Analysis
- user interaction
yes - max time kernel
283s - max time network
285s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
- submitted
30/09/2026, 14:26
General
- Target https://skmedix.pl/
- Sample260930-rrzpyaswft
Score
8/10
Malware Config
Signatures
- Downloads MZ/PE file 2 IoCs
- Checks computer location settings 2 TTPs 64 IoCs
Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
- Loads dropped DLL 64 IoCs
- Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 1 IoCs
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 9 IoCs
- Drops file in Program Files directory 44 IoCs
- Browser Information Discovery 1 TTPs
Enumerate browser information.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 34 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
- System Location Discovery: System Language Discovery 1 TTPs 20 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
- System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
- System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
- Inno Setup is an open-source installation builder for Windows applications. 6 IoCs
Inno Setup installer
- Checks processor information in registry 2 TTPs 6 IoCs
Processor information is often read in order to detect sandboxing environments.
- Enumerates system info in registry 2 TTPs 6 IoCs
- Modifies registry class 64 IoCs
- Suspicious behavior: EnumeratesProcesses 18 IoCs
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
- Suspicious use of AdjustPrivilegeToken 64 IoCs
- Suspicious use of FindShellTrayWindow 64 IoCs
- Suspicious use of SendNotifyMessage 64 IoCs
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 64 IoCs
- Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://skmedix.pl/1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x264,0x7ff9da60c188,0x7ff9da60c194,0x7ff9da60c1a02⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1776,i,11537741307505568085,10888169771348201849,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:32⤵
- Downloads MZ/PE file
- System Time Discovery
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1648,i,14391044201520818619,16143929018188054244,262144 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:22⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2448,i,15368123035000659862,4387792141230314310,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=2412 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,8778450634833711757,2076275108263767356,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3492,i,13772856079671614540,12441254876842661928,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5316,i,3053338954888488366,7859898253718094345,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5504,i,3080587730954334019,13642666930634961877,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5492 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5380,i,15587743856343969181,7142412022414976940,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5836,i,3924035200544747531,7555388798023622909,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5988,i,4813852412783306963,12211167935980181266,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5964 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5984,i,881076175222590055,3028411344699884546,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6016 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,11003471742595884238,8497109076585512379,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,11003471742595884238,8497109076585512379,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6872,i,10789922970337008352,6734202860809156321,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3748,i,17342497659593208493,8105656233789244988,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=3768 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,4659915072845767491,5277057469641212227,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=5220,i,6255617022461050278,17163645581666811078,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6932,i,833617551214741963,3226675163980547732,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7008 /prefetch:82⤵
-
-
C:\Users\Admin\Downloads\Wave Browser - 2026-09-30T142845.295.exe"C:\Users\Admin\Downloads\Wave Browser - 2026-09-30T142845.295.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Wavesor\Temp\GUM5634.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUM5634.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTU3LjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xNTcuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9IntENUM2QjQxMi1BQjc5LTRBOTItODVGRi0yNkVDNDlCOUQ0Rjd9IiB1c2VyaWQ9InthNDdmMjYxYy05NTNlLTQxYzYtYjZmMy0wYjNlY2M0NmM5OWF9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0ie0I2NTlFN0FELUNFRUUtNDc3MC1CRkJGLUU1OERENDZBNTBBQX0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iMTYiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDEuMTI4OCIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0Y2RjYwQUNFLTcxQUQtNDYxMC04MEQ0LTkyNTM3MjlGQjRCN30iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4xNTcuMCIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBpbnN0YWxsX3RpbWVfbXM9IjE3ODkiLz48L2FwcD48L3JlcXVlc3Q-5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{D5C6B412-AB79-4A92-85FF-26EC49B9D4F7}"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
-
-
-
-
-
C:\Users\Admin\Downloads\Wave Browser - 2026-09-30T142845.295.exe"C:\Users\Admin\Downloads\Wave Browser - 2026-09-30T142845.295.exe"2⤵
- Executes dropped EXE
