Analysis
- user interaction
yes - max time kernel
167s - max time network
168s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
31/08/2026, 20:36
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://wavebrowser.co
Resource
win11-20260513-en
General
- Target http://wavebrowser.co
- Sample260831-zdkmvser21
Malware Config
Signatures
- Downloads MZ/PE file 1 IoCs
flow pid Process 51 1644 chrome.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 1856 Wave Browser.exe 4824 SWUpdaterSetup.exe 2216 SWUpdater.exe 1536 SWUpdater.exe 5068 SWUpdaterComRegisterShell64.exe 1208 SWUpdaterComRegisterShell64.exe 4908 SWUpdaterComRegisterShell64.exe 1056 SWUpdater.exe 1656 SWUpdater.exe 3972 SWUpdater.exe 2252 SWUpdater.exe 3668 SWUpdaterCore.exe 1876 SWUpdater.exe 2472 SWUpdater.exe 1604 WaveInstaller-v1.5.24.21.exe 1500 setup.exe 2100 setup.exe 4604 setup.exe 856 setup.exe 2504 wavebrowser.exe 4532 wavebrowser.exe 5356 wavebrowser.exe 5344 wavebrowser.exe 5456 wavebrowser.exe 5556 wavebrowser.exe 5328 SWUpdater.exe 5468 wavebrowser.exe 5540 wavebrowser.exe 5484 wavebrowser.exe 5660 wavebrowser.exe 5700 wavebrowser.exe 6132 wavebrowser.exe 6140 wavebrowser.exe 5472 wavebrowser.exe 3052 wavebrowser.exe 1124 wavebrowser.exe 6028 wavebrowser.exe 1772 wavebrowser.exe 6124 wavebrowser.exe 5848 wavebrowser.exe 5488 wavebrowser.exe 6104 wavebrowser.exe 5820 wavebrowser.exe 5508 wavebrowser.exe 4080 wavebrowser.exe 2752 wavebrowser.exe 5956 wavebrowser.exe 4960 wavebrowser.exe 1772 wavebrowser.exe 5740 wavebrowser.exe 5364 wavebrowser.exe 3612 wavebrowser.exe 5352 wavebrowser.exe 5820 wavebrowser.exe 2752 wavebrowser.exe 3304 wavebrowser.exe 4960 wavebrowser.exe 5168 wavebrowser.exe 5472 wavebrowser.exe 5712 wavebrowser.exe 5720 wavebrowser.exe 6204 wavebrowser.exe 6252 wavebrowser.exe 6260 wavebrowser.exe - Loads dropped DLL 64 IoCs
pid Process 2216 SWUpdater.exe 1536 SWUpdater.exe 5068 SWUpdaterComRegisterShell64.exe 1536 SWUpdater.exe 1208 SWUpdaterComRegisterShell64.exe 1536 SWUpdater.exe 4908 SWUpdaterComRegisterShell64.exe 1536 SWUpdater.exe 1056 SWUpdater.exe 1656 SWUpdater.exe 3972 SWUpdater.exe 3972 SWUpdater.exe 1656 SWUpdater.exe 2252 SWUpdater.exe 1876 SWUpdater.exe 2472 SWUpdater.exe 2504 wavebrowser.exe 4532 wavebrowser.exe 2504 wavebrowser.exe 5356 wavebrowser.exe 5356 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5456 wavebrowser.exe 5556 wavebrowser.exe 5456 wavebrowser.exe 5556 wavebrowser.exe 5344 wavebrowser.exe 5344 wavebrowser.exe 5328 SWUpdater.exe 5468 wavebrowser.exe 5540 wavebrowser.exe 5468 wavebrowser.exe 5540 wavebrowser.exe 5484 wavebrowser.exe 5484 wavebrowser.exe 5660 wavebrowser.exe 5700 wavebrowser.exe 6132 wavebrowser.exe 6140 wavebrowser.exe 6132 wavebrowser.exe 5660 wavebrowser.exe 6140 wavebrowser.exe 5700 wavebrowser.exe 5472 wavebrowser.exe 3052 wavebrowser.exe 5472 wavebrowser.exe 3052 wavebrowser.exe 1124 wavebrowser.exe 1124 wavebrowser.exe 6028 wavebrowser.exe 6028 wavebrowser.exe 1772 wavebrowser.exe 6124 wavebrowser.exe 1772 wavebrowser.exe 6124 wavebrowser.exe 5848 wavebrowser.exe 5488 wavebrowser.exe 5848 wavebrowser.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000\Software\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.157.0\\SWUpdaterCore.exe\"" SWUpdater.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 9 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe - Drops file in Program Files directory 14 IoCs
description ioc Process File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\swupdaterres_en.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterSetup.exe SWUpdaterSetup.exe File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterSetup.exe SWUpdaterSetup.exe File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUTAA8F.tmp SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterBroker.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterOnDemand.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterComRegisterShell64.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psmachine.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psmachine_64.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psuser.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\swupdater.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psuser_64.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterCore.exe SWUpdaterSetup.exe - Drops file in Windows directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp\wavebrowser_installer.log setup.exe File opened for modification C:\Windows\SystemTemp\wavebrowser_installer.log setup.exe - Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier chrome.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 12 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaveInstaller-v1.5.24.21.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 1056 SWUpdater.exe 5328 SWUpdater.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 1644 chrome.exe 5356 wavebrowser.exe - Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer wavebrowser.exe - Modifies data under HKEY_USERS 3 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134326822339546867" chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry wavebrowser.exe - Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\NumMethods\ = "4" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WaveBrwsPDF.EW2HNRRF2554O7C36N74VZMCIQ\Application setup.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\ = "IApp" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\NumMethods\ = "9" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ = "IProcessLauncher" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WavesorSWUpdater.Update3WebUser\CLSID\ = "{30FB944E-9455-49DD-81C6-7542E47AA3E7}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WavesorSWUpdater.OnDemandCOMClassUser.1.0\ = "SWUpdater Legacy On Demand" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{3C41B0C4-B5B6-4293-BED4-C927CCFDB909}\VersionIndependentProgID\ = "WavesorSWUpdater.PolicyStatusUser" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WaveBrwsHTM.EW2HNRRF2554O7C36N74VZMCIQ\Application setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\ = "IBrowserHttpRequest2" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\NumMethods\ = "6" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32\ThreadingModel = "Both" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\NumMethods\ = "11" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ = "IProcessLauncher2" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ = "IGoogleUpdate3Web" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{730EBDF4-7AD2-4516-BF1A-6C6F28C60CF9}\ = "IProcessLauncher" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{D3C865DD-E36B-432E-9E47-554925B86737} SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\ = "IBrowserHttpRequest2" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{617E37E1-AC79-4162-BACC-C797A1D31D3E}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ = "IPolicyStatus2" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WavesorSWUpdater.CredentialDialogUser\CLSID\ = "{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C}" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\.mhtml setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\NumMethods\ = "7" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\ = "IAppVersionWeb" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.157.0\\psuser.dll" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WavesorSWUpdater.Update3COMClassUser\ = "Update3COMClass" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\NumMethods\ = "24" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\ = "IAppCommandWeb" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\ProxyStubClsid32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\NumMethods\ = "41" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\CLSID\{4B02920F-EBDA-4128-8C49-C4FEAB76B3EF} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87}\NumMethods\ = "12" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WavesorSWUpdater.OnDemandCOMClassUser\CLSID SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WavesorSWUpdater.CredentialDialogUser.1.0 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\CLSID\{D12748C8-5013-45E2-9A24-2FB7C2EEFB7C}\ProgID SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ = "IAppBundleWeb" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ = "IAppWeb" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{3BE77C6E-0029-4F24-B677-32C9E15CD8F1}\NumMethods\ = "4" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{DA4EFC2D-B243-4BA8-8A14-8937D867B699}\ = "IAppBundle" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4} SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ = "IAppWeb" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{8129608C-48BD-42A6-9EBC-7B0933A5CFA3}\ = "IAppCommand2" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\WOW6432Node\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8} SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-2043432456-1617298091-2772621413-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737} SWUpdaterComRegisterShell64.exe - NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier chrome.exe - Suspicious behavior: EnumeratesProcesses 18 IoCs
pid Process 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 2216 SWUpdater.exe 2216 SWUpdater.exe 4404 chrome.exe 4404 chrome.exe 1500 setup.exe 1500 setup.exe 1500 setup.exe 1500 setup.exe 1500 setup.exe 1500 setup.exe 2216 SWUpdater.exe 2216 SWUpdater.exe 2216 SWUpdater.exe 2216 SWUpdater.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 37 IoCs
pid Process 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeDebugPrivilege 1856 Wave Browser.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe Token: SeCreatePagefilePrivilege 1820 chrome.exe Token: SeShutdownPrivilege 1820 chrome.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 4604 setup.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe - Suspicious use of SendNotifyMessage 35 IoCs
pid Process 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 1820 chrome.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe 2504 wavebrowser.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1820 wrote to memory of 904 1820 chrome.exe 80 PID 1820 wrote to memory of 1644 1820 chrome.exe 81 PID 1820 wrote to memory of 2380 1820 chrome.exe 82 PID 1820 wrote to memory of 2380 1820 chrome.exe 82 PID 1820 wrote to memory of 1612 1820 chrome.exe 83 PID 1820 wrote to memory of 1612 1820 chrome.exe 83 PID 1820 wrote to memory of 1052 1820 chrome.exe 84 PID 1820 wrote to memory of 1052 1820 chrome.exe 84 PID 1820 wrote to memory of 3484 1820 chrome.exe 85 PID 1820 wrote to memory of 3484 1820 chrome.exe 85 PID 1820 wrote to memory of 4840 1820 chrome.exe 88 PID 1820 wrote to memory of 4840 1820 chrome.exe 88 PID 1820 wrote to memory of 1688 1820 chrome.exe 89 PID 1820 wrote to memory of 1688 1820 chrome.exe 89 PID 1820 wrote to memory of 3440 1820 chrome.exe 90 PID 1820 wrote to memory of 3440 1820 chrome.exe 90 PID 1820 wrote to memory of 3768 1820 chrome.exe 91 PID 1820 wrote to memory of 3768 1820 chrome.exe 91 PID 1820 wrote to memory of 4432 1820 chrome.exe 92 PID 1820 wrote to memory of 572 1820 chrome.exe 94 PID 1820 wrote to memory of 1856 1820 chrome.exe 95 PID 1820 wrote to memory of 3048 1820 chrome.exe 96 PID 1820 wrote to memory of 2472 1820 chrome.exe 97 PID 1820 wrote to memory of 2832 1820 chrome.exe 98 PID 1856 wrote to memory of 4824 1856 Wave Browser.exe 99 PID 4824 wrote to memory of 2216 4824 SWUpdaterSetup.exe 100 PID 2216 wrote to memory of 1536 2216 SWUpdater.exe 101 PID 1536 wrote to memory of 5068 1536 SWUpdater.exe 102 PID 1536 wrote to memory of 1208 1536 SWUpdater.exe 103 PID 1536 wrote to memory of 4908 1536 SWUpdater.exe 104 PID 2216 wrote to memory of 1056 2216 SWUpdater.exe 105 PID 2216 wrote to memory of 1656 2216 SWUpdater.exe 106 PID 3668 wrote to memory of 1876 3668 SWUpdaterCore.exe 112 PID 1876 wrote to memory of 2472 1876 SWUpdater.exe 113 PID 1820 wrote to memory of 4404 1820 chrome.exe 116 PID 3972 wrote to memory of 1604 3972 SWUpdater.exe 117 PID 1604 wrote to memory of 1500 1604 WaveInstaller-v1.5.24.21.exe 118 PID 1500 wrote to memory of 2100 1500 setup.exe 119 PID 1500 wrote to memory of 4604 1500 setup.exe 120 PID 4604 wrote to memory of 856 4604 setup.exe 121 PID 1500 wrote to memory of 3260 1500 setup.exe 123 PID 1500 wrote to memory of 2504 1500 setup.exe 124 PID 3260 wrote to memory of 4140 3260 chrome.exe 125 PID 2504 wrote to memory of 4532 2504 wavebrowser.exe 126 PID 1820 wrote to memory of 4900 1820 chrome.exe 127 PID 1820 wrote to memory of 4900 1820 chrome.exe 127 PID 2504 wrote to memory of 5344 2504 wavebrowser.exe 128 PID 2504 wrote to memory of 5356 2504 wavebrowser.exe 129 PID 2504 wrote to memory of 5344 2504 wavebrowser.exe 128 PID 2504 wrote to memory of 5456 2504 wavebrowser.exe 130 PID 2504 wrote to memory of 5556 2504 wavebrowser.exe 131 PID 2504 wrote to memory of 5456 2504 wavebrowser.exe 130 PID 2504 wrote to memory of 5660 2504 wavebrowser.exe 132 PID 2504 wrote to memory of 5660 2504 wavebrowser.exe 132 PID 2504 wrote to memory of 5700 2504 wavebrowser.exe 133 PID 2504 wrote to memory of 5700 2504 wavebrowser.exe 133 PID 3972 wrote to memory of 5328 3972 SWUpdater.exe 135 PID 2504 wrote to memory of 5468 2504 wavebrowser.exe 136 PID 2504 wrote to memory of 5540 2504 wavebrowser.exe 137 PID 2504 wrote to memory of 5484 2504 wavebrowser.exe 138 PID 2504 wrote to memory of 5484 2504 wavebrowser.exe 138 PID 2504 wrote to memory of 6132 2504 wavebrowser.exe 140 PID 2504 wrote to memory of 6132 2504 wavebrowser.exe 140 PID 2504 wrote to memory of 6140 2504 wavebrowser.exe 139 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://wavebrowser.co1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1820 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9043ec728,0x7ff9043ec734,0x7ff9043ec7402⤵PID:904
