              psmachine.dll

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psmachine.dll
                                                                                                              • Size 259KB
                                                                                                              • SHA256 ad2143218dcb5761c96f656e630560a291c53163b5a023ddebadfd14c44ac318
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              psmachine_64.dll

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psmachine_64.dll
                                                                                                              • Size 323KB
                                                                                                              • SHA256 05c209ca2512b2b7edd70df56753ff2a137fad63c456f9d558e5b8cb89e07b05
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              swupdater.dll

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\swupdater.dll
                                                                                                              • Size 1.0MB
                                                                                                              • SHA256 fb241530e3d716c753be0141376ab8974e812aa62facbfda251c67a60d7720a7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              swupdaterres_en.dll

                                                                                                              • Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\swupdaterres_en.dll
                                                                                                              • Size 42KB
                                                                                                              • SHA256 be83143f61ca49317613663b6025c9df5b52482b454235b76c478817a6c611df
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              BookmarkMergedSurfaceOrdering

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                                                              • Size 6B
                                                                                                              • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              BrowsingTopicsState

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
                                                                                                              • Size 414B
                                                                                                              • SHA256 fa5ab82e4198a3c40cef80bc7f42bd6a305847008c5b4583c377161230e09fe0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f_000023

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
                                                                                                              • Size 343KB
                                                                                                              • SHA256 07afd00bc6b13e35f702104aebea04e61d7f90b8447559279895e5f72cabd471
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                              • Size 912B
                                                                                                              • SHA256 f5a96fcd3f98ea86af37d7c17a44c819930a4f7351fa22e436a7ba00a20f1e59
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Network Persistent State

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                                                                                              • Size 7KB
                                                                                                              • SHA256 bfb4baaa49b0a41b2e9fd5e21fc265639aaa7f0b4a661de0e0c2b131cf2a296f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              SCT Auditing Pending Reports

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                                                                                              • Size 2B
                                                                                                              • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              Preferences

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                              • Size 12KB
                                                                                                              • SHA256 66d36e33c84dd6d7e5b936391545a1d5c14720865c1435ecc889a77ac5a68ea8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                              • Size 12KB
                                                                                                              • SHA256 3c6cc8ec71d2f0bf3192d2e827254071c9fd979f1c9237432771f39f50036ce9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                                                                                              • Size 13KB
                                                                                                              • SHA256 0adfd22ab536f46d8e3b26e1319af5ba5179aecf4df37774de4b67ed49d96b43
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Secure Preferences

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                                                                                              • Size 17KB
                                                                                                              • SHA256 78f2b9e9ebc08798880cb4679beee8aef2e584a4e9691c5edb1c0165ca1273af
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                              • Size 96B
                                                                                                              • SHA256 478886de23bed0e0fa6b1b6234b8aa9a43563157d523679026b17a707c604f88
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                              • Size 120B
                                                                                                              • SHA256 0b5d46ac90660a46ef69f4948fae871798a7351676afdb505f8d6d27a5e01c93
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Local State

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                              • Size 116KB
                                                                                                              • SHA256 14eaff14c4a3019751520d58c1bcd95062fe59faa21c67cb35d787320c4e4038
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local State

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                              • Size 116KB
                                                                                                              • SHA256 9b0250e503e412313267aca148332c6033202c4fc404dfa806cfdd6e2d040a73
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local State

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                              • Size 116KB
                                                                                                              • SHA256 ceaa313ac44857265ced921e071d58c3820af5514e006df03307140a492fb7b2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local State

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                              • Size 115KB
                                                                                                              • SHA256 c048f2ac0dd202d3df8f791d658835ce1a61f89e87d13671efd02c1b769fca42
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local State

                                                                                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                                                                                              • Size 116KB
                                                                                                              • SHA256 f1f78abcf532f80f2ecff7119399e7b84abe378b3d97ae92a8879e0df0fa29eb
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              SWUpdaterSetup.exe