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7120,i,3351024519168012652,13007411240989075561,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=564 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7160,i,2928724805006916545,11650439429453727144,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6712 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7156,i,17517470847925286687,11344449153766257367,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6224,i,4740566989891005465,16316356679850838252,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=5352,i,5759439051654831032,8857226417120609721,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5744,i,4794560778562972313,667062754595460465,262144 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=6160,i,3702044165408086502,2820867088495018374,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6024 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,5416871439002533425,10065661623884073238,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5392 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7300,i,3274397264243922373,14825198990747832585,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7124 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7672,i,735612477837044314,4374941653345115931,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --metrics-shmem-handle=7332,i,6291294912626684265,789005835083532751,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=5000,i,16178824290434360845,5348829668402643289,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=7804,i,17073659080987047708,13845173463495322246,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7852 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=7976,i,3130279430786749271,604327001605237151,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --metrics-shmem-handle=7992,i,4857407118275913997,18026119548921858487,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=8004,i,4217394696404585970,6566116794627639436,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=8216 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --metrics-shmem-handle=8480,i,3072970509232604724,17464893912396342738,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --metrics-shmem-handle=7188,i,14065196276097494315,14186606049904694783,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=8024 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --always-read-main-dll --metrics-shmem-handle=8236,i,384612806570242827,16559927656218446101,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=8252 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --metrics-shmem-handle=7784,i,4039766403051446645,13797534121306221307,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=8240 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --metrics-shmem-handle=7276,i,219695560475592193,18325195116771460553,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7532 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --metrics-shmem-handle=8280,i,7621699561131253010,4838064776779044392,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=7820 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --metrics-shmem-handle=7824,i,4618830176824341158,8673210304738445358,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=5456 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --metrics-shmem-handle=8320,i,11334925206781904622,5642656028480464554,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=6080 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7652,i,9611277202386008074,9648067801638379622,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=8664 /prefetch:82⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=8872,i,16414775404254971107,7149963910506337234,2097152 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=8816 /prefetch:12⤵
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=9008,i,16909035506007497615,7688793109656279242,524288 --field-trial-handle=2336,i,13295832641956594780,11979202211768841937,262144 --variations-seed-version --mojo-platform-channel-handle=9020 /prefetch:82⤵
-
-
C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\is-0MRK2KJEB9.tmp\SKlauncher-3.2.18_Setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-0MRK2KJEB9.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$6029E,2154364,841216,C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"3⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\is-D8NMZXOAIR.tmp\SKlauncher-3.2.18_Setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-D8NMZXOAIR.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$40222,2154364,841216,C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"3⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\is-T571O71ILL.tmp\SKlauncher-3.2.18_Setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-T571O71ILL.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$302B2,2154364,841216,C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"3⤵
- System Location Discovery: System Language Discovery
-
-
-
C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"2⤵
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\AppData\Local\Temp\is-GDCAD41RUC.tmp\SKlauncher-3.2.18_Setup.tmp"C:\Users\Admin\AppData\Local\Temp\is-GDCAD41RUC.tmp\SKlauncher-3.2.18_Setup.tmp" /SL5="$10326,2154364,841216,C:\Users\Admin\Downloads\SKlauncher-3.2.18_Setup.exe"3⤵
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
-
C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe"C:\Users\Admin\AppData\Roaming\sklauncher\jre\bin\javaw.exe" -Xmx512M -jar "C:\Users\Admin\AppData\Roaming\sklauncher\SKlauncher.jar"4⤵