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1512,i,7714547575241957862,7735582917479824777,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2112 /prefetch:112⤵
- Downloads MZ/PE file
- System Time Discovery
PID:1644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1684,i,15940028846397135794,13217273452214065078,262144 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2072 /prefetch:22⤵PID:2380
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2280,i,16677923074742577782,16854907577659800700,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2424 /prefetch:132⤵PID:1612
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=2992,i,6324330436827206185,11901689582431985808,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3092 /prefetch:12⤵PID:1052
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3008,i,7299012316433571393,2720116516280627095,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3116 /prefetch:12⤵PID:3484
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4108,i,4680750138941290277,8009753404806450712,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4092 /prefetch:92⤵PID:4840
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,561880585283422160,13416293338831841725,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4740 /prefetch:12⤵PID:1688
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=3804,i,2801412059476792099,7172698387465781011,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3772 /prefetch:122⤵PID:3440
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5036,i,9265715915936522380,15734673799157586547,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5064 /prefetch:12⤵PID:3768
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6064,i,14107606630278711820,18203914450436656568,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6012 /prefetch:142⤵PID:4432
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5028,i,13043650473371675895,10316751124497609221,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4968 /prefetch:142⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:572
-
-
C:\Users\Admin\Downloads\Wave Browser.exe"C:\Users\Admin\Downloads\Wave Browser.exe"2⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1856 -
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=wavOrgStub165%3don%7cWed%2c%2022%20Sep%202027%2000%3a00%3a00%20%2b0300"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4824 -
C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=wavOrgStub165%3don%7cWed%2c%2022%20Sep%202027%2000%3a00%3a00%20%2b0300"4⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2216 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1536 -
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5068
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:1208
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4908
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjIwMDAuNDkzIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7RjZGNjBBQ0UtNzFBRC00NjEwLTgwRDQtOTI1MzcyOUZCNEI3fSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS4zLjE1Ny4wIiBsYW5nPSJlbiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGluc3RhbGxfdGltZV9tcz0iNDUxIi8-PC9hcHA-PC9yZXF1ZXN0Pg5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:1056
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1&experiments=wavOrgStub165%3don%7cWed%2c%2022%20Sep%202027%2000%3a00%3a00%20%2b0300" /installsource otherinstallcmd /sessionid "{0060AD21-5537-4FA1-9393-01E69BA16F28}"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:1656
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6752,i,1774380872589154461,11431327988558722900,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5020 /prefetch:142⤵PID:3048
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6676,i,11831616391149445469,7269494380251211495,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5328 /prefetch:142⤵PID:2472
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4996,i,12193665967353641522,1424741945262817100,524288 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=7036 /prefetch:142⤵PID:2832
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5352,i,6042843743539994252,5476173946175761936,262144 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6776 /prefetch:102⤵
- Suspicious behavior: EnumeratesProcesses
PID:4404
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5352,i,12415345791308696923,8734269197775513138,2097152 --field-trial-handle=2084,i,13446251211117687724,16107860372178312124,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=6776 /prefetch:12⤵PID:4900
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:1088
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:5112
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3972 -
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{07FB25A6-5D59-4A1F-A8B5-B973E2CB393C}\WaveInstaller-v1.5.24.21.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{07FB25A6-5D59-4A1F-A8B5-B973E2CB393C}\WaveInstaller-v1.5.24.21.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1604 -
C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\wavebrowser.packed.7z" --wid=3jie04ol --installerdata="C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp"3⤵
- Executes dropped EXE
- Drops file in Windows directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1500 -
C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.24.21 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff7df2f76b8,0x7ff7df2f76c4,0x7ff7df2f76d04⤵
- Executes dropped EXE
PID:2100
-
-
C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
- Drops file in Windows directory
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4604 -
C:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsyEFF5.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.24.21 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff7df2f76b8,0x7ff7df2f76c4,0x7ff7df2f76d05⤵
- Executes dropped EXE
PID:856
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" https://wavebrowser.co/thank-you?tid=3jie04ol&src=lp0-obgc-wav-igWcwHRvCTGYKhwOig-ab15-w64-vttt-orgn-brwsr&iid=wav-org&uid=c7bf0832-440e-4932-a70e-1f4b7064140e4⤵
- Suspicious use of WriteProcessMemory
PID:3260 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9043ec728,0x7ff9043ec734,0x7ff9043ec7405⤵PID:4140
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --cd-upload --from-installer4⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2504 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=iid=wav-org --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=src=lp0-obgc-wav-igWcwHRvCTGYKhwOig-ab15-w64-vttt-orgn-brwsr --annotation=uc=20260831 --annotation=uid=c7bf0832-440e-4932-a70e-1f4b7064140e --annotation=ver=1.5.24.21 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8e5442708,0x7ff8e5442714,0x7ff8e54427205⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4532
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2036 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5344
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2100 /prefetch:115⤵
- Executes dropped EXE
- Loads dropped DLL
- System Time Discovery
PID:5356
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=2536 /prefetch:135⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5456
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3244 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5556
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3556 /prefetch:95⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3740 /prefetch:95⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5700
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4324 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5468
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4360 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5540
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4404 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5484
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4940 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4976 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6132
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4224 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5472
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5604 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3052
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3636 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1124
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=4468 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6028
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6020 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1772
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6224 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6124
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6068 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5848
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6088 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5488
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6132 /prefetch:145⤵
- Executes dropped EXE
PID:6104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6712 /prefetch:145⤵
- Executes dropped EXE
PID:5820
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6792 /prefetch:145⤵
- Executes dropped EXE
PID:5508
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6920 /prefetch:145⤵
- Executes dropped EXE
PID:4080
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7088 /prefetch:145⤵
- Executes dropped EXE
PID:2752
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6188 /prefetch:145⤵
- Executes dropped EXE
PID:5956
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7372 /prefetch:145⤵
- Executes dropped EXE
PID:4960
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6620 /prefetch:145⤵
- Executes dropped EXE
PID:1772
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6216 /prefetch:145⤵
- Executes dropped EXE
PID:3612
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6444 /prefetch:145⤵
- Executes dropped EXE
PID:5352
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6428 /prefetch:145⤵
- Executes dropped EXE
PID:5740
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6476 /prefetch:145⤵
- Executes dropped EXE
PID:5364
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6492 /prefetch:145⤵
- Executes dropped EXE
PID:5820
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=5744 /prefetch:145⤵
- Executes dropped EXE
PID:2752
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7420 /prefetch:145⤵
- Executes dropped EXE
PID:3304
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7144 /prefetch:145⤵
- Executes dropped EXE
PID:4960
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6108 /prefetch:145⤵
- Executes dropped EXE
PID:5168
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6116 /prefetch:145⤵
- Executes dropped EXE
PID:5472
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=7996 /prefetch:145⤵
- Executes dropped EXE
PID:5712
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8156 /prefetch:145⤵PID:5848
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8184 /prefetch:145⤵
- Executes dropped EXE
PID:5720
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8348 /prefetch:145⤵
- Executes dropped EXE
PID:6204
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8492 /prefetch:145⤵
- Executes dropped EXE
PID:6252
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8516 /prefetch:145⤵
- Executes dropped EXE
PID:6260
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8536 /prefetch:145⤵PID:6272
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8944 /prefetch:145⤵PID:6292
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9080 /prefetch:145⤵PID:6300
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9132 /prefetch:145⤵PID:6308
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9524 /prefetch:145⤵PID:7116
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9500 /prefetch:95⤵PID:5736
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9820 /prefetch:15⤵PID:7684
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9896 /prefetch:95⤵PID:7696
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10164 /prefetch:15⤵PID:6776
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9836 /prefetch:15⤵PID:6784
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10220 /prefetch:95⤵PID:6792
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10588 /prefetch:145⤵PID:6892
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10744 /prefetch:145⤵PID:7884
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10916 /prefetch:15⤵PID:5488
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10972 /prefetch:15⤵PID:6576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11100 /prefetch:95⤵PID:6152
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11452 /prefetch:15⤵PID:7192
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11472 /prefetch:95⤵PID:7196
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=10900 /prefetch:15⤵PID:7320
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=11996 /prefetch:95⤵PID:7512