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
                                                                                                              • Size 795KB
                                                                                                              • SHA256 d6590aecba25227fc950fc2951d604a41ad3ce496db8c1b76035dacefd795596
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              c760c036-2aba-462a-9ee3-ba781d52327d.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\c760c036-2aba-462a-9ee3-ba781d52327d.tmp
                                                                                                              • Size 1B
                                                                                                              • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              guiEF48.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp
                                                                                                              • Size 4KB
                                                                                                              • SHA256 1c89ff2b456d9ac2ee61df9b125bd4d225e17e190fccfca9d2543f57518cc7b0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1010211392\CRX_INSTALL\js\background.js
                                                                                                              • Size 27KB
                                                                                                              • SHA256 0ac1e8362ee965e90e88ae0eeb81765cf19fda8274adcb5a14b79f7b3f9aac79
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1639119173\CRX_INSTALL\images\icon16.png
                                                                                                              • Size 530B
                                                                                                              • SHA256 4f10ba59d9eddd0d5f5a6bdd45df96f781bd30c1ba3c4ff32f6da1e0442b931f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              options.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1716781200\CRX_INSTALL\options\options.html
                                                                                                              • Size 5KB
                                                                                                              • SHA256 b27f0368c761952a1675217b834b6ff84fa29e4ce585f76185557b7e7eae506e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              pdfHandler.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1716781200\CRX_INSTALL\pdfHandler.html
                                                                                                              • Size 928B
                                                                                                              • SHA256 e43cc6e3bee633edfd6566c9b7db5360d897b2d6767a2f56212fefff1bd89464
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              preferences_schema.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1716781200\CRX_INSTALL\preferences_schema.json
                                                                                                              • Size 7KB
                                                                                                              • SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1867982997\CRX_INSTALL\background.js
                                                                                                              • Size 985KB
                                                                                                              • SHA256 be7660d33aff75fbb8510db53d7c8f92091056f3810b97ff62e435f5b2ee2d0d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              popup.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1867982997\CRX_INSTALL\popup.html
                                                                                                              • Size 211B
                                                                                                              • SHA256 266b3b0f498e7c5dd88e17b9e7b0687655430c7d4fb6fc452f6e6ee03db62ed5
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon128d.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_193127916\CRX_INSTALL\icons\icon128d.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 7ed951f0a157dac2b42a2b003fe76e085017cf425c827b05bf759ebb55db3d6a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_193127916\CRX_INSTALL\js\background.js
                                                                                                              • Size 29KB
                                                                                                              • SHA256 55345b40109f7c1ee0e67da02202919b7b23e47b14651a19986bb535d2d8bd8a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              bg-wrapper.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_557126563\CRX_INSTALL\bg-wrapper.js
                                                                                                              • Size 84B
                                                                                                              • SHA256 0a48213b9a577ba7d1dad1f28e6d7394d6ec81ddb6a3d240b6fa21071a22243c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              chunk-vendors.67b6e527.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_557126563\CRX_INSTALL\css\chunk-vendors.67b6e527.css
                                                                                                              • Size 386KB
                                                                                                              • SHA256 2b6e7fa075a7c50adac2642622b0b4e48b375ba62d10a7d69cd83d2ff27b7194
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              options.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_557126563\CRX_INSTALL\options.html
                                                                                                              • Size 1KB
                                                                                                              • SHA256 c661f2ed61e9cbf0bd28cf19e3fa9ae1c888b72775d0e378a726160a4be40c3f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon-128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-128.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 77e6c0d3d315f749a624631280c7f4015167fe671cc954505122224fce069f52
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon-16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-16.png
                                                                                                              • Size 567B
                                                                                                              • SHA256 e6b3b0479ef3462a37cf516e0b4512df3f6f9ff5d3db06114c6b7885d402f17a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon-32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b8b24ec34a5426196a274d0ca41d5f07290ccd9b2f37c01b3c291f0384cf68aa
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon-48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-48.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 fc359cce0e73f3aa76820730429220c1910b75be6bc99201d9db86279aeddebb
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              LOG.old

                                                                                                              • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5556_2306416\Sync Data\LevelDB\LOG.old
                                                                                                              • Size 324B
                                                                                                              • SHA256 9b16bb23718670e853db3d689be45d1be10e2fb02e89e041364356fa5b9a680a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              f_000015

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000015
                                                                                                              • Size 47KB
                                                                                                              • SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                              • Size 984B
                                                                                                              • SHA256 8feea2e9177b5a458ef59770b89d2610b05fbcde5759639d062fc4c7d2182e3a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              the-real-index~RFe5a97ec.TMP