- Checks computer location settings
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of SetWindowsHookEx
-
C:\Windows\SYSTEM32\reg.exereg query "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v AppsUseLightTheme5⤵
-
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start1⤵
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"1⤵
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{A694E4F0-A08C-4793-BB60-2F27D7DCD945}\WaveInstaller-v1.5.26.3.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{A694E4F0-A08C-4793-BB60-2F27D7DCD945}\WaveInstaller-v1.5.26.3.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\guiC1A0.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\wavebrowser.packed.7z" --wid=tf0smkst --installerdata="C:\Users\Admin\AppData\Local\Temp\guiC1A0.tmp"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.26.3 "--attachment=C:\Program Files\wavebrowser_installer.log" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff7929ff5c0,0x7ff7929ff5cc,0x7ff7929ff5d84⤵
- Executes dropped EXE
-
-
C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\guiC1A0.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsqC26D.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.5.26.3 "--attachment=C:\Program Files\wavebrowser_installer.log" --initial-client-data=0x278,0x27c,0x280,0x254,0x284,0x7ff7929ff5c0,0x7ff7929ff5cc,0x7ff7929ff5d85⤵
- Executes dropped EXE
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" https://install.wavebrowser.co/thank-you?tid=tf0smkst&src=d-cp22690838366-lp0-obem-wav-igPUOiReQBUaoNYcZpUyQ-ab51-w64-brwsr&cid=22690838366&iid=wav&uid=a47f261c-953e-41c6-b6f3-0b3ecc46c99a4⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch https://install.wavebrowser.co/thank-you?tid=tf0smkst&src=d-cp22690838366-lp0-obem-wav-igPUOiReQBUaoNYcZpUyQ-ab51-w64-brwsr&cid=22690838366&iid=wav&uid=a47f261c-953e-41c6-b6f3-0b3ecc46c99a5⤵
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --cd-upload --from-installer4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=iid=wav --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=src=d-cp22690838366-lp0-obem-wav-igPUOiReQBUaoNYcZpUyQ-ab51-w64-brwsr --annotation=uc=20260930 --annotation=uid=a47f261c-953e-41c6-b6f3-0b3ecc46c99a --annotation=ver=1.5.26.3 --initial-client-data=0x11c,0x120,0x124,0x100,0x128,0x7ff9ac59d758,0x7ff9ac59d764,0x7ff9ac59d7705⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1832,i,15506477564785366125,14614825918066865867,262144 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2116 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2324,i,6268154239054193327,13343727188685264995,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2164 /prefetch:35⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Time Discovery
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,4984964767567134469,8197122177695125569,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2428 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1828,i,14582329404566892202,2707559367388461129,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3656 /prefetch:85⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3804,i,5096847019116746710,8734597442221162335,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3860 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=3836,i,17313383286751135437,13558688670246605456,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3880 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4464,i,2807410563989719687,7220923037128286697,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4504 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4488,i,10820793866883301789,8124595563568215795,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4460 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4608,i,10262867166555412158,3142930030755525169,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4496 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=5000,i,3619515846693060090,244349166901865272,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=5020 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5044,i,14702792581828580954,10861211721706077684,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=5060 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3828,i,6290240964416636235,13066802397231907963,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=5464 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5376,i,650020153000884791,4519851371700994522,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=5448 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5376,i,14866162618888035978,8611533615276088186,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=5724 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6160,i,1529915797178464836,16083828955998351398,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=6188 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6524,i,12150710720116682571,8250392824133147621,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=6508 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=6480,i,4135605184463839622,3839005938885513699,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=6648 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6436,i,14994224929906462985,11733734154235374463,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=6708 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6468,i,10686040492333517424,1134714027455782120,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=6768 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6424,i,3803701840538471501,9106665665061026266,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=6796 