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12148 /prefetch:95⤵PID:6424
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12336 /prefetch:15⤵PID:6772
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12344 /prefetch:95⤵PID:7432
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12304 /prefetch:15⤵PID:6332
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=12508 /prefetch:95⤵PID:6812
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=6260 /prefetch:15⤵PID:6364
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=13008 /prefetch:95⤵PID:6660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8476 /prefetch:15⤵PID:9652
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8348 /prefetch:15⤵PID:9668
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=8288 /prefetch:95⤵PID:9684
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=9920 /prefetch:15⤵PID:9844
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --field-trial-handle=2044,i,7471926729985527131,6099973097043718815,262144 --variations-seed-version=15 --mojo-platform-channel-handle=3240 /prefetch:15⤵PID:7456
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMjIwMDAuNDkzIiBzcD0iIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7RUIxNDlBRDItQ0U0RS00RjUxLUI3RkMtQTE0OUZBQTRDQ0FGfSIgdmVyc2lvbj0iIiBuZXh0dmVyc2lvbj0iMS41LjI0LjIxIiBsYW5nPSJlbiIgYnJhbmQ9IiIgY2xpZW50PSIiIGV4cGVyaW1lbnRzPSJ3YXZPcmdTdHViMTY1PW9uIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGRvd25sb2FkZXI9ImJpdHMiIHVybD0iaHR0cHM6Ly9jZG4uc3d1cGRhdGVyLmNvbS9idWlsZC9XYXZlQnJvd3Nlci9zdGFibGUvd2luLzExMjA5ODgwMzcxNDEvNjQvV2F2ZUluc3RhbGxlci12MS41LjI0LjIxLmV4ZSIgZG93bmxvYWRlZD0iMTE0MTcwOTUyIiB0b3RhbD0iMTE0MTcwOTUyIiBkb3dubG9hZF90aW1lX21zPSI5MjQzIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjYiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iNjY5IiBkb3dubG9hZF90aW1lX21zPSIxMDIwNSIgZG93bmxvYWRlZD0iMTE0MTcwOTUyIiB0b3RhbD0iMTE0MTcwOTUyIiBpbnN0YWxsX3RpbWVfbXM9IjExNjU3Ii8-PC9hcHA-PC9yZXF1ZXN0Pg2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:5328
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2252
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3668 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1876 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
PID:2472
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4592
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
2Credentials In Files
2Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdater.exe
- Size 108KB
- SHA256 676edd3695c74aac087de2e11b05f1dc2673830065d8fbc1fcfcfb5a15919fb0
- MD5 1c2ce270379dd8ccfb0d44d44aa9cc97
- SHA1 3e28ba314739e3fe922d6590e8fc01079414a022
- SHA512 a2c7127c419ba4f92f8087079c14b2aabb5c7dd2d90c19d05e543c53f7327b93cb0303e5e252e21294ac085e7177f3a6577b652f69b03b434d127273c57d67f5
- SSDEEP 3072:fPY5KTfL9X8YrWqY7/pTXb77Kxl4uZiT9XZwoDfrYeR48qy6peTUnZuh6o7YmzU:If7KmbkGVkT7wuT76B+jX
- TLSH T191B34B03B5D184B5E4B2593104A9997049BFBD714E509FAF33C41A7E0F316C1EE3AAAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterBroker.exe
- Size 97KB
- SHA256 76e5d19341e52ebd80fc13ad81d8bf0bccf8e599217d06058a21dd2b0d43e4fd
- MD5 47606b941a28db641524f6e57b5b5d71
- SHA1 c1df18832ed692acb488e50e66927cae7bbfe615
- SHA512 f66e893423222e0977861a202496a839a8b7b84d9b6ab03cdd06b1db398271d90b1df0c5ad9ad7cd0c4d0520a723b8ad274950274eddb68377c82dd296594a35
- SSDEEP 3072:A6YCLNYEz/lQe0mWfY3WCuch7HW7Dxm4ymB+P6StZc4:A6YaVZWCuchvmB+rtZZ
- TLSH T18AA36C1375D09471E4B24D3158E0E9709DBEFD610A60DEAB33C95A3D0F306D1EE26ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterCore.exe
- Size 208KB
- SHA256 f3d4a8f1bd4070af6bb4460f4940c15b2670719d7563192669956f4f8d900c67
- MD5 5fec960cea05b1332a430baa1059f563
- SHA1 07385e7f21f21aebd7f3c73c5b09f3f84e6b09a8
- SHA512 0547d88279c5acea71186afd9f597bb7fa4b15f459452586b3667786b47f7675014cf39e21a887c1b0d376957aab213fbcb7ea8b94518a9a09e0f8576bee5244
- SSDEEP 6144:6F3ygScyDV9wcnoMB97uIJcMawazAOqvKa7x+5aPoe:E3ygScyDV9wcnf97uIJcnQK8x+kPoe
- TLSH T1B2247C1170E2C0B2E577153009E0AA71ADBDB9710A308ABF33D85B7E5F3568296297B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\SWUpdaterOnDemand.exe
- Size 97KB
- SHA256 3b231a2121c07b2153b4dfe3f402308b795904827960d8c390fe6192416125e7
- MD5 1e4158ce442458a839f004015c07f3f3
- SHA1 907e28d8743483f4e8740fce4e953ea9d772a6a7
- SHA512 b16a3c112f23a40511f1e3d1ad3c1c80298d76324823a124686e892e29c5d76db5fc9773076cd8edb54b4df6e452a236281bd9576ffc1f43fdb701206cfc6d54
- SSDEEP 3072:Q6wCLNYEz/lQe0mWfY3WCuchkHW7Dx6ymB+P69tZQq:Q6waVZWCuchzmB+0tZL
- TLSH T134A36C1375D09471E4B2093158E0E9709DBFFD610A60DEAB33C95A3E4F306D1EE269BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psmachine.dll
- Size 259KB
- SHA256 ad2143218dcb5761c96f656e630560a291c53163b5a023ddebadfd14c44ac318
- MD5 f7c56f035476dca09588ed09b34c3b4d
- SHA1 af7d74fe61f321e67fa4c2655edacb9a2a2f6a80
- SHA512 689c281e519a4ea6abb606c445d141f24d7f3a41929cab8603512bb4a37ccd05dce37fbb80cd280243fcfdb944d47452b87f128c9540fe8926fa8fd19e693f62
- SSDEEP 6144:z+DwZ3yfi42mlVeBllPx1dbXijIuFIL8AOz6SKOBkQY5h2Q4:z+DwZ3yf2mlVeBllPx1dbLuFIL8VDKJO
- TLSH T139449D8176C1C876D57E1030086B97614BBDBE201EE0CAEF27D87E6D1E723819B25B67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\psmachine_64.dll
- Size 323KB
- SHA256 05c209ca2512b2b7edd70df56753ff2a137fad63c456f9d558e5b8cb89e07b05
- MD5 39e6105819f6d0aabfe827332ca975e1
- SHA1 b5d1b613f9ffbd05590dbf6e3173070ecae019eb
- SHA512 9c6380d85a4e8705a573d1b0289bd8a9c8b128a9f3596e488e6ff877c0bdd1f893e3ecedf56d0bf3c9cd25906bb0bc1abf388a604302011996d75cb3fbc89fca
- SSDEEP 6144:wgHXtLr5Bh12cITHjyXBNiohJ3dDFK4AUkQY:w0XpipaXBQoDKHX
- TLSH T1B2644A0AF3A454B5E876403DC8574A06D7F27C451AA1D3AF03A4775EAF3B3906B3AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\swupdater.dll
- Size 1.0MB
- SHA256 fb241530e3d716c753be0141376ab8974e812aa62facbfda251c67a60d7720a7
- MD5 0bb71bb256574d2424eab69f274851bb
- SHA1 dbf0a133295848655969b4d81e5d31ab9ff7f7f7
- SHA512 74540e290823660e72d1ecfe96e1f5b291a45003fad1cdddb88fe9bcf4193789622c30384e5e706a1b624c57b3345086503d12f85c8d921ab9f590600c30bc10
- SSDEEP 24576:oCvfc5YrHOvhHIc/kBxtjFLeJk8CLrysEU2S6SV7ICtHBCTvm/LNVwN:oYrHGf/kBxtjFzn4DSV7TtBCTe/LNSN
- TLSH T109358C3376D28031E9730634A9ACBF115EFFFA210A31C64F53985A5A6E72B80D53A357
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUMAA8E.tmp\swupdaterres_en.dll
- Size 42KB
- SHA256 be83143f61ca49317613663b6025c9df5b52482b454235b76c478817a6c611df
- MD5 a9366f6e9620fd934aaff7477c536b4b
- SHA1 5198f2a6777a113d70b2fe1aef4fcc0bee84b289
- SHA512 208c54fae7b653234458dd7e7701bfdda0c264781613885f7f79f793696827d1cc4f3baffaa5e288e6e86218cc660b6b57cb95e5b623040da90be74e5aaeec73
- SSDEEP 384:+28agyWk9RpIYi3tqfTBpXfy8RbmL4nNymGm/:x8agyW4+Yi3Mzf5AL2/
- TLSH T1201394B247E44918F7B73F3069B4592D4A777C81A9F0F35D228060399970701AABEF2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
- Size 414B
- SHA256 fa5ab82e4198a3c40cef80bc7f42bd6a305847008c5b4583c377161230e09fe0
- MD5 aabc81178b2e37e92c4a6ab6b159e131
- SHA1 fa69e65c246b5b4c3b87375a6d46a756ed3bdd9d
- SHA512 1347e4bac683ebde7c1436eb10a6c50da507c4f3fac2b64033d76f12fc761b689b6f0bbcf4d298cc39a2cc98b21651dfbb22e0b6797be2fa7d203b1f685b35f1
- TLSH T17FE0A2A9C932F8A708F9471D82504B12E30113072BA0885F3B3C824CCFB023A068686C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000023
- Size 343KB
- SHA256 07afd00bc6b13e35f702104aebea04e61d7f90b8447559279895e5f72cabd471
- MD5 f39ab38ee79b1eb354356116d49017c4
- SHA1 b97e8c1d90d46d372791af31561daa69e132d7c0
- SHA512 01217bff1fb5b28e6d1e5e02473ea3154c97f36f87b8973da56e8ca84b636e0de2c318cedffaedf0c76ee90d3eb2e26e6689d5a973538b6f0f91bda10c7a5253
- SSDEEP 6144:nQbTrYgHjNyXvc/D0GyVq9bk72B3QM/lUs7Jv2zjWriqGfkMzZh1RqXOzKY:nmTsgHHLlq72iM/mPzjWrykMzZhXqXSV
- TLSH T1177423D43C829CDEB5717D27911A93A6C213B4052D40E39377DB808A7E8B5E852FF86B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 912B
- SHA256 f5a96fcd3f98ea86af37d7c17a44c819930a4f7351fa22e436a7ba00a20f1e59
- MD5 df5e35b2520717fa9412cbfdb624e487
- SHA1 f92f561da1e8f2cdab08916b237a538e2a82df60
- SHA512 184413675d3233db063e0c67896909ee867b6b0d2e8d8e61d94d1b057fb78073e462cd5102cfaa480680d38c2f6d9e9dcd943fd14d2e34f95409b2e974f2ff4b
- TLSH T1AA11AC84A2FE9B5EDBC41D7874F52A0D38F90A0800270E53B7F01A7A84317C8C890C50
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
- Size 7KB
- SHA256 bfb4baaa49b0a41b2e9fd5e21fc265639aaa7f0b4a661de0e0c2b131cf2a296f
- MD5 589d5ec67c8aa790de41fe1ffca9917f
- SHA1 d97c83a84141a8de351ed9a47f08fb4b9a9c1688
- SHA512 3b17eb8c3e3249b5ce33955ffd396d71aded68f26338221025ee581cf169c0b6ebc4062bfa8f828ca123f4b4075e8d4b66950e5ad5d550abc17a2b249c718652
- SSDEEP 192:DuMMQ3ngaIEadGpNFmJNIUehhVGetvlQf9GC+oH4:DuMMQ3ngaIEadGpNFmJNIUehhVGetvl9
- TLSH T16BE18CF787F4856EC811A7F59B142D1BCE590A18973C3C5789E4EE8B67E2872D20068F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 66d36e33c84dd6d7e5b936391545a1d5c14720865c1435ecc889a77ac5a68ea8
- MD5 dadc14e7362c7780495400230b31344a
- SHA1 94eed68dc68d8507e18b3fe09ebe5f881e7d994f
- SHA512 a0b4880d0debfb7ed6b6df6460e1bd0288c8df1203e173ee53149099c77c0075f81a8e122e8bba1a3f193200cca10b35a5d798b725d5521e7906d71993f905b6
- SSDEEP 192:CRH/VHo5kurEv7mpAPRp2wlu9EHsb+WNnlqTqQ82DCiikw6NgauVyIsnAUge:CRH/eDgaUX6aw4o2NiaWame
- TLSH T1B842D66EAD24653B5DCBC62AF9257B53D3FA102121D42E84EBFC8A2C15E75DC321701B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 12KB
- SHA256 3c6cc8ec71d2f0bf3192d2e827254071c9fd979f1c9237432771f39f50036ce9
- MD5 7d75e86065f5555fcbf95d54bcb271a7
- SHA1 f75c89cbd8c6bbf4fd283bf4ad9e87dd583d0d96
- SHA512 c706a3fd286d0b7b2f4625ec32a46c6695af8e653af1c311756730a31c8e44dafe64dbca9af01e6cb698ba600f614ef165a552c68f0e7e39aa7c3e7adbccd4fc
- SSDEEP 192:CRHXVHo5kur2v7mpAPRp2wlu9EHsb+WNnlqTIHElCiikw6NgauVyIsnAUge:CRHXeDCaUX6aw4AELiaWame
- TLSH T12B42D62EAD24663B5DCBC22AF9657B53D3FA102121D42E84EBFC8A2C15E75DC321701B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
- Size 13KB
- SHA256 0adfd22ab536f46d8e3b26e1319af5ba5179aecf4df37774de4b67ed49d96b43
- MD5 9679a7aab497806702921a826c69032a
- SHA1 59914cb42c14214d4c2223bc502399d1ff1e1496
- SHA512 3ad93deec0246a047dc4f5a262b65a4c9a70fc399073576fe1443e8eded56c70253c07e6bb8025c693be07a2e1e6811b1aaf3d54602fcbd3b778b6d7a5e5788c
- SSDEEP 192:CRHXVHo5kurz/v7mpPPRpLwlu9EHsb+WNnlqTIHEECiikw6NgabVyIsnAUgE:CRHXeDLapXbaw4AEYiaWadE
- TLSH T14752D62EAD246937ADCBC629F9657B13D3FA102121D42E84EBFC8A2C15E75DC3217017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- Size 17KB
- SHA256 78f2b9e9ebc08798880cb4679beee8aef2e584a4e9691c5edb1c0165ca1273af
- MD5 f3fb909317ed06709bfdddf6e293f823
- SHA1 f9840b19b75e8120807aa0784c1bde6154aba029
- SHA512 4bd189ef0e2f72445f5af07954ee4d6ebdcc450090a92b283a2c281a3cf530c9eff525dfd48ea12519fb7f49e455434598bbe11f388dcada8c12c9ada348e50c
- SSDEEP 384:7NjnO7KxkXqKf/pUZNCgVLH2HfgslOv7pLuLcSjZkXODnq+ErU3BHHGu/n0To:7NnO7KxkXqKf/pUZNCgVLH2Hfgs8v7pU
- TLSH T18172E9A76C4C9E370F94CACCDC1A7B4FADB6024B65E9886443FA582503D5ACF114A1FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 96B
- SHA256 478886de23bed0e0fa6b1b6234b8aa9a43563157d523679026b17a707c604f88
- MD5 5664740e8da422f5e8634e110eb4541f
- SHA1 d716292fe060d183dae59bb2e9786a277efcc2c9
- SHA512 ca473fa36bd41979c8bdaea9ef63c47bf68f86607141538b35dc549a769eee15caeb52b049d37d253932532ee7b8a2745c1822b11706e1196116ba5039d19cc7
- TLSH T1EAB00255C3226323D04287B02AD995EC7160EF66CA071216A6E16FA6DC35A615526E70
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 120B
- SHA256 0b5d46ac90660a46ef69f4948fae871798a7351676afdb505f8d6d27a5e01c93
- MD5 ff9223f62a66bd56e5439fb02a8be747
- SHA1 81aa430d74060d9207a920509eed7f7272e26956
- SHA512 124a3853128fbfc1fdad068b78d7b849365c15cec94ec53c6d1404a387966788d63107f55b59da92298077a89dfefac519f64d4e0821fd80a949aa1d912e08e9
- TLSH T18EB012408041BE42C00206F4118754DC72189F18960B2B0663F06936D8691628415050
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 14eaff14c4a3019751520d58c1bcd95062fe59faa21c67cb35d787320c4e4038
- MD5 d5c17c864afd3a4c8482bbb9ae39eda9
- SHA1 fb0e6745fdaf4c7f98c8d9d701572b4c879969ee
- SHA512 f71a43ad56d050b8ba5250b5dbcfffd7967f186329e9f3fcca7958631621bbc19b17af16c06518bf459ca6edce1e78d089af00691536826519e4aa46452ce987
- SSDEEP 3072:/vZSGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:/vzm7Rkm1tYpBeh2BAoi
- TLSH T1B0C312375D64E83B5DB9BB4EB08E0E1F1DF149A7C824EE92C8D85A0433E97CC1A45974
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 9b0250e503e412313267aca148332c6033202c4fc404dfa806cfdd6e2d040a73
- MD5 3602bac3971de292dbccbdc8d9e02924
- SHA1 34e5432b4796da6b474f168e063105a1c3de9d22
- SHA512 9ab96169d8a73f5606425b61b5e4fc6715b7a766380a3177e6707c9368cbb98cf3b6a855ea574b32351f9cfb384ee52ba40267882bddee560e0209fea51ef877
- SSDEEP 3072:/MGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi://m7Rkm1tYpBeh2BAoi
- TLSH T19DC312375DA4E93759B9BB1EB08E0E1F1EF149A7C824DE92C8D85B0433E97CC1A49934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 ceaa313ac44857265ced921e071d58c3820af5514e006df03307140a492fb7b2
- MD5 debfe5efe79f3009d10b1a4104426687
- SHA1 59f0edee03aae19435a187fa7c30bf37a28d82de
- SHA512 7e7d650a8e825576d71ceeeb8c2bd19d414396df39c4e3d82292714c715270da6a753533afea0a2839fead7c8aef982a98bc84c92500d002c2067aab99527a85
- SSDEEP 3072:/8ZSGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:/8zm7Rkm1tYpBeh2BAoi
- TLSH T16DC312375D64E83B5DB9BB4EB08E0E1F1DF149A7C824EE92C8D85A0433E97CC1A45934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 115KB
- SHA256 c048f2ac0dd202d3df8f791d658835ce1a61f89e87d13671efd02c1b769fca42
- MD5 018a0ae9c169fbfe527ac58cd9bc1a27
- SHA1 fbd31f9eac1bbceb6a98ef222aac40aa9d01e3df
- SHA512 db18f0ad2529b762b597e284ea492cc7ab1df273155a10254e2d17810629dc3eba24fe801681ec328356488537636474453869c3a82db33e43d5e29cfcb5ce76