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a97ec.TMP
                                                                                                              • Size 48B
                                                                                                              • SHA256 b29071b8c44c6e8de78c4a1288d7cbf3b7b12e45f26630da450f9693b439e3b8
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              MANIFEST-000001

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extension Rules\MANIFEST-000001
                                                                                                              • Size 41B
                                                                                                              • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              messages.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\_locales\en\messages.json
                                                                                                              • Size 175B
                                                                                                              • SHA256 c5cea8c6fe04b30d8a5490f0bbddd0b3dc3fa4382dde777105bb3e80d2992dc8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              _ruleset1

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\_metadata\generated_indexed_rulesets\_ruleset1
                                                                                                              • Size 779B
                                                                                                              • SHA256 5b2f98bb229491c91f7b10e10b22c3f42244221864d9fe17933800f791381ba0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              options.e6e84e00.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\css\options.e6e84e00.css
                                                                                                              • Size 613B
                                                                                                              • SHA256 11db5186be7fb14d46e0e42cb0229831754682ee3cacb8ce2613ae9b6684c4c2
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              gmail128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\gmail128.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 ccdaa6965bb0b82ecefb62919324815cabef742506d77de79e36f7beab3fa573
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon128.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 cc02d3770d0f96623c09e5334a915e7ddb96ecddb3db0ba81c238a70748d5365
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon16.png
                                                                                                              • Size 501B
                                                                                                              • SHA256 5de849a40397f1535caa858fc91b7281a806a8a64b05e4e4ed9c572b42b99325
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 aa6532b77ed229bf310e1c62c8e7b765d06e3503e6b9ee60bb328f596d8ecab3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon48.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 3377be29ab5b2f1bc34d33ef075e5c98cf87edc9c6c1e6a6eaa5448b079ab861
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon64.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 d77621fec926893d93151e5b1c25b5574761f4639d418837c118fc4e3bb39442
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              ymail128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\ymail128.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 90c24565cca615f4c105adbc869516d104fc4ef4b8e16b687b138ef1e3ff4b52
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\js\background.js
                                                                                                              • Size 168KB
                                                                                                              • SHA256 a0c6c4ba721d577350bcfc10ffa4491f87abc04f2fc7eacf0fb650fde4e8376d
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              chunk-vendors.8d4b78a9.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\js\chunk-vendors.8d4b78a9.js
                                                                                                              • Size 289KB
                                                                                                              • SHA256 ed951b5d3a0416421fbbb2ce879297b258c169c7c05744fa21506e6547c28402
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              options.00bb6fbd.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\js\options.00bb6fbd.js
                                                                                                              • Size 36KB
                                                                                                              • SHA256 07faf94d6340d2f5ca395c57037b5e98f6277bcbadb72c6091d092508dbbdeff
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              manifest.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\manifest.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 fa430dc95ee3e43237f36cf6832e75cc0a8cdd472467c61a74e50bcf20b03872
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              rules.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\rules.json
                                                                                                              • Size 316B
                                                                                                              • SHA256 8b8dca5d206ffcfddfabdf3c0c90f97da2bc8c993675ce616891745413ac93a7
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              1441d5003fc41347081a.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\1441d5003fc41347081a.png
                                                                                                              • Size 19KB
                                                                                                              • SHA256 9b63e0f6bc2edb310ee28491952c00e3e4f27c6549e17741b4550b8a1448bdeb
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              5ab6e20e15091cf40cd4.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\5ab6e20e15091cf40cd4.png
                                                                                                              • Size 18KB
                                                                                                              • SHA256 e860e7143215fb01c6933e874b4bd8e81a281807e86375d2c995145dad07eee4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              contentScript.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\contentScript.js
                                                                                                              • Size 3KB
                                                                                                              • SHA256 177fd8e3363bdafde32f4ef0931306b21cb2f8bece66db68f396e18bab14ae96
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              cc_icon.svg

