Analysis
- user interaction
yes - max time kernel
420s - max time network
422s - platform
windows10-ltsc_2021_x64 - resource
win10ltsc2021-20260911-en - resource tags
arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows - submitted
04/11/2026, 22:38
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
http://sightwords.com/
Resource
win10ltsc2021-20260911-en
General
- Target http://sightwords.com/
- Sample261104-2kfnlaeh39
Malware Config
Signatures
- Downloads MZ/PE file 2 IoCs
flow pid Process 243 920 Process not Found 227 4024 chrome.exe - Checks computer location settings 2 TTPs 55 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation SWUpdaterCore.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation Wave Browser - 2026-11-04T224042.817.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation SWUpdater.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe Key value queried \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\Control Panel\International\Geo\Nation wavebrowser.exe - Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
- Executes dropped EXE 64 IoCs
pid Process 476 Wave Browser - 2026-11-04T224042.817.exe 4984 SWUpdaterSetup.exe 812 SWUpdater.exe 2632 SWUpdater.exe 1052 SWUpdaterComRegisterShell64.exe 1708 SWUpdaterComRegisterShell64.exe 4928 SWUpdaterComRegisterShell64.exe 5420 SWUpdaterCore.exe 3460 SWUpdater.exe 600 SWUpdater.exe 5476 SWUpdater.exe 4492 SWUpdater.exe 1984 SWUpdater.exe 3912 SWUpdater.exe 2800 WaveInstaller-v1.142.1.0.exe 2500 setup.exe 2636 setup.exe 2664 setup.exe 1712 setup.exe 4132 wavebrowser.exe 2944 wavebrowser.exe 5264 wavebrowser.exe 1856 wavebrowser.exe 6048 wavebrowser.exe 4620 wavebrowser.exe 832 wavebrowser.exe 6036 SWUpdater.exe 5952 wavebrowser.exe 5848 wavebrowser.exe 4508 wavebrowser.exe 960 wavebrowser.exe 4588 wavebrowser.exe 4300 wavebrowser.exe 3860 wavebrowser.exe 1576 wavebrowser.exe 5564 wavebrowser.exe 5104 wavebrowser.exe 3928 wavebrowser.exe 1660 wavebrowser.exe 3132 wavebrowser.exe 3428 wavebrowser.exe 3460 wavebrowser.exe 1036 wavebrowser.exe 6080 wavebrowser.exe 1484 wavebrowser.exe 4104 wavebrowser.exe 6140 wavebrowser.exe 2060 wavebrowser.exe 5044 wavebrowser.exe 5552 wavebrowser.exe 5048 wavebrowser.exe 3936 wavebrowser.exe 4208 wavebrowser.exe 2296 wavebrowser.exe 5280 wavebrowser.exe 1484 wavebrowser.exe 4404 wavebrowser.exe 2116 wavebrowser.exe 2648 wavebrowser.exe 4104 wavebrowser.exe 648 wavebrowser.exe 3936 wavebrowser.exe 3332 wavebrowser.exe 5044 wavebrowser.exe - Loads dropped DLL 64 IoCs
pid Process 812 SWUpdater.exe 2632 SWUpdater.exe 1052 SWUpdaterComRegisterShell64.exe 2632 SWUpdater.exe 1708 SWUpdaterComRegisterShell64.exe 2632 SWUpdater.exe 4928 SWUpdaterComRegisterShell64.exe 2632 SWUpdater.exe 3460 SWUpdater.exe 600 SWUpdater.exe 5476 SWUpdater.exe 4492 SWUpdater.exe 3912 SWUpdater.exe 1984 SWUpdater.exe 3912 SWUpdater.exe 4492 SWUpdater.exe 4132 wavebrowser.exe 2944 wavebrowser.exe 4132 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 5264 wavebrowser.exe 1856 wavebrowser.exe 1856 wavebrowser.exe 6048 wavebrowser.exe 6048 wavebrowser.exe 4620 wavebrowser.exe 4620 wavebrowser.exe 832 wavebrowser.exe 832 wavebrowser.exe 6036 SWUpdater.exe 5848 wavebrowser.exe 5952 wavebrowser.exe 5848 wavebrowser.exe 5952 wavebrowser.exe 4508 wavebrowser.exe 4508 wavebrowser.exe 4588 wavebrowser.exe 4588 wavebrowser.exe 960 wavebrowser.exe 960 wavebrowser.exe 1576 wavebrowser.exe 1576 wavebrowser.exe 5564 wavebrowser.exe 5564 wavebrowser.exe 4300 wavebrowser.exe 4300 wavebrowser.exe 3860 wavebrowser.exe 3860 wavebrowser.exe 5104 wavebrowser.exe 5104 wavebrowser.exe 3928 wavebrowser.exe 3928 wavebrowser.exe 1660 wavebrowser.exe 3132 wavebrowser.exe 1660 wavebrowser.exe 3132 wavebrowser.exe 3428 wavebrowser.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Wavesor SWUpdater = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.157.0\\SWUpdaterCore.exe\"" SWUpdater.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Checks whether UAC is enabled 1 TTPs 10 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA open-pdf-studio.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe Key value queried \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA SWUpdater.exe -
pid Process 6900 powershell.exe 7180 powershell.exe - Drops file in Program Files directory 46 IoCs
description ioc Process File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a1_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a1_staand.pdf PDFToolSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\swupdater.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\swupdaterres_en.dll SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterSetup.exe SWUpdaterSetup.exe File created C:\Program Files\Open PDF Studio\open-pdf-studio.exe PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\WebView2Loader.dll PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\detailblad_a3_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a1_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\uninstall.exe PDFToolSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterCore.exe SWUpdaterSetup.exe File opened for modification C:\Program Files\Open PDF Studio\file-icon.ico PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\detailblad_a4_liggend.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a1_staand.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a2_staand.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\voorblad_a3_liggend.pdf PDFToolSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterBroker.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterComRegisterShell64.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psuser_64.dll SWUpdaterSetup.exe File created C:\Program Files\Open PDF Studio\pdfium.dll PDFToolSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psuser.dll SWUpdaterSetup.exe File opened for modification C:\Program Files\Open PDF Studio\WebView2Loader.dll PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a0_staand.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a0_staand.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a2_liggend.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a2_staand.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a3_staand.pdf PDFToolSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterOnDemand.exe SWUpdaterSetup.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psmachine_64.dll SWUpdaterSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a2_liggend.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a3_liggend.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\pdfium.dll PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\detailblad_a3_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a0_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a3_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\pdfium-worker.exe PDFToolSetup.exe File opened for modification C:\Program Files (x86)\Wavesor\Temp\GUT12DA.tmp SWUpdaterSetup.exe File created C:\Program Files\Open PDF Studio\file-icon.ico PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\detailblad_a4_liggend.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\grootformaat_a0_liggend.pdf PDFToolSetup.exe File created C:\Program Files\Open PDF Studio\kaders\grootformaat_a3_staand.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\kaders\voorblad_a3_liggend.pdf PDFToolSetup.exe File opened for modification C:\Program Files\Open PDF Studio\pdfium-worker.exe PDFToolSetup.exe File opened for modification \??\c:\program files\open pdf studio\file-icon.ico open-pdf-studio.exe File created C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psmachine.dll SWUpdaterSetup.exe - Drops file in Windows directory 23 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp\wavebrowser_installer.log setup.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\crs.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_1624715625\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_BITS_4132_867138714\decoded_xz wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_926385488\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\mtc_config.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\kp_pinslist.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_618120771\prt_domains.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_618120771\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_1624715625\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_BITS_4132_333105299\decoded_xz wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_926385488\cr_en-us_500000_index.bin wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_926385488\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\ct_config.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_618120771\_metadata\verified_contents.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_1624715625\optimization-hints.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_366222502\safety_tips.pb wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_366222502\manifest.json wavebrowser.exe File opened for modification C:\Windows\SystemTemp\wavebrowser_installer.log setup.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\manifest.json wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_618120771\LICENSE wavebrowser.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_366222502\_metadata\verified_contents.json wavebrowser.exe - Hide Artifacts: Ignore Process Interrupts 1 TTPs 2 IoCs
Command interpreters often include specific commands/flags that ignore errors and other hangups.
pid Process 6260 powershell.exe 8060 powershell.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Reads the TCP/IP host and domain name from the registry 1 TTPs 30 IoCs
The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname Wave Browser - 2026-11-04T224042.817.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain Wave Browser - 2026-11-04T224042.817.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname SWUpdater.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain wavebrowser.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname wavebrowser.exe - System Location Discovery: System Language Discovery 1 TTPs 15 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language PDFToolSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterCore.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language WaveInstaller-v1.142.1.0.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language powershell.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdaterSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SWUpdater.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language powershell.exe - System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 6036 SWUpdater.exe 600 SWUpdater.exe - System Time Discovery 1 TTPs 2 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 4024 chrome.exe 1856 wavebrowser.exe - Checks processor information in registry 2 TTPs 4 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier wavebrowser.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 chrome.exe - Enumerates system info in registry 2 TTPs 9 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer wavebrowser.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS wavebrowser.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedgewebview2.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedgewebview2.exe - Modifies registry class 64 IoCs
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = 00000000030000000200000001000000ffffffff open-pdf-studio.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ProxyStubClsid32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\SWUpdater.exe\"" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{D669BD5D-A9B6-47FD-B558-81508AEF48C4}\NumMethods SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 open-pdf-studio.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ = "IAppBundleWeb" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF} SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{64A19E70-BCFF-4808-A320-774FD11571E5}\ = "IBrowserHttpRequest2" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg open-pdf-studio.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ = "IAppWeb" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\MACHINE\Software\Classes\.pdf PDFToolSetup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\OpenPDFStudio.pdf\shell\open\command\ = "\"C:\\Program Files\\Open PDF Studio\\open-pdf-studio.exe\" \"%1\"" PDFToolSetup.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{62A51DF2-CCB8-4DD9-9069-34B8461617FC}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{CEF9DF20-AE5B-4A54-B479-9C2AFC1C2683} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\NumMethods\ = "43" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\.mhtml\OpenWithProgids\WaveBrwsHTM.GDNGUWMPMH2LE2S4POF4XHQ4PE setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\open-pdf-studio.exe\DefaultIcon\ = "C:\\Program Files\\Open PDF Studio\\open-pdf-studio.exe,0" PDFToolSetup.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{894ADE70-1E5F-4520-A281-CE3BF0309CE6}\NumMethods\ = "11" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA} SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\.xht\OpenWithProgids setup.exe Set value (int) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "1" open-pdf-studio.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\ComDlg open-pdf-studio.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{0D311A22-BD24-4C7A-8FC1-117F8D62A781}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\CLSID\{F87D77DF-DEF2-4294-9F4B-A92E5A6725DE}\InprocServer32\ = "C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.157.0\\psuser_64.dll" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\ = "ICoCreateAsyncStatus" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{E44B162B-4287-40B0-8E7A-6E251D80B3DF}\ = "IAppWeb" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{CFDE680E-8700-4808-BAAF-8B1F50F2CC87}\NumMethods\ = "12" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32\ThreadingModel = "Both" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{C5E89508-3927-4EF5-A3B3-C479F0D4E36F}\ProxyStubClsid32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WavesorSWUpdater.Update3COMClassUser\ = "Update3COMClass" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\CLSID\{9E0CE9B5-C498-40A8-B7F2-B89AF1C56FFF}\VersionIndependentProgID\ = "WavesorSWUpdater.Update3COMClassUser" SWUpdater.exe Key deleted \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\CLSID\{F6994161-37C3-47C9-BE83-C84C33A1CF2A}\InprocServer32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\wavebrowser\shell\open\command\ = "\"C:\\Users\\Admin\\Wavesor Software\\WaveBrowser\\wavebrowser.exe\" --single-argument %1" setup.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\InProcServer32 SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\NumMethods\ = "43" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{C0151E6C-8D24-485D-BEC8-B6C6C82E26E8}\ = "IPolicyStatus2" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{97518FC7-7CA2-4921-BC40-F4A07E221C1C}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{E44DDEE0-3097-499E-9DD5-7D5D5DCC401D}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\.svg\OpenWithProgids\WaveBrwsHTM.GDNGUWMPMH2LE2S4POF4XHQ4PE setup.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{44367D77-92C0-45E8-840D-0C098E650CE8}\NumMethods\ = "13" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{D3C865DD-E36B-432E-9E47-554925B86737}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{50363C3E-2FB2-4EC0-A827-CD3314F526C5}\NumMethods\ = "10" SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\NumMethods SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{E4E4854F-9D7B-4120-A207-CF52C875F08E}\ProxyStubClsid32 SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{E053F7BD-D525-49F4-9ADE-5D7E6FCEE775} SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\CLSID\{1BE9D40C-2307-4213-830E-7E3CE9EDF0C2}\LocalServer32\ = "\"C:\\Users\\Admin\\Wavesor Software\\SWUpdater\\1.3.157.0\\SWUpdaterOnDemand.exe\"" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{6130C56B-9B2C-4D5D-8160-C7A583B5DC3B}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{DDF98EF0-2728-4A8D-8B0F-32627DC56437}\ = "ICurrentState" SWUpdater.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{068FAC78-4F23-4F74-99A0-F7C4797D5ECA}\ = "IApp" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WaveBrwsHTM.GDNGUWMPMH2LE2S4POF4XHQ4PE\Application\ApplicationCompany = "Wavesor Software" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications PDFToolSetup.exe Set value (int) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616193" open-pdf-studio.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\CLSID\{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}\ = "PSFactoryBuffer" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{7DFF302B-EA41-49F8-97B1-9413CEF98C68}\ = "IGoogleUpdate3" SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{2C53B9D4-A718-4972-B28E-2E7AF1055602}\NumMethods\ = "10" SWUpdaterComRegisterShell64.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\WOW6432Node\Interface\{92333BDA-3022-4A7F-8858-081260EA85DE}\ProxyStubClsid32 SWUpdater.exe Key created \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface SWUpdaterComRegisterShell64.exe Set value (str) \REGISTRY\USER\S-1-5-21-4095433250-3121633380-635025574-1000_Classes\Interface\{B2083DCC-1D29-45E6-8386-BEE1488D11AA}\ProxyStubClsid32\ = "{D7EC6DDA-90E9-44BA-863B-6C3500BB5BDF}" SWUpdaterComRegisterShell64.exe - Modifies registry key 1 TTPs 1 IoCs