- SSDEEP 3072:38Gm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:3Pm7Rkm1tYpBeh2BAoi
- TLSH T184C3123B5E74E9375879BB0EB08E0B1F1EF149A6C920DA92C8D85B0437FA7CC1A05934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
- Size 116KB
- SHA256 f1f78abcf532f80f2ecff7119399e7b84abe378b3d97ae92a8879e0df0fa29eb
- MD5 e0f398bb3eb30fb5ec628d6e510647d5
- SHA1 e96f454340b6a188bfde41f60a62ec2dfd288c58
- SHA512 66830e7ba6ed0ff71404d471ef9862cb49b9df9880f7858eafb5242cbb30d3494ec7f27cd90644ecdc9296b5ae640000cc20313f25c081ac19d195e62a669d30
- SSDEEP 3072:EMGm7D5Lk17ox1tIpud63U8BehbCBi9fTrMi:E/m7Rkm1tYpBeh2BAoi
- TLSH T19BC312375DA4E93759B9BB1EB08E0E1F1EF149A7C824DE92C8D85B0433E97CC1A49934
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
- Size 795KB
- SHA256 d6590aecba25227fc950fc2951d604a41ad3ce496db8c1b76035dacefd795596
- MD5 0503db4bcd714f9f4716d14cb2587dff
- SHA1 fe8623352500d83f83d0fc6407fc9c4f2d94520e
- SHA512 bec8a85d19a05d11cca73f455ee5ede8205ed8713840ebdfde686a9e3753ff2c023a995a12c1e8a30892d0ad85a6cd29080aa87e3f01ac955865e24aabe2100c
- SSDEEP 24576:4/RU1381jGKxF3sYaGfAX8vcZWtP6cQ2Du3kVz6:8RUsxmKIZW5q3kVe
- TLSH T19B051212B2D084B0D8B30A311961DEB05A7DFD700A605FEF33846A7D9F75691F435EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\c760c036-2aba-462a-9ee3-ba781d52327d.tmp
- Size 1B
- SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
- MD5 5058f1af8388633f609cadb75a75dc9d
- SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
- SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\guiEF48.tmp
- Size 4KB
- SHA256 1c89ff2b456d9ac2ee61df9b125bd4d225e17e190fccfca9d2543f57518cc7b0
- MD5 9154c14eb957c23aefe588b67c64c4f2
- SHA1 530da8950844831e7d4e8d7829922277f9bdf850
- SHA512 d268df8d7c34b78fbbfbeea77bc50dadeb8df4da58e71822acaccf0e9b1034ea2d333dbc0629d5712a2a72c077d3d064b264db508ff39b3f3292936c1aa43e06
- SSDEEP 96:bS52nYv0J09kkUWjWwj+xkCKFCuHzdcsoHzdcsTYBzplDVMtGmZixNX0:bSdvJKdWB+CZCas4jDKtnZiE
- TLSH T17CA154F8E004CCB6D6A1884E61F93C3BED29859F4C56283BF57DFE894F6753A1295801
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1010211392\CRX_INSTALL\js\background.js
- Size 27KB
- SHA256 0ac1e8362ee965e90e88ae0eeb81765cf19fda8274adcb5a14b79f7b3f9aac79
- MD5 c67336a501fb8e77464f92448d96a4a3
- SHA1 4a1fdfe6e0c462281dbcf424871748fb3d1ab390
- SHA512 4f724b8bc69f114157b2c7b91916cc116fe0488d26c5ef807213212f559b9b19a27a6c12a729bb3d6601ebf50d442e25c0b673b4f3ecf06345d3c33035629a71
- SSDEEP 384:QLB+yenCjkWaZ1r5A38RlN7Kl5KsFZFeCK8XM5PYlywFOwl6+jPXglbR3ltUzU97:uanC2Z1dy8BuEYlktEPXi+CjQ/e7kID
- TLSH T12BC2A58E71E2F6F5E377D5EA44AB144EF22B95AD680D40C89934F5C1287B4CD8232B27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1639119173\CRX_INSTALL\images\icon16.png
- Size 530B
- SHA256 4f10ba59d9eddd0d5f5a6bdd45df96f781bd30c1ba3c4ff32f6da1e0442b931f
- MD5 449c951f5c00fb23cad7eb88ab2e16fe
- SHA1 604d8ada542c1cd33ec0eb4c5fb6e9aa31474a69
- SHA512 77617763f80e5dc595d03122dff9404ad4c82ecd41d437d8d6c4f42a0ab79eb4daed77ec7989e65a433d413b3b7ac7e0edcff79d2b37a7707312a3a602c43e4b
- TLSH T18EF07EC0F3828CA4F83B033B020A80A634EF2818AC90AA4CEC2480AC70A0C5605D8B03
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1716781200\CRX_INSTALL\options\options.html
- Size 5KB
- SHA256 b27f0368c761952a1675217b834b6ff84fa29e4ce585f76185557b7e7eae506e
- MD5 00a9275aaa91274647b81f7bc84895b0
- SHA1 2981967154a181471633ee1f59bb1ce6a6a22464
- SHA512 4cd57f9914e4da2468df3162b952987cd95fe14eb60ea5a13b440bcabaa619ec8a5578a51b01e07fe6716e3c7fe72678566aa1095589f7197c12ad9e3ea889be
- SSDEEP 96:R4s3HFKXaTIuunJXlGS5dmS5oMSS3KvBS4TkD+S3fyYXS5/JS5S4S54VJBS/u6qo:R33HwiIuunJhjiMao4Tc692KuYG6TNsw
- TLSH T1B6C1472024F0CAB042FB04EAA662092ADEF8530795114159FADC8BF54FBBD6EC777479
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1716781200\CRX_INSTALL\pdfHandler.html
- Size 928B
- SHA256 e43cc6e3bee633edfd6566c9b7db5360d897b2d6767a2f56212fefff1bd89464
- MD5 d812576543e1ae443eff74603f4ca397
- SHA1 41ca363b3d1f20d4ba798fd4eac0331b1d303f52
- SHA512 3b7b8821b5ada08ae66cd7e1ab681bd79db902478279262f20fcea3de516b2cc27f43896e1b6f76fdd1186376192702b3d352af99bbbe3e55867033696fd1a8e
- TLSH T1DA115C6EBE08D1BB16C05C8F7976D08ED159DA49B25BD76814F9C1940A283DE0CE6690
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1716781200\CRX_INSTALL\preferences_schema.json
- Size 7KB
- SHA256 4f72309f9378f04b3f1cb8f46b031ff513ac63e5056d96272f2bdc6d39dcddf9
- MD5 a192304f63ef26c80086f835cc4b7ada
- SHA1 6963e90e752209132b728a938844c4c64dc94d43
- SHA512 be619909cd0c3465966a4018847310c1493bfdecad6f07bb28293f3dcea73dc377f5d52cca040d626368e17828eae28384fe51d20c4a71925c5f31eea8e18561
- SSDEEP 96:amWdXsiedNX5rkF276lH4xjxLPGTGYgadOk/dSca6:gsiq5YAWkxltkC6
- TLSH T170E17C44E424ED73004992259CEE4494A730594F8EA17C293ACC94AC4F5EA7FC6FAFED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1867982997\CRX_INSTALL\background.js
- Size 985KB
- SHA256 be7660d33aff75fbb8510db53d7c8f92091056f3810b97ff62e435f5b2ee2d0d
- MD5 3e06922cb5812a29f8b2501e94a3f247
- SHA1 5986ec172900cfd98f0aa693f97e69cd25c48cf1
- SHA512 74f07d1f030f9b22be66207291ac99e391e42c9465feb4ff613f282dc1139d7dea90a594537abf4128bc838fb7bc9dc00a2121cc9502d971968dd9cf0f42eead
- SSDEEP 24576:3R4NxgPbPgiqs/Rx+9WPLCdm8hMtych2PkGuNRIfZ8I2ZUn+cFoa4Zks+lGquvn1:B4NxgPbPgiVRx+9WPLCdm8hMtych2Pkh
- TLSH T1EE25B2D17B10C02FF765015838A4745C596C12A4225CFED3ABF9C16A9AF0BCAF31E9B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_1867982997\CRX_INSTALL\popup.html
- Size 211B
- SHA256 266b3b0f498e7c5dd88e17b9e7b0687655430c7d4fb6fc452f6e6ee03db62ed5
- MD5 4d268e20e5c510f3c890fef562ad4f6a
- SHA1 da237a564bc2a9ec01ce3b82e6355e0e6edb3e3c
- SHA512 0d187f56322709b1c8649e846ebcc46f59899522387cba0776dfb60523bb4f5b835c4c6cfa1352034956c48875cd9c32dbe2434f81ff231ac292a0e8b4c9a41e
- TLSH T11FD0224C08617F4609EC06482CE0F6DC18CB8FACA181ED213AE6A0C2FCC935CEE430A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_193127916\CRX_INSTALL\icons\icon128d.png
- Size 4KB
- SHA256 7ed951f0a157dac2b42a2b003fe76e085017cf425c827b05bf759ebb55db3d6a
- MD5 1e56327668359bfcae26c27defb340ef
- SHA1 c91bde25817086d9b1319c20b1710b09365a70e4
- SHA512 5cb98cfe15c3be976ee6144657eccc05d2104bcab2b8368d1a570395c1c726fc81fe4aa09236fb8dac12c43bf12020449403ec6400c4d9cabff879f4dcd656e2
- SSDEEP 96:WS/weBFLEmlWNCmHR/u3bve1pACPYvXGab1rTgh2E69uRfO3W9IkG:WS/hhEml2R/u3y4CAb1rms4U8G
- TLSH T1B8818FF63D415EE645AB0A630DFA31D52AA7B56DCC9973586271174B1848E007CD8BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_193127916\CRX_INSTALL\js\background.js
- Size 29KB
- SHA256 55345b40109f7c1ee0e67da02202919b7b23e47b14651a19986bb535d2d8bd8a
- MD5 71215d3e85aa687d34ae441706bc3e9f
- SHA1 597bbec974c3f5f5b2eceffb1dcb870b7bff84bc
- SHA512 2d19ea31a5903b6d638a6f0dbd27d69b61dcd4d9e8e1f916de8f4cee9c1fadc2370ded95b93443493b718b30c16fa5ac61004caae9d144dc2f8ad77144a34b12
- SSDEEP 384:QLTAyEZCjkWf81v5E8ylNANPBKS3M3R7IgFRW5fI7zljuFbRmj3wy3HVL3ltUzUm:wiZCj81xE8EzzlJ3w2cSrAJD7kwtpLd
- TLSH T1FBD2B58E71D2F6F5E373E5EA40EB144FE22B5569680E84C8D974F5C1287A48D8232B37
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_557126563\CRX_INSTALL\bg-wrapper.js
- Size 84B
- SHA256 0a48213b9a577ba7d1dad1f28e6d7394d6ec81ddb6a3d240b6fa21071a22243c
- MD5 63abc1bee2e752534021d902bf4c8319
- SHA1 e77685d175296c90f04bfb586f71df7fc5c1e44a
- SHA512 0f5c3f5e6fb161600ef9d046e387626150ce3acb5e8f1de5b48544fdc4eae2089f7715f2ec0cbd516d4c879b6b78d829a628118e367f6eafbe38f9850ccf0976
- TLSH T13CA024530C54401D103403370337033F71C7D1540703FFC03014D5771100D000C11C05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_557126563\CRX_INSTALL\css\chunk-vendors.67b6e527.css
- Size 386KB
- SHA256 2b6e7fa075a7c50adac2642622b0b4e48b375ba62d10a7d69cd83d2ff27b7194
- MD5 a37b786ba2d74b8006c5cc08dc1dc140
- SHA1 f056cf24b9a35c5072175dd94362dde6a75d3bce
- SHA512 294ef89dae57fc4bb413d47b6e2db2397e27d244417e93b35141b106f403e41e776babb8c0fd9084d4637c0a490e2647936b163012b90f5df5a63d17025ec943
- SSDEEP 3072:eanbiImwUe3h16SAS+ozC8WQNa5Lv2gLjKRaxI:UIl3h16SAS+ozqQNa5Lv2gLjKRaxI
- TLSH T103846CE3F2D2108A4AB3A57F8090F7FCE53F569D5B91B96296067B3143843DF1B8211A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_557126563\CRX_INSTALL\options.html
- Size 1KB
- SHA256 c661f2ed61e9cbf0bd28cf19e3fa9ae1c888b72775d0e378a726160a4be40c3f
- MD5 22f534e02876baa5e6734db9dce8911a
- SHA1 d4be3bbf0c8ebd23416a95fd7a2200955affa260
- SHA512 22f06e242acf1a709133c7a4ff4ebe5053d2266fe6b01d0537ee72264b746e02c50e649d4ef380919dc398acc5c21f99a125ca5942c09a045e970b5aaca513e3
- TLSH T17221175AEC04D6DD57217F81FEF0B25DC4CBA90F5E20A46090F4835D41F8BD845E6C11
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-128.png
- Size 4KB
- SHA256 77e6c0d3d315f749a624631280c7f4015167fe671cc954505122224fce069f52
- MD5 da55b2318e001d0bd58911d7158f8aa5
- SHA1 5dd89e6bddb1046af2f5acf19b631a0815a8ff30
- SHA512 4a3ec8692da034313b39fffb0fe1c119a87ae46639033e5b27234515899fa041f2c8c364c1efc0d86801eeb1c9fca3129559570a68d7da5fb07ba6db128845f8
- SSDEEP 96:CBrxgKPvJ/zv68wg8FFcHQwM8G3Nc84sWQ0tAViTF40BpuICfYaqHfG:igKPvFy8wFLni84sAtA0FSIsPEG
- TLSH T1E2916E5F04656C216B3629E53A7793A94908C3FC0420677B8B7F69C933A01D3F051F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-16.png
- Size 567B
- SHA256 e6b3b0479ef3462a37cf516e0b4512df3f6f9ff5d3db06114c6b7885d402f17a
- MD5 9520422d4b8b59be83d243161969e4de
- SHA1 f15ef83685cdbbe68d1c452855af1ea6130cbf39
- SHA512 327d41a7acf0e42131198663c689179bd34aa94f3c460303150e813042513761c4e6d4eeda9cdb4f7bb78391aa4f650dc9d99f935d0717ee8ba2c10bdfcfe526
- TLSH T19AF0417412D6B904848861AA22227320D81AC1ED06954E33FAC8C828A040ECEC6A4A32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-32.png
- Size 1KB
- SHA256 b8b24ec34a5426196a274d0ca41d5f07290ccd9b2f37c01b3c291f0384cf68aa
- MD5 8b155edcfc48795455ab96f2ed79c757
- SHA1 e59bb8a938454c5ce84c69ec38df897b6a04f67f
- SHA512 97c09e0d4ee971eb47c9cc36905429dd943c02bc245e37861273107f73f5ffbbcfd021d846d1e4edea66c2afc54b74e586c4df98b277a5a3d05af27038c40c37
- TLSH T15921C6D3A84A40BCD7252A616A465AEA11F1BDF4D13A9F103C16ACF143909D5713201A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2504_804055837\CRX_INSTALL\src\assets\icons\icon-48.png
- Size 1KB
- SHA256 fc359cce0e73f3aa76820730429220c1910b75be6bc99201d9db86279aeddebb
- MD5 64fc602beacd33acc962b8c0059faab6
- SHA1 c66859eb141ec52d43b8eead551cd9d6ac888560
- SHA512 3b7de3ed193698178cc80dfb64431394520431ad1f549e0e6e1f00e28d0d55e8a4dd2bfe0a7228e4b40839f6d57285d9dd48669ffa22df800ef8b0b501fe7322
- TLSH T1D53118B084224259E06D8A335C8BAFE5D734BE8E115BD552101E202AFC7A03CA7E2E39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5556_2306416\Sync Data\LevelDB\LOG.old
- Size 324B
- SHA256 9b16bb23718670e853db3d689be45d1be10e2fb02e89e041364356fa5b9a680a
- MD5 dc48fee4e43e97a8d5c8083574aef2c3
- SHA1 7025c026896de1bd0c83966c69d7fe8d82814961
- SHA512 c606d75786d91b28bffbe241bce2eb6800a2ec28dfcbdeff493906747a91ef57febd19e607b6380cbb7755ce611040a06d4c53805809b0a71099cc2a91e1e8d3
- TLSH T162E086763ACED77D5848C4935B75B30EC6F4BC08A7CAB54A5784D4857387608A1B8EB0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000015
- Size 47KB
- SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
- MD5 260c81a4759baf163c025001c4f27872
- SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
- SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
- SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
- TLSH T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 984B
- SHA256 8feea2e9177b5a458ef59770b89d2610b05fbcde5759639d062fc4c7d2182e3a
- MD5 b5982a03cda947bac8a425e7c6f5c08e
- SHA1 dfe4ac8c0e515edd4b7b405a4c1faa368b799a4c
- SHA512 74d644123eb5a9430e51d8f6316871256c10519ada100aaaad0b068d3d10ae224b95b10300407abe1211e0d40637e30148ae245fa30272c209199d10a6277631
- TLSH T14F11425D1CCA8E62FFF468723AE25ECD283D508404831B5BB948EB20ED133FB56902C2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a97ec.TMP
- Size 48B
- SHA256 b29071b8c44c6e8de78c4a1288d7cbf3b7b12e45f26630da450f9693b439e3b8
- MD5 385f74750ff449efebac898bdf2efaad
- SHA1 955bfa8db1dd1fc92d5b1d07a0b069799608d87c
- SHA512 023f8b1c39494fa768a46f0301a6104ebd6ee1d7aa7b0073b0c40b83d43747175c61f2965b8329223deb8ba0c5eb91bde69c5df69cdaf95b5f3823ecd3dca402
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\_locales\en\messages.json
- Size 175B
- SHA256 c5cea8c6fe04b30d8a5490f0bbddd0b3dc3fa4382dde777105bb3e80d2992dc8
- MD5 3ae47e124645df64a994f09171695c66
- SHA1 32e1f7a89cb14fe2e516f400451f113ae8135c2d
- SHA512 bcab9ba96d0ecb78cac7821296c7a6b0f684aa04b09e51a6c52ccbd0a299a87f165ecbbb6e1f2935e7727f7fc710d2431ee346c6ea7606d1cfc1a049c28397c5
- TLSH T1E5C0124DD441299602B765113DA66241E65602651540FD427B9D60584B70E56C5C2F6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\_metadata\generated_indexed_rulesets\_ruleset1
- Size 779B
- SHA256 5b2f98bb229491c91f7b10e10b22c3f42244221864d9fe17933800f791381ba0
- MD5 9e1fc84e59fa5a0b363ba83d0aea9089
- SHA1 7e770cc210771c9258116b966d3a75d4fc9bd65d
- SHA512 cc4abe952f826e9170f4797494759e125af939db5298bfbfff4da4febac139da08cd5be69e686265a124f79790ef6f8c3152a1b7342b3f1f858a938f31a9b4f3
- TLSH T1BE01FE06BE009B79C13C537089EF4512D094AE8257E5614E2940A3087A415B4DBB7FEB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\css\options.e6e84e00.css
- Size 613B
- SHA256 11db5186be7fb14d46e0e42cb0229831754682ee3cacb8ce2613ae9b6684c4c2
- MD5 d696e922b473abfa555eba5833752121
- SHA1 b8112f53a9d92e666c4de5258d2e909d238a2864
- SHA512 66086f99b3deb1766bd8245cec2faff73a27a993a8ed60633d19e7feb2353c56a6c9ad2a5f3dd7a66507d0722d1a433c42a38976198b7ca7cd67ec6973f5334c
- TLSH T1DEF0AF13380AD87B5432A08FF582AC6D620DAB7F53D3B247AB8957067E1A9813361739