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\cc_icon.svg
                                                                                                              • Size 828B
                                                                                                              • SHA256 5ce81498f6de2b05ed5d5111685623ee38294f55bd47f4206a6c1c3c30f7b925
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_active.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 5c3974276e1412bf4ef71093b457b503629e011679b6eff4ac1925cc2db00604
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_active_128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_128.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 77377ebbcc482ee2a837583527aade9091b17e76c10fef9a691b866953c766b1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_active_16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_16.png
                                                                                                              • Size 469B
                                                                                                              • SHA256 7bb800d30119c576562888461732dc9e92897bdaa63c57ab2c52ea6bab5b0c21
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_active_32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_32.png
                                                                                                              • Size 949B
                                                                                                              • SHA256 721708a291f32be454db3a14af39439e9b9de3449bfe2bec44a96cb5de248588
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_active_48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_48.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 d8075f193943665e657704bb5a674766fee18d44e696987027b66b0ef8e3048a
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_active_64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_64.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 1168b72fd574437e6e4b1349b341d635df7de44ac2965b6452c9c00e1d932ccf
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_disabled.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 f3caae299b85353d574b01c0273c9c73736de72bf27c688746efec3a102f33c9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_disabled_128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_128.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 a341dc32c5af1a8b6519ca7882478e98b805a29d0dae41f06ed3140530a48dd9
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_disabled_16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_16.png
                                                                                                              • Size 555B
                                                                                                              • SHA256 ec5e8da78d0cd11158728466c042b6907e14aeb0efb5bd9fba272d98775ea4d1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_disabled_32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 053058e2f342c1c024864db35d1891d82fd4eec0393875d6706304ed265b004e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_disabled_48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_48.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 d498880da06ca886d04a43aa15314681b74987513a5feb67c530b01a6c61f1dc
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon_disabled_64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_64.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 5a398d86965280f3be8de88fb734e6d71f49f9379136652ee00404c24dfc351d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              first-time-open.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\images\first-time-open.png
                                                                                                              • Size 37KB
                                                                                                              • SHA256 cc59f811aae1a001f77b44bd2ae633d48f164cc1c96e55d5a8c0830563dcf3e6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\images\[email protected]
                                                                                                              • Size 107KB
                                                                                                              • SHA256 c71a78a412e7dc7d611ab31cf0a0d741934e450c139e9718258d83ae92083df0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              manifest.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\manifest.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 8ee2d6f6863a9591fedd2e09b40184a17eaf75942fc0883052a9e1e6ba25ee47
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              popup.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\popup.js
                                                                                                              • Size 144KB
                                                                                                              • SHA256 a43d0fb7ade43568ffd6f23ec07c5ad6de5968e2a219ef8b0086495d5ae58e02
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              messages.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\_locales\en\messages.json
                                                                                                              • Size 87B
                                                                                                              • SHA256 4da1efa11e4dd6704473fe530af1f90fc80cf4b63b31ec9b954298492342370f
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              chunk-vendors.b71cb11a.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\css\chunk-vendors.b71cb11a.css
                                                                                                              • Size 316KB
                                                                                                              • SHA256 6d20fb764f5243dd7f8ae359521ebaf9fb226cfa88fed4e485d494933954045a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              screenshot.2318cbb4.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\css\screenshot.2318cbb4.css
                                                                                                              • Size 3KB
                                                                                                              • SHA256 a1e7e1d010612c3c7b05ac4b685e23e38e15a8625cf216faa2f714c1a3367670
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              favicon.ico