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --metrics-shmem-handle=6628,i,17045872459248464672,2067394614214470870,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=6856 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --metrics-shmem-handle=6644,i,4574960118233508085,19791345375442947,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=6976 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --metrics-shmem-handle=6688,i,5842011210657248776,3454944686808277018,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=7008 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7744,i,5725859833988718951,2104872872631001905,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=7864 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7876,i,9890133094371912921,5924659481500042327,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7888 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --metrics-shmem-handle=7904,i,5508370316228541689,2958161937371970678,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=8076 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8452,i,8146220583423030132,11003711096786231905,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=8480 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8624,i,8739590984412894799,10715574132624635176,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=8636 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8796,i,2229378308669632372,3286211693994426546,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=8472 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8824,i,5984486690053929380,13429920121627873421,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=8812 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9112,i,3017510779922888464,14203776577525410573,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=8788 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8508,i,10339489006456654623,9635457429635273944,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=9224 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6688,i,4444615869775841059,16329376830414882298,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=8480 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9392,i,10810259376663244971,3733918838619310778,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=9540 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7872,i,5829221749421092660,11066098915408226750,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=9424 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9248,i,1928727228529264841,6110889194316409446,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=9840 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9872,i,14175240467532519554,17049910533456193043,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=9996 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8504,i,5910839122521777434,9135792794511880083,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=10160 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9692,i,14613833094827201710,3981190162597684063,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=10224 /prefetch:85⤵
- Executes dropped EXE
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8776,i,8828293167930411935,4981055101006736273,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=10012 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8056,i,8232106810076367597,15940571464442779269,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7020 /prefetch:85⤵
- Reads the TCP/IP host and domain name from the registry
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5688,i,1177166746608917263,15360601219267467576,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=10116 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8884,i,11981889897149782586,783379911297552828,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=9240 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8912,i,16560922621736068201,9321888507864908223,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=9928 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9224,i,18319156116453040846,11736018022378841976,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=9332 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8984,i,7727061324275400498,6852161716468660801,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=9092 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9196,i,2912992518977992311,1103202462701688358,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=9164 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9084,i,18310823954037042051,6156814006611413016,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=8592 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8528,i,3644482758416296628,15384849376919060194,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=8460 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10336,i,4280811690469034674,14034500142563268012,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=10268 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7732,i,12075869806315841118,11112242919100153168,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=7872 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10092,i,235064061234198890,2186978072072791097,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=9100 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5776,i,3602340936584525662,7730847682159236089,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=10116 