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\gmail128.png
- Size 4KB
- SHA256 ccdaa6965bb0b82ecefb62919324815cabef742506d77de79e36f7beab3fa573
- MD5 abc4ccd4708424476971338c85ba3c58
- SHA1 0db30888ee3aff9279f5882415a8de0277664934
- SHA512 4b8034cf788e726a63a20d43f06764b3acc21ec94ee3c8f7f0fc91102efe54cce7f1be40262c3cc59797a4a2236dd3ac93011f52291cddc680f94db304c843cc
- SSDEEP 96:WSUknmWIBv/OqziUaHIIHnsxI4I0TBbSrEwyG7YppLobzQ8xXzIPykYngXH/LjK+:WSUknBoIS5QEV/pc/xjIPykYnW/fK+
- TLSH T131A14C48EB129C3269ADA7C93BEE454E6BBB1BCC5F506441BCD40D531D229739BDC1C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon128.png
- Size 4KB
- SHA256 cc02d3770d0f96623c09e5334a915e7ddb96ecddb3db0ba81c238a70748d5365
- MD5 9c313b97665a5743537c978456abc7d9
- SHA1 f95b2d5a6945633e49e89957f45e96c3ff7bafc7
- SHA512 227a44f65c5afc073ebc91a623c1da0f10a010f3f9fdde4d11cc0aea9b2a8855fd6f1fb61ab130456268e4b37c11e01ca4cabe74a72378582bd1d3e6380748bc
- SSDEEP 96:Vd0QN6nkhQUwU1SyLAgXc0WW/Grfc/k45yjUs6IHm0:jwkaUwMSMAsc0ccKj2U
- TLSH T1B2818DB3D993D4586AEE22D11389C0EA6C4043E93403E7D3732AF5FD93C59CD1B54A09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon16.png
- Size 501B
- SHA256 5de849a40397f1535caa858fc91b7281a806a8a64b05e4e4ed9c572b42b99325
- MD5 eaa867a24d9ad853f918a6aec3c20033
- SHA1 6cc629b399440b27cba3feecd3c10233b07112b4
- SHA512 a1f5ca680b1df9539d0a29d1c9fb312a4b74bd124baac133ffd2536a08b4e767ea827f43208654800be6a744ec82f3ed3834a53e839ff4cc0a5fde4a4602311f
- TLSH T16AF005136590F0DCF384C5B99AD2A4158E54D114F48B547571ED0757C993B40806326B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon32.png
- Size 1KB
- SHA256 aa6532b77ed229bf310e1c62c8e7b765d06e3503e6b9ee60bb328f596d8ecab3
- MD5 84d3655f244527f91c7ea13071d63df9
- SHA1 fd79a4a8e35e6dd329943aafeedfef9807f56a95
- SHA512 d76a52053bf87436d5534aa68429e953f79ffe6c1199bfbacf0517187715b2fc37a4c502c7058201f0f21e0e827e3107186e12444401a6676593ff932fe92859
- TLSH T133118621358A80D86A1517070A4C158554B67DF8684A251C1840BFBF3FF5664A3A8E3E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon48.png
- Size 1KB
- SHA256 3377be29ab5b2f1bc34d33ef075e5c98cf87edc9c6c1e6a6eaa5448b079ab861
- MD5 82d016e65f2f1f0b772d02063d26fae6
- SHA1 a7a8246f3cd8416b7103509050b123ba26bf48d5
- SHA512 dc3138ca676a529d9d1b23e7f2e1fc7cdc747cb24c6bbff9489adbf4aa0d0721cb4c510722360d284be97852e895ace3dd74b7b3d01bccf6d8c67f1f44b525c6
- TLSH T109310C945D10262C1B5883378D60008243A71A75FC09C4FF7D93A2F2846ABF1F5C4594
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\icon64.png
- Size 2KB
- SHA256 d77621fec926893d93151e5b1c25b5574761f4639d418837c118fc4e3bb39442
- MD5 705e1dcc4d8a1a98e82a5a9ced466b07
- SHA1 23015ad0df6ce9cfa3136a10d375eef426e795eb
- SHA512 ee0d56e3d2e77c3e04be1ea5e3fb7ce9710a98658b7ba6f157b6cc451732f00e0b169b3322dc9fde9bbffe3b3b22caed6d8d8d6597b38087a2ab7c0258fcbc80
- TLSH T152410B85D235FEC3ED99A0D199196230DA2572F102496D2DD7342B68E08B562C7513E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\icons\ymail128.png
- Size 4KB
- SHA256 90c24565cca615f4c105adbc869516d104fc4ef4b8e16b687b138ef1e3ff4b52
- MD5 0c60ef8ddf9a2a85653dba05eb30152a
- SHA1 b578eb165163f1882b0ce2331413e02c19ff7d55
- SHA512 87f15e363fb6f4a279875f86a401827ee07b8ee7583d4b1a762816803c532620153fffdf4364e9b53cc4891b5fe90e11754021e821e1d6ec4a73dcaa0f594dd9
- SSDEEP 96:gZAcZUtg1jN3CrWJ/hpQU0kBo+h1aF3cs8VI+pi8YO7LoDQ:gAcZUtSjNLzQ1VK1aF3cZVcdKLoc
- TLSH T196918DBB96488E472A68C221B8B001FDBC2E36C9C31FC28C193658AA1537D0B41CF03B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\js\background.js
- Size 168KB
- SHA256 a0c6c4ba721d577350bcfc10ffa4491f87abc04f2fc7eacf0fb650fde4e8376d
- MD5 4d658c9546ed50df1daba2028a25aec1
- SHA1 3bc39fd3a66e322418f6b36ef95239342c039cf8
- SHA512 cac5c79d90713f6308f850010a38b8c0ea9444ca8d08ea6667fcee14d7bf5c7bb423cabba9f05ee2c9a167393d33696e07118f075f971e7a6ebdb3fda7ea0be5
- SSDEEP 3072:UFQQzqnwzhgdll1QZDzlh7xdBo2k5P7BGcFTlT:UFQnwzhgdm7P6P7tTlT
- TLSH T196F3F789F2C3F06563E3A1B4406F650BF279B818680E8994F655E8E2AC7C94E5137F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\js\chunk-vendors.8d4b78a9.js
- Size 289KB
- SHA256 ed951b5d3a0416421fbbb2ce879297b258c169c7c05744fa21506e6547c28402
- MD5 5c8bec2413d1a2d5ed3c6f56a349c756
- SHA1 539f1a5a0735ef004ab79946cab89649f835c0b8
- SHA512 97c52262619a70e2f4b1cf7723952837c4a380a1487cf2f1004bf92e9e253769a804948916dffabf954c7ec02a340c9afb644848179d320401422b2b94dbd4f7
- SSDEEP 6144:KRaw5FZDCyKZkJN+too6WT7EGsGLtJBE0VqE0VzYsGfZ2F:KAw5jCXZqN+tZ/EGsGLtJBE0VqE0VzYC
- TLSH T1D954F79672C2B43513E761E5406F4207F3392898B80AC4CCFA79E8EA796584D617BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\js\options.00bb6fbd.js
- Size 36KB
- SHA256 07faf94d6340d2f5ca395c57037b5e98f6277bcbadb72c6091d092508dbbdeff
- MD5 a80f6bee855becb1170da53175c84af4
- SHA1 78740f3ae6f9708b4c0c8449c84280ffc1b269d5
- SHA512 7622930e7cbd2f86b1b71528adc2170a7b7a2c19d143329ddba621093e579386622e108b4f5e47f351c846712436e87176b36c54eaec697ffa67eccc563c78a8
- SSDEEP 768:XF55KTWrT6S+zyu8OeOi3xsyRDetx1Uanw4pZoxOUIGL9b:P+zyudHggy
- TLSH T15503E68EB2D3E0192633F2B9707B0415B6372C59A8179095EB75D2D618ADD08B333B3E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 fa430dc95ee3e43237f36cf6832e75cc0a8cdd472467c61a74e50bcf20b03872
- MD5 b5d0aab89982a7990c677db8b1e50e47
- SHA1 1d3db6f2f96a6501ccfe8c854853cecb48b1fc91
- SHA512 ccf05bf42c36a2a15449f99de4eeef21842751058750c27d6768a55d8fbfdb2118934da13669ac2b30641cc730783dab6bcce88bae6b24d3496361ca9bd13637
- TLSH T175310F1F88A5887F4734A2A8FC758682F631137F44819C9F76BCD008CFB02724246A4D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1064115819\CRX_INSTALL\rules.json
- Size 316B
- SHA256 8b8dca5d206ffcfddfabdf3c0c90f97da2bc8c993675ce616891745413ac93a7
- MD5 e89a86961cc6a5125dbd885e8f8bad5b
- SHA1 a2849b637bcec9dd3460b262c7869d8075438096
- SHA512 9b2a87e5eb5ae4c399e8fc43acab07cb73bd3d9762e418b6b3b6e777d2d047f49c422ea9d1dab2b6da885c945b680d0d703f1e0b2e3dbf24d06b5d28bdfecb37
- TLSH T1A3E0C23ACA26AC1302F72338E6660A01E4B0032B111044173EBC405E1F7506CE60AF0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\1441d5003fc41347081a.png
- Size 19KB
- SHA256 9b63e0f6bc2edb310ee28491952c00e3e4f27c6549e17741b4550b8a1448bdeb
- MD5 95ba063f6e13dbf212a42c5e8579a081
- SHA1 1387f413b491a9ff24b6df5c6130b76fd3d99e01
- SHA512 301819b52cd4b71d95ea84c6717db5d8a0c01b219a50bc4fb63aab7accb930e982cac597800799b70decc05dace3b117c9d33ea676b33274c176f0c7c7c6b002
- SSDEEP 384:jnzJ9vTqswHsO+EPgb1QaGppACQ5siORi1xxTpuFIHSKenKkEY0HJo:5dZwHsO+EPYkI5SkRxjkELHJo
- TLSH T15192D1A9D173C0B29E5DC9DEA0B9EB1399FF3C1043ACA5278520D5EF188B45C2CE61E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\5ab6e20e15091cf40cd4.png
- Size 18KB
- SHA256 e860e7143215fb01c6933e874b4bd8e81a281807e86375d2c995145dad07eee4
- MD5 c218d4ea9a9e43b8af18400af54118fd
- SHA1 51ac8dd7c7f60c64c5cd682f199efe04b437f397
- SHA512 8aacad324ccd270fb3baa43d54bb80ad69b053812a1480bc7fa287fa5d2957ef1247ea42e2dee88e2e001f51c6cbbd106fcebe66da938396e30adb04ffef432f
- SSDEEP 384:jr0e3KL/HGOxTa1Cv+/Dl73wA2lmY52JucL9X51RcaBJlO0A:B6Lvc1Cqkr2Ju0X2GJl8
- TLSH T18282C07563EF05499D0D675886B8AA0936572FF9DB644AFECFCB06E274204092F13784
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\contentScript.js
- Size 3KB
- SHA256 177fd8e3363bdafde32f4ef0931306b21cb2f8bece66db68f396e18bab14ae96
- MD5 ccfbbb16d601549a8e913f20e3cc87a5
- SHA1 796a2d8a7bb57b216e09f6eef808becbd9be76b6
- SHA512 c9dcee69d3de3e4eb1364491da14aab373dcb82a6231391da60f43451b9f4f3d8bae5e20889a7ed1760ed9d9a96d21bd108327e8e060db37ca05200f6631d8c5
- TLSH T1A8810E586664C43F343F17A3E573A7CAA470213EB9066052653DDCAA200AED246A6FB6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\cc_icon.svg
- Size 828B
- SHA256 5ce81498f6de2b05ed5d5111685623ee38294f55bd47f4206a6c1c3c30f7b925
- MD5 9f3156f86ca642b258eb865daaaba830
- SHA1 262270aae002f9eab55a080f50e4d7d123d4becf
- SHA512 4026595657c17ba5e2e2af2a58be81c0fbf579c203aaa6e297258d65520de9cf3b6b5c01421cd5f3a2280db919c7b20f91fa2ad31b44adcbba6d2fd085806a7b
- TLSH T1BA011E9F233550D9C54A9B485B20A938FC2AE1F25E8391F4C400BF037283AC05618CE1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active.png
- Size 3KB
- SHA256 5c3974276e1412bf4ef71093b457b503629e011679b6eff4ac1925cc2db00604
- MD5 ad537fef56203b91c926e55e67b73e87
- SHA1 933b6594054caffa242a9990504cab6eed4e97b1
- SHA512 2b00212a8f044b0a757144dc99de308dae44a3affc685cc95973d63c8366e4aec14e5007660096f0b05920bcad7db2b2cfbf4aa99c69a2ce520f667a8784285b
- TLSH T163615CF332B757A9410198F17ABEA458C033E38F846423A42F7474D8D92D7326517052
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_128.png
- Size 3KB
- SHA256 77377ebbcc482ee2a837583527aade9091b17e76c10fef9a691b866953c766b1
- MD5 c32d9e69958f2e3fd6d57c2d7b76d5bc
- SHA1 e9ca85dd7ac1b381da3b7e022f4887fd2ea3229f
- SHA512 d232dbfd4b53dea1bb1448507e412983547e5fafa9049f3d063ef6a4e3336fb17802e85fb0405735f62d36b6ccad5ed8eb102e0f694ba1433e78778eda5b1b28
- TLSH T18D515C43F5E0A8B003979FE59593B43975A3C01F0B7C4DE3C93D56A2E805407ED4AB62
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_16.png
- Size 469B
- SHA256 7bb800d30119c576562888461732dc9e92897bdaa63c57ab2c52ea6bab5b0c21
- MD5 e0d3d0709c1868f9707669f395a0983f
- SHA1 7b6f224ece28a041f00972a69aa0498f3c7c31db
- SHA512 3018fac4d58c36ae936f7104dab96e0b5f7dc228ce4face83b42cee336e7d2bae9aa26ceaa406ae8df12245ae35a21b119dca1ffba5f5452f1c606cc715b7f6b
- TLSH T1D0F09EF1E603FAF0E23641769E2AC026E8A40CA89641C0062991BDBE9865A1856FD626
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_32.png
- Size 949B
- SHA256 721708a291f32be454db3a14af39439e9b9de3449bfe2bec44a96cb5de248588
- MD5 4e34ab0ded1b18e085c52592660aad22
- SHA1 940260cbe6f8208707f5310427fff5393ad6c886
- SHA512 847ac4e1f4a8df2c2c70bdbd84883d34c9867472212b01c4e2a6276e14c3b78f272c601dd58f8d16b91ff7472f17d517ae573b25a0f39913b81930ce3113c2ba
- TLSH T17E110883411249BCE2B99531D8FFF640D73647918105128301AA82EAB6E433B3B80337
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_48.png
- Size 1KB
- SHA256 d8075f193943665e657704bb5a674766fee18d44e696987027b66b0ef8e3048a
- MD5 9dacdc9452b3fa426434cf3a14343ba0
- SHA1 fea068d347e14a0cf05a8fa48f9bc60a83c303ab
- SHA512 44087db25c2a15e2bc01eff7025ab06d5e0014c7348e27874d014f8a0ac2e2142d7df05284cfc510404ee69a60da910adaf0a3535e889947c28b84f58689f894
- TLSH T194211A732790203CDF128F43CABC11E4C9B9854E61A6C87550B3A2E2E918F20423CED3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_active_64.png
- Size 1KB
- SHA256 1168b72fd574437e6e4b1349b341d635df7de44ac2965b6452c9c00e1d932ccf
- MD5 14fa4e3c92088e159dae5080d5c5b302
- SHA1 3eb2706591542b413b67275d0e66010460eeff78
- SHA512 70e9b04bf1879f4a17b3af36cd7217fad41df5be0dbb512090abadad3346fa983c50c79e927e478ebb483177ec38f5cb7238d66e696d8cb77ddb0f5a2dc5e1b0
- TLSH T1703118837783DABD87AFBE171A83264EB1FAD24CAE20F004DBC40060B98172E7495D85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled.png
- Size 3KB
- SHA256 f3caae299b85353d574b01c0273c9c73736de72bf27c688746efec3a102f33c9
- MD5 49c8c9cb47b2ea0e104402049227c85e
- SHA1 391a086590900ffe429ced2075196e0acd83008a
- SHA512 6ea0a5b54323d82265c02feb94c455006e5515d7bfe69045efa2a209e2804d7eb792ab7956719a766dafcbbc61becb149f76dc113b069716d8ff946e1fa08f2d
- TLSH T1A9614E9313B11AAE511552C4771D005A8639A8A19E611AE0336B4D2EF82AD0CD65CFDF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_128.png
- Size 3KB
- SHA256 a341dc32c5af1a8b6519ca7882478e98b805a29d0dae41f06ed3140530a48dd9
- MD5 d8f8af56cb880385a5b02e13b3362161
- SHA1 0a27ba7b1729c613d211f7ab184edd4bf0aaa9d5
- SHA512 fd115d0ecfec58caac373ad79d697da6ca56b2b49117e91a62d705877dfd777568fbd93397202a1a3d8db70fdb48dcb97a0cfb2c85c6ae273a333e26d574086a
- TLSH T1D7615EEA72DC6246811F99191DC7167D4B54AB6D8B424350A720D3381FF1AC18FF46F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_16.png
- Size 555B
- SHA256 ec5e8da78d0cd11158728466c042b6907e14aeb0efb5bd9fba272d98775ea4d1
- MD5 7eb70caa8b4dc577b773b6b7cf02d7ea
- SHA1 40297c90edaf52fe5a3ea1df7c54de2b6247240a
- SHA512 0ce39e46e9e0f3f4a743283f0615d3cdcb8dbc343a3784878efad6c1838b6005a4510c0c2bc2e943c05e489f1900a7507744afa612cf218263dbda44d3cb1e30
- TLSH T14DF0969C72C2385CBF4CA700001D7B64C32B0AFEF042AA5E2380801C3E0804649FCCD7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_32.png
- Size 1KB
- SHA256 053058e2f342c1c024864db35d1891d82fd4eec0393875d6706304ed265b004e
- MD5 299e981bae4899b0052abf0c70540e28
- SHA1 e1086eb93eb855b93f7721e8fafde0440721538e
- SHA512 2415d6c1327ff7404126e5974910d32c7b0a20ce0db27577c4d04efa2ccc6c2246876da5a49f363c6a1d6d3db31fee9dd31a52460fd26cf12afb05acaf26ab8e
- TLSH T10311B9E930E6CB1A0DB905295617509C7073DB740D3164C45D546CF89B3090A565B7D6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_48.png
- Size 1KB
- SHA256 d498880da06ca886d04a43aa15314681b74987513a5feb67c530b01a6c61f1dc
- MD5 d4361b1b07a5f79d6e03c4f582667760
- SHA1 83934a7d13b78ff8b044e5c14d62e99409bb0e83
- SHA512 093ad9aa955f16b2a470cb3a750fde1f9e7b707b3372801cef43af740a570d48b7a39e163d4fb961b225f1edc8c147ca2fd3be4d286cb3bd50580d919d37ea0b
- TLSH T10C31E9C7E2348F58DC0826A2759789055A32D5E49A8A06C246B53DF5F1FDCB804CF817
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\icons\icon_disabled_64.png
- Size 1KB
- SHA256 5a398d86965280f3be8de88fb734e6d71f49f9379136652ee00404c24dfc351d
- MD5 36229f55d1ea9b739422e206b50d7ba5
- SHA1 5554edb2c0af31c7778b9b855a7775c8b4f04b0e
- SHA512 80c9d6431d698f5e4367a42b26bf79a9d129a6619061c5ee30b310c10546ce844c77f2e10b24bb82b2acc64dc7a2df6e86ddaeed4d6ed50f38acee742e9c4100
- TLSH T115312BCBB672371B880732B8903D1365761700D023A36EE52639977DA0DA715215CFCE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\images\first-time-open.png
- Size 37KB
- SHA256 cc59f811aae1a001f77b44bd2ae633d48f164cc1c96e55d5a8c0830563dcf3e6