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\favicon.ico
                                                                                                              • Size 1KB
                                                                                                              • SHA256 c022f7502beaf6694716e90907598847e31cd52e5f74b5616f2ae67f1848c76c
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon128.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 4b162b2ff5c2574d3a2cc3306cbc20be4111f163334d263308d7ebd2ffd605ee
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon16.png
                                                                                                              • Size 451B
                                                                                                              • SHA256 8fe0ef8cede16f0c6b2d0bb6ad54c467cbad370daa335199257a06b04ed7780e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon32.png
                                                                                                              • Size 739B
                                                                                                              • SHA256 28563cd75104bf3c62e053bb0196619969597a839f259442992d5eaf6a429b0d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon48.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 634e4dd9a4075c853710fd21ffce989dec4017ce5dd53a6cf9d399ab0f02f02b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon64.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 ade51ad2884b6d45203ff221ab273f7f4d00b48466d287624e30235c31d5815b
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              chunk-vendors.415c12a6.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\js\chunk-vendors.415c12a6.js
                                                                                                              • Size 480KB
                                                                                                              • SHA256 f53209df9570da789a0df7b82bb2a896bb293500115611286291b19f7600e916
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              screenshot.cf3394a8.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\js\screenshot.cf3394a8.js
                                                                                                              • Size 19KB
                                                                                                              • SHA256 4330837a55f8f307fbca14ae44f7b21daf05758a5bb779e052560c0d1fbde46b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              manifest.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\manifest.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 606cad9061e27f77eccf8e1554ab864e3941660595d5e51c2fcc72274de966bf
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              screenshot.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\screenshot.html
                                                                                                              • Size 1KB
                                                                                                              • SHA256 339055bcc7c121c24012afb2bc50350c7af6b8c8499666540623dee40ed7f987
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              contentscript.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_329831268\CRX_INSTALL\contentscript.js
                                                                                                              • Size 7KB
                                                                                                              • SHA256 3569ba9b3ef46b09dea633f6c175adaca9d4961aab3ed2aa8ea858996b8277b5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              contentstyle.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_329831268\CRX_INSTALL\contentstyle.css
                                                                                                              • Size 535B
                                                                                                              • SHA256 201f4e0732b06699bbccbe8bcd5821f20fcb46b8827e648ac87326fd2205f789
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              messages.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\_locales\en\messages.json
                                                                                                              • Size 87B
                                                                                                              • SHA256 e2768b7e87c9ef697ef77987ee01895262a7baa11b01067861081f12ba1151cf
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              reader.ca8c9b0f.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\css\reader.ca8c9b0f.css
                                                                                                              • Size 521B
                                                                                                              • SHA256 c81c0bafba038ecadbf0c01b981e75d1cf25e017b3f25d9fcc005b29cadc2da3
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon128.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 7fc819dacf90e4b07bc087b1e51f1287bc859605341e8a1a5404adac94e07bd0
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon16.png
                                                                                                              • Size 605B
                                                                                                              • SHA256 09780ea3eaa0a432b03214025febb59c28fd6e105a775f065037c5e9720fa150
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon16d.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon16d.png
                                                                                                              • Size 588B
                                                                                                              • SHA256 d5ada7064d7ee67144d11a33a3c28b7856912f4989c5213978659a4ef965409e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 9fd76e5d4ba12a800a2368f26639a0d81b542bf65fd9f7cdf9376a9e50e0d66d
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon32d.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon32d.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 4d6b2fb743bdc348a3babd96a96cd6bca6cc191bfd02524737a491ddc99a7ef4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon48.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 ce40935cdecdbb0be009f6df6973ef9a737ff44e788550efd941111037e208ef
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon48d.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon48d.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 db48f163264c1f4aefdf6b4c26d9b5423e4bede72b99ec3ab85071fcc42068a6
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon512.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon512.png
                                                                                                              • Size 4KB
                                                                                                              • SHA256 979d92ae59f80fab2a041ca2d8b394dfa2024d6c9d4d30a28dca8e7accbbf283
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon64.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 72ebbbc69ea5f2374db8f108b76173c2f80bf5d649650f64abb251684b3db74e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon64d.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon64d.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 2fdfb515ccb51789e74df228e98001430e21ae5b6c5e431272507bf2b9b00539
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              chunk-vendors.4dc0582e.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\js\chunk-vendors.4dc0582e.js
                                                                                                              • Size 221KB
                                                                                                              • SHA256 c94db3308a5553ce30282d8baf4132d9bc37256952dd0e4de78fc9fdac1b0a4f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              content-script.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\js\content-script.js
                                                                                                              • Size 46KB
                                                                                                              • SHA256 961e1d01f501a060a9aecc8bdbf7ff5a332a7b4f8d7d44c5daaae39cc16d6270
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              reader.b6d0bc02.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\js\reader.b6d0bc02.js
                                                                                                              • Size 13KB
                                                                                                              • SHA256 dd5b116a1f7a984a691fa43ee0fa5cbda0cc59daf64bb91a56b29b9d51bc9e78
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              manifest.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\manifest.json
                                                                                                              • Size 1KB
                                                                                                              • SHA256 14044fc911ce7cb164a39b669dcd52b060b25a667283b252ab44162c6f495ec4
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              reader.css