pid Process 7412 reg.exe - Modifies system certificate store 2 TTPs 5 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2 wavebrowser.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 wavebrowser.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 wavebrowser.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 wavebrowser.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F40042E2E5F7E8EF8189FED15519AECE42C3BFA2\Blob = 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 wavebrowser.exe - Suspicious behavior: EnumeratesProcesses 34 IoCs
pid Process 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4636 chrome.exe 4636 chrome.exe 812 SWUpdater.exe 812 SWUpdater.exe 2500 setup.exe 2500 setup.exe 2500 setup.exe 2500 setup.exe 2500 setup.exe 2500 setup.exe 812 SWUpdater.exe 812 SWUpdater.exe 812 SWUpdater.exe 812 SWUpdater.exe 4120 wavebrowser.exe 4120 wavebrowser.exe 2744 PDFToolSetup.exe 2744 PDFToolSetup.exe 6260 powershell.exe 6260 powershell.exe 6260 powershell.exe 6900 powershell.exe 6900 powershell.exe 6900 powershell.exe 8060 powershell.exe 8060 powershell.exe 8060 powershell.exe 7180 powershell.exe 7180 powershell.exe 7180 powershell.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4448 open-pdf-studio.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
pid Process 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4772 chrome.exe 4772 chrome.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4820 msedgewebview2.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe Token: SeShutdownPrivilege 4772 chrome.exe Token: SeCreatePagefilePrivilege 4772 chrome.exe - Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 2664 setup.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe - Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4772 chrome.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe 4132 wavebrowser.exe - Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2744 PDFToolSetup.exe 4448 open-pdf-studio.exe 4448 open-pdf-studio.exe 4448 open-pdf-studio.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4772 wrote to memory of 5368 4772 chrome.exe 83 PID 4772 wrote to memory of 4024 4772 chrome.exe 84 PID 4772 wrote to memory of 3472 4772 chrome.exe 85 PID 4772 wrote to memory of 3472 4772 chrome.exe 85 PID 4772 wrote to memory of 2280 4772 chrome.exe 87 PID 4772 wrote to memory of 2280 4772 chrome.exe 87 PID 4772 wrote to memory of 3604 4772 chrome.exe 88 PID 4772 wrote to memory of 3604 4772 chrome.exe 88 PID 4772 wrote to memory of 2792 4772 chrome.exe 89 PID 4772 wrote to memory of 2792 4772 chrome.exe 89 PID 4772 wrote to memory of 1496 4772 chrome.exe 90 PID 4772 wrote to memory of 1496 4772 chrome.exe 90 PID 4772 wrote to memory of 5396 4772 chrome.exe 92 PID 4772 wrote to memory of 5396 4772 chrome.exe 92 PID 4772 wrote to memory of 3836 4772 chrome.exe 93 PID 4772 wrote to memory of 3836 4772 chrome.exe 93 PID 4772 wrote to memory of 4872 4772 chrome.exe 96 PID 4772 wrote to memory of 4872 4772 chrome.exe 96 PID 4772 wrote to memory of 3796 4772 chrome.exe 97 PID 4772 wrote to memory of 2632 4772 chrome.exe 104 PID 4772 wrote to memory of 2632 4772 chrome.exe 104 PID 4772 wrote to memory of 4220 4772 chrome.exe 106 PID 4772 wrote to memory of 3664 4772 chrome.exe 107 PID 4772 wrote to memory of 3548 4772 chrome.exe 108 PID 4772 wrote to memory of 3860 4772 chrome.exe 109 PID 4772 wrote to memory of 3860 4772 chrome.exe 109 PID 4772 wrote to memory of 4104 4772 chrome.exe 110 PID 4772 wrote to memory of 4104 4772 chrome.exe 110 PID 4772 wrote to memory of 5360 4772 chrome.exe 111 PID 4772 wrote to memory of 5360 4772 chrome.exe 111 PID 4772 wrote to memory of 2432 4772 chrome.exe 112 PID 4772 wrote to memory of 2432 4772 chrome.exe 112 PID 4772 wrote to memory of 6124 4772 chrome.exe 113 PID 4772 wrote to memory of 6124 4772 chrome.exe 113 PID 4772 wrote to memory of 4328 4772 chrome.exe 114 PID 4772 wrote to memory of 4328 4772 chrome.exe 114 PID 4772 wrote to memory of 4636 4772 chrome.exe 115 PID 4772 wrote to memory of 4836 4772 chrome.exe 116 PID 4772 wrote to memory of 464 4772 chrome.exe 117 PID 4772 wrote to memory of 464 4772 chrome.exe 117 PID 4772 wrote to memory of 5736 4772 chrome.exe 119 PID 4772 wrote to memory of 476 4772 chrome.exe 120 PID 476 wrote to memory of 4984 476 Wave Browser - 2026-11-04T224042.817.exe 122 PID 4984 wrote to memory of 812 4984 SWUpdaterSetup.exe 123 PID 812 wrote to memory of 2632 812 SWUpdater.exe 124 PID 2632 wrote to memory of 1052 2632 SWUpdater.exe 127 PID 2632 wrote to memory of 1708 2632 SWUpdater.exe 128 PID 2632 wrote to memory of 4928 2632 SWUpdater.exe 129 PID 812 wrote to memory of 600 812 SWUpdater.exe 132 PID 5420 wrote to memory of 5476 5420 SWUpdaterCore.exe 133 PID 812 wrote to memory of 4492 812 SWUpdater.exe 134 PID 5476 wrote to memory of 1984 5476 SWUpdater.exe 135 PID 4772 wrote to memory of 1508 4772 chrome.exe 138 PID 4772 wrote to memory of 1508 4772 chrome.exe 138 PID 3912 wrote to memory of 2800 3912 SWUpdater.exe 139 PID 2800 wrote to memory of 2500 2800 WaveInstaller-v1.142.1.0.exe 140 PID 2500 wrote to memory of 2636 2500 setup.exe 141 PID 2500 wrote to memory of 2664 2500 setup.exe 142 PID 2664 wrote to memory of 1712 2664 setup.exe 143 PID 2500 wrote to memory of 568 2500 setup.exe 145 PID 2500 wrote to memory of 4132 2500 setup.exe 146 PID 568 wrote to memory of 2784 568 chrome.exe 147 PID 4772 wrote to memory of 3376 4772 chrome.exe 148 PID 4772 wrote to memory of 3376 4772 chrome.exe 148 - Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
- Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
- Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://sightwords.com/1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4772 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffd6800c728,0x7ffd6800c734,0x7ffd6800c7402⤵PID:5368
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,8982060012973687718,9771050265923004752,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2124 /prefetch:32⤵
- Downloads MZ/PE file
- System Time Discovery
PID:4024
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1768,i,10676239163926484559,13927824986766390919,262144 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1884 /prefetch:22⤵PID:3472
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,8446430268454790266,2279229334778269707,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2592 /prefetch:82⤵PID:2280
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3012,i,13890180857887713222,2252502600386362416,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3040 /prefetch:12⤵PID:3604
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3024,i,10538891347559068888,12197948231290210180,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3064 /prefetch:12⤵PID:2792
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4252,i,861641028033604794,7765851158020158531,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4276 /prefetch:22⤵PID:1496
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,1925199508014593751,8618041982444819926,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4708 /prefetch:12⤵PID:5396
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3300,i,13684457993536341845,13050788301500808173,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3260 /prefetch:12⤵PID:3836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4816,i,6012702062483299280,8620933633453029637,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3324 /prefetch:12⤵PID:4872
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,15478108295896383018,3092317160288889069,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5084 /prefetch:82⤵PID:3796
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3124,i,17026174435459343622,3671768197078153971,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3416 /prefetch:12⤵PID:2632
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5984,i,10132493475358630402,14804418239938349676,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5572 /prefetch:82⤵PID:4220
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5960,i,8004754324609521547,16449812723779134422,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6248 /prefetch:82⤵PID:3664
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,2858948217381204492,9620198967790176629,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5932 /prefetch:82⤵PID:3548
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4252,i,10952367748538778200,13553003370772910714,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4388 /prefetch:12⤵PID:3860
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=1172,i,4785199068732200855,10229688092108026510,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4864 /prefetch:12⤵PID:4104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4340,i,11739526339993473210,6908163299890698932,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5952 /prefetch:12⤵PID:5360
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4344,i,2278317595532104842,7137700906616552100,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5996 /prefetch:12⤵PID:2432
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=500,i,12797701077091885891,12310255433117498514,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3064 /prefetch:12⤵PID:6124
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6100,i,3161065827383372815,11431403653306960134,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3952 /prefetch:12⤵PID:4328
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6532,i,4606875913029017667,16435996500469734358,262144 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5996 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4636
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6400,i,15336109035931908722,2368167772323169237,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6528 /prefetch:82⤵PID:4836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=1108,i,6023837135701249778,6296483302116593285,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5996 /prefetch:82⤵PID:464
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6772,i,14144731580028623895,11324725933450632855,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6736 /prefetch:82⤵PID:5736
-
-
C:\Users\Admin\Downloads\Wave Browser - 2026-11-04T224042.817.exe"C:\Users\Admin\Downloads\Wave Browser - 2026-11-04T224042.817.exe"2⤵
- Checks computer location settings
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of WriteProcessMemory
PID:476 -
C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe"C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4984 -
C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe"C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:812 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2632 -
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:1052
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:1708
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user6⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:4928
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDQuNDUyOSIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0Y2RjYwQUNFLTcxQUQtNDYxMC04MEQ0LTkyNTM3MjlGQjRCN30iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4xNTcuMCIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBpbnN0YWxsX3RpbWVfbXM9IjExNjMiLz48L2FwcD48L3JlcXVlc3Q-5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:600
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{75C8BA14-6AF9-45B6-87B7-8AFF93EC667D}"5⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:4492
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,14402811543347243838,3882984808288237809,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4356 /prefetch:82⤵PID:1508
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7072,i,1520100530417127544,14583352145384211117,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4592 /prefetch:12⤵PID:3376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7228,i,16136449081822984800,599268164308722207,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7196 /prefetch:12⤵PID:7048
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6948,i,4339865417086668493,9585071475220200461,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7364 /prefetch:12⤵PID:6448
-
-
C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"1⤵PID:2360
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3676
-
C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"1⤵
- Checks computer location settings
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5420 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c2⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5476 -
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:1984
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
PID:3460
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3912 -
C:\Users\Admin\Wavesor Software\SWUpdater\Install\{8932E352-EF84-4FDD-939A-0223602517D0}\WaveInstaller-v1.142.1.0.exe"C:\Users\Admin\Wavesor Software\SWUpdater\Install\{8932E352-EF84-4FDD-939A-0223602517D0}\WaveInstaller-v1.142.1.0.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui7329.tmp"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2800 -
C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\wavebrowser.packed.7z" --wid=090g6qpa --installerdata="C:\Users\Admin\AppData\Local\Temp\gui7329.tmp"3⤵
- Executes dropped EXE
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2500 -
C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.142.1.0 --attachment=C:\Windows\SystemTemp\wavebrowser_installer.log --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff66a6765c0,0x7ff66a6765cc,0x7ff66a6765d84⤵
- Executes dropped EXE
PID:2636
-
-
C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe"C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui7329.tmp" --create-shortcuts=0 --install-level=04⤵
- Executes dropped EXE
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2664 -
C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exeC:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.142.1.0 --attachment=C:\Windows\SystemTemp\wavebrowser_installer.log --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff66a6765c0,0x7ff66a6765cc,0x7ff66a6765d85⤵
- Executes dropped EXE
PID:1712
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" https://gowavebrowser.co/thank-you?tid=090g6qpa&src=d-cp21976981197-lp0-obgc-wav-igVAvjokFCUKFTExrktgKwg-ab51-w64-brwsr&cid=21976981197&iid=wav&uid=22627eee-0250-48e8-96ab-bf2dd4d972634⤵
- Suspicious use of WriteProcessMemory
PID:568 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffd6800c728,0x7ffd6800c734,0x7ffd6800c7405⤵PID:2784
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --cd-upload --from-installer4⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Enumerates system info in registry
- Modifies system certificate store
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4132 -
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=iid=wav --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=src=d-cp21976981197-lp0-obgc-wav-igVAvjokFCUKFTExrktgKwg-ab51-w64-brwsr --annotation=uc=20261104 --annotation=uid=22627eee-0250-48e8-96ab-bf2dd4d97263 --annotation=ver=1.142.1.0 --initial-client-data=0x144,0x148,0x14c,0x108,0x150,0x7ffd409ad758,0x7ffd409ad764,0x7ffd409ad7705⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2944
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,18086524988898211439,6061674177290077561,262144 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2060 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5264
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2348,i,7233927934390165673,3053445487193653663,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2320 /prefetch:35⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Time Discovery
PID:1856
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,5539036552179758558,1215558909890888715,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2752 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:6048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3632,i,3313573973230688690,16448293703960381553,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3624 /prefetch:85⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:4620