- MD5 08f67ca903d0a793a932e32fa2bc3d54
- SHA1 ee3afdb5a06973fe73a48f7aaf75022aa1a616a7
- SHA512 b454411418c08a6d9b8f17ecfd86c374ace6a625a07f5d7a0735b689e33552c04b83a1316429cc431f701482fa1d95b937909c5ea6a66c5eacd4e6aae68c94ae
- SSDEEP 768:Rl2cYOtwxhQ0a4r0cOhBVsRAPydX236xfDc21XIR7zcJZtP6uGZXuQvTHp:RX+UbDRaeydV4R7zcJiuGZXuQvTHp
- TLSH T17A03F16940D4A82FF2141B3B5279257E8707EF1671BBA4738C607F46E0993E3C5B12A1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\images\[email protected]
- Size 107KB
- SHA256 c71a78a412e7dc7d611ab31cf0a0d741934e450c139e9718258d83ae92083df0
- MD5 10258339decbeb4d7a231ddd2fe09775
- SHA1 8d3518c6bd6ce5f52396f980e85733ce264d8999
- SHA512 440f7296697b9145032b2c0cb8ccf645f104432ab92751fa836075a5963f874cd1c3ca6a8b633850399ea177e874364f4215192314fb23f59ac6c7f791a7a3d6
- SSDEEP 3072:hTDL9fA32xTIvhkznY4AHBzmzQeFMpQR93:hTlfASTahkYHBzmPn7
- TLSH T1CCB312B15E35DA1A49CDDE3F55931DB09325C51F6BB82A79712B8C0482092F248B7DFC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 8ee2d6f6863a9591fedd2e09b40184a17eaf75942fc0883052a9e1e6ba25ee47
- MD5 ffe7a34caec27cfe5304480ad5fa185b
- SHA1 ad1a93e9966c3230f24da293847ca500f9dd4b34
- SHA512 87813c8733b99dd3ed125420debb29af28dc8932d775021763cee6c60b951f7ca7bfa28a8a77e1df39ccea888096a69c5255069bbe03b7e56c72b1daf5494a0e
- TLSH T11E31426A8524683F02B0A77EAC638293F725636F67C04C4F79BCE0884FB92590215F1E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_1418623398\CRX_INSTALL\popup.js
- Size 144KB
- SHA256 a43d0fb7ade43568ffd6f23ec07c5ad6de5968e2a219ef8b0086495d5ae58e02
- MD5 f256d10cf278da90457f19375ebd28a7
- SHA1 8b9626b695c8f7624b924d63e1ee51ab9a903999
- SHA512 ce620830ec20ee5697f6de400b2072b602473f7e079f3871885caad12a51d70d93f43590d80c7dabce54be51ba9f80de729b31486de927c90fb883f0ce4718d9
- SSDEEP 1536:akMGW/teSE0T/dRDDBx7MVUyvxPbnHoRjf0gST3DlhtB01vsPJ0UzQ:akMGW/7nxWVpxDnIRjbM3Dl7B6vsq
- TLSH T15BE32BAB3151707B4A631CE3E6FB0102E2386545F927C4C0EAB6D8E66D7B5C9A117F2C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\_locales\en\messages.json
- Size 87B
- SHA256 4da1efa11e4dd6704473fe530af1f90fc80cf4b63b31ec9b954298492342370f
- MD5 cb899ec506ae3bef16421dc39ff26c10
- SHA1 714630649a77aa2ba4b4d017820247526b805fba
- SHA512 514578131935e7adc3d04573933c943d114414d209a74e13ed6f046d732b959c9bb1395a72a488eede9919043a54ed1421bc02a4b0da1a7561fbf46df94eff75
- TLSH T1E7B0121485041A13027A02207C101402E911025B04009805B95C844C4F7089280C1F40
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\css\chunk-vendors.b71cb11a.css
- Size 316KB
- SHA256 6d20fb764f5243dd7f8ae359521ebaf9fb226cfa88fed4e485d494933954045a
- MD5 b01bbce9ebc38e9b2c06cfdd46e308a6
- SHA1 08e7f48270296b905fb59b84e9c61214ff02c845
- SHA512 a35677754cd9f42825c2e4a896aaf6035a93ac2062e1b69091d536e5a4332b3714caf5485eb9f1ee38973254c141994c0d57ecd00407926598d547bcf43503d2
- SSDEEP 3072:hVanbiImwUe3h16SAS+ozC8WQNa5Lv2gLjKw:5Il3h16SAS+ozqQNa5Lv2gLjKw
- TLSH T1666408E3F6D2108A5AB3553F8051F7FCE93F169D4B81B9725606BB3183842DF2B8215A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\css\screenshot.2318cbb4.css
- Size 3KB
- SHA256 a1e7e1d010612c3c7b05ac4b685e23e38e15a8625cf216faa2f714c1a3367670
- MD5 1f75aaa8da687a4acb1bc3e5f3b79d3e
- SHA1 3a13f6d52836f90d895b40bfa70752362ca2f2be
- SHA512 96a0339e910b6f5f73fa65c7c770eccd71723884387da24bbf37d5ed337a4296c4471ae7b214d75dd46261c8c9ada01193df56e5615de37184aa37fca841fbc4
- TLSH T1ED7108B7376B310F963BD316FC12ADAD3E18A60B9C620BAB703C7B5155CBA6C05410E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\favicon.ico
- Size 1KB
- SHA256 c022f7502beaf6694716e90907598847e31cd52e5f74b5616f2ae67f1848c76c
- MD5 766e3aa6d6cf1e3e38a0fda74dfa5e95
- SHA1 4ceba6cc69141a7dbd9ae10f541379e1ddd12c47
- SHA512 a4e930d54934ece626c96f255eefc132ce4c64356d56dea7ac93ce9215dab43cf1dece6fd928113f1741751cc009b4151ba56abffb08506a0e7bfe5cf6dcacd8
- TLSH T18F21A8FB94307084DDAC27B2AB22E475CA7787E617BA3D565409809C5FE001DC753D58
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon128.png
- Size 2KB
- SHA256 4b162b2ff5c2574d3a2cc3306cbc20be4111f163334d263308d7ebd2ffd605ee
- MD5 69d8aca578f2211913027fc70870871d
- SHA1 b055695d2c80490e3b2febde12dcd06b393c7596
- SHA512 f27837682307c3e71e0ddc4b868b2e4c2f58be8569922f75a1b605d8c8da971311e121e976216fa1a913d7d180f9a7851fe9cdfc962f6571d6d00245390ef222
- TLSH T15B511BE3194C4FE988319DA705F1B8B076E5271C3BE07A9FC7553863848CAACA511C97
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon16.png
- Size 451B
- SHA256 8fe0ef8cede16f0c6b2d0bb6ad54c467cbad370daa335199257a06b04ed7780e
- MD5 e9241693817d03b293143eebf8f292b5
- SHA1 089213eab8f9b4255865fd2f40fdb57f705ff019
- SHA512 5762758bb14f1a406e828c4a5e0bba51b09ba20d3f176de9de8fe55088a31b7d02fedc4233973c136f16d1201fe326ee804eba53dcd77d666a21b51d1909d603
- TLSH T1B5F0B384387CD43C03DAA230EF33836304C9AE9088031BEA884C0EB48A43388083A1AE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon32.png
- Size 739B
- SHA256 28563cd75104bf3c62e053bb0196619969597a839f259442992d5eaf6a429b0d
- MD5 3859b2c6ff6122ca349034a19ba44446
- SHA1 1889f72b5e05429e3edec6f8f347ae3659555d5d
- SHA512 6ecd261016be328ac07c49c734903f9bba7f24728437e87b9e0af92d50d2059a3f8b04ad7dace87b4a5aa9d526cfefd3d06e0158b02b00c3aaae0e30afe6023b
- TLSH T11B01B574A0441DF88732002FC832C020E436DAA814B53C4EBF7ED0084B72E36968E3CE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon48.png
- Size 1KB
- SHA256 634e4dd9a4075c853710fd21ffce989dec4017ce5dd53a6cf9d399ab0f02f02b
- MD5 e176ec36527c7e33dd8d5bb499de8b28
- SHA1 4f6a42b63c1c2d1e83fcd36d287aac65b278ac86
- SHA512 7b9eea877056edbacecdea58625ba9b7823fb0ff93fec1fa37decdb909fe06782c089a265942b74fe3b8eca847f70d4e9b360788a1f2fd82dc66c34619e2fae5
- TLSH T1B421C6E191479872826721E7EEBA8FD33B24349EC2D848001840E60A5C6D7AE7395ED0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\icons\icon64.png
- Size 1KB
- SHA256 ade51ad2884b6d45203ff221ab273f7f4d00b48466d287624e30235c31d5815b
- MD5 6014010055064fd6c52f878f0915bba6
- SHA1 48623a60e65b680220eace73e8a4cd64d518e3a0
- SHA512 480d2bc766aa2ed4a8cf4911d8302f6659259b4cbb0468a4946de9e28840b1d939b466bb34b2e816627b80fda944918fca43d33ed486296b3bc007b1c3339cdd
- TLSH T121311C6CF7A65228F3195C5F8358F01D449106742EE6185CD8E8089A5EB15426EAB523
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\js\chunk-vendors.415c12a6.js
- Size 480KB
- SHA256 f53209df9570da789a0df7b82bb2a896bb293500115611286291b19f7600e916
- MD5 77fa64c2eb0898d78e608fbb9c236384
- SHA1 9199349bd9840fa3d72e2b4ef52cf1275769e8f0
- SHA512 1f71ad03ee7a331764cfac4eccd1ea9659da2d422437691a6044dddeaa4dcfd685a9d83a21fcaa5ddcf5b3dba3dc826b7982fc5f0f1a4718c9fb0433b263a91e
- SSDEEP 12288:pGukT/kwNYY0QXafCGLqeznYNvC8pdBE0VqE0V+R:pG5TkwNYYVIzY08pV
- TLSH T187A4F88972C1B425539361B5103F110BF23A2898780A819CF679E8DE7DBC98E617BF7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\js\screenshot.cf3394a8.js
- Size 19KB
- SHA256 4330837a55f8f307fbca14ae44f7b21daf05758a5bb779e052560c0d1fbde46b
- MD5 1a8393383c20555b0b1db3f1ad8c5fda
- SHA1 ba0218d073816a897af5713858adab53faaa1fe6
- SHA512 3c446f00435c30e7c7908c7e032a3d67593e1a4d0b841168644c15e579caac3b3f5cdc7c20dab600dea13df63a6e459396c14179820f843aa65e35d1d1193f09
- SSDEEP 384:ciPoqqdmLskTJvPU6CNKVxN4ygryao5sI839p81tE:RlMmJGYVXtv5sIy9p81tE
- TLSH T1A492D81BB7E7706602AF902D406F8505B1332C80515AC0967B7EC8F54DBCA5E6A73FAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 606cad9061e27f77eccf8e1554ab864e3941660595d5e51c2fcc72274de966bf
- MD5 06bdec7129d7991804144c5e1a17a5af
- SHA1 291d01523f90716f599e85c31f3898d8af254eb7
- SHA512 77f0fe14b18a9a6624bdadf3b952585e8aed89b44dd2886ffe4ba66d3e84f63674ba5761a817d6c5557aa57d0f79fc6e046de13fa7b650384ee27cf5169fff01
- TLSH T16D21F12AD465DC7F07FD23A44C760543F116337F89459C8A387DD088DF706E58299A5D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_2108665298\CRX_INSTALL\screenshot.html
- Size 1KB
- SHA256 339055bcc7c121c24012afb2bc50350c7af6b8c8499666540623dee40ed7f987
- MD5 556aef4a8c63eb965d5e3e87b656289f
- SHA1 7cf08c1d2118d9e2abfb92ceb9d5b3964b7cb362
- SHA512 bfe5d6056f715e406a1d683477f9cc762f678967b358991daca128668536b75595eed18c48223f1bebc90790d5b959aab8a8c0cc689fa0bb75596036e1a72f81
- TLSH T145218BE69804D1DD66307F83FEB5F61DC4CA688E2D30A8A0A4B9827D91A87C84765D15
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_329831268\CRX_INSTALL\contentscript.js
- Size 7KB
- SHA256 3569ba9b3ef46b09dea633f6c175adaca9d4961aab3ed2aa8ea858996b8277b5
- MD5 a1e77ea8cd1dcb672b5a54beb56cc681
- SHA1 4938ad0bb4d850f60c40f7d7cae78b40ed1067de
- SHA512 a21c5346a62732f87504a763f67ed520a23d6f4832f6aee81843bd0c2a0d46f8da220c6a34135f0ffad22ef1812daffa072b43769f6c2e2aec7bf2506f1ba738
- SSDEEP 192:s33HEpf/j9GQofIcxA0Ar8IhL02E2sdbFNfjF3mwKb7ioiOGII0q:s32raSE2E2sdbnjFWhioivIBq
- TLSH T150F1B79B35D913310D9101AE9B1F31C4F268D05D6258D3B078E9C2487F55E2865FA7EF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_329831268\CRX_INSTALL\contentstyle.css
- Size 535B
- SHA256 201f4e0732b06699bbccbe8bcd5821f20fcb46b8827e648ac87326fd2205f789
- MD5 c1357d40cec43d3cab37170a1f213170
- SHA1 1732fabf5ae23ca1d6394289ea0dbbf7abe206e1
- SHA512 912918f4d00ae224c8a5ef440fa35519eb4a5de29a57072fc6c8edfa3168015487209d0b999116c5e2a47126680be6fe1d50400c73df957d51c2bca585947607
- TLSH T1DAF09083F0E09816912F4A620A8D3574FE7C98915B6468F678D1D2A8CB05EA0E76B027
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\_locales\en\messages.json
- Size 87B
- SHA256 e2768b7e87c9ef697ef77987ee01895262a7baa11b01067861081f12ba1151cf
- MD5 faa2541f084f6c737dec29aca0e0f504
- SHA1 a45de8c939d9eddaa256ed3b90af02492d3ab3b1
- SHA512 8c712f7e716a5905f539204f6982d097c8eb132a0dc72cf9675e0e4cca1eeec81ddc3c38a6e5104aac29a9d77d5242d060f6ec4435a17d56fadb8cc152ddfde3
- TLSH T18BB01100C8882E2302BA02A2BC202002FA200AAB0000880FBEAC880C0FF28A280C2B80
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\css\reader.ca8c9b0f.css
- Size 521B
- SHA256 c81c0bafba038ecadbf0c01b981e75d1cf25e017b3f25d9fcc005b29cadc2da3
- MD5 7b74f1b3f2961a628d29f5ba4e3401e7
- SHA1 88e4f3ba7abde61ff35d9981e743f786bb46c60b
- SHA512 f2dfd9a936ab432c42436fdeeaa47f9a4c5d33ce65611478460b5041fb5b28589f7b8c6efc1941b8428ef8f23922dbaff4fa99b9a7eef9cf9b5b50f92e9058f0
- TLSH T11DF0C95332C82022AE7BC302B8606AE4B22A9747C2B2282278C0FE438F839182C01C43
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon128.png
- Size 4KB
- SHA256 7fc819dacf90e4b07bc087b1e51f1287bc859605341e8a1a5404adac94e07bd0
- MD5 dd8ba8258321a3f8aaec8becdc0c166f
- SHA1 62563261ab7a9078282dd81d9e80eee559dfbb28
- SHA512 0701625508917c67961132d661cd7742290d2cbd549e5d78b0e9ade97a6734a6b286b689f446a728274db9c985abfc1df36f70a16d5e38c50b4111faf75ee4c0
- SSDEEP 96:0hADtKQe5O9xYKSPZH2BJF+FiYRLGxmyDi5ZIS+aJ3/lX:dlWn2R+FiYdKm75ZIps/F
- TLSH T198918E4FB95C08274FE4872BEC4DE149FF3197B820C571AD8B463FAE1BFAA518154542
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon16.png
- Size 605B
- SHA256 09780ea3eaa0a432b03214025febb59c28fd6e105a775f065037c5e9720fa150
- MD5 c63f512ccf8d6ef497fccbc53c1f950e
- SHA1 f04e832d89b4eb315d6979780ec6dbfc25361abb
- SHA512 f4bd4dfb891c49a36cae8e796e6333984ecc081d259c496fd5015683f9779cfe1ccc53c31185f6d2f14c46ffc66032f6a69e9698baa12c5b9b439a7200fcf5fc
- TLSH T11AF00273679DE5BCC672597BEA6E5820D4140428125A0329445A24ACBD366420239E3A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon16d.png
- Size 588B
- SHA256 d5ada7064d7ee67144d11a33a3c28b7856912f4989c5213978659a4ef965409e
- MD5 03bf7997beebdef943da84b05cf298c6
- SHA1 7cd4ea284ef975b358c8dc668391274edc8cd1c2
- SHA512 77d68841d5c3ed12f91f8351636feebcb41f4e6984b239f72462ff5f45f2d7fb92162d2f54c32a1c3f229038f4b0a73c06054c9adf9b0a6d03f20a5e9cef68d4
- TLSH T1BEF041E6910CECB96365D779559E1409F0331A0E3D863519DB02247C3D0A77866C0782
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon32.png
- Size 1KB
- SHA256 9fd76e5d4ba12a800a2368f26639a0d81b542bf65fd9f7cdf9376a9e50e0d66d
- MD5 5978dbf06abe1f283514daf84bdd0c54
- SHA1 29c2084e859686315331a94c0fe080d6505bdda5
- SHA512 67d24797dd143c2657c8a0055e2b82bff76f297c72ff7ba26fc8d71c761e067ab14a0354958710f6660ca614bb21afb2fdeb34d1fb5d20c1981d9a723e784cf3
- TLSH T1E021B725049F6E79DF7C57F02AA341428773424CB176026E1B9ACE751DABD478220AFD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon32d.png
- Size 1KB
- SHA256 4d6b2fb743bdc348a3babd96a96cd6bca6cc191bfd02524737a491ddc99a7ef4
- MD5 7734bb666bb9fba04c15c759f9fe35af
- SHA1 16aaae66e98153ae52b90346c6a4559a8e3b6fed
- SHA512 093209ae6d0a3aa9f909be1db3cc3be46bce496c42238f2e9ef4bca3c63b5d7c68de915a23163ec655069f81336357b281d5f830c1ddc8f0a3324d0d247de106
- TLSH T10821C6DAF26C1036514BBAD340C3C2F028392BAA1339039CA6961A4E6A3D1BD1DE7B10
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon48.png
- Size 1KB
- SHA256 ce40935cdecdbb0be009f6df6973ef9a737ff44e788550efd941111037e208ef
- MD5 ea39e52e0ebea8dc443c3763df1fb7f2
- SHA1 73c46b248f755af3de10165a2b0d6c4946000c94
- SHA512 b84cdfd52a88bb087a7caf57a828960e27e1f1d7d72e7bee61516d125ac064fca2f86e438d8de2050afa6e693d83526eff5f12823d9507729bc067166b7fd1e8
- TLSH T1D8411BE7380AB777CB2C9BFF08E6BB029EE869C46139813F5B5299B38460E11580500E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon48d.png
- Size 1KB
- SHA256 db48f163264c1f4aefdf6b4c26d9b5423e4bede72b99ec3ab85071fcc42068a6
- MD5 947bc5e0d15be2926c11d5a68a4b67ff
- SHA1 75b60440ee2045545759d4e8f1720623afaab0d5
- SHA512 adfd785a41eaaf4e73334cfc2bf766e960c21679de48af8b8a23a9f6a44e728833c0f7180e009418d80f48ff71fcbf752fba709fec7d1f200caf5b25733625c4
- TLSH T1E231E6E7F31A67E2954EF195F4B90C39EF1981C48E1302598BFB7821F4180F46944793
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon512.png
- Size 4KB
- SHA256 979d92ae59f80fab2a041ca2d8b394dfa2024d6c9d4d30a28dca8e7accbbf283
- MD5 1141e69302c1ced1faa7ef9da4829d91
- SHA1 92869f3416a9df38b02e6d8ad0aa63f390443b1b