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6152,i,10064803341807220504,5914970895829585422,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9712 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10380,i,4722126322895483117,2563873763114984758,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=8472 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9288,i,16320358190677684484,16958441066550272962,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=8900 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9092,i,11842435176738213670,13216078627690942147,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=8912 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8548,i,17034574709862998243,4349480070272636891,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=9872 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8576,i,14094564987030714780,934041487524931642,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=8532 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9204,i,16317555724335589821,9536074408560787989,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=8536 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10692,i,1974840192284482836,8037577285234166012,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=9716 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9040,i,10771768209726017350,16428074584745405530,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=9192 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10660,i,3546082577615443984,14994112386462590317,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=11060 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --metrics-shmem-handle=8604,i,7677138198556044656,528226666656713142,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=11204 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=9172,i,254460978974498347,10181447476466704159,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=11224 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=10296,i,13723463326429796209,2704432172008083627,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=5788 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=5968,i,5556119280663024448,15546027359456425656,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=10540 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=9812,i,12106200735795037546,5151162420744931717,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=10516 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=11260,i,12101398723754215392,17231339787551383900,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=10520 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --metrics-shmem-handle=10340,i,12734558078055014696,14038999521838452507,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=10500 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=5784,i,11208518687716705462,14497398917394324456,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=5508 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --metrics-shmem-handle=5540,i,16863110904777165172,4605390013137095828,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=5480 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=9592,i,9634933400903713296,1329106938540251777,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=9580 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=9692,i,12387472982817284221,3003145340535518677,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=8732 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=8676,i,75822735851983745,5951182102425282088,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=9972 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=8704,i,1424287475578693020,2424324739678978454,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=9964 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --metrics-shmem-handle=11572,i,6240574122400674252,16774573480213724388,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=11576 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --metrics-shmem-handle=11628,i,4412912016821805448,3743762587359481979,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=11704 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=11944,i,11804449900220933234,17850408820368811500,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=11960 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --metrics-shmem-handle=10176,i,16590763663988806504,16317643065686566914,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=11800 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --metrics-shmem-handle=12076,i,7591861456660425239,1770866100790560344,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=12116 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=12556,i,17851316854336575111,3223414998227154152,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=12628 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=12612,i,7086901387339582372,6917902845775349905,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=12608 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=12940,i,2815195257185603516,9360086105078471340,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=9924 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=13088,i,8027442333795925427,16072926378497588544,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=13064 /prefetch:15⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=11012,i,9215732300756790590,4385172260946051223,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=10976 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --metrics-shmem-handle=12916,i,2546637146106404524,5829231960713609476,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=10760 