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\reader.css
                                                                                                              • Size 19KB
                                                                                                              • SHA256 2848789361e63ec9b4c2f91c78cab85a9ecf77aad87e3506f2725c1e8b4efa84
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              reader.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\reader.html
                                                                                                              • Size 1KB
                                                                                                              • SHA256 5029ca5e84e047ccff7049ae3688eebfa94bc1db6d0396eaea689c5347dd92d8
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              bg.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.8_0\js\bg.js
                                                                                                              • Size 22KB
                                                                                                              • SHA256 9b50ad7cc89f51054fd27c4957a461fc8cb04edeab927b9fc803e1236ba4149c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              content.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.8_0\js\content.js
                                                                                                              • Size 11KB
                                                                                                              • SHA256 a93ea87f4d98ae7425fbaaf65a508d77caaa711a55cfb2fb9dca8bdcd506b7f5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              index.ts-loader-9b1e8140.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.4_0\assets\index.ts-loader-9b1e8140.js
                                                                                                              • Size 341B
                                                                                                              • SHA256 9b1e8140d81f670fb842850a79ef2495b96683ed54356e5c9cd237a3e9ecfa19
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              service-worker-loader.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.4_0\service-worker-loader.js
                                                                                                              • Size 40B
                                                                                                              • SHA256 ff5f9b7a068f65eff2d4f8cb6991d3ea079b27da3e7c8953097d54cd8294b1e7
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              sidebar-icon-32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.4_0\src\assets\icons\sidebar-icon-32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 c3ac3e0793a4c072625dea0ef020bd9cc355ab0d29cf8d6f3e8fc5477a0333d0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              background.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.5_0\background.js
                                                                                                              • Size 141KB
                                                                                                              • SHA256 833d5d4ac8686f944ac9c6d50b1a2fdc3e133ab8fd7a9ab46c919e91af0bb58f
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              content-script.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.5_0\content-script.js
                                                                                                              • Size 215B
                                                                                                              • SHA256 dbf6ccdb61c9e9287a12d830a61b3163d943c985a1f5899b2ad00ae8072e1cef
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              extension-router.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\extension-router.js
                                                                                                              • Size 4KB
                                                                                                              • SHA256 748d13b3f6fff9e29f1062922104cc7425254a81a2be5957875c7477551f0e44
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              logo128.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo128.png
                                                                                                              • Size 9KB
                                                                                                              • SHA256 7de67da108028c08e13cfd8e7ec3e9b3982ee39972d9b4b4df8f7cb6db952205
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              logo16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo16.png
                                                                                                              • Size 567B
                                                                                                              • SHA256 2cf72a952493efa94460e3bef9cb760e8cc5605a78605822c15d6a298bf0d597
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo32.png
                                                                                                              • Size 1KB
                                                                                                              • SHA256 b9ad6189428664152aae58f35f3b71f77531d7bd8b9deeb968d18b22ef860691
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo48.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo48.png
                                                                                                              • Size 2KB
                                                                                                              • SHA256 80df109a2ba80658758a4e3a5456810ccb2477a60b7230a4f4c038d0fae00fb0
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              logo64.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo64.png
                                                                                                              • Size 3KB
                                                                                                              • SHA256 ad663575bf9a00284ba6e4b62681a7d52fed09699de5f2b526342a9721aaff9e
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              manifest.json