- SHA512 9a68c8b46eff722e08a9d721d3c244b9d636da07ef9cc39b076d83cc370c784d73fce8d4296cdb2e130ddcce151e3984f738b26aaf1f6bc8063ad7f7dc9cd0a3
- SSDEEP 96:WS3uT9hyKB/zqjdCltmot5W+NMh5x/sHzRbJ94cU2y:WS3uTzyvamW5W1x0NRy
- TLSH T107919E57E0161496E785E233350A8117B58B9714827CCA185D96FA58033BCF54D8EB96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon64.png
- Size 2KB
- SHA256 72ebbbc69ea5f2374db8f108b76173c2f80bf5d649650f64abb251684b3db74e
- MD5 dc39252248265c7d25d7f5427b5f924f
- SHA1 8604983483be5d2e8aa688ed859836779ce6873c
- SHA512 c844ef354b95a4db22188bc3d66ae5e4d62e7e44f6d5dfb1fa82036f4ce3e50bc1a5701307bb06d65c8800130c0126de0918ec1a019c2ef4843543c0feff2a96
- TLSH T12C413B6F1A0787BD01540BE377517BB5E8D6634E1CF9F9D2C71082BA2A76A48812C923
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\icons\icon64d.png
- Size 2KB
- SHA256 2fdfb515ccb51789e74df228e98001430e21ae5b6c5e431272507bf2b9b00539
- MD5 01e4b6ec21791d162c92f49d7763e0d3
- SHA1 3d752663c717f363328159a3094b66a4d2a5c027
- SHA512 542b0c35e08dc981f06ad3fe4a3069b239308266527a1d26c5cc5a6e8aba1caec17e21781b85df4a4a81ad2f3cc795c725c05a1d75c4d9a68ca5649bee3e2aa9
- TLSH T132413AFEDCF265B9B2BB854121C10E6495365E1A0A4936434E7EC40034B75FADD210F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\js\chunk-vendors.4dc0582e.js
- Size 221KB
- SHA256 c94db3308a5553ce30282d8baf4132d9bc37256952dd0e4de78fc9fdac1b0a4f
- MD5 31926ac32d09b11207381a26e0af4664
- SHA1 441ea6b7e6a1977726e192401d4622baf4b60c87
- SHA512 d144c7baa9ffb8a47db16cc90b7ee0c340519efb0334055871096171061384451158909b76ca9cc68ab1efe0cbde054def32e6accf5993c675c500e4b3d25ec6
- SSDEEP 6144:z1OwF18ECMLsGLtSnULFiB7rqo9/EBE0VqE0VFf:zgwFeZMLsGLtSnULFiNrqoZEBE0VqE0X
- TLSH T17424199972C2B43507E751E5506F4207F33A2894B80E80DCFA79E8EA396588D617BF3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\js\content-script.js
- Size 46KB
- SHA256 961e1d01f501a060a9aecc8bdbf7ff5a332a7b4f8d7d44c5daaae39cc16d6270
- MD5 02149d11b1d64a05e07de955d84de40c
- SHA1 20a0e6cd068d8d92f3f3946968983ffa79eff391
- SHA512 06c6af5f21e10d3bcc40543820249e2fa268fc8c35473f8402bccfd2c6070e97ed9ad27da28b910b2bd34e5eff72b18919d5acd9419273d58f0cb76a5d330f1d
- SSDEEP 768:LgwHu/7kJ8ohW0iffPxhVKC1Rh0rd5sa2jUUDjTl800GGAK1MAhSfdLFYXwGptXr:LE/7kJXhW0inPTVKC1Rud52jUm0tXeKv
- TLSH T13623D75E31C4AAF2EAA591A618F6604FB137553D6808409CBD74F8CE18BDECC127377A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\js\reader.b6d0bc02.js
- Size 13KB
- SHA256 dd5b116a1f7a984a691fa43ee0fa5cbda0cc59daf64bb91a56b29b9d51bc9e78
- MD5 d3125cc7ff4b77b50ed5985fd60365d8
- SHA1 dc9ea3a18a9373421063d0b25ec15c163b96f42a
- SHA512 15a88b681dac690c60afc5d60cbece38bee90895bafa2bbd20dd64ab1ad4006843813ad651b679fe5162fdaa0a5fc82f676687b77b9009661e808ec7734c2d06
- SSDEEP 192:qTcuXq2qzZpms/d1/6voWvbAlp8J46hTkWUTsKRzYfBlY3:f2qzioWvbAlp8J4qTkWSRzYfO
- TLSH T10252A562B5E7A16913FBF0AB105A540AF03A5815D23D80DAEFA9C7E008F49C41E73B5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\manifest.json
- Size 1KB
- SHA256 14044fc911ce7cb164a39b669dcd52b060b25a667283b252ab44162c6f495ec4
- MD5 dc94fa1e156d18d0cbfd331728c2b479
- SHA1 ad49c0983ff019486f468a812346f47add7644e6
- SHA512 6294414a18ba3086b09de15885a6adaa2d107f8659bf042802b8b9da63053eb9f5239cb1b780860ff2616dba4cca8040da7f77fe857fbe3de0376fac741729c9
- TLSH T1F1311022C868DC6F13B8A3689C764602F6A4273F8A40994E78BCD04DCFF227642C5B0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\reader.css
- Size 19KB
- SHA256 2848789361e63ec9b4c2f91c78cab85a9ecf77aad87e3506f2725c1e8b4efa84
- MD5 4fc892d96be3a3d76aebb4d779af39de
- SHA1 fffe9cb7cdd70f3f6ef28de42280847cd7919309
- SHA512 f90b455d8fbd655468add5b79f53d08221e42d1ba1c4598ce015c3612bffd6bcb98f2e76092df31168dd9fafb13f442648e4102d87b85f11a5ccf5271909d306
- SSDEEP 384:4b2KksnDUKHlE1b7jQs4//M/GIL3cfjcIDWlqBfxipp:41Wzl/GIL3CjcYWwBfxipp
- TLSH T1D5929064D24272362737C329F357B740B7A58061CB066BF9BEE5A09D22CC6B88164FDD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\Temp\scoped_dir2504_888496895\CRX_INSTALL\reader.html
- Size 1KB
- SHA256 5029ca5e84e047ccff7049ae3688eebfa94bc1db6d0396eaea689c5347dd92d8
- MD5 acd703620c37c04eb1f0385e833f54be
- SHA1 a8cfb5c47cd845372c1bd0478986396cbdf0050d
- SHA512 0e6dbb1960671f3bc60bcab1fe660499ed5a38ade07ba6ed9026f10ba22553b56d514f5aa4387d7422f6cada2ba48041db4fbc9564ab7bf79df79f8bb149c94c
- TLSH T1273113628408A55D73216ED3FE71B91ED5CA990F9A6168A0B2F4C22E52FCFDCC5A8D01
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.8_0\js\bg.js
- Size 22KB
- SHA256 9b50ad7cc89f51054fd27c4957a461fc8cb04edeab927b9fc803e1236ba4149c
- MD5 d7ccaf52dbbee6b08dddbbb99d624ff0
- SHA1 2330b16802f4969eef524c4c7fc0ebebb7092771
- SHA512 299cc58944bf501a017f330b1e7615e13ad5a90d7e519224f8426301ad61f65a950528da232e5f91f9cffc7b10d78c448a5806bea54c062cd91169507da1d22a
- SSDEEP 384:uL3ltUzXHv9qQhUzK0hytkb6MfjaH1HFLcJlWFMKCBxX0dwXDiX9jfYVWzJY7XLv:9HAhyu64jecJl+CvX0dwXUwVWzWnWE
- TLSH T187A2F90E20F6D2F5E8B8D5DFD8D1222F6327C47E750850C85978A52D24739CE8726B6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.8_0\js\content.js
- Size 11KB
- SHA256 a93ea87f4d98ae7425fbaaf65a508d77caaa711a55cfb2fb9dca8bdcd506b7f5
- MD5 b604ec54355bd7c867a31d7753bc2311
- SHA1 2776b6d252322043b85799e1d324ba38a00aa94c
- SHA512 83dd5c3ea58de6d83da6ca66bc2e7681b560ef3c24ba0e68d909f4e703e14efe01aaca74a584c3119a9e759391f9536e5c494d40c1977a9e5461530fd8426c0c
- SSDEEP 192:6K39eK/GhVJWwW+5T3nWeW9nWkWPS4zBxD+g0SSZkH58JfDWez2VIWsxFlVaDAan:p3ltUzXHv9qQhUzKACetsr+7I9vcRtGj
- TLSH T16432FA6B50E5C3F6F8B9C9DF98D12A6FA117C5BFA50890CC4E78E51914B7ACC8224327
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.4_0\assets\index.ts-loader-9b1e8140.js
- Size 341B
- SHA256 9b1e8140d81f670fb842850a79ef2495b96683ed54356e5c9cd237a3e9ecfa19
- MD5 55e4b108f1ead7dcc7fd315be40341b4
- SHA1 1bc46a24f85a947ff4d304654335c2f1a3a57eb8
- SHA512 e824acfa63d2b4b15f761af9dfdd2518ef70b7df58582f40e7557bffeca932eda0d0ea4ba8ade74cf940525acd6ed435c52ad92d8b23582b81c41f2a575f9c4b
- TLSH T13FE0D80B89B10202037A166DD91B5054613683065194EC9A3B7DA6151FC375A06497CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.4_0\service-worker-loader.js
- Size 40B
- SHA256 ff5f9b7a068f65eff2d4f8cb6991d3ea079b27da3e7c8953097d54cd8294b1e7
- MD5 5f4ea63b294900f5c52de5c66306acc2
- SHA1 813be3d1082dc281f4149404ff42c5345cc2f4f1
- SHA512 0e635f20ada1c65cb3a230df8daa3c78acf1fa03aaabfc6cfa7285ad68709570cbe29e1919117fa63607a20129556324aa546c547670ad18112da1cd8c861af3
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.4_0\src\assets\icons\sidebar-icon-32.png
- Size 1KB
- SHA256 c3ac3e0793a4c072625dea0ef020bd9cc355ab0d29cf8d6f3e8fc5477a0333d0
- MD5 635504abba7c9f38ce60d5cef04d3bef
- SHA1 dc6f8ba282f7c7e1e8e3ca4bf03bf0efadd8cf9d
- SHA512 db045b06e6d6800ca9779a02aaa8a499f64f0b0451278c9376842cf6afefd3abf52abd426648b05c00328ce9e050e26dcfabf1e40191158adea3449fabf6c369
- TLSH T18511B58103A35463F7A124BF13FFD0315CEA0284043CE6252003BB901FE1D48361710B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.5_0\background.js
- Size 141KB
- SHA256 833d5d4ac8686f944ac9c6d50b1a2fdc3e133ab8fd7a9ab46c919e91af0bb58f
- MD5 2589d2afa870dbd3b21d956beeee2c0d
- SHA1 18d824eb3c4627cad9461ec03556108b88bbd1e2
- SHA512 6f2df229e7a1fd87adcbfe4139ee895ec2589c85e7a81890ab6259b27cbb29c1ffea674546621721b4e3fdc398f2345d4cc0d2ec46825631aef33962b1dc0560
- SSDEEP 3072:XnzWldaDih7BS9z2hVWVLmAj79doGluS6sLj:X6nz4HuS6sLj
- TLSH T163E30988B796B0A143A261EA106B540FF239941D7C0C446CF394D8EB2D7E9CD95BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.5_0\content-script.js
- Size 215B
- SHA256 dbf6ccdb61c9e9287a12d830a61b3163d943c985a1f5899b2ad00ae8072e1cef
- MD5 ec6c8a879398cf1a9cb49d940f22f312
- SHA1 c950d247f78864e7a159e0e6d7deb54c4eacbade
- SHA512 69a27d8288900ef30725ffb978cc922b4adb821343598722a96ac1f5f15aa2bf36f5fedfaa54e4f9c130449ee33dcf757596ada2be2c80f9e20755d1acfa7f0f
- TLSH T194D0220C2CE6A43C62601ADFB173E7D47A9402202014F8412AF88C7C7B64E9B8C2FAC4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\extension-router.js
- Size 4KB
- SHA256 748d13b3f6fff9e29f1062922104cc7425254a81a2be5957875c7477551f0e44
- MD5 55441107ace3afe5c02ace085234c981
- SHA1 1ce9c2e38f579f1201c71bacdb2bca742a4365d3
- SHA512 d866d0ede1a5b65f9424bbc20fc47859cc9766ca3be7051354ac0d035056de46c40109db84c2256141c63f3db8e516398ac9cb240c2cd0ad54b37b8d1f3acabb
- SSDEEP 96:j4s3HFKy5NjlLsQtU8QzL7niDqKSdPWla1D7/+lrlAh+Mi3bdL:j33HNjFsQtU8QzvYpSf1DylrlR5bdL
- TLSH T1CF81975D6CD22073266A91AD5F1F2085B76C6523216CEB01B88EC2685F8862E41FD2EA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo128.png
- Size 9KB
- SHA256 7de67da108028c08e13cfd8e7ec3e9b3982ee39972d9b4b4df8f7cb6db952205
- MD5 3b14f3c34de541925864aae44e08b251
- SHA1 3d89daf13f68ca520e412d2215850f5406975e11
- SHA512 39e36238b529eaba22134c622c9c270ff7fdbc188f7f04dbf8d382d8f4b217f886c13f1f95ac4e3bfbcb44c111a06d60bcc53b70b205d53731042a4acae0e197
- SSDEEP 192:hLQmed6qLYQ2pCxvMHcJAEd89hDY4BBxf/DagXKGElUikEpQTItZPGwO:pQmed6qjHwcJAQ89ZxBzniC7cQIGB
- TLSH T10122AE75B4E522BAC3D5B6410FB507E103DA65C216D0CAEA32971BD6474FFA48CC3B46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo16.png
- Size 567B
- SHA256 2cf72a952493efa94460e3bef9cb760e8cc5605a78605822c15d6a298bf0d597
- MD5 d2c15b2b7103a072aee800d942f3aefc
- SHA1 46f73a654f72224aae44cbae21cdc0f834d4e62a
- SHA512 5fcc29956e4f8b4896f23661a4da01309517903bf11006711bea3787622d33fa4f935b51fa18e8095a3ad79a6380f9080b669615ba1b5bcba1fa5c8c954a1763
- TLSH T100F096AF8A19AFBCFE1D4B72D8DD79309CA0388CC100AB0D6EAF40722605301326368D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo32.png
- Size 1KB
- SHA256 b9ad6189428664152aae58f35f3b71f77531d7bd8b9deeb968d18b22ef860691
- MD5 7beb907c97078353377ca7a78953ef8f
- SHA1 56ee60a501800accdc862c552572977c55a55ef0
- SHA512 973b88c83985108633e920b589820fea34d780a436ddcd3efaef8bf943a452b34fb948d91dadc94082a48aac597202f289eef5ed94fe18065f998aea1ee89dff
- TLSH T1933119C2C59197F4A45CE72948F003D1FF03E68BD0EAFA382521907D868D30469E6C85
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo48.png
- Size 2KB
- SHA256 80df109a2ba80658758a4e3a5456810ccb2477a60b7230a4f4c038d0fae00fb0
- MD5 26a14c44f64f373cd9e8182252815cba
- SHA1 d9f9e65c85bf5d1c68ae857c111059ce54c2ec13
- SHA512 4fcb9f99967e3d39ce6b83c47479e16a6c8c3317b088251622d2b6bd75cdd2c38c7be3884f3bcdd93428ae4f6ca2c2f29d39d4407233c6a2a1bfa9fa624afd90
- TLSH T12C415BD6B7A0143F5C149064A2CD300AE6E42B3B818213DCF6791717289F93CD978417
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\logo64.png
- Size 3KB
- SHA256 ad663575bf9a00284ba6e4b62681a7d52fed09699de5f2b526342a9721aaff9e
- MD5 ed75798dbaf798e8148eaf81eea9f380
- SHA1 822b45f0535b530af439446cf5e997683518c9b4
- SHA512 9b6007b4c3d3d293b7101088cb8141d6fc30a210749ab2d3f5b1c53a35ed5e8744b0a6858d329581e40cbe7c90ab600a3bcd4433aedb66e5cabf29a8b2dd8529
- TLSH T134718E5016EFB1D4AF7B682981067C2C84B0078ECB1CFB1E06218C98581732E1E37EEB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\manifest.json
- Size 2KB
- SHA256 a4342c640f95f12ca39369d8b41f8db1c04b5a275c0548dd367e68bedddad0ef
- MD5 f38014f927fa328901098d2c06fbef26
- SHA1 0512857f71ceb843967b06518dab9c5ab8848660
- SHA512 e78bf22716f48c4b00daec82cc2381fb2380fc721f1b5dbedd4e00b393cf70a048ee3bcbd3867a89a0846d39a38c8c2deb3c3c8d84418382f73a85e7143b35ee
- TLSH T15B41232D955E8C6702FCA7A8ACA64502F620A37F9280650F787CD1CC8FB1F61D5C6B1D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\options\migration.js
- Size 4KB
- SHA256 a0cfe671ceb59613808943720032d272974d1170db0c6e8df0be2dd001df65a4
- MD5 6c6308ed5fe2edab2f405c1e6d2f0d01
- SHA1 ddf6ab828978a0cde45618a07864ff4fa0202e65
- SHA512 c5a310847f3b92007c654df03b6e1040814a854a023989e0b2f6cc7ef1971e2cca4280f823b933b0bc91fca55f312d161800e812eca2f5c850cc1d595b66b411
- SSDEEP 96:O4s3HFKWNe+M/y5W6Qqtt+J5qKJeLHcyFwY6uyep60yeS63yai:O33HTPfNNtYJw/D6uyi60yh63yai
- TLSH T197A10C5C55D213210E93A67EEE5FB105B236818B610EFA01398F925C4F1D13E07AABED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\pageAction\background.js
- Size 1KB
- SHA256 d61e0e4802b11d84ea48545d1f84aa7fafac2d059c515c34db98de6288c75221
- MD5 db4b6bc9d14f77f2d31ea9b6daf4a675
- SHA1 dd0cb597906a0d5b04e71ba21440b55723d2ff28
- SHA512 74809d65d90698a95970b4814ef92821c71483fd71a035db2ed4f218b9c453d89240f1c281de2f6b472247abf332506efa7e9b7aa586f07d0f226ba445044a5c
- TLSH T19A31002C2CC035B31656B0A77B6F19CBEA6682171549FB043C8D83604F3E66941A97F8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\pdfHandler-vcros.js
- Size 2KB
- SHA256 945040c55fc55a93df32c2923159345096c7670645796780629f1570f7d17f24
- MD5 636478d321cde1345e70dccbab64aded
- SHA1 6c17ad9f06310fe893c8e5b6c3a70fe7a7c72804
- SHA512 90275d4b1a19b2d400cf400841f14c09da8e0717c320bdbce3cd32b0e503913e8d7afe646fa19c37e1e83f8b28b5a260f39725b527aabb87bfcdfae79c0d24ab
- TLSH T15951245C1CD631B921F7A0A9AF1FD186B60D9227048D95423C9CC384BF6C5379AE87E8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\pdfHandler.js
- Size 8KB
- SHA256 14c2b15702b4a1cc018305eeef217de01c638864ae67169f48b7594caef46e97
- MD5 44fbfccf1e4da82f0756d442874ce683
- SHA1 ec017031fb2104901f5d4b55c627365fc1f7ba2f
- SHA512 cdb88668df47349c6f231cab2ad0bee888e4cf3427ce946f7e80a6f5cbca96de9f8dfca49e2314470bea039b601c276105c8deb1491ca84110672f9df123a4f0
- SSDEEP 192:S33HQa+iRDfkrTsjb+s8cb80Dom716jGD+dZFkjFtOfKJ3V:S3x9l0SbTBL1Rx
- TLSH T16802965AA8E230690656A07CEA1FDD85B36AE0135128DA15BCACC12E3FCC53DD4F57CE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\preserve-referer.js
- Size 6KB
- SHA256 caea7d7d78216a9142aa4240fc77b8037146166d6dda6165359168a8d01846b6
- MD5 f380f03f913cc917aec019913ab7ede4
- SHA1 2c1317fba9af9539042148428ee9401ffa407820
- SHA512 131d04ee203611a4e5a1ee3d201a1d012a5122fd6c1056d6e273179839363500a50eaac27a70792c197b7d31ae8149ae9518f5f4911376caccad3ce2f58d72c9