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --metrics-shmem-handle=10692,i,4577776813433348794,5817553534198209427,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=12244 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=12412,i,13186414907261748273,10289035320275273198,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=4572 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=9524,i,15559569587283989695,8205847560372132921,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=9124 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=12416,i,12820061797605888073,10603571679522179888,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=11012 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6124,i,12357953247094556825,2717617632531104204,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=12416 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=10584,i,11772836885983109446,17046223767123949920,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=8884 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=8832,i,8593456227807823235,2446279771490816871,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=10024 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=9324,i,15642864711556992923,11476918236353308505,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709083764223790 --mojo-platform-channel-handle=11660 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=8612,i,8966007141296060739,3547307726349039459,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709084701265639 --mojo-platform-channel-handle=11848 /prefetch:15⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --metrics-shmem-handle=8512,i,4415499864088371705,14026674869740061452,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709085638307488 --mojo-platform-channel-handle=13116 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --metrics-shmem-handle=4736,i,14764255007821753441,769009248139105671,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709086575349337 --mojo-platform-channel-handle=13168 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --metrics-shmem-handle=13132,i,12481776145030704655,1203538959999238544,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709087512391186 --mojo-platform-channel-handle=7552 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=13124,i,5526256075317624480,7501293224670976405,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709088449433035 --mojo-platform-channel-handle=12228 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=9044,i,840987245022177753,7146001223243356988,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709089386474884 --mojo-platform-channel-handle=8876 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=9236,i,10880539737534189650,8415644317069146901,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709090323516733 --mojo-platform-channel-handle=10232 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=6124,i,8265979375124647808,2629318751096583234,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709091260558582 --mojo-platform-channel-handle=9136 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=11092,i,12090754371258083013,7995599147230359060,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709092197600431 --mojo-platform-channel-handle=9108 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=10004,i,4343389995267648140,17509672186318978587,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709093134642280 --mojo-platform-channel-handle=6132 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=9736,i,17877482696089286272,14569985090285135752,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709094071684129 --mojo-platform-channel-handle=6084 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=13980,i,5419193439601530571,7384571584869693501,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709095008725978 --mojo-platform-channel-handle=13368 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=14124,i,15345980660223467989,16198482376895869357,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709095945767827 --mojo-platform-channel-handle=14136 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=118 --metrics-shmem-handle=13848,i,12994853826130713320,14291417777489942042,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709096882809676 --mojo-platform-channel-handle=13880 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --metrics-shmem-handle=13896,i,4268349580185021152,11717513458738923130,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709097819851525 --mojo-platform-channel-handle=13928 /prefetch:15⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=12512,i,17659390671076622259,15577411173502991535,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709098756893374 --mojo-platform-channel-handle=11976 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --metrics-shmem-handle=11932,i,9941356009934242382,3100931305358740848,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709099693935223 --mojo-platform-channel-handle=11944 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10224,i,12239820511158157571,143884777917225612,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709100630977072 --mojo-platform-channel-handle=12740 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=12724,i,7762550405486116624,6998472718134994511,262144 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709101568018921 --mojo-platform-channel-handle=12712 