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3792,i,653884637494472540,12874286100485781378,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3808 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:4300
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,1232917744653306319,2583863863860326855,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4332 /prefetch:25⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:3860
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4372,i,2013881640740344567,8592091834793623654,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4488 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:832
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3756,i,710588001813861186,6546074360454517474,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4648 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5952
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4632,i,2711310803328986371,8186785295914074813,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4692 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5848
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4676,i,15316565916161019818,9456810540457734249,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4752 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4508
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5080,i,13035532153306828145,15322420867999720868,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5112 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:4588
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5084,i,1636977882485641380,10842879070862990506,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5144 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:960
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,7308682695392559703,818835297843928755,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5580 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1576
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,13113389137730437876,14082950771773462629,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5764 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5564
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5772,i,17658266622941666509,2763043386386756999,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5756 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:5104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5680,i,16678495037188737905,9230290798521829405,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5708 /prefetch:15⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
PID:3928
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,8799288917595007762,833753487763082761,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=4872 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,3488572673309662041,11329323409900343889,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6168 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3132
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6436,i,358808529142946668,2175284583158919728,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6452 /prefetch:85⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3428
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6596,i,2192056072856246009,10962255280273412149,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6600 /prefetch:85⤵
- Executes dropped EXE
PID:3460
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6752,i,1084530633840398346,1216119795755740378,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6448 /prefetch:85⤵
- Executes dropped EXE
PID:1036
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7084,i,14340535220730558708,1001496176149881816,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7088 /prefetch:85⤵
- Executes dropped EXE
PID:6080
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6944,i,15014320448972630600,15901739797024521680,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7264 /prefetch:85⤵
- Executes dropped EXE
PID:1484
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7300,i,3105217423627833118,15656888235955131714,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7324 /prefetch:85⤵
- Executes dropped EXE
PID:4104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7124,i,10986719972316135681,3537443382905321348,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7592 /prefetch:85⤵
- Executes dropped EXE
PID:6140
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7728,i,17554634477563858307,12061112947312059248,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7744 /prefetch:85⤵
- Executes dropped EXE
PID:2060
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7892,i,12648908805215783688,14793674275985884248,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7904 /prefetch:85⤵
- Executes dropped EXE
PID:5044
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7924,i,15004265723540126228,7549002351180064099,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7940 /prefetch:85⤵
- Executes dropped EXE
PID:5552
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7256,i,8106766101703344912,13736835968757069875,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8068 /prefetch:85⤵
- Executes dropped EXE
PID:5048
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7856,i,15106543116584893698,956186353381740954,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7840 /prefetch:85⤵
- Executes dropped EXE
PID:3936
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8004,i,3678022362706446250,11777589149058205941,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8044 /prefetch:85⤵
- Executes dropped EXE
- Reads the TCP/IP host and domain name from the registry
PID:4208
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6916,i,10388714317097905397,6305563423896859172,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8144 /prefetch:85⤵
- Executes dropped EXE
PID:2296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7744,i,10548381220478346649,11650973457121662682,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7748 /prefetch:85⤵
- Executes dropped EXE
PID:5280
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7868,i,7618529001289460232,8513383489298480715,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=6788 /prefetch:85⤵
- Executes dropped EXE
PID:648
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7736,i,8869001283059884394,218925485477124793,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=6868 /prefetch:85⤵
- Executes dropped EXE
PID:1484
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7768,i,4379755859982543088,9633680766248989872,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=6880 /prefetch:85⤵
- Executes dropped EXE
PID:4404
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7860,i,15932846372147805304,6675506050609048062,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=6900 /prefetch:85⤵
- Executes dropped EXE
PID:2116
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7728,i,10368397617745381064,4395466363278661925,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=6784 /prefetch:85⤵
- Executes dropped EXE
PID:2648
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7764,i,8991067585873785280,12499460580533702095,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=6924 /prefetch:85⤵
- Executes dropped EXE
PID:4104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7816,i,6558384369942296507,87137445120599898,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=6844 /prefetch:85⤵
- Executes dropped EXE
PID:3936
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7596,i,17813502123533120298,7179877663757803908,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=7280 /prefetch:85⤵
- Executes dropped EXE
PID:5044
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7584,i,14357896377739639611,11282052398868809303,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=7408 /prefetch:85⤵
- Executes dropped EXE
PID:3332
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,18384029954951866017,15488134377398433610,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=5820 /prefetch:85⤵PID:4464
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8168,i,12383368714040583380,7717216785294198775,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8284 /prefetch:85⤵PID:6232
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8440,i,17794432615350328136,10973667477135862668,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5892 /prefetch:85⤵PID:6704
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6704,i,13117866541598061176,16305231632190848478,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=6716 /prefetch:85⤵PID:6720
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8576,i,17479773440968231684,8556669692050587157,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8588 /prefetch:85⤵PID:6372
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6652,i,262109523444318039,15824962073773626403,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=6664 /prefetch:85⤵PID:6824
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7152,i,2063705294334235366,186001540231423658,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7656 /prefetch:85⤵PID:6844
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7632,i,16472870244055259052,8978214136089870548,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7044 /prefetch:85⤵PID:740
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7360,i,15594192354709713396,7759304122754620821,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=6760 /prefetch:85⤵PID:7024
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6976,i,4094003099823944468,14811806775759882195,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=6788 /prefetch:85⤵PID:6252
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7392,i,8942884177242146497,11216107678500667500,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=6368 /prefetch:25⤵
- Checks computer location settings
PID:6352
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7424,i,2122288784054881929,1536936697064533003,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=7580 /prefetch:15⤵
- Checks computer location settings
PID:6648
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=7348,i,5473985757895068785,291032275818663197,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=6732 /prefetch:25⤵
- Checks computer location settings
PID:6512
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7824,i,2749852141406743553,6525429183982546150,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7832 /prefetch:15⤵
- Checks computer location settings
PID:6916
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7452,i,18084307300926562473,4201442532224608779,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=6216 /prefetch:25⤵
- Checks computer location settings
PID:6644
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7976,i,11509766569775602005,72427017886263096,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8116 /prefetch:85⤵PID:6652
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8768,i,6253781259968769387,17968763515272209775,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8764 /prefetch:15⤵
- Checks computer location settings
PID:6712
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8984,i,14778532951552819182,7205313797460193110,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8988 /prefetch:15⤵
- Checks computer location settings
PID:2296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9200,i,6870142444868238374,3163684045915792175,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=9212 /prefetch:25⤵
- Checks computer location settings
PID:380
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9248,i,4762797212369394000,11145610462005803378,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9256 /prefetch:25⤵
- Checks computer location settings
PID:6240
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=9540,i,15155303826205996216,17304358227537216301,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=9544 /prefetch:15⤵
- Checks computer location settings
PID:6436
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=9780,i,17822139048166664404,5075224405370657248,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=9776 /prefetch:25⤵
- Checks computer location settings
PID:6936
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9976,i,9660489481664688478,18303013743804831602,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=9980 /prefetch:25⤵
- Checks computer location settings
PID:1324
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=10148,i,13703913020886314006,6251981950826525628,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10144 /prefetch:25⤵
- Checks computer location settings
PID:6180
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10296,i,18279073993049925673,12528337520283963317,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10356 /prefetch:25⤵
- Checks computer location settings
PID:6336
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=10552,i,11343711691853854579,7684800735336611429,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=10556 /prefetch:25⤵
- Checks computer location settings
PID:6880
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=10852,i,8375789171486107294,17334281945896626635,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=10612 /prefetch:15⤵
- Checks computer location settings
PID:6724
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8080,i,11200379530768919895,338953820040892129,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=6888 /prefetch:85⤵PID:6708
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=6148,i,314767159807948420,5360624587000462494,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=7720 /prefetch:15⤵
- Checks computer location settings
PID:6380
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9300,i,13116804427172445620,5850952630914636741,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9512 /prefetch:85⤵PID:6392
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8084,i,9247702677067190811,16770292233758648228,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=10744 /prefetch:25⤵
- Checks computer location settings
PID:4828
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7888,i,12507920526373925944,3576972733790615003,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=6516 /prefetch:25⤵
- Checks computer location settings
PID:1920
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=10952,i,17498719582019699293,1493784803845984504,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=10800 /prefetch:15⤵
- Checks computer location settings
PID:4492
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10472,i,3867696412227258943,13931633151949415691,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=10476 /prefetch:25⤵
- Checks computer location settings
PID:1320
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=3748,i,779418891355014069,4799908388845843947,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=7396 /prefetch:25⤵
- Checks computer location settings
PID:7164
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=10072,i,5817101072376251511,6621094091058973969,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=10716 /prefetch:85⤵PID:2196
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=9456,i,705464227424993535,12655965207760086638,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=3824 /prefetch:25⤵
- Checks computer location settings
PID:2376
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=11212,i,3219106179360497416,15625526994647067167,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=11220 /prefetch:85⤵PID:5128
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11240,i,3524423631526362423,16593795105415633820,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=11012 /prefetch:15⤵
- Checks computer location settings
PID:6596
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=10180,i,6159148718206058145,4082245906772658143,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=11136 /prefetch:25⤵
- Checks computer location settings
PID:3488
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10992,i,15977924665033288463,10871861583267364427,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=11116 /prefetch:15⤵
- Checks computer location settings
PID:3820
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11236,i,17151176312230000951,15078132096378466009,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=11172 /prefetch:15⤵
- Checks computer location settings
PID:5204
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,5001441700434165366,14162031243808835940,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=6868 /prefetch:85⤵PID:5064
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8332,i,6520709196180427963,15185674499946176457,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=8388 /prefetch:85⤵PID:4280
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=7128,i,16469684654738453342,4137155087785951474,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=8232 /prefetch:15⤵