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\manifest.json
                                                                                                              • Size 2KB
                                                                                                              • SHA256 a4342c640f95f12ca39369d8b41f8db1c04b5a275c0548dd367e68bedddad0ef
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              migration.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\options\migration.js
                                                                                                              • Size 4KB
                                                                                                              • SHA256 a0cfe671ceb59613808943720032d272974d1170db0c6e8df0be2dd001df65a4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\pageAction\background.js
                                                                                                              • Size 1KB
                                                                                                              • SHA256 d61e0e4802b11d84ea48545d1f84aa7fafac2d059c515c34db98de6288c75221
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              pdfHandler-vcros.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\pdfHandler-vcros.js
                                                                                                              • Size 2KB
                                                                                                              • SHA256 945040c55fc55a93df32c2923159345096c7670645796780629f1570f7d17f24
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              pdfHandler.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\pdfHandler.js
                                                                                                              • Size 8KB
                                                                                                              • SHA256 14c2b15702b4a1cc018305eeef217de01c638864ae67169f48b7594caef46e97
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              preserve-referer.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preserve-referer.js
                                                                                                              • Size 6KB
                                                                                                              • SHA256 caea7d7d78216a9142aa4240fc77b8037146166d6dda6165359168a8d01846b6
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              suppress-update.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\suppress-update.js
                                                                                                              • Size 946B
                                                                                                              • SHA256 3c644821c1fa2e802072df86184e261801cce78cf3a8ad72d808c4f03ebee5f5
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              telemetry.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\telemetry.js
                                                                                                              • Size 5KB
                                                                                                              • SHA256 59b5d074b6607dbd093438ab748b74998f5ae5879e6d27b2e6e2fb9c5000e3b5
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.2_0\background.html
                                                                                                              • Size 344B
                                                                                                              • SHA256 4507014191a2a868fadf2127587f819ae35f5bcc04c13e760d2349e079ca5d30
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              twitch.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.2_0\js\twitch.js
                                                                                                              • Size 28KB
                                                                                                              • SHA256 c7d12c784ae3df27a112d5bcb7d9751577c7db0a056948e81284fb345ea33859
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              youtube.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.2_0\js\youtube.js
                                                                                                              • Size 27KB
                                                                                                              • SHA256 8ebf1a952e911c311d0067a3d907805d203b56f28a59a977fb50ff3c04c3039e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              background.html

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\background.html
                                                                                                              • Size 147B
                                                                                                              • SHA256 070183b01077365cb08e9454acc4c00ab2e406c0f84b8bbcfb540ff6ac3cb674
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              content-script.js

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\contentScripts\content-script.js
                                                                                                              • Size 12KB
                                                                                                              • SHA256 8b96d012c9bcf12d06a9e8fc89aaae415d5be63a5f77376aea17df4d2eba7bde
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              icon16.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\images\icon16.png
                                                                                                              • Size 501B
                                                                                                              • SHA256 4a794e8840f8407464545972c24810e2346b20808114bde750472279b4f592ab
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              icon32.png

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\images\icon32.png
                                                                                                              • Size 1003B
                                                                                                              • SHA256 33ef5f6427fe62666e42279c5cfd25900700cbd6566c99d15dab424932226ee1
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              MANIFEST-000001

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_dnpmpbbfdefapbnfffohgcejpogkbjbp_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                              • Size 23B
                                                                                                              • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              Preferences

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
                                                                                                              • Size 18KB
                                                                                                              • SHA256 321f34b090aa5ebf0542155496899859b67150ba1fb65c71f146274be6cd79fd
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
                                                                                                              • Size 18KB
                                                                                                              • SHA256 9bdf20fbdfea7e0fd38caac66fb33671fdf9a590eccc1312923c32abbf1d6811
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Preferences~RFe5a441f.TMP

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe5a441f.TMP
                                                                                                              • Size 6KB
                                                                                                              • SHA256 0f645f2c3d65ca1d41bda335cc53dfceebbae507e51774526773360e5fb5bcc2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              the-real-index

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                              • Size 336B
                                                                                                              • SHA256 6ae00dfb8dab71ddcb016f4df5743a4ec358cc35b6dde4716f8f6aeba8f21498
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              the-real-index~RFe5a97cd.TMP

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a97cd.TMP
                                                                                                              • Size 96B
                                                                                                              • SHA256 41dbaa91f43c9ebdc3382345d172f6a3b2a22834621dfe2e51c9d7dd7558c954
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              CURRENT

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Site Characteristics Database\CURRENT
                                                                                                              • Size 16B
                                                                                                              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              d2f8dfdf-3fe4-4d74-bb00-39cdf6ad21a3.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\d2f8dfdf-3fe4-4d74-bb00-39cdf6ad21a3.tmp
                                                                                                              • Size 173KB
                                                                                                              • SHA256 42e8e4ae78d8157e00e7e5c7030519c1adb7b61f3b2dbc5aa1006520e8cf1eed
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              f2603cea-33de-4ecb-ab22-d9a836148f47.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\f2603cea-33de-4ecb-ab22-d9a836148f47.tmp
                                                                                                              • Size 43KB
                                                                                                              • SHA256 10f7c08f2e769d95d1dbe97a26e98d257f3f7b2aae2c5a904f6f316f395d7fd2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              data_0