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --metrics-shmem-handle=12700,i,14798407101976730171,9942365166664763258,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709103442102619 --mojo-platform-channel-handle=9392 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --metrics-shmem-handle=9164,i,17433614574472404854,2996805858842910646,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709102505060770 --mojo-platform-channel-handle=9632 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --metrics-shmem-handle=8820,i,14490794647823842713,16031390898154998923,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709104379144468 --mojo-platform-channel-handle=12536 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3948,i,17210386169895881460,9574996138497970134,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709105316186317 --mojo-platform-channel-handle=3956 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8980,i,9695342981458018886,14917542706332376298,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709106253228166 --mojo-platform-channel-handle=4012 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=12752,i,14896139225587473505,6821089685787842049,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709107190270015 --mojo-platform-channel-handle=11872 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3248,i,110525742903617936,15027509387452753694,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709108127311864 --mojo-platform-channel-handle=12064 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=12048,i,3872065078264333024,832903794538913708,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709109064353713 --mojo-platform-channel-handle=3872 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=11944,i,14830713938439914057,15564669376072984566,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709110001395562 --mojo-platform-channel-handle=11384 /prefetch:85⤵
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --metrics-shmem-handle=9868,i,17861478223382398743,5112270468999124827,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709110938437411 --mojo-platform-channel-handle=9360 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --metrics-shmem-handle=10972,i,11858855348460589729,1585146133377362606,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709111875479260 --mojo-platform-channel-handle=14060 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --metrics-shmem-handle=14996,i,13991748584582615900,5674640337980257939,2097152 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709112812521109 --mojo-platform-channel-handle=5880 /prefetch:25⤵
- Checks computer location settings
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9164,i,2607663912435220052,13785147815170869082,524288 --field-trial-handle=2136,i,108230380216400588,2774097502502324574,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709113749562958 --mojo-platform-channel-handle=9576 /prefetch:85⤵
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDEuMTI4OCIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0VCMTQ5QUQyLUNFNEUtNEY1MS1CN0ZDLUExNDlGQUE0Q0NBRn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuNS4yNi4zIiBsYW5nPSJlbiIgYnJhbmQ9IiIgY2xpZW50PSIiIGluc3RhbGxhZ2U9Ii0xIiBpbnN0YWxsZGF0ZT0iLTEiPjxldmVudCBldmVudHR5cGU9IjkiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI1IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgZG93bmxvYWRlcj0iYml0cyIgdXJsPSJodHRwczovL2Nkbi5zd3VwZGF0ZXIuY29tL2J1aWxkL1dhdmVCcm93c2VyL3N0YWJsZS93aW4vMTEyMDk4ODE2ODE5NS82NC9XYXZlSW5zdGFsbGVyLXYxLjUuMjYuMy5leGUiIGRvd25sb2FkZWQ9IjExMjc5NDk5MiIgdG90YWw9IjExMjc5NDk5MiIgZG93bmxvYWRfdGltZV9tcz0iMTY1MzEiLz48ZXZlbnQgZXZlbnR0eXBlPSIxIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iNiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIHNvdXJjZV91cmxfaW5kZXg9IjAiIHVwZGF0ZV9jaGVja190aW1lX21zPSI3NzQiIGRvd25sb2FkX3RpbWVfbXM9IjE3NTE0IiBkb3dubG9hZGVkPSIxMTI3OTQ5OTIiIHRvdGFsPSIxMTI3OTQ5OTIiIGluc3RhbGxfdGltZV9tcz0iMjExNDUiLz48L2FwcD48L3JlcXVlc3Q-2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --strtl=di --start-maximized1⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=iid=wav --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=src=d-cp22690838366-lp0-obem-wav-igPUOiReQBUaoNYcZpUyQ-ab51-w64-brwsr --annotation=uc=20260930 --annotation=uid=a47f261c-953e-41c6-b6f3-0b3ecc46c99a --annotation=ver=1.5.26.3 --initial-client-data=0x118,0x110,0x10c,0x148,0x108,0x7ff9ac59d758,0x7ff9ac59d764,0x7ff9ac59d7702⤵
- Executes dropped EXE
- Loads dropped DLL
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
SWUpdater.exe
SWUpdaterBroker.exe
SWUpdaterComRegisterShell64.exe
SWUpdaterCore.exe
SWUpdaterOnDemand.exe
psmachine.dll
psmachine_64.dll
psuser.dll
psuser_64.dll
swupdater.dll
swupdaterres_en.dll
manifest.json
manifest.json
manifest.json
manifest.json
manifest.json
LICENSE
manifest.json
79e59717-f54e-4893-a7d5-39bd4127d973.tmp
settings.dat
BookmarkMergedSurfaceOrdering
f_00002f
f_000030
f_000031
f_000032
f_000033
f_000034
f_000035
f_000036
f_000037
f_000038
f_000039
f_00003a
f_00003b
f_00003d
f_00003e
f_000047
f_00004a
f_00004d
f_000053
f_000056
f_000057
f_0000ca
f_0000cb
f_0000d1
f_0000d3
22e5778943b9acb8_0
3bdaed6f16c6b22f_0
448975f7932def0e_0
67bcab03e3dbabe0_0
6fc27a8cec1670aa_0
754c19c0437b22ea_0
8971489cc5d55f26_0
ba9f3e38afd83d88_0
d77043c9b5534495_0
df53bad28ea1e322_0
edf3a7a2fe598dff_0
the-real-index
the-real-index
the-real-index
the-real-index~RFe59a84c.TMP
SiteList-Enterprise.json
Network Persistent State
SCT Auditing Pending Reports
Sdch Dictionaries
Sdch Dictionaries