- Checks computer location settings
PID:2380
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10540,i,12688925142626738702,10165915804189802585,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=8332 /prefetch:85⤵PID:1160
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8992,i,18254891433489061154,12597890895636822023,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=8604 /prefetch:85⤵PID:6152
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=11148,i,11515294938251231105,12550733104189837152,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=10592 /prefetch:15⤵
- Checks computer location settings
PID:5660
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=6956,i,18144735744482327489,11225569378783495317,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=5728 /prefetch:15⤵
- Checks computer location settings
PID:6180
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=8624,i,15563737398921229227,6189541464776570272,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=3896 /prefetch:15⤵
- Checks computer location settings
PID:5328
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=7308,i,4061350298673028867,7524235421588036184,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=10964 /prefetch:25⤵
- Checks computer location settings
PID:7064
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=272,i,9796992219738046924,7824534042456259995,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=10632 /prefetch:85⤵PID:3032
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=7120,i,9573771885025619420,2114242922155258399,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=10132 /prefetch:85⤵PID:6416
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=7604,i,4083772997057447869,12833510393391276423,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=8208 /prefetch:85⤵PID:6480
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6508,i,12621655544509705323,8856772404625856135,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=6500 /prefetch:85⤵PID:1484
-
-
C:\Users\Admin\Downloads\PDFToolSetup.exe"C:\Users\Admin\Downloads\PDFToolSetup.exe"5⤵
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:2744 -
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell -ExecutionPolicy Bypass -NoProfile -Command "Remove-Printer -Name 'Open PDF Studio' -ErrorAction SilentlyContinue"6⤵
- Hide Artifacts: Ignore Process Interrupts
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:6260
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exepowershell -ExecutionPolicy Bypass -NoProfile -Command "Add-Printer -Name 'Open PDF Studio' -DriverName 'Microsoft Print to PDF' -PortName 'PORTPROMPT:'"6⤵
- Command and Scripting Interpreter: PowerShell
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:6900
-
-
C:\Program Files\Open PDF Studio\open-pdf-studio.exe"C:\Program Files\Open PDF Studio\open-pdf-studio.exe"6⤵
- Checks whether UAC is enabled
- Drops file in Program Files directory
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:4448 -
C:\Program Files\Open PDF Studio\pdfium-worker.exe"C:\Program Files\Open PDF Studio\pdfium-worker.exe" 0 44487⤵PID:7080
-
-
C:\Program Files\Open PDF Studio\pdfium-worker.exe"C:\Program Files\Open PDF Studio\pdfium-worker.exe" 1 44487⤵PID:1060
-
-
C:\Program Files\Open PDF Studio\pdfium-worker.exe"C:\Program Files\Open PDF Studio\pdfium-worker.exe" 2 44487⤵PID:7040
-
-
C:\Program Files\Open PDF Studio\pdfium-worker.exe"C:\Program Files\Open PDF Studio\pdfium-worker.exe" 3 44487⤵PID:6908
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4448.6884.51789046770365579327⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:4820 -
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd55fab078,0x7ffd55fab084,0x7ffd55fab0908⤵PID:4320
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1776,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:28⤵PID:4172
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1944,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:38⤵PID:5196
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2348,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:88⤵PID:1152
-
-
C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe"C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3480,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:18⤵PID:7428
-
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell" -NoProfile -NonInteractive -Command "(Get-Printer -Name 'Open PDF Printer' -ErrorAction SilentlyContinue) -or (Get-Printer -Name 'Open PDF Studio' -ErrorAction SilentlyContinue)"7⤵
- Hide Artifacts: Ignore Process Interrupts
- Suspicious behavior: EnumeratesProcesses
PID:8060
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"powershell" -NoProfile -NonInteractive -Command "Get-CimInstance -ClassName Win32_Printer | Select-Object Name, DriverName, Default, PrinterStatus | ConvertTo-Json -Compress"7⤵
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
PID:7180
-
-
C:\Windows\system32\reg.exe"reg" query HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice /v ProgId7⤵
- Modifies registry key
PID:7412
-
-
C:\Program Files\Open PDF Studio\pdfium-worker.exe"C:\Program Files\Open PDF Studio\pdfium-worker.exe" 3 44487⤵PID:5800
-
-
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=10040,i,10676951258248010116,11831626680173684160,262144 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=9452 /prefetch:85⤵
- Suspicious behavior: EnumeratesProcesses
PID:4120
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10396,i,14565688525725509026,14563966836775458921,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=10464 /prefetch:85⤵PID:2296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3220,i,9337497423420115278,1008713470427609365,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=11140 /prefetch:85⤵PID:4824
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=10004,i,16700368374039645752,14846309307815018518,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=10000 /prefetch:25⤵
- Checks computer location settings
PID:2296
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=9744,i,3365582315247528735,16738907829133158484,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=10204 /prefetch:25⤵
- Checks computer location settings
PID:6216
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=6376,i,12973981141123541592,13361491720141064772,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709083764223790 --mojo-platform-channel-handle=10396 /prefetch:25⤵
- Checks computer location settings
PID:6456
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=3824,i,17320398363440160202,15365990636129803218,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709084701265639 --mojo-platform-channel-handle=6356 /prefetch:25⤵
- Checks computer location settings
PID:7656
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,16463379785886486571,4659137612025141098,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709085638307488 --mojo-platform-channel-handle=9012 /prefetch:85⤵PID:7408
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3796,i,15187153097455637729,7332264185422576693,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709086575349337 --mojo-platform-channel-handle=11108 /prefetch:85⤵PID:8104
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10824,i,513939172584489477,5460153789184143094,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709087512391186 --mojo-platform-channel-handle=9912 /prefetch:85⤵PID:8084
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=6392,i,14662950580312286081,11628391700828432238,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709088449433035 --mojo-platform-channel-handle=9460 /prefetch:25⤵
- Checks computer location settings
PID:8148
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=10108,i,14803466114336743786,7565147464736812866,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709090323516733 --mojo-platform-channel-handle=11244 /prefetch:15⤵
- Checks computer location settings
PID:7896
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=10424,i,7179027675396126321,9169547861518763693,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709089386474884 --mojo-platform-channel-handle=3220 /prefetch:15⤵
- Checks computer location settings
PID:7900
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=10588,i,13681767044438369417,7015671457674814722,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709091260558582 --mojo-platform-channel-handle=6548 /prefetch:25⤵
- Checks computer location settings
PID:7928
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=10000,i,14702394660096176301,2043643832148104229,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709092197600431 --mojo-platform-channel-handle=6168 /prefetch:25⤵
- Checks computer location settings
PID:7892
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=6504,i,12891516910079693207,4888315721706607049,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709093134642280 --mojo-platform-channel-handle=9888 /prefetch:25⤵
- Checks computer location settings
PID:8068
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=3816,i,3781899265101812698,10432911182528455939,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709094071684129 --mojo-platform-channel-handle=10832 /prefetch:25⤵
- Checks computer location settings
PID:7460
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,11193631993646015435,8937858009326495535,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709095008725978 --mojo-platform-channel-handle=7936 /prefetch:85⤵PID:6636
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=7600,i,8231879423978810701,14353155030731468014,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709095945767827 --mojo-platform-channel-handle=9932 /prefetch:85⤵PID:7848
-
-
C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe"C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=3912,i,9902447558128243534,16695656790928038379,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709096882809676 --mojo-platform-channel-handle=7092 /prefetch:85⤵PID:7868
-
-
-
-
-
C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTU3LjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xNTcuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9Ins3NUM4QkExNC02QUY5LTQ1QjYtODdCNy04QUZGOTNFQzY2N0R9IiB1c2VyaWQ9InsyMjYyN2VlZS0wMjUwLTQ4ZTgtOTZhYi1iZjJkZDRkOTcyNjN9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0iezk0NjNENjZELTlDQjgtNEFEQS05QTZBLTUzM0RGOTRCNTExOH0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iMTYiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDQuNDUyOSIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0VCMTQ5QUQyLUNFNEUtNEY1MS1CN0ZDLUExNDlGQUE0Q0NBRn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMTQyLjEuMCIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9Ijg0MCIgZG93bmxvYWRfdGltZV9tcz0iMTU3NDAiIGRvd25sb2FkZWQ9IjExMjY3MDg3MiIgdG90YWw9IjExMjY3MDg3MiIgaW5zdGFsbF90aW1lX21zPSIxMzk2MCIvPjwvYXBwPjwvcmVxdWVzdD42⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:6036
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:5228
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Modify Registry
3Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Browser Information Discovery
1Network Share Discovery
1Query Registry
5System Information Discovery
5System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe
- Size 108KB
- SHA256 676edd3695c74aac087de2e11b05f1dc2673830065d8fbc1fcfcfb5a15919fb0
- MD5 1c2ce270379dd8ccfb0d44d44aa9cc97
- SHA1 3e28ba314739e3fe922d6590e8fc01079414a022
- SHA512 a2c7127c419ba4f92f8087079c14b2aabb5c7dd2d90c19d05e543c53f7327b93cb0303e5e252e21294ac085e7177f3a6577b652f69b03b434d127273c57d67f5
- SSDEEP 3072:fPY5KTfL9X8YrWqY7/pTXb77Kxl4uZiT9XZwoDfrYeR48qy6peTUnZuh6o7YmzU:If7KmbkGVkT7wuT76B+jX
- TLSH T191B34B03B5D184B5E4B2593104A9997049BFBD714E509FAF33C41A7E0F316C1EE3AAAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterBroker.exe
- Size 97KB
- SHA256 76e5d19341e52ebd80fc13ad81d8bf0bccf8e599217d06058a21dd2b0d43e4fd
- MD5 47606b941a28db641524f6e57b5b5d71
- SHA1 c1df18832ed692acb488e50e66927cae7bbfe615
- SHA512 f66e893423222e0977861a202496a839a8b7b84d9b6ab03cdd06b1db398271d90b1df0c5ad9ad7cd0c4d0520a723b8ad274950274eddb68377c82dd296594a35
- SSDEEP 3072:A6YCLNYEz/lQe0mWfY3WCuch7HW7Dxm4ymB+P6StZc4:A6YaVZWCuchvmB+rtZZ
- TLSH T18AA36C1375D09471E4B24D3158E0E9709DBEFD610A60DEAB33C95A3D0F306D1EE26ABA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterComRegisterShell64.exe
- Size 190KB
- SHA256 49e8c3f605019149b8ede45676c269346ba2ec101608a63933bd090787b7b81c
- MD5 b44e7fda9c0af3628debe7b52a8808ab
- SHA1 863d2767f8a76497610b176635c61ec4953fac61
- SHA512 1ff3de0b9ea29d82352f6e1a9f68e73268d79e47086297632401c6954d2c7573fc19f6c229b221da9a15c66955181eb203ecc504d89c898fd8a2f190562dea65
- SSDEEP 3072:SjGte42tXRPBKaBGt3GWlLYiYmzG3woY466N4TZXgftB+PVK:SjGZ2XRpKaBUH5fohOXg1B+E
- TLSH T10E147C1672E910E9E1738134CC924A05FBB278720771CA7F13A4877ADF73290AD6BB65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterCore.exe
- Size 208KB
- SHA256 f3d4a8f1bd4070af6bb4460f4940c15b2670719d7563192669956f4f8d900c67
- MD5 5fec960cea05b1332a430baa1059f563
- SHA1 07385e7f21f21aebd7f3c73c5b09f3f84e6b09a8
- SHA512 0547d88279c5acea71186afd9f597bb7fa4b15f459452586b3667786b47f7675014cf39e21a887c1b0d376957aab213fbcb7ea8b94518a9a09e0f8576bee5244
- SSDEEP 6144:6F3ygScyDV9wcnoMB97uIJcMawazAOqvKa7x+5aPoe:E3ygScyDV9wcnf97uIJcnQK8x+kPoe
- TLSH T1B2247C1170E2C0B2E577153009E0AA71ADBDB9710A308ABF33D85B7E5F3568296297B7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterOnDemand.exe
- Size 97KB
- SHA256 3b231a2121c07b2153b4dfe3f402308b795904827960d8c390fe6192416125e7
- MD5 1e4158ce442458a839f004015c07f3f3
- SHA1 907e28d8743483f4e8740fce4e953ea9d772a6a7
- SHA512 b16a3c112f23a40511f1e3d1ad3c1c80298d76324823a124686e892e29c5d76db5fc9773076cd8edb54b4df6e452a236281bd9576ffc1f43fdb701206cfc6d54
- SSDEEP 3072:Q6wCLNYEz/lQe0mWfY3WCuchkHW7Dx6ymB+P69tZQq:Q6waVZWCuchzmB+0tZL
- TLSH T134A36C1375D09471E4B2093158E0E9709DBFFD610A60DEAB33C95A3E4F306D1EE269BA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psmachine.dll
- Size 259KB
- SHA256 ad2143218dcb5761c96f656e630560a291c53163b5a023ddebadfd14c44ac318
- MD5 f7c56f035476dca09588ed09b34c3b4d
- SHA1 af7d74fe61f321e67fa4c2655edacb9a2a2f6a80
- SHA512 689c281e519a4ea6abb606c445d141f24d7f3a41929cab8603512bb4a37ccd05dce37fbb80cd280243fcfdb944d47452b87f128c9540fe8926fa8fd19e693f62
- SSDEEP 6144:z+DwZ3yfi42mlVeBllPx1dbXijIuFIL8AOz6SKOBkQY5h2Q4:z+DwZ3yf2mlVeBllPx1dbLuFIL8VDKJO
- TLSH T139449D8176C1C876D57E1030086B97614BBDBE201EE0CAEF27D87E6D1E723819B25B67
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psmachine_64.dll
- Size 323KB
- SHA256 05c209ca2512b2b7edd70df56753ff2a137fad63c456f9d558e5b8cb89e07b05
- MD5 39e6105819f6d0aabfe827332ca975e1
- SHA1 b5d1b613f9ffbd05590dbf6e3173070ecae019eb
- SHA512 9c6380d85a4e8705a573d1b0289bd8a9c8b128a9f3596e488e6ff877c0bdd1f893e3ecedf56d0bf3c9cd25906bb0bc1abf388a604302011996d75cb3fbc89fca
- SSDEEP 6144:wgHXtLr5Bh12cITHjyXBNiohJ3dDFK4AUkQY:w0XpipaXBQoDKHX
- TLSH T1B2644A0AF3A454B5E876403DC8574A06D7F27C451AA1D3AF03A4775EAF3B3906B3AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psuser.dll
- Size 259KB
- SHA256 306f117f853405bb44e6e95430b6bb2eac87747afa1c65b0eb59097336a3b97a
- MD5 f4b98ef28349af12bde3128e7ae56de4
- SHA1 77021035114ca541ec69d229bdcb7c83b91334f6
- SHA512 5d0dd5cd5c63330ca6f251e49a73292e3b7f53cf44e60f3e0c1f63f07e1eacd0a4e6135e7b6ac680a9f7132ccdf5b3a9e46d2051180166333e6873f2a1bdf7df
- SSDEEP 6144:C+DwZ3yfi4kmlVeBllPx1dbXijIuFILOAOBcSKeBkQY5h2:C+DwZ3yfkmlVeBllPx1dbLuFILOfZKZE
- TLSH T1BF449D417AC1C876D57E1030086B97614BBD7E201EE1CAEF27D87E6D1E723819B26B63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psuser_64.dll
- Size 323KB
- SHA256 d7b61a7cd898e62e2d2a3377ad9d66dd9d5bb8d45e0475d6f871aaa17ed083e8
- MD5 de58491a8d99be29907a581458294ee1
- SHA1 3ce1e93c5c044fa2b821d51faed92ff1c7834a78
- SHA512 004d01d7647ce62e271a253edf761bcfe6dfd01186d631be8f504872ae855d8e7404aedbfe790a200a359e277cb040eb1275169b4a6c64e53ebe70342c16e842
- SSDEEP 6144:IgHXtLGhBh12cITHjyXB0iohZ3eCFKYbTXkQY:I0XwapaXB/oHKI0
- TLSH T1FD645A0AB3E454B5E876403DC8178A06DBF27C451AA1D3AF03A4775EAF3B3516B3AB50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\swupdater.dll
- Size 1.0MB
- SHA256 fb241530e3d716c753be0141376ab8974e812aa62facbfda251c67a60d7720a7
- MD5 0bb71bb256574d2424eab69f274851bb
- SHA1 dbf0a133295848655969b4d81e5d31ab9ff7f7f7
- SHA512 74540e290823660e72d1ecfe96e1f5b291a45003fad1cdddb88fe9bcf4193789622c30384e5e706a1b624c57b3345086503d12f85c8d921ab9f590600c30bc10
- SSDEEP 24576:oCvfc5YrHOvhHIc/kBxtjFLeJk8CLrysEU2S6SV7ICtHBCTvm/LNVwN:oYrHGf/kBxtjFzn4DSV7TtBCTe/LNSN
- TLSH T109358C3376D28031E9730634A9ACBF115EFFFA210A31C64F53985A5A6E72B80D53A357
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\swupdaterres_en.dll
- Size 42KB
- SHA256 be83143f61ca49317613663b6025c9df5b52482b454235b76c478817a6c611df
- MD5 a9366f6e9620fd934aaff7477c536b4b
- SHA1 5198f2a6777a113d70b2fe1aef4fcc0bee84b289