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_0
                                                                                                              • Size 8KB
                                                                                                              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              data_1

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_1
                                                                                                              • Size 264KB
                                                                                                              • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              data_2

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_2
                                                                                                              • Size 8KB
                                                                                                              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              data_3

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_3
                                                                                                              • Size 8KB
                                                                                                              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP

                                                                                                              Local State

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State
                                                                                                              • Size 8KB
                                                                                                              • SHA256 851331b55e6cec82947073de174b8f3dff6aeb4cd9ac3448431ac7cad44bc009
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Local State~RFe5a43ff.TMP

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe5a43ff.TMP
                                                                                                              • Size 4KB
                                                                                                              • SHA256 d3a376412f7aba2ed5d711b070cdb96ee6e2f72db9374920b6bac963fa969657
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              7cd618e3-c1c9-47b5-83a0-8ebcaeb10877.tmp

                                                                                                              • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\extensions_crx_cache\7cd618e3-c1c9-47b5-83a0-8ebcaeb10877.tmp
                                                                                                              • Size 13B
                                                                                                              • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                              • MD5 SHA1 SHA512

                                                                                                              Wave Browser.lnk

                                                                                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wave Browser.lnk
                                                                                                              • Size 2KB
                                                                                                              • SHA256 dad916e8f95de891c203485ccfdb97739390a5406855486682c0d1826d14f373
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              Wave Browser.exe

                                                                                                              • Path C:\Users\Admin\Downloads\Wave Browser.exe
                                                                                                              • Size 1.3MB
                                                                                                              • SHA256 1d050ff04d60e7a8abb85b727e3cc032a24f873c4d087c2c231b0e768f5b1ce4
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              Wave Browser.exe:Zone.Identifier

                                                                                                              • Path C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier
                                                                                                              • Size 59B
                                                                                                              • SHA256 8eeb514a4c65918bfe4209282b62fd71b50536ac61ca0f8bae176b88b84541df
                                                                                                              • MD5 SHA1 SHA512 TLSH

                                                                                                              SWUpdaterComRegisterShell64.exe

                                                                                                              • Path C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                                                                                              • Size 190KB
                                                                                                              • SHA256 49e8c3f605019149b8ede45676c269346ba2ec101608a63933bd090787b7b81c
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              psuser.dll

                                                                                                              • Path C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\psuser.dll
                                                                                                              • Size 259KB
                                                                                                              • SHA256 306f117f853405bb44e6e95430b6bb2eac87747afa1c65b0eb59097336a3b97a
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              psuser_64.dll

                                                                                                              • Path C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\psuser_64.dll
                                                                                                              • Size 323KB
                                                                                                              • SHA256 d7b61a7cd898e62e2d2a3377ad9d66dd9d5bb8d45e0475d6f871aaa17ed083e8
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              setup.exe

                                                                                                              • Path C:\Users\Admin\Wavesor Software\WaveBrowser\1.5.24.21\Installer\setup.exe
                                                                                                              • Size 5.3MB
                                                                                                              • SHA256 3f9b109b7b9b032f835b2589e91d85a115a589e29dad048f7339168621e4f6c2
                                                                                                              • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                              memory/1856-223-0x0000000000C60000-0x0000000000DA4000-memory.dmp

                                                                                                              memory/1856-246-0x0000000002F60000-0x0000000002F70000-memory.dmp

                                                                                                              memory/1856-282-0x0000000021590000-0x0000000021AB8000-memory.dmp

                                                                                                              memory/1856-283-0x0000000002F60000-0x0000000002F70000-memory.dmp

                                                                                                              memory/1856-237-0x0000000002F60000-0x0000000002F70000-memory.dmp

                                                                                                              memory/1856-227-0x000000001FF10000-0x000000001FF48000-memory.dmp

                                                                                                              memory/1856-228-0x000000001FEE0000-0x000000001FEEE000-memory.dmp

                                                                                                              memory/1856-416-0x0000000002F60000-0x0000000002F70000-memory.dmp

                                                                                                              memory/1856-224-0x0000000002F60000-0x0000000002F70000-memory.dmp

                                                                                                              memory/1856-225-0x000000001F060000-0x000000001F068000-memory.dmp

                                                                                                              memory/1856-226-0x0000000002F60000-0x0000000002F70000-memory.dmp