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences
Secure Preferences
the-real-index
the-real-index~RFe5bcc36.TMP
the-real-index
the-real-index
index.txt
index.txt
index.txt
index.txt~RFe5b370a.TMP
index
the-real-index
the-real-index~RFe5b87ab.TMP
sync_diagnostic.log
CURRENT
MANIFEST-000001
f7599284-5da0-4344-931a-8226d7074182.tmp
Local State
Local State
Local State
Local State
Local State
Local State
Local State
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter
RevisitationBloomfilter~RFe5a21f1.TMP
5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
+JXF107127032726585124.tmp
+JXF12527696113477839149.tmp
+JXF13733896265968888409.tmp
+JXF1536205093902333269.tmp
+JXF17599976308037865876.tmp
+JXF17971600089629116625.tmp
SWUpdaterSetup.exe
javafx-0.jar.sha1
javafx-1.jar
javafx-1.jar.sha1
javafx-2.jar
javafx-2.jar.sha1
javafx-3.jar
javafx-3.jar.sha1
javafx-4.jar
javafx-4.jar.sha1
javafx-5.jar
javafx-5.jar.sha1
jre.zip
is-T9Q610HQJA.tmp
is-547O5KTWT0.tmp
is-8V8D4EH6V2.tmp
is-CLB9CDMV5B.tmp
SKlauncher-3.2.18_Setup.tmp
_is7z.dll
_isdecmp.dll
jna9009458545334443764.dll
icon-128.png
icon-16.png
icon-32.png
icon-48.png
LOG.old
settings.dat
f_00000c
f_00002d
f_000030
f_000032
f_00003c
f_00003d
f_00003e
f_00004e
the-real-index
the-real-index~RFe5b47e3.TMP
data_0
data_1
icon128.png
icon16.png
icon32.png
icon48.png
icon64.png
background.js
content-script.js
bg.js
content.js
index.ts-260dceed.js
index.ts-loader-a60d29f1.js
messages-7de30af4.js
types-57a07714.js
service-worker-loader.js
sidebar-icon-32.png
background.js
content-script.js
icon128.png
message-hook.js
icon16.png
background.js
bg-wrapper.js
background.js
contentscript.js
contentstyle.css
extension-router.js
logo16.png
migration.js
pdfHandler.js
preserve-referer.js
suppress-update.js
telemetry.js
background.js
twitch.js
youtube.js
background.js
contentScript.js
icon_disabled_128.png
background.js
content-script.js
icon16.png
icon32.png
data_2
data_3
000003.log
LOG
LOG.old
MANIFEST-000001
Network Persistent State
Network Persistent State
Network Persistent State~RFe5b29fa.TMP
Preferences
Preferences
Preferences
Preferences
Preferences
Preferences~RFe5a3b16.TMP
Secure Preferences
Secure Preferences
Secure Preferences~RFe5aaac8.TMP
2a0afd649b00527b_0
the-real-index
the-real-index
the-real-index~RFe5a6f26.TMP
df08a4b7-959a-4018-9c99-6e8fee456566.tmp
download_file_types.pb
Local State
Local State
Local State~RFe5a39de.TMP
preloaded_data.pb
safety_tips.pb
keys.json
ranked_dicts
metadata.json
metadata.json
metadata.json
metadata.json
metadata.json
accounts.bin
javafx-base-22.0.2-win.jar
default.dic
Wave Browser.lnk
javaw.exe
SKlauncher-3.2.18_Setup.exe
Wave Browser - 2026-09-30T142845.295.exe
1.5.26.3.manifest
external_extensions.json
iwa-key-distribution.pb
manifest.json
en-US.pak
en-US_MASCULINE.pak
manifest.json
preloaded_data.pb
manifest.json
privacy-sandbox-attestations.dat
Logo.png
SmallLogo.png
dbhh1.bmp
d3dcompiler_47.dll
adgone-browser_v1.1.13.crx
chat-notifier_v1.0.6.crx
content-notifier_v1.0.3.crx
enhanced-result-settings_v2.0.8.crx
external_extensions.json
pdf-annotator_v2.0.0.crx
reader-view_v1.1.0.crx
sb-translate_v2.0.4.crx
stock-tracker_v1.0.3.crx
tab-capture_v1.1.0.crx
wave-assistant_v1.1.6.crx
wave-notifier_v1.0.6.crx
dxcompiler.dll
dxil.dll
eventlog_provider.dll
icudtl.dat
libEGL.dll
libGLESv2.dll
notification_helper.exe
resources.pak
v8_context_snapshot.bin
vk_swiftshader.dll
vk_swiftshader_icd.json
vulkan-1.dll
wavebrowser.dll.sig
wavebrowser.exe.sig
wavebrowser_100_percent.pak
wavebrowser_200_percent.pak
wavebrowser_elf.dll
wavebrowser_pwa_launcher.exe
wavebrowser_wer.dll
wavebrowser_proxy.exe
initial_preferences
master_preferences
wavebrowser.exe
memory/2476-7036-0x0000000000A50000-0x0000000000DE8000-memory.dmp
memory/3032-486-0x0000000000F90000-0x000000000112C000-memory.dmp
memory/3032-489-0x000000001C390000-0x000000001C8B8000-memory.dmp
memory/4604-1056-0x00007FF9E7750000-0x00007FF9E7751000-memory.dmp
memory/4604-1057-0x00007FF9E9110000-0x00007FF9E9111000-memory.dmp
memory/4652-465-0x000001FACD8F0000-0x000001FACE8F0000-memory.dmp
memory/5348-7037-0x0000000000E50000-0x0000000000F2D000-memory.dmp
memory/5348-5466-0x0000000000E50000-0x0000000000F2D000-memory.dmp
memory/5356-493-0x000000001E100000-0x000000001E10E000-memory.dmp
memory/5356-492-0x000000001EF70000-0x000000001EFA8000-memory.dmp
memory/5356-491-0x000000001E080000-0x000000001E088000-memory.dmp
memory/6440-5415-0x0000000000E50000-0x0000000000F2D000-memory.dmp
memory/7844-5439-0x0000000000E50000-0x0000000000F2D000-memory.dmp
memory/8392-7639-0x000002B684080000-0x000002B684081000-memory.dmp
memory/8392-7640-0x000002B6869E0000-0x000002B6869E2000-memory.dmp
memory/8392-7642-0x000002B6869E0000-0x000002B6869E2000-memory.dmp
memory/8392-7641-0x000002B6869E0000-0x000002B6869E2000-memory.dmp
memory/8392-7638-0x000002B684080000-0x000002B684081000-memory.dmp
memory/8392-7637-0x000002B684080000-0x000002B684081000-memory.dmp
memory/8556-5501-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5507-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5503-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5506-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5505-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5504-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5502-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5497-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5495-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/8556-5496-0x00000203E8250000-0x00000203E8251000-memory.dmp
memory/9100-5426-0x0000000000E50000-0x0000000000F2D000-memory.dmp