- SHA512 208c54fae7b653234458dd7e7701bfdda0c264781613885f7f79f793696827d1cc4f3baffaa5e288e6e86218cc660b6b57cb95e5b623040da90be74e5aaeec73
- SSDEEP 384:+28agyWk9RpIYi3tqfTBpXfy8RbmL4nNymGm/:x8agyW4+Yi3Mzf5AL2/
- TLSH T1201394B247E44918F7B73F3069B4592D4A777C81A9F0F35D228060399970701AABEF2E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\Open PDF Studio\open-pdf-studio.exe
- Size 35.5MB
- SHA256 f7693e1f5be94ad9fe3cc9020243956849fa6811fb054385e4c7b1e1d9f2b04e
- MD5 3b76c69e42313a101c1f222cd6404211
- SHA1 6ca355830f8e39774e17127587987d4f89b2c7db
- SHA512 14af13562d408214a889de640a3fa9d8d7e6325136e9505759e2902e885e7dcdb5d20a28789aa31be57d057fd9c1c9f2a0e4710df9c7b4273891dd9d6fd195ba
- SSDEEP 786432:J0OvXbeE23v1Txd0+dGxnTwf/Dq8eHRLqe:J0OvXbeE23v1Txd02Gxn02FHR
- TLSH T1D9874A61BA5B99A8D09AC470834B86635A7030DB0B35B9FF44C496783F7DBF46E38319
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\013a64c1-06e5-4dc3-b1e2-1da039fe559f.tmp
- Size 132KB
- SHA256 bf9b0ab4eed144a2a1cb8946fe7a79bae6ef5abeae36b699ae8b6ed22b1f6cd9
- MD5 d500c5a2f5de862e86d5021677ae77fe
- SHA1 f12db18aae20f5cef212a2b13ee277d8f8d42008
- SHA512 ee4d44f36e94bd0f5e369de8f755658f8a7eb93c97865b3451604b96183fb9f19cf118c14aaf9dd585e68454ad34d0199f6b7dffde290edc4078f6bcc0868e25
- SSDEEP 3072:AmoGIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:AZGPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T164D312617D05BCB8A9EEDA21A1501E16DAB8D80F993D3BE55CDE3F8805936DCC304C23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\04cd8299-f175-4125-8475-9941e8dc6ff7.tmp
- Size 132KB
- SHA256 f48551c75e2420d3aca7203c718f0de54615f0110795d58e1bb761a9f010b504
- MD5 01fdcaf585590994ea4e36d2d550b4c4
- SHA1 7cd5c8492eb26b92942bdf875dec72c46ebd386d
- SHA512 9325998b1bbe20edf4d6fe828376ebe298cf716f24eaec3b55b5b7cb06c9b79dfbdf755c1e27ff0160f0a0bdf6e4dfa5af5a87ec9ff30e3a431b1e649eed9645
- SSDEEP 3072:cmbGIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:caGPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T12ED312617D457CB4A9EEDA21A1401E16DAB8D80F993D3BE55CDE3F880593ADDC304C63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0f1e76af-83a2-46e6-a15d-ec6ea55778e5.tmp
- Size 132KB
- SHA256 26123029f7263b3048e8a534cca940cb53c2ec8ec3723657aeaa68623e46b72c
- MD5 1752a3fb055c85f185449165bddaea95
- SHA1 d72ea1db570e7f3297e1632ca9acf9ed7344586d
- SHA512 1ee39c343b9fc43c7300b0f63f955619e1099f22ba2d7cfd75bde8c32998e0e58f3c399a9e6dc32f26cb56cbce3545d9b881ff85127a7c9d2249d51bd7f08c63
- SSDEEP 3072:AmbGIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:AaGPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T13CD312617D05BCB8A9EEDA21A1801E16DAB8D80F993D3BE55CDE3F8805936DCC304C23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\13b25f56-ff61-460a-8d8d-3026358058ba.tmp
- Size 132KB
- SHA256 c2b54bf7eb3a55cad9fe3fa5a609f148a08ae85ce54ee2025a57e55caae1ce90
- MD5 d30597229fceae864758de213a7b6313
- SHA1 d1f006143fe5f3435456d7d94216f8c8adbad83d
- SHA512 d342b00468a7b9654a231aec6d3d80be96bb6687766ef650ca89668ace04cb8ab69a275ac1d616d466134f60aa41ed8a24e143fbd8a98c423186ad6ed572009d
- SSDEEP 3072:Xm3IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:XiPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T114D312613D45BCB4A9EEDB21A1901A16DAB4D80F953D3BE65CDE3F8C05A36E9C304C23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2394e4ec-f6ee-4ffb-ba74-70994c515086.tmp
- Size 132KB
- SHA256 27de8df8c425ad68c5cbd3bfafa459ae3819c5fa84fe30a24068d8924d62875b
- MD5 e19a013025a419e8ccfe70c59b1321a1
- SHA1 fa3690195b79b1fcb3ae8f2c2b0bd5744489e408
- SHA512 3029e671edda09b41795dfdce87006c6beccb52ab5984eea9b539e6a5798f8b0e9568d3fdbcbbf9c54db91233740929219b0e07b9ca38f20e61046ddfa0d3d1a
- SSDEEP 3072:cmZGIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:c4GPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T1BFD312617D45BCB8A9EEDA21A1401E16DAB8D80F993D3BE55CDE3F880593ADDC304C63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
- Size 40B
- SHA256 de63eaed34d3403559afc4223f5a0cd45edd919caf693c3dcf06ceb217af4fe0
- MD5 2cc0da841fbf211b6a53f75c51de159b
- SHA1 120ad3df28151454b92f9c947a38dfabf9e706bc
- SHA512 604117d7e6e7218ae92a339a6fe547d555741dfd1e61ed9a9b0a0c3acbf9f408947d8d5eb61262d3d6c0c8457b90e3e24b9e8544200bce0e547f8fe51bdd30cc
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\294901e8-0520-472d-a8b7-e1d96acf21c8.tmp
- Size 12KB
- SHA256 4dffef3569f1ae2c902713e7a4512c79104e68a7cbc89e4ec877fba4067ac921
- MD5 5b9815f0dfd77c4affd30c2b45a91a73
- SHA1 dcab629a5adf945fe610ec23317e8b0c29b5806b
- SHA512 d707a7311ebdf75374dd894cdcd1a773570b31504177628b9f8034a810c4bdfcdec77a28cd6b568833eb9591f54cf5ee942badad890caf5a5117003ced66fbd4
- SSDEEP 192:QR8X9465CJIv7PpAPRp2Ry9fHsb+WNnkiIvz424MeAH6ajVyIsnAUge:QR8Xy68UjUXR5wcU216aFe
- TLSH T1B642C66EAD14797B5CDBD22AF926BB53D7F6202131C42E80EAFC892C25D75CC2227017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\50e192f1-8419-4004-92b8-7d173540da54.tmp
- Size 17KB
- SHA256 bff6e389719bb777fa7fd4033d39d92c9c068d450ab2ad7a94625a4c9a8c7fd5
- MD5 f51474ec91e2c72f14a1753eb7671539
- SHA1 9f950a472724383d2b13efcc437615b30deb207d
- SHA512 05827e4dfa28e34946fff83c56e7cbcf8e1d35586f494e510abe2dd2dcbe27c632da49714cfa9c5d882266468d914d61e9d1e1e4891eeec1a8a63d85bb9bebfe
- SSDEEP 384:uMj6t7KxkXqKf/pUZNCgVLH2HfgslrT7pLuLceSklXOD6t+ErU3voHG75M+4cGyg:uA6t7KxkXqKf/pUZNCgVLH2HfgsdT7pu
- TLSH T194721A676C4C9E3B0FA4C6CCD8177E4FACF5024B65ED886582FA982503D5ACE114A2F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6dc887e8-cb2c-4f0f-996e-345d6d38eaf3.tmp
- Size 414B
- SHA256 a3c40f3583540171f5b801243faa327c2cd9355efd5f089e2ea0e82cb72270a7
- MD5 ff28d860545373df6d780845bab0123a
- SHA1 e0a2116545b487c6e45019cb942578376255a087
- SHA512 ff5fde2d135de38611137ea06144fe8c5ff211adb27bcc0d38b20806c7e9b84a9a51e0beea1a0afac27e2d9a22308561b08216dd9d69f995b4e0488cd82e91ea
- TLSH T1D4E022EAC970AC671CFC0B2E90110689EB0123163A40999B3B3DD20D8FB423A869AC1C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
- Size 23KB
- SHA256 89c8e0669dd411b4f91f79771522f9686bba1aca7f1c870cad8901c021296728
- MD5 64120364123eb8e6647ae8b7700c3ba8
- SHA1 849f45544b09d35ba1e1dea123a736f24faf3891
- SHA512 7ef9ecda7e67b2f16667f2e31048add89e105631274e53343f249c02ee06fec0a85d8a244f587e3bd8e0fd61ba7eaabfd2a5de69702c57f2b7ebbdf0fa44587f
- SSDEEP 384:SAQliXhseKZE83ijBVojv3WGwFWBaSodQ1N2LHOkYdY1vwSupm6nIgkxv1ObK3oj:SBEXhsxZE83ijBVoj31odQ1N2Lut4vQF
- TLSH T1A8B2E1FD0FEFD811080B538BD117A18B683696EF7B0309A4A8A5238C96C69BDD733551
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
- Size 18KB
- SHA256 321eacf2b78212cb20ae3ebb27d35cc9b2c7ba8a9fa65ad8b7c292f826bf8099
- MD5 539011b799990d9851f6350858332e47
- SHA1 b77fb9f82341e8c8cb65f65bd9273942556af38c
- SHA512 499df1c11b0985636e0dca3057024033f23159de94bbc87d484189f50cb2fdd12ec3a5f03b4e7ca314f853d77b8e6fd21d0f83db579a1ae9674e1a038b15fa18
- SSDEEP 384:HjG5orKyfFxGYB03lMS53sg/gcyfihWx1yL9MEIWc+6Vx2H:9xi+jigR31USEIe6Vx2H
- TLSH T1E282E1A6C7323479D42DB0008F5467C62122D5DC82BB1AC7E9D82FCE7656C406EDBBDA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
- Size 28KB
- SHA256 aa8bd3300c2b29c5f5bddf21a5ad80538f248b468ce44a78d2cd918a27bb3efd
- MD5 83c5d0eeda19be80102a2f54be6a1a34
- SHA1 7dc4874c485a91eba8c47ecb460a4c6c89ba1495
- SHA512 dc94e0215611d3e6ed6a0c36eb4a0721d31bc25f0029f94818773d5423aac3d4c1680ab394bedac61e081e054fb4f0dfeb04a84a5f6ff95ca14cb4e8a0ea7f01
- SSDEEP 768:BW3uRoYKXk5hAWtsPE4orCd/eG0ZzOBaW6xlo+/Lj:B28oYI+UPjorfYBaJxlo+zj
- TLSH T143D2E1E647B90B1B3217D767A223141C8B6CB4DC2524F8BB2EED0296E59E0D81E5163D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
- Size 41KB
- SHA256 dbb362d29b9b4111e7722bae880e8a79ef8efe96db4cdf7869195f5cd0066fc5
- MD5 350fef14b9432c8888714f9d69ba79fb
- SHA1 f02876195e3b3628384124d63cbcb3606a06996d
- SHA512 8fab4f3151a81a2cf0465aaf245d507da97c230eeb86dd6e9cee798e4d8d953aedb2e7e4cc004fdc8a5f7e8af0ded27aeefb4c626ad61c95f38572e13d49d419
- SSDEEP 768:OO2E2r3bvarUrKzGpiDIM1wLb07E5BHHTt0eT1ra2tfFyrPlICB:OO2EUrviUr1pi83Lb07m5t0mLtElICB
- TLSH T16913F08788394EB213F29C6162EDDE1A26561F4F053B1D38E0E3C0DE45EAA25D854377
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
- Size 24KB
- SHA256 c3c9c7f4c37ed9de6eca7e969980383f3f7c94fd1f7f1f9be596219a25a19360
- MD5 0ada9c3e9ecd89b26d38ccb35788d2f2
- SHA1 6f1134c5399c23650b2ecd52733ec0d1c5b8b528
- SHA512 ae2b9f5306e1207cd319256e7abecea5485d1666e7b1582dd2e4b42b7367869d180ad8e00aaa93a85bfc192c619e5d2eeef2844af29d5ae60c84076cf4ed5e79
- SSDEEP 768:ixFDQrFIYA5srn0vlyAAVKjIKqBobsYfv6DdCz936c7ty:qFaqEj04AKK8rBesSvoCz936cs
- TLSH T1C8B2E1AF2D973CA9E10A50B7CD97A5E0B9413379BD19C7EBC081464B83B5D494780F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
- Size 33KB
- SHA256 e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
- MD5 1aca735014a6bb648f468ee476680d5b
- SHA1 6d28e3ae6e42784769199948211e3aa0806fa62c
- SHA512 808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86
- SSDEEP 768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
- TLSH T171E2F2DF825F8F24E6399E29109A1B59BF84F8F2D7B15D080D8F32730BAD4499861225
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
- Size 23KB
- SHA256 2326b68a516618dfd0e8fcbfe8aca9d60ac7b66a13296fbd820d042f76f473d1
- MD5 24e3269cb88f7713caaea19863290938
- SHA1 5eeaa8caa01b1162ae4cb33d3f7751073b13b358
- SHA512 b654c184e4080b0e9bff252a1f30b4a8bb3221db84604fdb28670ae128bd3189ee6487fafe619221a953aa2b59d6cfbf561d234afd9b1d2131dcb00236abe73f
- SSDEEP 384:q/LKiMK3nBWr8U3/BBZ2oG4LiouoZs2AExLap0zxu0p/4X4NWI3M43QFPARIyVwm:q/eHKxWj/NL5ues2BxU0zxueNQ4gxART
- TLSH T118B2F1EF2E219BC3FA0237610BB04D608A747B8C512731946CBCCA5F0AD5F67662D5B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
- Size 21KB
- SHA256 5db61fb734da4c38695f4fa032682bb57103509e00204785229e5fccdf143bc2
- MD5 d6f1715499144092b8de4eee12b635a1
- SHA1 59bfe6182fab85de19b5ca33bfe125da23c7a2c2
- SHA512 acb74273da079a417c2e386ef81c0371bd49664a2afcd0cd77a873c435582a32ce0f64ec0fde8e40ba6343d1d6742989c18c385e5970c0099b64a0c42693c7ad
- SSDEEP 384:98Uh+/9XkrgikFXnjSS8/y1FPR9H8EDTaAnX7vLrjKi8zCznvHLB9d0TmmXTVlCO:w/pUEWShRp7XX7vnyzCXaTfXTVlCVnw
- TLSH T1F5A2E1E113E62AB3AF75159EC917B052F7133B19E2DEF201AAEB60C194109D56E78305
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a
- Size 19KB
- SHA256 649674e87a90ae80d5f886bf2f6974ba32282a669d0d5619adf550b5c669e05e
- MD5 609262af4b5aed721d5a82480be1004e
- SHA1 0f6e12d719b5ee65a98ea5e5c5887abfe3c00408
- SHA512 712ff9c297b5519d6f3182614683ce87fc37fb00f1c43df3c2816655d06cabec0441a56d2aac441056f9e9c318b7bdbdbeb0e00c36a7dbe8d611482009d39299
- SSDEEP 384:bb009QR0L5ARWJ9GExHnnD+3kygF2SMeFyFGz9Uchqi14DmX4YqwTgCRO:bblQg5xHbyeXMeFys9F4jYZTfO
- TLSH T12292E246DF2DF8246EF0403C98E02A4575258DB6CFB7464F1588A653C724E64FACCE9D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
- Size 46KB
- SHA256 db88088ab42e35955fb7614597fbdca3c25600ed0556febb44494069df605aef
- MD5 6a5dd1d8bca1e91afaaf203d1e9c9ef8
- SHA1 00a130d288e0e3e3621c5961dee8b934fecc2d54
- SHA512 4c14d0f0537fd23bb8a881cdd76003a5e0aeb9bba19a9f404b66afd21ffe3238313b3c77332f3db1c7223dae6c05b76be95bb3e79bdf617a5fa8b023e49335b6
- SSDEEP 768:fGdc+bUrQ0CF7AXFIYqoN8lZ3Ow03w4PneYMGpsEYJbGDzBTDDnTtHC95LPOJ1P9:u7Ur2Zs609PdMGpsHbGDFnDTVC95L2J7
- TLSH T1F723F16E211CB162F26BE3528B2EC72C76EB4F17D94603B134A547E0D94EFD818D25B1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c
- Size 16KB
- SHA256 a3df6dee7af91883dec6523c9b30d14b30375345298b389eeb12567820eb4129
- MD5 dd430e13935bd532d7ecbcc9aa7d8a60
- SHA1 2b300570bd6b4b17d4c67ddbc465a8922de2cfdd
- SHA512 dc59e83ef0199b5262f786d4f621d8a6a097cfd026a6ab5cbfce48b61b94fd3378799e968a79f738487be821a75ade77243b3fa1d816c26947518d8a74af1356
- SSDEEP 384:0hfYfOTTunMFD/0c858eussSlggjm48d6bSGyDDo0MPJq7OT4:0hfYoinM50/xpgYmsbTS8Vo7OT4
- TLSH T18572D0812FFC78CB171B66ED5BC012E8E43D2C14818991D5CB28AF5696EB18F2F76913
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d
- Size 170KB
- SHA256 0aeba119a834e5d9fc215354e97a7d4331c4d1559a532959b866b0437b507996
- MD5 27504a03bdc7afadcdb7ee25b9139adc
- SHA1 76a7acaf2898e48a61e383d9d65221aa6139a631
- SHA512 a42b22453f54ad38e1879347104b0fa0a05720e10ae330e15bc5f9ecaeb05de79e8ab4c600d47f4e3ddb1fb661aa9c576a3108d1a61374c53485b7034721906f
- SSDEEP 3072:G46e10k0cdDV6n17BgAFHJPjEneK0UY+TbRk/BrCzs7cHSiMwwbyEii6IN:G4620kNEzTdi/Y+Zk/BrLo3EyEii3
- TLSH T195041241F2D121C7BF1F9D70AC9FEC6F11A45700E905A5EBBA3D0AA52B5BB190C92C39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
- Size 160KB
- SHA256 ad30ae6988fb9aab42d083dd96b0d5464abdbd46362eaa8961a8c39134afa699
- MD5 e92ee5f367183506bac606f7706fefd5
- SHA1 86268616a6d91f55398a27264cfaf8e4aed8bace
- SHA512 a2820451c6287122c49af70e76bd7b650dc8eda0a8e61fd26227f0872390b119c57428c15772ec66b7d0776d8021f485bdb21a395370d9e10d0ac2b7d2451218
- SSDEEP 3072:yacH5HxpudNFMWD7ifnkVngB2rlHXA3lKc37smkImT4AlkTvFV:ynAWA7i8VS29zc3mcAi
- TLSH T17AF31245DFC621FEC5C3DC37216CDEEC2A9457A753A605DB1FFB867286880CB5A29280
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
- Size 41KB
- SHA256 1115a65c808667f4bbba3cb7b0598402ec81f9b4dc15ab35cffa1def016e5964
- MD5 0619b6364eab0fcb1439374274d01063
- SHA1 941ea357bce17f41e3db26c078bc0c70085f631c
- SHA512 2f0942e884c1256cbf1ff7264cce86419188668b4bf54a30e65d0f6503a703f689ad0b6e780ffd788384593f344c36093547ade3866a20ae4afab69859ab65c1
- SSDEEP 768:/XwwcbyH1NJmVE6Ml+LMLFjA+0UqrsfwK48tiuauzsbYBbPfGkeYibdOohJprrol:/XwzyVNQVzMl+LMpAh+IuibYHe3d7Z0l
- TLSH T1A113F15381EE96C1E0FC45EB8CF52E1AAF919383DA42C3E54DF7270E21607371A46B65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040
- Size 203KB
- SHA256 f6e9eeccfbe076df70a838946f632a513ee840ff287b0bcccdd42b239d0d1475
- MD5 bc93fac14f7f0b13eaa129718ddcc1c0
- SHA1 07f9bbca572051babff0a5e350d1fa1431465e6b
- SHA512 b8b07ec4461617edf7e3436510bdcb41daf7ca74df34e55785cc4a0591d8a93defbb180815a90845be369a6050a7f714b845ec2aee51e8bea5871205f62deafa
- SSDEEP 3072:NrU6+eu3yIQE59J31NiTyawdvcWsExVoE+EwPCcafGgFHMH7LyaRFlc5Jfktd:2tezGJlETJHEH+EPxP+bLP23f2
- TLSH T1DD1423F482C03F908D4D8951FA48895B425C2BF87E6A5817CE47E34B9B798F85531FAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
- Size 153KB
- SHA256 9349457d0e909726e9a9a89038a310618e8d54100e1aa02c06c785fa6bb24547
- MD5 ccca5953c3436f80498b8ab36799cc8c
- SHA1 b10b9cc0eab7b5594dfa25285cf80477fc19d578
- SHA512 82d71a75d36ee87d7a7d5c4d58ba444b73248bd9378219c3d79de438e50eb153fbbf16b594158c04d9ea348d2e21aa48a3fa77bee4cd8d1b4a707324a6acb16d
- SSDEEP 3072:zm+8phvhIoEP9bA4tOylNQa4FCusBp/VglyBvn1ckZHld55deaRKWBqR/3:C++5MU44y+FTsBVVglyhnfZHJVR/G
- TLSH T1DAE312F07E017DDDCA22BFA4C935F6B66BA9974222DFBD6E05D62F860983124C3C4950
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
- Size 176KB
- SHA256 1afee98c81032ea93959eb679653b97ff20e80c0c622ad952f441847afc1a5aa
- MD5 8065d6f788bfc1da8b75548281ad37a8
- SHA1 67562a5da5bcaaeabed59e87fa0e8cfdac2660e7
- SHA512 a62dbc1e2cb0801d6b1f0b5d7705e2aa2405f33e968981c0cb555f5017d3cb54f3a3b7c3d8bde4a4223cb8c3a924299f8ffda5d67466ed654cdf596b687dd2c0
- SSDEEP 3072:F98LLaz3zZgLNO4QgbqEdzHupuofjRjcYxAAcxr4t4GmMAoH06fpRdz60UXJiPzV:9zeLNfnHGu/YxAAHtR/H06xabXJ2fotQ
- TLSH T15E0423D46239E2ADED842773C26AA0CE47CFC5620A52919C90F65BFFBF6C1D52093274
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
- Size 176KB
- SHA256 e022677655a5df63b992d830b264ca88d5acdbd5e54dc3493e1c8465d446e263
- MD5 5f574bbc5cf05f4ef4f610ff1817fbcf
- SHA1 c202ff325683f0e6d9990346ee4f43bffd34c055
- SHA512 3a9844abea440ce67c7f8ec6439e4b9a884e0034b36864af073ca7e7a75ed650c9800c23996a512d0b964940013e8e9e0930a70801914e65f00670a6fa07a29b
- SSDEEP 3072:g2KJgMsQuAuH8Y5PTN34HL/o+R2sa0YpzBa0Dzrdkx8rPVtlJBG0hUJGFEu8pd:gjg313H7I/o+JevFNDVG0rmpd
- TLSH T1950412966F9A3168DFEF6C01806451AF64E86395CCBD3F79C8431122F60BA2ECCD954B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
- Size 143KB
- SHA256 14a992ac2d67b3b1b576a616dbf966ccb89adbe391c38cdf9882e82a401f1c91
- MD5 635d327f3ae97b5ec9e40e3558890aed
- SHA1 7979830efcbeab5abc6806fff6a2fe4686280909
- SHA512 29a3f1169097b2a11fae70441cc46967c926a2da50a67c8d911dab9c2008d7d46e154e0d525b0f7b98b9c6185f5543f0ae1bba68d00b34d6777c627fbc534c45
- SSDEEP 3072:Q+D/IaFzdonU0MIdPUMxX37+pTJvwf+7IkhCJX:Q6/jBz+6WX37+JJy+7IkhW
- TLSH T136E31234239E532AC4AFFDC62C428A61CF21439DFE15AD690A84DB6523D884DB8D737D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
- Size 43KB
- SHA256 7ef26b78b23f2fc011d6c174f0b72a35448ba8bf99ac24a1fef89a9b358a2e34
- MD5 5638526fb224ad0a4f724285780de90a
- SHA1 08dd197445f17f985697554cb2a60047488e6f01
- SHA512 19097aeebd31ffdb9c797ca88005316cfd9fb9b0a6279ed8ead782e8631761b5f5e7eb582182d9715309d8cf2f3869c942e3841fe8ee7fd383a8e0fc7cc6372d
- SSDEEP 768:wO/w4Z//sknYgpW5P/5DV156sxnlq40h2L76Fp3BBJmKSXBLbTRsbJni3:wO3Z/3nYgMJDV15Nnc408H8JBK5xLb1r
- TLSH T1DE13F2A683B246F824324CF14C8D097A53EAACF61CA58B1CB1CBF5C6921DF1F9916D25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e
- Size 24KB
- SHA256 688c0bc13deb1d30fbc17d66729eb3cfa6982e2461f0e70be0e34acf1c44b18e
- MD5 ad2d84f24fa0db65a6eb402e88d3cf01
- SHA1 fe50ac6c19bf3b36dde827b10f46c71513dddae7
- SHA512 783a48be02eeeed1a2e94fc056eb8d139ccd9647900118d7cf8321efe499127b9dcee9c9b3476d1a4a86a6dbdfc3a24b36adc96a6f4e39d9f6536d232cf8c7bf