- SSDEEP 192:F33HUvYt5kzto029QNMgL/gk/gUDa4dgsvuf+id7NdFpkdodcb/QTR7KQ2:F3sYt5kzzNxDaedcZcbM0
- TLSH T1D5E13F8749C6353A59115168FE1EDF89225594233024E92738ACC2EF1FE4EACC1B5BCD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\suppress-update.js
- Size 946B
- SHA256 3c644821c1fa2e802072df86184e261801cce78cf3a8ad72d808c4f03ebee5f5
- MD5 8a06f05c903f421a563baf073b95d165
- SHA1 2759764f4c890dc1a21e97e750481c08f939a335
- SHA512 0ba44aff7e36b1dd4111189ca624ecd0b0f2588362bb9fc6334028b057178f5f180a63bd34f493ae1a4b1dd8ecfdfd64b3199059fa7ec5936b3182d55b800596
- TLSH T1D71150BD3FC0233206E459CEAE0F80CA9719C1E9254FA7202895C0A4563E66B54F92E1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\1.0.0_0\telemetry.js
- Size 5KB
- SHA256 59b5d074b6607dbd093438ab748b74998f5ae5879e6d27b2e6e2fb9c5000e3b5
- MD5 238d30759b551deb294d6a629d5acc08
- SHA1 2cb3a21939c7e9cd3d34983a0ec998ec42080513
- SHA512 522b6103e09c9939cec93430b824917fbd2949c29d759379bbb351f71dd4933ead0fc62809022b994aa45bce263efb0e5ef0ca9ac6c3b2119614b6b1d04670ab
- SSDEEP 96:O4s3HFKWNLmJHV5GcvC557q/8wqmqRBqdVsLWqmpmeaSQZPTxnoolBWcii:O33HT614PESX6dVszmGSQZPTxnG+
- TLSH T17CC1865E3AD633B5081662BD9F1FE186B738452B211DCA20389E83593F0923C43BD7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.2_0\background.html
- Size 344B
- SHA256 4507014191a2a868fadf2127587f819ae35f5bcc04c13e760d2349e079ca5d30
- MD5 91f8fb1ddab6a04e5432037a83ca1db9
- SHA1 ed695f0786ed197b9c2f6d66b5da9d4f26e6dfcd
- SHA512 b7d30ef0cfbde624ca6dcbf2d0c3bd68dcb63d45d4474c43235529f193f71f18307823c3eeb72264ba5f6c5bf29091580b468bbc39e2f9a9529f64a3bd3c2865
- TLSH T1BDE02095EC60505D612226B59DF0F11C85C97B5CF6815D0065E865DD4CF4B4889A3804
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.2_0\js\twitch.js
- Size 28KB
- SHA256 c7d12c784ae3df27a112d5bcb7d9751577c7db0a056948e81284fb345ea33859
- MD5 53bf91545a6a6f23937df88d9b19433e
- SHA1 c8a9d1af2618e6fcf21e34bfa53425c7c266aa42
- SHA512 b3871a5c6fa1998d53210eca58e66b68b988f2ad7ee10569a3653e2a8c5a5314c10d1e01201fce3d66d65f6c7deb9de6f385c3a722e1d435d13de53952d573df
- SSDEEP 384:7TXh7E06m8V1JRVEDwxJI3ltUzXHv9qQhUzK8+Gn1GQfrsWM1I4iqDT/bfPcpM3U:7Zyz1jVEkxtHg+GnUgrseSfI2k
- TLSH T1F9D2D88B75E0F0F2E9B995DB508B040FB21B867FD44850C49AB8E8F628F75CE8225757
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.2_0\js\youtube.js
- Size 27KB
- SHA256 8ebf1a952e911c311d0067a3d907805d203b56f28a59a977fb50ff3c04c3039e
- MD5 94e02bdeeb2f8f963b705c214bf9710c
- SHA1 a78f10cfc3c40cc700ccc3f0f45d7a096bad17e2
- SHA512 91ad6575185cf07d8b222ae952f2bb80a6b0af6cee611464b11b88892a807c4c4a36a87002728fd8f8604a21ccb82b59ad625413509a39d4b879d658096b2225
- SSDEEP 384:7MvhxEq6Xl7/3ltUzXHv9qQhUzKGt/1Gcfryx2M162ier7B3fjbOpZ:7SIQH6t/UUryao/JOf
- TLSH T11CD2C74B35E0F1F2E9B895DB508A040FB21B867FD45850C49BB8E8F628F71CE822575B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\background.html
- Size 147B
- SHA256 070183b01077365cb08e9454acc4c00ab2e406c0f84b8bbcfb540ff6ac3cb674
- MD5 41cca3a2511cdde83b9aab5416e24253
- SHA1 a7753c9518843d3543ec42bb0e26321b2d81b541
- SHA512 76233f764913c5e2ac4d5aa37637af1b3c380fe81ef998022350811a64f2e9e684d03fda5cce8a988451fd6e1767735bb384288c801892bed1e917def6c61239
- TLSH T1D3C04C9EAE45C1597061689A19B0B318104AA74CE0D1CDDC16F9E0B14B647DD8C17954
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\contentScripts\content-script.js
- Size 12KB
- SHA256 8b96d012c9bcf12d06a9e8fc89aaae415d5be63a5f77376aea17df4d2eba7bde
- MD5 359a7aeeeeec47b2ad3f7272d5faf944
- SHA1 25e131cbd3adeacb3c2eed261b2100e8eb010604
- SHA512 094baa4295e707eaa279a5e584b879ed33d12ca4143f1d360b6ba5aa64f7642148c3c0c2d7a788e1df737ee9891ee7d4161d1a35a5f2327297a541ba4d1927ce
- SSDEEP 384:zDmkc3ltUzXHv9qQhUzKE5aF4LdufPrDFAz:zDmkrHA5aFuUPrDFAz
- TLSH T131521E9F60E5E3F5E579DDDB98E2182FA12BC1BF9408A0C85E75F55824732CC4221B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\images\icon16.png
- Size 501B
- SHA256 4a794e8840f8407464545972c24810e2346b20808114bde750472279b4f592ab
- MD5 5ff253d136f28f0c082604ad1d093c99
- SHA1 8ae4cb6c5923988a98db950e65e433dc1502f257
- SHA512 5e34b1dd2fa9f5525e973e7bbbf6225c850b51b408631d9244bb3277360deb3b2c6b96cfdc839cffbd5b7a000457e7e9985695cd9119daa0905333d8ac4f8f31
- TLSH T130F005D14E889CBCC56A2373975789F3F8500630205A9699556B2CE11F69006C97770E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.3_0\images\icon32.png
- Size 1003B
- SHA256 33ef5f6427fe62666e42279c5cfd25900700cbd6566c99d15dab424932226ee1
- MD5 f26f73f0bd6c36526c9d78588bd70d93
- SHA1 46f57d5f51a97086410a6497050908347d2cef99
- SHA512 7876661b7914bedadcd003236d625c7bd70f5d459929d6e674e1b382cac33a3629fb2ce39634539ca9699c61ed51f4582f979e7b5975fd484a824af942f2d923
- TLSH T11911C84240C085F4CF3E7DB9EC2A8150ED9F8EA8B068DA4FF98800FE65735301C58761
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_dnpmpbbfdefapbnfffohgcejpogkbjbp_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
- Size 18KB
- SHA256 321f34b090aa5ebf0542155496899859b67150ba1fb65c71f146274be6cd79fd
- MD5 caf22702cb447ab0f5e0d6d2a4912004
- SHA1 fc02f0bf6b47b0b16abde18ab05c04f20f31e35a
- SHA512 b8f1fd187ac9836f51abb904987852b70f4ed244a3ec4d7c81271afb8d70aeca0017fb0e2d2e2f06aa31bbf79993d4f9edd7e703243411b4f5828bd881e0ecad
- SSDEEP 192:zLIS20Ef/9ljraCZCas4jDN0gD8PRpEt9RHgb+WNgyYZ12t7fDxPdDFLSkeoK+mW:zLtEf/95PCsjDN0FXwPc+2FbJ/OkH/QW
- TLSH T17C8205ED6804E8BB8DD1D45AEAF53F37EAA9102265C42E64E5FCDD1C24D76DE122B003
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
- Size 18KB
- SHA256 9bdf20fbdfea7e0fd38caac66fb33671fdf9a590eccc1312923c32abbf1d6811
- MD5 7be665f4ceaf528c9002f3cfc7c3a364
- SHA1 586b7ff4ce1406b6f1649ffef31a6926df1b9dc4
- SHA512 2365a1e05b285b442cafd0076bcb981908a9b4f66928ec26ff9abf9862da34772de32da19b6b08f547931dd0941f31a46b7411757470cf0bd78d5c6d6e24e499
- SSDEEP 384:zLBtTbf/9xPCsjDN0zXwPc+2FbJ/OkHbQW:51b/9xrDN0MPc5n/11
- TLSH T1978206ED6804E8BB8DD1D54AEAF53F37EAA9102265C42D54E1FCDD1C24D76DE122B007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences~RFe5a441f.TMP
- Size 6KB
- SHA256 0f645f2c3d65ca1d41bda335cc53dfceebbae507e51774526773360e5fb5bcc2
- MD5 5bc33e5ae5c495e86deb1b6ad7feffb2
- SHA1 1e05ce064b1f073b9a35950b57ad53637ab4734e
- SHA512 abe3f81210e5ddbdbd967c3288a8e69b5f908b23a4aa4a8f78808348cacd5db3569c41a6ee478a305afd1af128c87e12cdcab0b72d8859e7b530f49faa53c371
- SSDEEP 96:bS52nYv0Jewj+xkCKFCuHzdcsoHzdcsTYBzplDVMt8pfHwwsBP1KwCi0RqFIzW0:bSdv0+CZCas4jDKtQfwwKP1JbFi
- TLSH T146E151E8E004CCA78AB1995925F93F37F929825F0855183BB4BDED8C0F7397B1189D45
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 336B
- SHA256 6ae00dfb8dab71ddcb016f4df5743a4ec358cc35b6dde4716f8f6aeba8f21498
- MD5 486c960fb8428a4f983013c8281120dd
- SHA1 b764e2bb8f0e5d1cb52871c9fbfbc76c2686a2ba
- SHA512 b49ed0deaa8d923d263e4feab747bb3f131de6d2f2f4bc5e2433ceafae97860fa2b972a766db2e894980ffa15b832e991818400ebb46ff391f59fdd3fa9ced5e
- TLSH T16CE0A7138741625FE490E3B9148390573737CAF5D60A23CB40A92629AC713718E1AF44
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a97cd.TMP
- Size 96B
- SHA256 41dbaa91f43c9ebdc3382345d172f6a3b2a22834621dfe2e51c9d7dd7558c954
- MD5 8ba17d0ccce1d6bc5346487f532f8048
- SHA1 61ad8fe00c1fead09a9d234a3196eb72d54ff3c3
- SHA512 b6dadb60d479d41a0b00c666bf0fa35c06d3956bab84b2ed8c1ec42cbdc4dea234e7ed092db32d323f0f2007c5b2c02df900cc8246fb8688628bc54d5b4c3599
- TLSH T183B00231C5022115D84602B0275619D87961EF2DCA65160692F016AADC2056046EAD41
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Site Characteristics Database\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\d2f8dfdf-3fe4-4d74-bb00-39cdf6ad21a3.tmp
- Size 173KB
- SHA256 42e8e4ae78d8157e00e7e5c7030519c1adb7b61f3b2dbc5aa1006520e8cf1eed
- MD5 697fdef871187a964a2793955c6a2ae1
- SHA1 171fba69bf101fd87692e768e52795e06595d320
- SHA512 a2c1bc6f8a98a57ecacb727f93075d122908347dbdda7ae07421e429e68de8a0f83755082aaa6223c062f6bccb7ffd103714f856a2928653c66b728c84f48f9e
- SSDEEP 3072:4d1QxHY+1g5wKOPhs6E9ZBNPI3Pbk7M0wK343qhZQg9C:0oh1giKOPrEF67KbZQyC
- TLSH T183040AB10DA2E6F6F531F7FE48BBD4FA46D93C032525835BCC3270E04A6264A9C63466
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\f2603cea-33de-4ecb-ab22-d9a836148f47.tmp
- Size 43KB
- SHA256 10f7c08f2e769d95d1dbe97a26e98d257f3f7b2aae2c5a904f6f316f395d7fd2
- MD5 2234abc41ccc7b80d041ab7fa9fbb5fe
- SHA1 c8edd617e4047f28d73b7c9106048730a1e505f4
- SHA512 992003b3b6d90892b5908812b4aa2bb4aca943cc1ea61de60109e984eda3688cd5d4e4231feed277917054dbfd341ca2df784b25744a586fa9db0f5f0c8b0e84
- SSDEEP 768:ngtTWfppH3mwRkLazoiyrzM/8ahjCFTFjuU4EaVddoS93zVnVZP91lQQOyzsGa96:ngWLWdWZ+W8ahjE8QcdrpVF3lQQFSmzr
- TLSH T1DF13F9270C5CDA770FA49BA8ED37AF4799FA0115A894DC5497FAD84C02E07DA02473DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GrShaderCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State
- Size 8KB
- SHA256 851331b55e6cec82947073de174b8f3dff6aeb4cd9ac3448431ac7cad44bc009
- MD5 1b3b22c27e34e553be26ae8cc97d3766
- SHA1 a11e3e1bf4c5068b3a9b48c8db292338fd8af7f2
- SHA512 21befd9a81d77d1b18b870b52f8b2356755e9b230b21300322e7bd076e2ee30fd3d033d2cf1065e0c5a028812524e4436c8814791aea9f233a147dfc82cda1e9
- SSDEEP 192:zqu/z2+YaCZCas4jDN03+TzkNRDU2UyGYxtRRd/:zJ2+YPCsjDN0On0vGgbRd/
- TLSH T16F02C8E96058CCA3D6D2C8CEE2F63D3B9D78949794952974F549FF0906D71AE034A802
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State~RFe5a43ff.TMP
- Size 4KB
- SHA256 d3a376412f7aba2ed5d711b070cdb96ee6e2f72db9374920b6bac963fa969657
- MD5 fafd8f2b56687db1d14bb9f7507edf43
- SHA1 471d8ab14957a88290a3caa0ea3a5d4857674132
- SHA512 5f1e84918bc8979b4c9c7372f64db7c2b07e3ee49f2985b1340eb86e37ada36f3c677001406b4061a16ef9fac4f6d80f67a53dc0af6b15ef16cd0339878c8ca9
- SSDEEP 96:tsaxkCKFCuHzdcsoHzdcsTYBzplDVH03kfFEzkNRv16DhgCQt97i4ZifNB:tsaCZCas4jDN03LzkN/8he9HZiT
- TLSH T1B1A195F97048D8A2D681CC8FA3FA7C3B5C2CC09B88691979F589FF450A9713E131AC11
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\extensions_crx_cache\7cd618e3-c1c9-47b5-83a0-8ebcaeb10877.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wave Browser.lnk
- Size 2KB
- SHA256 dad916e8f95de891c203485ccfdb97739390a5406855486682c0d1826d14f373
- MD5 d9dd9431a40158a10c91ac56ec7145fb
- SHA1 47695573dea44a11e47f1f33d60cae29cf3ab475
- SHA512 26f8ba2dcce0bd074b362d4372201272ab229ac67d4d24c115bf6ad5bf66bb7c7274569b876ddbe96882747e007325e4095a73a34e002f50c5d1eebb583bb2d7
- TLSH T1D741AC062BF91325FA7F8C334474A575623238E2ED59EEAC028492482736265D8FCF1F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Downloads\Wave Browser.exe
- Size 1.3MB
- SHA256 1d050ff04d60e7a8abb85b727e3cc032a24f873c4d087c2c231b0e768f5b1ce4
- MD5 3f35648131c6f17a64812368f1ecc06f
- SHA1 09aecd07d675bfcea12ceab673979d0723d0eecb
- SHA512 751e70eab334c352de4b87f66214f0e857df06595d7ee567525d47f7184ebd064f96b1d4715f8566e944cdd988500a924fded1446d7eff1d8251b861aece23a8
- SSDEEP 24576:EjM/RU1381jGKxF3sYaGfAX8vcZWtP6cQ2Du3kVz6LTm:EjIRUsxmKIZW5q3kVeLa
- TLSH T11C559E2215F0D874F4A2EAB4C8B3E5F545DA7C02E439C54FAD183CAEBF70A429927395
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\Wave Browser.exe:Zone.Identifier
- Size 59B
- SHA256 8eeb514a4c65918bfe4209282b62fd71b50536ac61ca0f8bae176b88b84541df
- MD5 5f599aac4e362e86f739e80b705ce3b6
- SHA1 ced4656f10bf2250029e8dde884832d68a90632f
- SHA512 bed39ff31d9a7f9aa5f2513e907cc2ac44fbd8ca15fe392202bd1183a51a050fd84d8305828931452bb7f6feba10a1b2cf6cf71bb4393ffd2ad9f329eb942396
- TLSH T1FAA00257440844444E6532C415ECD51CF10E75558DE50645EC41D5D69A844DC81E842A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
- Size 190KB
- SHA256 49e8c3f605019149b8ede45676c269346ba2ec101608a63933bd090787b7b81c
- MD5 b44e7fda9c0af3628debe7b52a8808ab
- SHA1 863d2767f8a76497610b176635c61ec4953fac61
- SHA512 1ff3de0b9ea29d82352f6e1a9f68e73268d79e47086297632401c6954d2c7573fc19f6c229b221da9a15c66955181eb203ecc504d89c898fd8a2f190562dea65
- SSDEEP 3072:SjGte42tXRPBKaBGt3GWlLYiYmzG3woY466N4TZXgftB+PVK:SjGZ2XRpKaBUH5fohOXg1B+E
- TLSH T10E147C1672E910E9E1738134CC924A05FBB278720771CA7F13A4877ADF73290AD6BB65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\psuser.dll
- Size 259KB
- SHA256 306f117f853405bb44e6e95430b6bb2eac87747afa1c65b0eb59097336a3b97a
- MD5 f4b98ef28349af12bde3128e7ae56de4
- SHA1 77021035114ca541ec69d229bdcb7c83b91334f6
- SHA512 5d0dd5cd5c63330ca6f251e49a73292e3b7f53cf44e60f3e0c1f63f07e1eacd0a4e6135e7b6ac680a9f7132ccdf5b3a9e46d2051180166333e6873f2a1bdf7df
- SSDEEP 6144:C+DwZ3yfi4kmlVeBllPx1dbXijIuFILOAOBcSKeBkQY5h2:C+DwZ3yfkmlVeBllPx1dbLuFILOfZKZE
- TLSH T1BF449D417AC1C876D57E1030086B97614BBD7E201EE1CAEF27D87E6D1E723819B26B63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\psuser_64.dll
- Size 323KB
- SHA256 d7b61a7cd898e62e2d2a3377ad9d66dd9d5bb8d45e0475d6f871aaa17ed083e8
- MD5 de58491a8d99be29907a581458294ee1
- SHA1 3ce1e93c5c044fa2b821d51faed92ff1c7834a78
- SHA512 004d01d7647ce62e271a253edf761bcfe6dfd01186d631be8f504872ae855d8e7404aedbfe790a200a359e277cb040eb1275169b4a6c64e53ebe70342c16e842
- SSDEEP 6144:IgHXtLGhBh12cITHjyXB0iohZ3eCFKYbTXkQY:I0XwapaXB/oHKI0
- TLSH T1FD645A0AB3E454B5E876403DC8178A06DBF27C451AA1D3AF03A4775EAF3B3516B3AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Wavesor Software\WaveBrowser\1.5.24.21\Installer\setup.exe
- Size 5.3MB
- SHA256 3f9b109b7b9b032f835b2589e91d85a115a589e29dad048f7339168621e4f6c2
- MD5 301176ff2c181d1c3cebfb71975d990b
- SHA1 925f6da9c663163cc21bcfdae41ce6c0505ac2bc
- SHA512 d5ffb964bbfd48f848c984717776f7444f61917f5e5025d96e82b340c4cf7a92d3c3c441887a839c987fb062c3ce6bb52f94e7ae567a809a39c60e066989ca32
- SSDEEP 49152:hn9sxm5DqM7cq+596H0vrreN3UQxLBzoWKh0nkE7MzLo8+Jv5sPdI+RX7DDIFStX:RTxLBxc0nkEOEod6StgC
- TLSH T18B464B43F3A500A9E06ED974CF39562296353C8A4BF493EF26D436E51A72EC47B38B11
- MD5 SHA1 SHA512 SSDEEP TLSH