- SSDEEP 768:75ZH5cdbYc747eueG6rWD+ohKTCKn5aMjkb:77H5ce7heG6s+oQTKMjkb
- TLSH T1D2B2E11FB3A17AF992D16D2877D26FC7C19E9146F3A57631CA963200081CEE7924BF84
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
- Size 47KB
- SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
- MD5 260c81a4759baf163c025001c4f27872
- SHA1 f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298
- SHA512 9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9
- SSDEEP 768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw
- TLSH T1BE2302DF9E4D72D29271267045338383798E2D8A50AAE7A1061C0FE6DE05B69D31FB9C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000053
- Size 30KB
- SHA256 f6b8782acadffa9a87315d9e2f3c1557a5c2f4aebc8f8e6b00d4a0263164fd14
- MD5 9b43c7c35703e0c996c50c968ec6b5da
- SHA1 54809c3f45aa16b6410a85d1abf949b82bb3b98f
- SHA512 137325d2b8a1cce2d69eb5de55a71a6a90ef381e13165588c7a1f35dd157f35de832b6cdc74e03a322e3dc2628e1a3ef80f71f25b232d0bb6a4fd545e7fbbe9b
- SSDEEP 768:/bxlsRltHPiyfjK5/6aShm3o3gz8w3yd9wvYWIdot+Cb:veHPOVgMoQgw3T9
- TLSH T1F0D2E13018EECEE24BF9E8741FF3DEA1FE3A00D409AA5D171742535678650633EAB119
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059
- Size 160KB
- SHA256 865659617621c40d9f884ae7b8c1ca5d6a6d61b2090deeda06d553640f6bfab6
- MD5 486ae895ebc72d9ad217c5ed9fcbf9be
- SHA1 a061df4b505f7789cad546ce6850c70a6cdef38f
- SHA512 760466e3ea9839d51e1085beddf6134ae269a848f94667e632cc07136d20ab37622e254f43b9fdfa7023063991311ec479d93dd40ac5dfa69fcc6b354384a269
- SSDEEP 3072:Ra0HtMnDZWwJkjfXf9g/k6Y3ApyJDXjCvaIsJN3bInT4yKCTvNK:Rq6jfyCAwNXxIGacyy
- TLSH T17FF312C57A9825B3834A802FAA3A9C70F13C5ED105C61F5D85E3EFB568E184BD2FC41A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067
- Size 73KB
- SHA256 b0bd8c105dcdba1cd816cdda627b61679879777fc6606accdde278dd3ad03cea
- MD5 52ae39ed145a64795d736724b2bda77a
- SHA1 defb0fcf4b449f1efe34177e7fef88cee17b9e7c
- SHA512 ac3f340ca21acecf78aa6b4d3e9169c156cfc6db89a40d3de890a1e2acd7607b314137640d76effcb834ab0c37d5fe910866db61f46262d53713b7954059d487
- SSDEEP 1536:SuH4GKwAj0m54EEBYsJiM39UR1zUG7M/05tnFaAOoF:SuHZKrjlLEBY+iO9UjzUuDFAoF
- TLSH T15F730246B478FDABF9D7F436DDA8AB20B07CE54D2B6B0150292F074346972E214B0A7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000068
- Size 96KB
- SHA256 1bd468bce27771a601b0870c0a398e613ffbf254af54b36bfdf58f997b0d1395
- MD5 a37987b024737c1f5406aced1a59c50b
- SHA1 96bf099b4dffbbd965d326605b2d7f0ccee4a3d0
- SHA512 288c3f26239ccaad2e25f486a2869447edadd2ee298c00cd453ef004be05cf91e04d31293d8f819016052cbf6602907f88b3d916bcbefae901eb734c4be01deb
- SSDEEP 3072:wRuYZcw1DSKGccKOFiV3k8w761ooC0VteAlS:wRuU71DSPcn3k61ooC0V0A
- TLSH T144A3121C43C43D2E9D6EB7ECB702C2978DE1AF21CB89CE9EA29DD3355D204345A6940A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069
- Size 32KB
- SHA256 a9ca7e1341faee1ca19a9323457ab68d093d9f7a17eb1d3be4eb78860eb97fc8
- MD5 5e6b821ec482fda01b9876ab7697351b
- SHA1 c6ee3ef9f030f8f9acab425a444cc5d899940130
- SHA512 90026aad92e9003cf0b1b558eddd80d84413bc8a008ca24149eb0a5b8902343afb205a1213717894f5f8758301f8a019a88e20cd8484d56fa1a6c714e6afa691
- SSDEEP 384:I4aFdtXnnO5utL5Y8hSinxTPHRdQJUW8/df1q5OCYEHGCT8by7+56E7gk/7kEABM:InOyYa5PHTQJv8rBlu4WlyY2L
- TLSH T16DE2F1ADEA1319B7B94A51F9CEFCEC4C4A0109FFBD55A09F703B46A6630552BC44B4D0
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b
- Size 20KB
- SHA256 74e3ea93996afde37d6be8371a2a74176d97dc0466f72b637a3773048be944a0
- MD5 b787137ed48bb04576abdcee827c5f50
- SHA1 4e32cf72daab422365d3e2f60e3afec030edbe5f
- SHA512 bfa5097056a446dfbc8ad013e592db0bfd03eae844bea8db0564c198917987b3ac415ba1380215fd5b24758c01f672acf26f095330e802f22bb1d06382096f06
- SSDEEP 384:u/PTjBh7ZDpEyFlzb+iGv4bNfeP2La4kJ2s23yljbojQhkUsg6qiSR:u/LXZDSyFluRQpePF4k5bph9pNR
- TLSH T1BD92C0DA51142483D67FE5E982EC05C383261725FE58FA34864C673A8365C62FDA7F0E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006c
- Size 22KB
- SHA256 cf123c9b56bd9292573ff898d14eb8510b99a61f8fda739b46ca9479b7e48eee
- MD5 9cff3bf0d56e61a89784afe8cae54022
- SHA1 3683b6cece015e60398377f2cce743fc56ed23a5
- SHA512 0c1741cad71d78e031759ed0fbb752e62f01cb8dad40f5b78ce931a6fa8417d0ffc414ea28ab8efe10522c00ad5ffc4a218fefaa7c301aaed1a7fe605f3e6e1a
- SSDEEP 384:Zs7XmqECxDbe4oQLzeT8KDzVPXvlHozFThOE2qyKaJNb9e2Aix00Etuz7yu3vgVx:yEC1JLq4KDzVdI552qBanwi609W6vgVx
- TLSH T1F1A2F170F6C965C9D2452AB4F9C969BB7EFD8FA89307118932CCB734092447E819CD1C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006d
- Size 18KB
- SHA256 d069fcf848849ff3ccf0b5ccabd54cb584f1dbc1905d638691e45e2ea44009c0
- MD5 1cd985f3498725877261e8e9d64c2923
- SHA1 54b4a1c5c43ac2db6a4939d4890f4913b880b942
- SHA512 98fc8b113926e9c35f3402e2aa53d2fbd46fe44e3cbca894d6d0830bddd8d0ccbc0f42729b106e6c6178f830ff308d4711f8880f8be59078010c342e14e1c767
- SSDEEP 384:MQOB3k4qcI/uyjXa0cPlKn/R4veKFYFn4A6b50a5/bnDl:MQP9uPlc2veTn5+/3l
- TLSH T19D92D166AA52D09DDAC9432ABCD5DAB829E5D56F550F00C20DB19EBC8BBF00E1D0E124
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006e
- Size 25KB
- SHA256 386aa74ad787615e620c1e484cd153046a0c5dc1887ab878b9172e59feca0386
- MD5 0b042dedf8abb4d4adf6194be86e4cb9
- SHA1 0de16af6b58f8c57ed10da231786a86806d57be0
- SHA512 a09e6e9f727e7b92a80f0478248acc3f3ad467654bd83b3b68b0cd57c5b2672e5773757c8d2f5d68da452344a473ce8a07a7fdb71159bf435a03ae521ce25165
- SSDEEP 768:44XSYXIEZ/UOcYDWL2qRZDqKj+yB3stW1/:44XStocOcYQ3OKV80x
- TLSH T195C2E2B6EF56134B86D1C908F856BA657A78BC410CD70762A7AE61CF01C3479A708F53
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006f
- Size 42KB
- SHA256 cf8f0a7103997862fb5a5bec27480203b48ee49d1309092fc550c470b3d19e9f
- MD5 88c7864fc601b91abe215e03c1138efc
- SHA1 3c59c7e873b07af539abb28aa53e3c0e4dd4ad33
- SHA512 741a0de2f33f65ddd3190d0204b1700057d13e372b43054188792faf8d78ffcefa64aef4e728c94221e7e70601145c6de55e6397eb0f29876749004bf68e24c1
- SSDEEP 768:k0I+z5vbS90F/f054jl32kwz55kDtkEusHiLcjuELr+rJEqsF:I+RbpuOFhwz5aDmERCYaJZS
- TLSH T147130203951DF207AE09F2BB4B781C6EFC39342C9BFA84799598062FF5EDB948212254
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070
- Size 45KB
- SHA256 2ac12e6cee1593355ec7c6d7223fc92d6ac09b8f494be25e7074977abdd98fd5
- MD5 1fa4f6caa3e03a700d97576892ac76de
- SHA1 1eae3081bb675e34e414243c937d0c7e00ab40df
- SHA512 54ee25f5ea3925c32f24c6322297398ab617df55c42cb1121c9759b2866a80491425a51558c1fcdaca7d103fc2691be695d7f856298d4ff721104bb927561e45
- SSDEEP 768:CQB5KVmJR9F3OGpLbRp/RRzgDYWbhZOiSdqji479YoR0YEJlBKtifbv0ZN:empYGp3Rlz01SdNK2VRBoUcZN
- TLSH T1EA2301856E529B412D19897FB040BA43CBFEE5230C380CD755C191AAFB73EEB60197E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071
- Size 34KB
- SHA256 82848fb98ced89a19d5ff1f35d3eaa96dc2db0de9a1f835104b21e84255c84d2
- MD5 f381b1814ea6421135a1f4ba2a09ffcc
- SHA1 b39592c903e1d68bf72c392b0e748fc0f037414d
- SHA512 5b696e8707ea963accc8d6e598b5f9c2f59b6c0b28e6d6ca566ed5436258cabfef368df0d8f1344468200f64d36f324dc76323e4889f57cbd762208865ed73e9
- SSDEEP 768:pNhcY7Y8kwAqkRmbXtvzhSc8gGwubIttXAJh8DHVV4dHQr+I2M:XKoY8kFIbXtzhLUbI7TVmxTIJ
- TLSH T15CF2F11C15AA27D35C7BC9832D03750E9591CE51C23E34250E2BA4A8F919B8EDF1AEF5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
- Size 89KB
- SHA256 f534b7f57862ce225c98f50c90db744b01e01ae17396c1dd3dcff89e7f43fb33
- MD5 df0c7550829f7a9a31cafd7b8f4662c8
- SHA1 26343c83ac7a241e6cc42ac5594511a9637b2677
- SHA512 fd1256f19ed2d367df640e8428d21cb29ce0ccedd13c5eedb2e7b0fe64e158b980a463cba9199947b1472668de931cd0765576985d351f2152db4f4ea0a69660
- SSDEEP 1536:ngLWvdBGBqOpNUdPyEDOVEAEVBsrbcgIR5AUzcrXbny2BhFRaAaGFd:ngLWXunpSdP9y9EEffIRozL9Nz
- TLSH T15B930197B27FA783E7032E7CC0191D3792992A8CE6CBCD241C5D06A0A7557938B3631B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
- Size 154KB
- SHA256 158dde82e5ef1ad7cf529d70a2fc9775d2c1a2e016aafdc58df3a9bf94fbab45
- MD5 c7dcfefc1233c8a7202573bba273929d
- SHA1 5122d00668d2021ff0fc3877fffd024b96c04e2e
- SHA512 bd06624e0d379a45159d979bfc5ad44809a4b87a5219a92a7239a982580adf0d077f5406ef85e3a5addae1ae7d8a4c47e02e0bc12fd478241e681386514ddc4e
- SSDEEP 3072:/6uErIA6vLnfTUgbxucb0mU0DkW1cbXaIE+cjWJYFAjZlQvtHC7:/6lxGLIY/QJ04W1sqq2FAjZlQ5C7
- TLSH T18DF3125441CA0CE5F68FA8F278344D73F1A42B98DB15AB2AE26D3F6136620DDC449B3D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074
- Size 1024KB
- SHA256 12e72308a6a8244d3fa5ee3679d5ceb456014190f89ecde8567558540ecd2906
- MD5 a457d8397391979a49b20aa95f0f6766
- SHA1 ff45d48c44db3cf8dcf3a80725fa788adb792b52
- SHA512 b2ab93c1a8d52b982ea4d6beca539bf79f91d4efbbe4ef5647a7ba9dbe3d171c89ae8663752857cc53a95f20b606a93ae80cf7c5d4a7355abd656e5cb2e690c7
- SSDEEP 24576:Xw/2OPvEHaGIbYNXHuXCBeXveUo2TSIQL:g/XPvKaGIbYNMXEL
- TLSH T1EA25339ECA517672EC6F1B76F9107B5DA9CB0C0B3E904843D6BC7705B2F6E584888229
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
- Size 1024KB
- SHA256 eb3dbf0899ce09641aee1c02aaf5333ecddd3d90ce631b28f18f7932cd266a0b
- MD5 ba39958a49a74a08d956df2eceec433a
- SHA1 f6fd208fae96c4ac1782c4c45ad0dbc0a4c634d7
- SHA512 552a5dce68e63bd53bc7153d73468d6ba8da93ebb76918e432fbfd12671e1286fd40d05a3eb7c11d5bbbb50f47000de3ee4120399bc33e2cf721f1e1a948d01c
- SSDEEP 24576:pSnug1b1q9WGDqoGwrNNE4+y7C9kzuRstiw2pAGeNz:pSMh5vNa9y7TzwsAw6P+
- TLSH T11C2533819FA819A4F221DA7AF0425A72C526E1036B73C737AF1B7CE4D175604BB43E87
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000076
- Size 1024KB
- SHA256 60516e7255497606f5d0750b2bc08ad2fd8751524c26baae7bb4a2ec8dcd25eb
- MD5 af05ec7f88869c6203fe5a27dc29ab5a
- SHA1 af1f39cb5519f64ffb939e1264870c049d839c35
- SHA512 b3f80e189ed4aab16dc4bcc8ab9d71bc56ad59c1449e2f0206fb2b6039be38d1584efdbebddf2ac2eac778503e530e0d412fd16de7819afac30cf723210a9b92
- SSDEEP 24576:3wTm0SB+BEtedylX3MvzCujAbL/IIxW6gnbplr:lHlekVMvFAbLofj
- TLSH T1C02533EF89225617FE784770CA83AC460AD2901FB22548F7EA5EF5CFD5992A65C0C4C3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000077
- Size 1024KB
- SHA256 f322b5357f2bdc735cad5338abe174bb713f5f09f5792c2a2bfcab9499c6a8a3
- MD5 381e4679df5b9b79415c7aeb4f3e465b
- SHA1 e70e7ee6ea69aaca2a783ea718ca1a2a21c939fd
- SHA512 e5d890c7e31a5e02472e64125653f1d29534e0656292c456578f90968893e7eeb1d7ffd70dd15d28c6c5adb82a8d745ba487d3b6145bd91b6569340af034f69a
- SSDEEP 24576:/Bi3zy1MCIsaCZYJaaYdRjvb5DxQ9yBhrJzEik8/uf5B9:/Bi3tiZIh0Rjvta9yVY92uf5r
- TLSH T1962533DDBB01E6FFD56D22E8C772B624FD2B03E5E29450F0B32533AA5700D5204D9AA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078
- Size 1024KB
- SHA256 febc7c2ab874a4fe8acc13523f0db3fb90900f71966508fb4f7be6af8844ee07
- MD5 1f23124ad7974188dd2dd58930bb611d
- SHA1 b03011acedf14c734dd24336bcc25e648b4bfa48
- SHA512 1f1ce06458592058e278fbc1583bf5d492a2f64fe50da7ede31f4f5b8d063cb5005477caca2a0a64c0b819abefac1e52747d5dd3e7c1c21bb4137a016eea554e
- SSDEEP 24576:seMAwLaAPcc0xL7NMnPw7zJHgTw9fyYYckzMP0DHa6XmHDO:TMABxZd/9c+eH5mHDO
- TLSH T1412533C7873CCECDA45B0262BFA74276B9825125A220197837D636B547FE4803BCE6DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000079
- Size 183KB
- SHA256 5dfb45c78a85ee51cf54c0605449a855d665b89c540bdc9733a0c7b5136e5050
- MD5 80c20d99d86f73764fb2679927d50bae
- SHA1 7bf3b00b72cd4567b49238db9405356699505ec3
- SHA512 42566feeb10ec5518d951dc8407011c1c1003128c8a195857fc9e23bde5c0880a70de15ac6b036033e43fcf9f7fea9f0502a4d02828d6649e5220f94eeb2055c
- SSDEEP 3072:b7tjLWaLkrqWgag7q/ZvlT92LYYLd0Pf4dC+//hrP13ceEMsq+hoiz2Rnx/cIwwV:b7t5LMq1MZv592Lh50Y8+RrP9ceEH1oJ
- TLSH T1800412CFA0C25C99D3DC313BE10E55478AE2459E12EA353997134FCE96AC83EA8C54DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
- Size 104KB
- SHA256 fcd022f6bb502b213734340a7e26e855fcab82e08f02d777d77a2e6cf442d4f9
- MD5 f5ac8f61932a52882cd2816371d84e20
- SHA1 d87b45a6a1ce2fbac3d68fc666cc78c7f52d986e
- SHA512 9703f8d23ed000f4be901dd321568c743128e6ba70f7f0f5e222185ff7a4bc46cabada9f2ea7405fb9c463cc38e64760d791f0a945fa34a73ef2d8e9b01b72ca
- SSDEEP 3072:4GZ98kXve29f9Eu94gxde7k506Fz7pR1:vlXveufuu94OfFzlR
- TLSH T10EA312CD995F7E697681A7FED4D279A3828C5DE437962923828BDF14D0C387AA00CB44
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 2KB
- SHA256 578b705b9c4fba616002a749c7ac3f7dbef8b90f10b654e574ac5348861fc853
- MD5 8334cbeb7ef7e6382d99c915ceb1cbb7
- SHA1 74d353e8e4ef66de98499cafac7eac63185a73a4
- SHA512 a57443bfae508bbe5869d62658056a1ba2d5a708c3b737c9e35137507b6f90fdb59a94cef961636bde8431c352ab2aeee51a630794330c6a3c0d63a5e1d7aa54
- TLSH T15051232C43DF6128EFD6707429D36E4D3131D63092372F536338C8B5AAA77EA0513956
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 2KB
- SHA256 6ddb7654f691e1d245d75f8db10d0dd26557002e594e2c4cc4a118c74cdbb2c3
- MD5 ce7fffb9ea6d9a76331e8f969c601e3f
- SHA1 cb05f30277ad4f7e6c7cac22f47c3449b669415d
- SHA512 239186944d4df6f65e6b8959c39e3a1bf5c3d44d1571ed27922f1b6669d2ac23f2426aa7dcad4667b953485454452cf5d77662971a40751b782b6f78eff7decd
- TLSH T16351012C42EF6629EFD5707469D25E4F3231D23092371F935224C8B569677EA0413986
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 696B
- SHA256 b3dbf1ad088b0c44bdf6f79ba4b12efd735c43e7a949670b383791f5618780ee
- MD5 50b582d2499cc1647d05882199cf91f3
- SHA1 e7c5076e94db71b361cf7a78c31a6238cef5841f
- SHA512 b649adb013481474a29b3f75fa40c249390351c994ecce7e653dfcc2576663c82acc01c8963ea4358bbe37f4c70dd8add57c706953b80dcc9a3d0b0396c6519d
- TLSH T14E01591C40EF6955EFFA42FB37C00E0D3222D81493371F13914469FAA59E6F0C18AC01
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 2KB
- SHA256 ea593a308facad8f1e3449aedea4f66441e9aa19a846908f98bf3ca3afc465a2
- MD5 57785e5f1533510a9b3e593d23e16c22
- SHA1 3a6283803e76723f6906d3c4df470d2cdfaf348a
- SHA512 132e5a230c0df03d894fd8704bb591d3894611cd2069d3938b12671db0431bfc41b5bde52b6b949fef0f63988673e0b2230a2cccd433d948abc3f9df2730c903
- TLSH T12F51C02C43EE2529EFD6707519C26D8D3031E535A2372F579138C8F25ABB2EA0127956
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 408B
- SHA256 c1219d78762d35761dea31e577eb228e1b1f7008e71891722132428f5954c4ec
- MD5 66e9fc6aafe71884c9805a389532000e
- SHA1 90add5512c6df206314d1dafe2f35764f00ff526
- SHA512 f382d64df5456be3000253b06ea38553e47830e076b4a1b355ade547e3baed5636b4227cff68b50abfffaf708244b5826b68cc3c2d0f285cc880a473ce9385a2
- TLSH T14EE0EB0C40DE3461EFDA00BBCB020E8F3423E878160F3F13980874C690174F803D2002
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\091c0b6c-65e6-4214-9d4b-0c71f6615192.tmp
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7121041c-5e4a-4099-ac9d-c788ae556ff3.tmp
- Size 19KB
- SHA256 36f9aea36956eada478bf1beb696d3690776d1a4de09d93f9d81089c1892f968
- MD5 6f6852ab49452ca17256902b09b76e8f
- SHA1 52a79142c3b7657cfc5141a5883629ec66016e2c
- SHA512 faac39cbddb3c1037d95a5f7ece1721183d333156b3f9aa4d965a2c3d1d8d0f74188cf2cf797a35e96407f8816531d014b74907bc9494dda7ed2df20415c24b0
- SSDEEP 384:D3cTIKIJgdJYGFR2uU/hebs762wBKb0lzJp1aIaEdePeeJbnXDLt7prB/3Cn0hbZ:xcvuEOR
- TLSH T1E492BFF7C7D9872EC81122F5AB146E1BCE2D196843683D17C8D4EE8BA7E2472D24135E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\722244ba-dc36-4407-a4cb-830c071cdcf5.tmp
- Size 6KB
- SHA256 551902b758c65c806e0d9418d17cec3ee8660d4fca965bdbd3dba3b2756b434a
- MD5 7756b5fe9f058b51ab2083f501ab0c79
- SHA1 9a953283341ddc4855e3679ae36d99fb76190eda
- SHA512 c7cf56c69f9ac15aae656249d00ae422826ae818d40d275682013e329d62d07baa215835fab43a97743b61de618ff760aa439a89ddd936c5754aa1000e4ea8d2
- SSDEEP 192:D3cFJISJIJgNrJYOaIaEdeMGL4cIVteP0On81kbAbPchPGjH:D3cTIKIJgdJYOaIaEdeMGL4DtecOn81R
- TLSH T1BEE1C3E787D8872EC41562F4AB143E1BCF2D156443683C5788D4EE8797E2472E28135F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
- Size 120B
- SHA256 90113355ae20dc448d302900221eff3e2a4e9738a8d1238ba4f0f28d8854bb58
- MD5 63ffbfdff6022df3035c1746bb64cc59
- SHA1 df24681bbf7b2e09cff8850c32eb52f204034433
- SHA512 c1cccde7602a897c8a3d9c8494080884c40a47e458caaa46b19bcde95ca5bb1c8e6ae49edd235de39e999349c2261c00500b03d2500f0240ef85a793258b418b
- TLSH T1D3B01249C0816351C08202F41160149C7194DF14BA071B0261F01D41C835261805B058
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 96B
- SHA256 1727ead2ee2636e09facbf41f0fcfc73b6ae8b72caf95dac29b117161672741c
- MD5 2e89dfe95ee6a2b8dfdc4c2ef259cde2
- SHA1 61e17a8c36fae451980434c3fa65d9ec8b5560e9
- SHA512 50089319dbc4bf2130016cb1a5b2e42e57a2cb22292b730ba21870905b6a1a15e6337051cb815ce66a452fd2b6569838ffd642497e2e21112b94808bd1bcb417
- TLSH T1F7B00269CA4BA222C86303B06A9696E87261EF25CA03171692F11B6ADD366744525670
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\aed57bcf-07bd-421b-992e-7e1dd5f80f86.tmp
- Size 14KB
- SHA256 52a26794473549fbe923b479037359d05612143ce9f8fc8fdf4e6c7a33cb061f
- MD5 e9da8c9b9b262e2612bb06010b4afa6e
- SHA1 1f146c3a10ab64452d77bcde71fa9257e524fb4c
- SHA512 2fae4fa84f6b3f6559ad0e466816d3931af86d74e4a4f7386f91a3d738a601b42dfe31f873816372b39dc45dca719586c76e3868ff9643d0b2725c5751322a24
- SSDEEP 192:QR8h8SOkI49465CJEv7PpAPRp2RU9fHsb+WNnkiIvYSIerMeAH6aLVyIsnAUgE:QR8hBy68gjUXX5wckeA6aNE
- TLSH T18662C72EA914797B9CD7D229EA257F63D3F6202221C42E44DAFCD92C11E75DC2227427
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b6346408-3e50-45aa-9e7e-e8112ce33a59.tmp
- Size 14KB
- SHA256 0c2ee5e5ed1e42ae32edf30715c70f1b5332c9a78d8eee48b9e2dff80bdbdbf3
- MD5 46eaafcc06c6df4839c802c05854bdcf
- SHA1 1167046be44d08addf49a775b40b9a0711ab477e
- SHA512 952a212a6959b4cd6649377484fb474eb0e89010c50a1d324310809c0a1e8cc6151852beddb0b6cf22de4f639865241a90747d04aa1fff0db04ed147af560ff2
- SSDEEP 192:QR8h8SOkIw9465CJEv7PpAPRp2RU9fHsb+WNnkiIvYSIerMeAH6aLVyIsnAUgE:QR8hLy68gjUXX5wckeA6aNE
- TLSH T12562C72EA914797B9CD7D229EA657F63D3F6202222C42E44DAFCC92C21E75DC2217417
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b9f23923-9269-4b09-a05c-a4f012763441.tmp
- Size 15KB
- SHA256 77d6170ed38a64b36014daaff0342e0fe99f3b65595225072fbcdf16bd9c3299
- MD5 cfbe0d908bcebd3a9fc951355cf54aa6
- SHA1 efa90af82e4ab5db6403f91a59e3ea4115a28ca5
- SHA512 c3d398984f154c57efd84746d24946a2553fa04edaadd7aee759ebada81632b52efe92d3b79176c65a5f5398ffaa4302c565ca255ac0ef1f808ea548bfdb51e1
- SSDEEP 192:QR8h8SOkIy9465CJPv7PpTPRpbHQlpvM9fHsb+WNnkiIvWi0llsmMeAH6a3VyIsv:QR8hXy68Hj5X75wcjIsD6aRE
- TLSH T1CC62E76EA814797B5CD7D22DF965BF67D2F6202222C42E84EAFCC92C10E75EC2217017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cef2309f-cacd-44d7-9860-e28458c995e7.tmp
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f4e26ec9-3ac8-4279-a204-dc46b4fecb18.tmp
- Size 15KB
- SHA256 72be6ff95aa47b4b2a0cec3473ef77d27301a910203adff1fd66cfafef610e1f
- MD5 ae4195f2f3fb2c712db3091e0c45c18e
- SHA1 aa38188b9ee1b2f661d54d60617f5d4820a2f1cf
- SHA512 c5bb99618d9f718eb13d29f4e4ef29c7494be2ba7a1b2fb913f59a534d1d9f07a9c86198c943e12f2095dcc76ae658a6b6f366c81422ff016e51982058b522e4
- SSDEEP 192:QR8h8SOkIH9465CJOv7PpTPRpbHQlpvM9fHsb+WNnkiI5ax8Wi0bwQtMeAH6a3Vo:QR8hCy68qj5X75wcuAPQS6aRE
- TLSH T19D72D76EA814797B9CD7D229F925BF67D3F6202222D42E84EAFCC92D10E75DC2217017
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b6fe988b-0844-4c65-aa3b-4f7ed5e4431f.tmp
- Size 131KB
- SHA256 1263b9d3ff4fc8504d6b07c80e23b3dab77039ba7f533f7e7208324c8df45a92
- MD5 8a09a4c45e1d866adceefa1e9c1858d8
- SHA1 03697b699fc90c17f93dd08912481c8e777cd0d1
- SHA512 930c071d79b0b97712ac3d69d013434dc6a80b611b6d486c8694b14a7a260b37b232136ae50f5c57613aa075c1f37416cdff3dc393ff3ffbb7f15be389dcbc08
- SSDEEP 3072:0mMIvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:0fPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T169D312213D41BCB4A9AEDB21A1905E15EAB8D90F96393FF65CDE3F4805A36D9C304C63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d3203d7c-17b7-411b-9a0e-857eec856417.tmp
- Size 132KB
- SHA256 eefa877fdc705f674b9e37a63bbfdce2ea076d1e6c343c141648f443c24b7f97
- MD5 03fe50a367177305cf3ef26101d65130
- SHA1 e8f3dbf7254a9560263c6293e69222032a24bcc9
- SHA512 1d4ad9495bd6bc8d20ffc9c08700faa9cf2f2b809021dfd47c2bafdd94a7af7da2a945e0f3a464eef3c40a598b16a071e90c1a3d321dfc42a353c974361248b2
- SSDEEP 3072:cm4IvyBkjartaCS+uW8lH5W+f1K49XLWb9TBAPi4NXbHKji+ZLzA:cLPtbmf1K49XLWbEPi4NTKlLzA
- TLSH T17AD312613D45BCB4A9EEDB21A1901A16EAB4D80F953D3BE65CDE3F8C05A36D9C304C23
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
- Size 2KB
- SHA256 7f04cdd2457b4d15dbb3eee57a05596dc4fd6459aff330edd95a1352a0236f62
- MD5 ec311670a5c071f92ebb1f595da802f9
- SHA1 efcb031efee909030df92254eb3049fe6fbc476e
- SHA512 9b579776f364f1a01f58e0b599778daa2819e640922bc4a39bbca13f3799dd9b2ef56942a8cc7070cc7f53fe217595547d82905f01bfeddbc99278195cc08ca1
- TLSH T1F641EB58BBE91144B3B76E5AABF6B45D487FB9332E06D59D10110E4F0632B40C961737
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PE5SQ38U\i[2].json
- Size 59B
- SHA256 a55bf726d4905cb6f6e4ae72ea80c1c5c59fa65680aea8faa5fa823330148ae0
- MD5 ce3a3513cb41bc4b05f2b979b8e30650
- SHA1 5f5b808f8d0b91288ed653d86652c8bbad01f57e
- SHA512 318d2aa417b22ee979a62b55c72261f82298e5cbf0e929cc8fc2f8a5a68ce906522d7bfdaa2fd43f3c2cee3931320287e968cfe6ae3ed221b8ab45d5c491a813
- TLSH T1FFA0020555164163C5552281212D2D315DF82962C5184B09AA4E584966150893A9304B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
- Size 795KB
- SHA256 d6590aecba25227fc950fc2951d604a41ad3ce496db8c1b76035dacefd795596
- MD5 0503db4bcd714f9f4716d14cb2587dff
- SHA1 fe8623352500d83f83d0fc6407fc9c4f2d94520e
- SHA512 bec8a85d19a05d11cca73f455ee5ede8205ed8713840ebdfde686a9e3753ff2c023a995a12c1e8a30892d0ad85a6cd29080aa87e3f01ac955865e24aabe2100c
- SSDEEP 24576:4/RU1381jGKxF3sYaGfAX8vcZWtP6cQ2Du3kVz6:8RUsxmKIZW5q3kVe
- TLSH T19B051212B2D084B0D8B30A311961DEB05A7DFD700A605FEF33846A7D9F75691F435EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_yxj2re4s.nif.ps1
- Size 60B
- SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
- MD5 d17fe0a3f47be24a6453e9ef58c94641
- SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
- SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
- TLSH T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\gui7329.tmp
- Size 5KB
- SHA256 5139be339b720588566e1f89af194c15f01ff0f23211fdacb715e246b898bf9c
- MD5 6b0775ce290001cde37cdb182f592c76
- SHA1 34266e1dfbfa5fb54f2e63227107977a605a5ab2
- SHA512 a745787ce04139c9842082f9134ac0349cafc32705b8ba32f0ddd6f4f7a893f158c62e4f9769f9e7989576c6fe07cf5b206be1c15fbd7aa4eec3336b04d03b57
- SSDEEP 96:bS52nYv0J09kkUWjWwj+NkyqGFeeYch6682oeYch6682qxMtBdymZixNXA:bSdvJKdWB+WIFNY+RY+8GtvZiw
- TLSH T16DC11DEDB040CCE296E2DD0A62FA3C3BA935D19F5C65193AF86DEE880F2753D1255C05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\nsExec.dll
- Size 7KB
- SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
- MD5 8fe362ffdfa66269b8a64e3a87f68e52
- SHA1 b5daaa60a6b8591a670da9fc3a2d6f896d55f568
- SHA512 8f2904e01b0835683a0f11114a09da291ba527d867e73db2765185f780f2278debd9c5fc4281a42a6065c5ef5947bdc6239ae4c5835df62c71e1fce80d8bf942
- SSDEEP 96:JXzdzBzMDhOZZDbXf5GsWvSv1ckne94SDbYkvML1HT1fUNQaSGYuHnDQ:JgQHDb2vSuOc41ZfUNQZGdHD
- TLSH T1F8E1193571C02DF7E08D89707816BD2F83F4D43627BA05A04A771AD579D0AF6EE28B42
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1028632806\CRX_INSTALL\_locales\en\messages.json
- Size 167B
- SHA256 7e1c55d00bd918d5997da97a2e86337808c060c16ef56bca2772d5e66d3ce26f
- MD5 d55a15188380ea7feb32e2bd2e81596e
- SHA1 50f18763ff563fc3d21137c3549b02cd59d211f6
- SHA512 2dcf20b244dcd759b84c6f3f0c0c65e3913a47947afd4797c5e9ada0317300529a9687f2e705a1770a90af20a430b5ac92d158bab1dcca32adbbce8a004181a2
- TLSH T199C0124DD4412D9602B765113DA66241665606511540BD0277D620580350E56C596F6C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1133535755\CRX_INSTALL\_locales\en\messages.json
- Size 75B
- SHA256 ec483267323e699f4671435da3bd470a1e68b19a1c73203b69463031c271f572
- MD5 2d35c63f015d3fc90329661984bcec38
- SHA1 9830c5fef13bd9da8d1833aadeb84449e5c657d6
- SHA512 ad7e186c947dbcc2a80947107a5191e82cb75b37fe1d1cac7dc342cb86d991e8634e6dea58088f94c2b09c69f4e11a4be1815e8085e8bd46d2e0cbdb99a1612a
- TLSH T1A2A02238CA802E2302AF00303C20A003AAA00A8B0800BC0ABBC000AC8F80CF3C8E2388
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-128.png
- Size 4KB
- SHA256 77e6c0d3d315f749a624631280c7f4015167fe671cc954505122224fce069f52
- MD5 da55b2318e001d0bd58911d7158f8aa5
- SHA1 5dd89e6bddb1046af2f5acf19b631a0815a8ff30
- SHA512 4a3ec8692da034313b39fffb0fe1c119a87ae46639033e5b27234515899fa041f2c8c364c1efc0d86801eeb1c9fca3129559570a68d7da5fb07ba6db128845f8
- SSDEEP 96:CBrxgKPvJ/zv68wg8FFcHQwM8G3Nc84sWQ0tAViTF40BpuICfYaqHfG:igKPvFy8wFLni84sAtA0FSIsPEG
- TLSH T1E2916E5F04656C216B3629E53A7793A94908C3FC0420677B8B7F69C933A01D3F051F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-16.png
- Size 567B
- SHA256 e6b3b0479ef3462a37cf516e0b4512df3f6f9ff5d3db06114c6b7885d402f17a
- MD5 9520422d4b8b59be83d243161969e4de
- SHA1 f15ef83685cdbbe68d1c452855af1ea6130cbf39
- SHA512 327d41a7acf0e42131198663c689179bd34aa94f3c460303150e813042513761c4e6d4eeda9cdb4f7bb78391aa4f650dc9d99f935d0717ee8ba2c10bdfcfe526
- TLSH T19AF0417412D6B904848861AA22227320D81AC1ED06954E33FAC8C828A040ECEC6A4A32
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-32.png
- Size 1KB
- SHA256 b8b24ec34a5426196a274d0ca41d5f07290ccd9b2f37c01b3c291f0384cf68aa
- MD5 8b155edcfc48795455ab96f2ed79c757
- SHA1 e59bb8a938454c5ce84c69ec38df897b6a04f67f
- SHA512 97c09e0d4ee971eb47c9cc36905429dd943c02bc245e37861273107f73f5ffbbcfd021d846d1e4edea66c2afc54b74e586c4df98b277a5a3d05af27038c40c37
- TLSH T15921C6D3A84A40BCD7252A616A465AEA11F1BDF4D13A9F103C16ACF143909D5713201A
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-48.png
- Size 1KB
- SHA256 fc359cce0e73f3aa76820730429220c1910b75be6bc99201d9db86279aeddebb
- MD5 64fc602beacd33acc962b8c0059faab6
- SHA1 c66859eb141ec52d43b8eead551cd9d6ac888560
- SHA512 3b7de3ed193698178cc80dfb64431394520431ad1f549e0e6e1f00e28d0d55e8a4dd2bfe0a7228e4b40839f6d57285d9dd48669ffa22df800ef8b0b501fe7322
- TLSH T1D53118B084224259E06D8A335C8BAFE5D734BE8E115BD552101E202AFC7A03CA7E2E39
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1807635942\CRX_INSTALL\images\icon64.png
- Size 1KB
- SHA256 b6e010d9cdbfa7a7c11717b75ff4e8e462a9b7e078ec6964f7902978c1701ee4
- MD5 3ccf7dcaf2950b2dc241a7742d61d6dc
- SHA1 a665ae391965e54786fa77981f431d1cdac1e370
- SHA512 0f16fadb83cb0bf3fe1b351d241bbd70694eea19192b047cab429964c695f9ff92bc6e10a195e52fcdd715a56214b73352f79cdda2e3dbe68f46b6168530dedd
- TLSH T1FF31F892E224BDA0465995C058E3514EF67FBA40A24B438A533226B10D9EAD5C6D4E4B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon128.png
- Size 4KB
- SHA256 fddacc07d54a8117d7402593349bd8bd0c29fc2c021333471faea616b33f1db8
- MD5 79fa28dc6f50a445f8c65363bdb37906
- SHA1 22b95db663ec72be644758f417d370cc6e317c6e
- SHA512 361971490484c257361d733ff7b50d1ffe070abb3605ac3d6db4ac0c1e583f4ba4640c32224f1f761d964a429061dc2c3787d177299a3cfb721b745c3e6da94d
- SSDEEP 96:KImenWglu43pJPDulHjXfQtKRmBt+GlnSsiAPpy7YyotHLuyUQS:KAWglRrDG79el7cYyI1UQS
- TLSH T12CA19FF6FEA58EC846B028A37CC5FDD4B85088C322B0603C4598F0AB57D9A1D9BC7513
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon16.png
- Size 682B
- SHA256 e4f4637ca0636d4e4595ca4675fbfb8735b9a268642c2759591f92f445520bcc
- MD5 f61a5e055df5ab5da828f31900379e22
- SHA1 043fbe616954b0959adda21e9d1ab7f6b2b21ea1
- SHA512 3df2bd431d735aac02f0e7a37da6cf177b091f7b1aee7455adc9463c972b98137b81da4f0dc49b292a40dd0cf7d6f43aaa5591f9398c1495453c336c31fbb525
- TLSH T1340183D3B1B8FCBD42867422CA48F27DAE7D2E804B63B620C5996D2634A4750E0F4647
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon32.png
- Size 1KB
- SHA256 ff03b25a93436cc76509f1df9066672e230d12872d96634f2bf9297118184402
- MD5 b81ee6a2b5a8e5e85a0143e9f24e3a8a
- SHA1 6e9c405fbbe5730fa6feb4f635c460b49593e137
- SHA512 d2f0935d886c60385abfe63556231d35ecfb0cb2a0df3a6d63e34837e8bf99b0b0c4024c0a92acfbd768bdac1abdfe6cba8f5439f2db626318a01250bea57748
- TLSH T1E121D88A7097F47C63E87055272D9A13C1FB59D801A990472341245C1B3FA0CB8CEAF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon48.png
- Size 1KB
- SHA256 2411043babdc90e076d22a43016ad6688ea795d96a448f500cb603e6af830b6a
- MD5 87d8b8e2f7ed60ea7126c674ea3929c2
- SHA1 2c294cc8aaf5927f77d22d0de815cfd5b8cb806d
- SHA512 49e7011c3b9d0f0cf4c6da9c62a665e420f265c67e942348288aa99625c79b356671e99751b309b6cdf62cc6d355c91260a97e6fccf0cfcfd47addf1941f7a55
- TLSH T12641FBDD73D0B78ED07515357255CA117EA97BC78C2BC1B90140D286F4976202AB46D6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon64.png
- Size 2KB
- SHA256 aae26c428b294d0a34fed081da519d9c0c904ba40e2de089abecf83cacb47577
- MD5 4bbf065ef36246d5b6a6e9ba600c9125
- SHA1 9ef993e3c4ec068ee695674f89b0835ee68eb20d
- SHA512 f77e7a04d2afa65542c4041953266c6cc1287c503f2e7126724f48aa77afd450e606660d7073e32010baf86e44f0abfd65fc8ff8717f9ec329704fad4674027c
- TLSH T184512B6CB7747F5F544A711B060C84684279EB05D6422066FAAAC33B2793FAA0849F63
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon128.png
- Size 3KB
- SHA256 b4a6c6d992c326e56738e14ae501c584e9084f57e6b2e05035f1e221ff0d4d9a
- MD5 142a3f356af572e65887357c79c82de5
- SHA1 fca12a9b03462a164da9e2597e0d4e39dd5ee39a
- SHA512 39c74b226abd4823af3a6124aa4c65d9a87d394337e1c1f6f8a04ca18977b280437c44ace7c8888ea3c885966cdebaeae1ccd552b3687de943cb7d4a2feed6f7
- TLSH T1FD515D6674413B0CD6D363E62ED049141030E72B9A45E6EDB7627C60EB443F354F8703
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon16.png
- Size 445B
- SHA256 ebc979b76573ce9da13a06b367baa2fee22a4ac3fd3a4a1d645a3ec6cfa151f3
- MD5 ce47ed31df0efa42770cf89e2c797380
- SHA1 f57a1b135184bf933e8fec798e533461f8c01641
- SHA512 84e7dd5a0014fb48cb50928c9ccd18a30f35fd079d0bea7ba5f74ac3a37891112aa1fab05106adc75c3499b2b4ab55e47045e8c0b03ec94d32ac3ad7a8062a7d
- TLSH T136F023C3B4227BA85756C53482007E1E4513D66515E359181E5598B38EA4305E0F8A7E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon32.png
- Size 772B
- SHA256 2a919ec67034fd93c04fc5343355a5fcc3ef920e85a1b6307fe7476d0b6ed614
- MD5 a08d9239a3726dc8d37b7b974fda8bf9
- SHA1 9f2110c94b7d7602081caa0d9cf11e6d4d9e0484
- SHA512 9442f4e5db53139b7a71c9b2b6e799debaab253c79da1720d57ec68e547ca748140790ba12380d628ec779cca802ab2720bb5cb5528a417455fca317220a15dd
- TLSH T1410175C730A05896931F6D3BF14199518D2178DCEC1D58EDB41E52B8D2B404E8EE8292
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon48.png
- Size 1KB
- SHA256 41952e72e94a6c4ea64c01f92686604b68e6108ac97cb1584c6d64378432f233
- MD5 d6e9f43d858081f2c049b27a85c37310
- SHA1 7352d751a611059cf3b2625bc96dc0b155fed96e
- SHA512 73f069276e18f2a573e227e8f31db5977e88e60e9a1f9010fc71bf7b0c848e352ed4b33dcc1c8240f0044466ee8153809f663543b94c7efc791ad74638ad150f
- TLSH T10021D7E6E182101883BEBB37009602368DEB9142D65B16A074918B30AF5020CEC8EB13
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon64.png
- Size 1KB
- SHA256 eaead6149c035cfb779ac9b564bb51e1136c8577721e84172bfd74aa8e47bfb5
- MD5 24f2d4d8d08f6177504f153c9b7cd673
- SHA1 f9033390d5dbeaa5cae80b7b665b771f26476891
- SHA512 20e80f116982e3d02e71dd7073669b75e9cee2273568e3de2e4dd8eb1489105cae3e42539fcc86fc146d37a73c09268b89369b68d2a7a896aca92e5919c78b6b
- TLSH T1D13107EEE14AC122C868B2B36214700C983FC8FF26559622023464BD73AD491ECFD524
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_554170916\CRX_INSTALL\_locales\en\messages.json
- Size 75B
- SHA256 932df778acff86fad03667a727caa81379f860dae53cf158607a131411dff6b7
- MD5 92aed77043bdc772b1d0a1ede9c9ef15
- SHA1 84bd442ccee80f20864b5218ae902b1c04010baa
- SHA512 7ea67aaa3d570df5609a69d88cc34757afac6ea3db92def0253627679f66d0056ac2dff15cf63ac7f9d0a8df25d4d77db1b6b235753765c9277a538c5df05b97
- TLSH T17AA01100C8802E23028E00B03C20A00222A00A8B0000AC0FAAAA000C0AE88AA88E2388
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon128.png
- Size 3KB
- SHA256 c16e7d782dbfea6ba547f027ea3dba565112dcb8977c6f8138dd12a28a8ba237
- MD5 66a7f17d270517389dbe6659a4774288
- SHA1 bbc84a84a0dce0926a48f8f5c6c1a8c1f1f46a6c
- SHA512 a075c86151bc953bdfd003321fb31836ef13506b0661fb38a8cee9b5e1c31f8988df90eac3f91eed8a4db9b6d071e09a2a27ec19bf475809f896b4ddf0891a03
- TLSH T157817E3D4732884841EC56339774A8326999C29F1206C2E4459FEE1F1A082F10DBDB3E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon16.png
- Size 500B
- SHA256 c35cbfbbbead56f366ac472a065d9d16e82b52d9605a59dd78deef1ff96c7808
- MD5 17d19ae1fd7a34d1232e7d01d1e1bbe1
- SHA1 8d61458611ce979be940594ca4cf8add03971d1f
- SHA512 8e5c135d389a1e6b11d3f160eebbe215dcc1b4865876b035d04fe75432755369f107efb5de6fcae923ea8ea4bbab2ae2c1543888d4f0805f566204ebeb9c4faa
- TLSH T1CDF054F331DF4F18C2E4D2105A4AAC8CDA1A1C8BB122AD00001644ACE0E5BCBC1B817F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon32.png
- Size 996B
- SHA256 80adcfa5b912df3405b179b504524eb7badd3fa008e196c01992cc441bcc2750
- MD5 44ffad0c27f33484892c16f7ec7e9e1c
- SHA1 98b7fe4f060d75321716f0c566c6cc90524b2bd7
- SHA512 6a140219802007dcb8024937bd996f594a26b19b0607feb8ee204f0a27bd2ea8058dff058de9491203a7d71555e3075c70e88b13d4fb37be4dfb3c507413a3dd
- TLSH T1DF11C869344208385B8C8F73133FB9843BB51668492B84185636E3D923AFD118EFA215
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon48.png
- Size 1KB
- SHA256 000e9d7e3adf77a5b7c47a72d84eb8228a6fec24995212f1eee70fd6d5826a27
- MD5 6f44eb0e625ff180ffff5bdf35d1fa0a
- SHA1 599d210a76d63f84a6080eb18f5e3083ac9da97d
- SHA512 87c7c93e8c206d57c5a3700716541488ab99a0473b1260e4f4ca633f4fff7bd67a7ef80344c58849c90293e322b9499aec13ebc87706980fac23c58110f9d880
- TLSH T19D2108EE5C0146273DF14664120A43C1934AB335C2A1254D12ABCEA10A660F1F8FCE93
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon64.png
- Size 2KB
- SHA256 2a31937236f9e866183cda68085a7e6f2ce6d5dc85e460c91bcf6a720f8c4375
- MD5 1e44108a3ddb59ba776ade204f607238
- SHA1 5751f2350d1d67b061bdb95e7025170139c2b3e0
- SHA512 3c76c63a7385c64be426637b640e51d3d8ca43ad3fccff60d76c3cc9c01969d8630fe77230f98aae5d8bdac597b465c2af57cb9d69507241b85b50a2fc196781
- TLSH T12C412AC621388A5D6FBF62E620438A2FAC1AEC055DF88D0800D5DF067F0A3D5DE386D6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\56e977d2-2a9f-4096-87c7-8464eaca0254.tmp
- Size 8KB
- SHA256 0a575f434f1cbe5682f88e3d1a0fa3ddb78edd8efa7c5672ed6e8a2d9a461f6b
- MD5 63761ce7ae605e502f818be57cf8df75
- SHA1 bc7d29d32c7eb19fffa0d8eead181976d371c9dc
- SHA512 fc02f2f2bc6f12251fe55426980d00461668340d0e9ead68b404fd9847ae40b4c8c73271ab6c97f488a6f57b51039b606418a425e2e63c7cf10a280a350bffbd
- SSDEEP 192:yOYaWIFNY+RY+8J08gKNEDU2Pb2KVsRPt/C:yOYKFIJ0R8EP2qmPt/C
- TLSH T1921295DE7155CDF2E2C3C889A3FA7D3F5938E4AAA8614A78F948EF0505571BE1346803
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat
- Size 40B
- SHA256 8d518badabb11190f27af8a51c5f83e583c5ff80439c30490ba26b47915e91f7
- MD5 d10b22e70021ef1a193c9744ce598c43
- SHA1 99851d0c740b05e33fa93f803ff9786d42ca70d9
- SHA512 9bd3ea2d7a07861e021147bd830b8d9c553815452ae3419e3bf94a29433f076d7fd64e76c21f6069a7fb44ff1e7657ebc5741b273f756ca1d6ec51154afcee52
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\0a350b4d-e980-454f-910e-7872a6267579.tmp
- Size 23KB
- SHA256 8573759b948db7a7200344d3e79190346b040a3a36dcc327545b9774f0f270f2
- MD5 3af5b6a1466519d602f7a9de558f7a58
- SHA1 4fe7c000e0b2b7c5c461b129d9dab077bdbd447c
- SHA512 622edf87becbf60ac72e10409b52829fc23c5d22af97e85722543682f2aca6cfad94cace447979b33b691de60d88ec2b906b1570d240b6505baa89fb49fb0a7c
- SSDEEP 192:zQ9hFkx/93a1Dv7EaWIFNY+RY+8J0Wps0kxoy9B6ZHsb+WNgYphl1AZge97azdM4:zgLkx/9a7AKFIJ0oQMwpA79kWVho6pTa
- TLSH T10CB2D7DEA400A8BF9DC6D816E6E63E3BD6A92026A5D02E74E5FCCD6C15D36DD1323007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\198338aa-c4b5-414e-bf72-f1685535e347.tmp
- Size 23KB
- SHA256 98874373821a3cca6fe025a589c5706e62f60fdfbf93d0fa7a065c62fb77bea8
- MD5 accec9179afc36f1436cf0f6cddb7d65
- SHA1 450587d4791e4ffe6457b5702dc353090a10438c
- SHA512 abfc91e0b880e4d4e57be87bf4a60e3c22637828fe5acecb9378892596c18d582cbf2b219498db44117008308dcc45fcc28079d8cac4bae35686c7a292d09c1f
- SSDEEP 192:zQ9hFsx/93a1iv7EaWIFNY+RY+8J0Wpe/0kqIZy9B6ZHsb+WNYzYphl1AZge97a2:zgLsx/9auAKFIJ0m3MwHA79kWVhojpTa
- TLSH T112B2E7DEA410A8BF9DC6D816E6E67E3BD6A92026A5D02E74E5FCCD1C05D36DD1323007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\22f480bc-8853-4034-8c22-4480f910cd55.tmp
- Size 22KB
- SHA256 8e0e394320bea7bd9317c85fc2b7b5c87ccdd3587bfc882f21be84ba590ea7b8
- MD5 f7c4a005725ee1b9324da3ffddd3244e
- SHA1 baecbc7410f9dd29c2134d1df5000bf05263685b
- SHA512 a35a48df6526c67e9b1b24329533532c4c7f87217c7d319cab089c3fa9bab2680d47af52918e669d23e414f61acc5c7126c0d1a651a9c277472aea670bbc956f
- SSDEEP 192:zQ9hWkx/93a15v7EaWIFNY+RY+8J0Tpily9B6ZHsb+WNgYphl1AZIelbazdMVhEv:zgEkx/9aZAKFIJ0ZMwpAjlEWVho6pTa
- TLSH T14DB2D6DEA400A8BF9DC6D816E6E63E3BD6A92022A5D02E74E5FCCD6C15D36DD1323007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\42327279-277c-4378-9b0a-366ab266c1b4.tmp
- Size 46KB
- SHA256 562d8bcfdfbbdccd231e2f032ad9a5a5669422da06e26d9acbad8c635dcb5559
- MD5 b5b0be0364eaa27d2d8a013bc90ee992
- SHA1 5d68dc61a7638e5c62fefe3db18d94e6964536a3
- SHA512 579a39856633ddb3f55dbb66686bceb2d42038a74d228daf81a2bd299dd436ffdb2f5ce913370c33b4158de55388ab1b372e2dcf352cab059b88e7012d68a23b
- SSDEEP 768:W38me4ofmpHzBpec12Eg/HMSXS7YyrzDQ/CAxXfzGEhFT/jLhCEa59FtRwiIszVB:WsF8NXzs+Ytfz5rzjwr2W8fNQ9rD0ALx
- TLSH T19423FA270C5CDA770FA49BA9AC37AF8789FD0129A5849D5897FAC84C03E17D9024739B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\6aaf082e-edfa-4167-8904-d89f2ee7b208.tmp
- Size 8KB
- SHA256 159579f508ca72c6b95376ef924cc8304ed0162f92090e2adacefd23d729ab49
- MD5 59b82be46d56c7dd7aa9f7e471e7e889
- SHA1 c033211bc267e258b6e2bd2ba83820d03cbf917c
- SHA512 7712e14ab07c0973bf570f96f69cecc0fee3e555d330e9d649a2b5df4d8ba4efcd98f0c2ae164c95ef804cc9e4c7a76b2c4c0d2d044885d99e94b35cb5751783
- SSDEEP 96:upqDEZkhFRsrROmgkmJO9pygQzTDDjRWDEZj5k99Q5pyPcmiOmjfmDhJ3DjRKpyX:QQHRS02wTbGCYX2Ip4m06Cj+Cor+nr6
- TLSH T10B123ADE8E309502FF829DB0E2E9FD46FE3957D358A2D565A4B2A2E01601BD3A718009
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\701d05ec-3bed-44e6-9c09-d0a895bd04de.tmp
- Size 23KB
- SHA256 a959c26e002791151ce2f37b5560972b29143b9c06ed4b030fa6e47898851ae0
- MD5 2f66aa7e5332b9bcbd267efc0883ae6d
- SHA1 a7aa1f50b7f89fae1c0c853873bd9ba73c2975e3
- SHA512 d9280b67e5e2f0013aec3ed892912a9f55921c006302e636ef3a63cccb758607915ce1aa063b82c95441677761b104438ff77847c46262e719f5fc8d5eac1ec8
- SSDEEP 192:zQ9hFsx/93a1Dv7EaWIFNY+RY+8J0Wpe/0kqIZy9B6ZHsb+WNYzYphl1AZge97a2:zgLsx/9a7AKFIJ0m3MwHA79kWVhojpTa
- TLSH T1FCB2E7DEA410A8BF9DC6D816E6E67E3BD6A92026A5D02E74E5FCCD1C05D36DD1323007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\7e34d08d-d0ea-4e25-b4c1-0f722e802a81.tmp
- Size 26KB
- SHA256 5ea5e817550210a82aaf06e4ae14897f8148494520f6d8fb90589c4f44a25ae4
- MD5 af59455e960572c69c6917cee00895ed
- SHA1 947a2900c8d08e70364900478acd2104df6a3c22
- SHA512 588ce7e7f7c471b574d834468c3fe8bc8912ee62d05f62965f149924ef45283eb5fd3e0f5949ab0a2eb30017593a3c1ff5345a6de4e544f631e0347c8f394fcb
- SSDEEP 384:zgLbx/9auAKFIJ0PekyD7Y7oXHwPg/glEHdYtSht3MwgAQq9oWVhoepTa:4t/9aZ10ot3MwxVope0
- TLSH T18DC2C4CEA410A9BF99C19825F6E53F3BEAB9243665D01E64E6FCDD1C05D36EE1223403
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\9bf4c0c4-2a8e-42f2-bc0f-ae782cb74ed6.tmp
- Size 21KB
- SHA256 0e900ef12cda2d977a9058e185da083ed0c9c31ac5fb6f50c988598892577bcd
- MD5 4c8f492b23553268116823361bb684e5
- SHA1 edb12ff096f72fff8bf17767d97d41fe05f94a2d
- SHA512 1d285d9d739334f2d722c9ac58749e9b55c06144cdcfc51210285da910c5834d46c907a9106443ade1ab34e9970adc64210ae02fa4ca433d96b44048b743782d
- SSDEEP 192:zQ9hWkx/93a1Fv7EaWIFNY+RY+8J0Tcz9B6ZHsb+WNgYphCu9OazdMVhEHqvK+1m:zgEkx/9a1AKFIJ0qMwB9bWVhoApTw
- TLSH T15AA2C4DEA400A8BF9DC6D81AE6E63E3BD6B92026B5D42E74E5F8DD6C15C31DD1223007
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\9ec5554f-2f19-4607-97d5-25da8219e680.tmp
- Size 9KB
- SHA256 8e8fb02c28fdf34b52f2daeef4dbcae91b98d3b1ee52dce0979c43f70703ce4d
- MD5 d22b9232af5d3831841fb8c43034fbf5
- SHA1 4083dcffc1b379550c17054d6534594cc30eff02
- SHA512 4c781920e763717c8e0479db9b78b5348a5b92bc7a49061dde653a7c4956432a8cbecbf0f084eef0ec8192e2cc18d43def08bc4fa7f4004fa33ae847719ce163
- SSDEEP 192:YNnrNOHRS02wTbGCYX2Ip4m06Cj+8orInrgv:EnrORMobGCYX2Ip4nrj0rInrgv
- TLSH T15E122BDF8F209502FF829DB0D2E9FD46FE3957D758A2D5A4A4B2A3E015017D3A71800D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00000c
- Size 167KB
- SHA256 424fd3a79bab0f546b7e095da0d5132fd38d438a136ecd42403a531aea502d8a
- MD5 33b3b39d7ba8308bbdb8fe8ff6eecf09
- SHA1 2f21b754d30be653be84f4c3562e959785cf1d76
- SHA512 1a0892c3164b8f3999c9a7a0cde15a3d8eaae7a1528dc06c05b2bfae9b12523f6cdd4f8299833e2674b57747fb1447f79418edc5ed7ca38f9fea3b0d9f500a41
- SSDEEP 3072:L7nvco95W95YLg0NusMJZRKlq+VFujuzh+1oJGUISxxvTrj+ZUZO7kIRhJ1/vaPj:L7nDWjY00MsOB1Szh+1ogUZHTrj+mAni
- TLSH T1B0F31220505D437F1BA1DE107DBB504631EAB84EA6B27C9A69D0B0FE61CD42F98D3B39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000011
- Size 59KB
- SHA256 9776754d89e8f56f4800a18086e4c14b2c4cbb98d5847e5bc2a1cc4046437aef
- MD5 413052ee7900e27dba2e635fdf155986
- SHA1 96386b93602bc0fd17f26cb8ff9e73abbebbd21d
- SHA512 d3c378f0fce0a801a82c7fb091376d74ee8a6a7f762e50941632b5eefdc2629cbae2075ff2358eacc7981fb55f6347946909c405eb116ebe0e575b67e52e62ce
- SSDEEP 768:6PQojLWjQw6/Dsk8GcUOetQZngkZo10dQCe6CbnG1HTnFdcVeZDBCo6wk3NA2j:6PQIWjQwQskIUOeMxyyna7GxdqN1j
- TLSH T1045349178848CF43956CC3F97F034E686B2B7A1C99917AEB01224E9BBF686650DCF41D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000017
- Size 39KB
- SHA256 89bbb371c785cefb4205a422de44f0906031e64c1eb3ad4c4824c0a31e43a38b
- MD5 4252f38e5c3d1b5007d2d6a65d21a95e
- SHA1 20b4480ce2f212a324f51e52e512b1e662040bf9
- SHA512 43fe12707b5794aedf006c204fedfb095495679bfe4118bee9ba81eeecb593dd497908250c5ba22e783a30c2551e3d7bf5c6676d6128ab3082e229d4303a1371
- SSDEEP 768:MtZWFJMUZ6VZR7pZyf16pQiVEbu+1oabJxm7RLnWAaYoNrjfitdCtWPKG:MzWrFKZR7byN6+iVEbupabJx4RDyTitn
- TLSH T1F003F2CF2E0872934584B00BB8B77E269F9812C5F4130BC7E7EB6449382D5B75DC9599
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000021
- Size 335KB
- SHA256 85dc536d1274cb088e70163eb79bb2d9332d29f26bc12103bb7b659a2c860090
- MD5 75b47ce970857ecee5b872d82af682d4
- SHA1 bc215b2de658cbf4a238b8afe0f101789c62c03e
- SHA512 ecadb0e558db72004e8b938e84b258b9f8d636e9f3fa1255fad7aba3336757a5d1270879a1b24661d66c1435d2818db1b783cdf6bc381aaa303fb0f9b9e3d2c3
- SSDEEP 6144:vbGTg1XiTBN2FAGY/PHorPjmG4HfEsCWSJZj9M4Fp18BLhF4AO:DGuSXBfM6GuX4JstE
- TLSH T12874232D94B2F33DC6EA2B9EC6E671401E09FBD55EECA7830D2CD6E772254119A2844C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000022
- Size 101KB
- SHA256 37692f06664bc37b48a167ec280972d272b4037f7f27e4f18480109d66396323
- MD5 b30aa505f6aa9b700644451b3c4f1cd9
- SHA1 c456f4d62522a51241fe694e57ca78a5eb0f742c
- SHA512 1e224c4a1ce5447a97ae14d7b66e8a48050912b5bda0bcba8ff2030bbf1ff8b0862287e5a0584141a5a0dde2c0617b9adef353299b72ecadf464a058e8099736
- SSDEEP 3072:p9FqgSjubJI2wcj0gmKWhtSZp0BnYudDO7zaDgAn3:pXegq2wW0gmNhtSZELdDIzaMi3
- TLSH T151A31227872AB011BA903A08D09B15F96916D9DBD54382730C9E77B0BF78057F4FB72A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000023
- Size 273KB
- SHA256 408804608525f84cbb3eb22fa04f2b92adb6ea5f0df22346cc1156597901db55
- MD5 e6316c23ca3b84ce566eefea58fbd9c7
- SHA1 7e0d621bc74dec28ea4ecbc59167fb7273bd7aff
- SHA512 966d65053ebbacb6eaa65293c386c5ac1568a6d2930c2e9b34915d9abadede961a584cce7c1a1b94e0a87597a5bcbb75d6141c89326ea06dc28aabe7ebbad153
- SSDEEP 6144:JFIgngaoylaj+kU3uS6QyHCKECqM3oYN+hBFRfMyWnRlZZi:JF/gaOj3iuS6QyHh2BRWRlHi
- TLSH T15B5423E49ADF01DA34966EC3963A1D0EA3268773EF50517DF5C01412A8EB4E82BEC4E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000024
- Size 34KB
- SHA256 4fdf43ee9e939292f67cfd9534fbdfb2cc19eae833860438e98b2acb9659e51b
- MD5 f2939aeae46a0c60396508384bb50bd9
- SHA1 1bf1dd171be7413b3e70973aae11e6e804c8903a
- SHA512 bf8cc01a17d97812e989eee433cca754b8a2c1150cd9d7c61472344594fdb7beade68742b6fe64d6a5609c3bbba799ab9b7f1b04a0613c88dcda2d67bf91d165
- SSDEEP 768:IbwgTTZKc7e3rz9TAU/8YCn07ejD2FdB3aEi2QgnVfXvr:Uwgv5gP9EU/8YCn0ZnFx1dR
- TLSH T126F2F2FBF52241C0EC7618C9656B7BBB34062BA4194DEC58532FF53619AC2FF1643449
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000025
- Size 19KB
- SHA256 707774c9c52b444c6e36dc037b504ef7f5650d10e83d92dada96acbe36725970
- MD5 bead8c27d6f1175e10a9408c209c7132
- SHA1 f4c30074cd283383b21fe3f2ae631a87fe1cb3e3
- SHA512 f652941d2765e3bf0f3b4c5788772f579b909c71fbd34a65fa8c33fd67c5b730551c3659d4d3d8e3c0749a7ea6f9123f14896e0d7f920a48c278c07628009e2a
- SSDEEP 384:Oq/tTcMG8BzUsIeLa2DbADLE9nJ1pf5nneV6CUM6jv/44BzhwSHbMl:OecMZnIr23A89nXpfIVkM6jn9Akb+
- TLSH T13392D0E14B04A84A2AFBC0C7415D528632EFA34355DBF6C368BDCF8A5DB029B64B4F05
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000026
- Size 75KB
- SHA256 e9309361e537ef2088c253177f222cc0a7303aac4969d882d58bab37a440d8a2
- MD5 c567d21e4fd951e8707ea3cedf8d53f1
- SHA1 4f7c5799e7c0146c47aec58424d8e527e6c800c6
- SHA512 9f3d636b976cdd7e74f20fcf6a684d5dde10452fb94a98a319cdd0e413c41c1a2f756b712c3a5bb05847147d2102b561bf2f450f20f269229725635216366aed
- SSDEEP 1536:7Vy0rizfNvhNwxIa+sjt6pH0IhfUYgYA83r82Ksv97mtXTtzKA:7Vy0rZxIEj0pUvpYRY6iKA
- TLSH T1887312FB30BEBE82B2DA3357B55909811C82406F92CB1A6B966CE5D011789D2F5311FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000027
- Size 25KB
- SHA256 d5d69bac3e4fdc8f3a712b97e85ae149ba31ee75d8173b8e9dd0da5fab67859b
- MD5 c90c66a8143d6982434a6259b272d9ec
- SHA1 7020791ab6c3e732dcacedf4703bfb7bb9d5f8a5
- SHA512 7861fbe31118570b5784daef2fcbb0de7d6c298fe4cbce8a28af5e8637b88406f3856fc7ff215c00382ed2aa0c439c07731d9ac37104e45fbb98d521169ce59d
- SSDEEP 384:eUI3j8+uensMPX8Fs06nEpPbc6TVMn/bvL7uqUwfOR9/MewurKQVEK8d5QNQeich:qnnPX82KpPbc6Cb3fUTMewtQVXQQXi6j
- TLSH T15EB2E16A7F6A2703AEEC77229700797A2919EFBF0DC350F4E06A5F8B88107241496C46
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000028
- Size 24KB
- SHA256 e44a6269f4bd6517c7c7dfebe47e59239ea46137c535f234e47e241751d53826
- MD5 4292ddb3b9d71a9991f43319cd8f6176
- SHA1 6ad240e2d1b109f830b88d9f5ae57f90d9552dc5
- SHA512 faf5037516b1b88039e73f9f510f71f4a3ff9f285b75d9a56c115a5712fb319e8742323a12e30c137b07e5d7f90092c68c64bcba84d404efe536d0a7edcb10c2
- SSDEEP 384:vodkxScDbzQ76pcu2/xPFaq/s8h3aMO69dPbf1M+NmFFjHGmXSvXkmkiBhbxr0W8:g+kVpFaqZKLudPb9kFrtChlmM5F2uO9
- TLSH T1A1B2F1EA41D5DCCF30E90AC5C20692A5C34699E9436BA2646FDFBF814B0C458E32E773
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000029
- Size 60KB
- SHA256 96690fc4f853bdfd008604f4fe4bf0819777731af65d174d72760096acdc96d4
- MD5 9e76b00d6c28d9b9c0df7c8e75d2cdd3
- SHA1 ad8fcd65b38e21066181dad2629cf82de0151e91
- SHA512 021480658c420a8284d09a9a94b567a568ac295366944fbbee2a32dad906e8690877f6793291de320a51e0e1970b4c3d18250aa1c67771b68fd2c0df0b4db0ac
- SSDEEP 1536:RziJupe6zWOxNd/sbK++KmQIShXc75Goi3xBY5t:piJeeQrN6bK3KmQIShXeIBe5t
- TLSH T16753019956B4AECDA3B7EACC388336F46F8545CB1F64BB32554037FD9990E2A7E04201
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002a
- Size 167KB
- SHA256 0e3e325a1bcf4d52fe83e3ac828dafa35f29e71cfb057dcf7ed9d00fc0b7194a
- MD5 911c735ac6c0330158b3018d712ada5e
- SHA1 1d4610e2d663b06fd12651a3065a255d34282ac3
- SHA512 1c36d8a2aef9c5113b346f821551faaa43f0b59c1065ece9cdf9e47c68d8e13ade3b85d85a783ddcd43574dc227d2b2868ff903d7270bb81bfd9647ebf686ea9
- SSDEEP 3072:lOtNOn+nzizIP5uvSFKxAotq2syZPUHSOmQN3loxaNAcQo+2xLmQZ09:l4k+nGs5uvymq29ZPUVCxoA70TZ09
- TLSH T195F31249500BC9603BB32EB6F517C610D4E295EB2C29B425EBDBB9C0FD14A8A5B4F1C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002b
- Size 21KB
- SHA256 efb854988a43ea78f0f81453db2b253d44af862ef7331dea10ed34de70ef3a35
- MD5 82789bff8cbf7a60aaba9564cdf6861b
- SHA1 c2fdba454c362807a8516fb9450a0d784318186c
- SHA512 3bbea3429986efa085711944367db827a9bdeb0bcc6a9907a8c4d348337f6187242db23aa19eeb375fb5ea96149f7ed0cc63d8f6f16644fe2851e6d0dc7bdae7
- SSDEEP 384:NBJTcRckeNL0PSi+joijWMEc9YmlyUj2kMQ010cy1YdjvqSUc96Gr6:NvTclgCSiwtzl3MQ010cy1sjiy6f
- TLSH T16BA2D13513891ACB43361957F8758218DCD76630366CEDBBB3BC0E8C87B72678D06094
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002c
- Size 34KB
- SHA256 2e5220b4d55a53fdc78a66da4fd55b46fa067ee6b68f66f08d7bde52397bd8d4
- MD5 1d2a1f848371d4b6d9f735862ad88a34
- SHA1 0531bb875d91c8005ce6c3c7e9cec621bf042415
- SHA512 d48a9d52770e39c36c7182e16d5b253e324717805a1271e247d214bc80d910c35c2d9a03153635f75ee7dad6f7034dec7252af9bb4ee7f8a775bfd8e2e93ad46
- SSDEEP 768:l7VLuRGf7PEk7adYXivg+LwJadlC7pntbxAQ/BPkgksnYEyTk0Zbr:/LuRwsdYXivyai7/3snsnbyTNbr
- TLSH T1CEF202C49165958FFE6A9FFB4381E3119EAA979F968150074CEC1C4BD99B7C02B0D870
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002d
- Size 30KB
- SHA256 a2b39d0fa0859e357d8702a2556d3fb405536ae79d84b0beff1474c507158783
- MD5 b8d7726578943b48692b23cb988db366
- SHA1 45c1a271638b4735d769d84631861090f18a427c
- SHA512 1a19991917cced70af8aa1fcbedca3cfef2e6a431b7828ea8abfeff62172e769001e570decff1575636f4fc9e80899145baf372f73d54ce5932537d47fb8fbb8
- SSDEEP 768:G4dFTATqniMnOcjsH0NhNXeI8kFLPMmgPielB32cc:G4vA9MOcAUNje7kFLB453a
- TLSH T128E2F1825D1453299CA52B3C3A361D0CB7192A4D83D7FDD3642C8E393D70AE9A30DD5E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002e
- Size 76KB
- SHA256 c884bb5d8e3cb4513f66d3d141b1361df234366a6410d4bda3423592e501e280
- MD5 066f05171f57bafca00fb7ba8576db06
- SHA1 0f9b70334d9b971f62c7e3199011178f5d751d96
- SHA512 9eb2582df43f5d8609feb844f19e8aa1a26046c9d9ebb8aa7a993ef42a5d31ac35f2bcebaaecd7fbd013a559f8fadd3017ce729e87e41df56387d856bddde6d9
- SSDEEP 1536:VOtDmnQn9gn8Zwz0Rcrn4PxJwN/4c0sZLzOVNLqZ6i3FVYszCwii1f:wtDmqE8Zw8In4PEr0sZHOVZi3FFzJ
- TLSH T1597302F976C1A30920C994A012BA544CDC9525F53E979037FE27BA3FB95683E2C47B81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002f
- Size 47KB
- SHA256 f78e357cc08c1089eaebda9cb9f95afa3a3e6a97f9a52df2dc3b4374a08f0e06
- MD5 859b4f83dffefa8ad824f942c5a84208
- SHA1 a9aa8a1afe5749a72f606d46b37ddad1e0f7c85c
- SHA512 c1d3f5fdd04c0fbb2e947e80417ff43a2f45deeb05959a02cab29eaef789f5d8463289cb637d654aa9d1b07dc496d9a1214219da87958aae576cac76d8e1fdf9
- SSDEEP 768:09AQ35UydQeXHS7a8bq5thMCdqHJnjmMeXl9A6HDjTaq2OD8DI9NYiE8MsB9Ptlt:09AQ3T6eC7c5thNdMx3l6jjTzfQs/YiN
- TLSH T19B2301F4E88013B02B9B88A99BDB1A96C583070844177715BC8699C31BB858773FFE5F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000030
- Size 126KB
- SHA256 f908b5fd34f54fb58033096940fb2582bb5183357ef580b567a0995c239c060e
- MD5 4c7c3c30648a6aa9f2516d415292bcc1
- SHA1 44ce218b967eb9599e233eb6df1ba83e383bb2b7
- SHA512 45357e60090acb360624a9dae72387bb3c2215b3163a071ac3f900af93019c24e30c99b06e544e9f898f76f6e41dc3f18bf05c4721989a10fb331429efbeb50f
- SSDEEP 3072:ePoE+iyYJMEFRtxG1snAdwE8BYH2vrFHD5Q1nngzTOJcmQXJ:ePoE9ygMYx7N62vJHlQt0KJaZ
- TLSH T122C312B1D1AC64D293E13CCC539FA0BBEA1487098AFDF3AD5568056CCE24F961E075AC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000031
- Size 31KB
- SHA256 c993f09d290baceb6e48c6ab4a32842981a20d189a5651375460913370c864fd
- MD5 6d0651206c2631494724efcef198eda2
- SHA1 1c659014f791dbf90912a58fc6172c71319940a7
- SHA512 91538b4385b8d1ba7d1a03fdfc7c3c7ab54f84d0459216003a1f1f489f7c47b0b00719bb0e3932152f59a8818e56b4d2804180c8fd779b262d01afc977d7f399
- SSDEEP 768:PFmnqrJvzty24zTvFHpqycEbBK4RdPgljOuvs+4/:tWqFw24Jbs4HPgwQD4
- TLSH T1C3E2F160273803D0C00187FDED6A0AFDE7E604A339DE32AEA4D8EF76F9188755C11956
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000032
- Size 21KB
- SHA256 bab5b5fd5dae6a2945931b7cbaf74186dbf24297bd2cb24eabd5c484476f2d65
- MD5 52ff438614ba63fb0fa7bfe80daa2ada
- SHA1 b7868b8bcd8fe34ea3368b656c764c1f0c31c059
- SHA512 8c408c23de275675a2a724abfaf68eb44f5b678415cb4afa063c0b727f8dc66d6cddb3d0c9a827c9e08daa8c58e5bdc6b6a14989625c45c41bc15107875c0146
- SSDEEP 384:mif0IDkMRvaKMZpEr6EsL0P6ezk8Q7xXLc1FPKm8Nsoqt7/gu7jMU/s3Y1:aEdMZ+Ot0P6ezktcqmv7gsjMUUo1
- TLSH T1C5A2E105B3D7A6CCAE2450871BE467999E67D4F49A61846B84620FC330F5CF2BE3C05C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000055
- Size 19KB
- SHA256 ad1d65b1dddaa61e05fe5681f6156c64ea8d0a846ce0667374c62f8ceed963f6
- MD5 79611a3dedfca7a9b69ef5bd6e260bf9
- SHA1 b610991f436dbaf30d339c7700324d3f6cd1395f
- SHA512 664f3151373f365222b1cc8ddac9e7fd1131e59f0c2a3d18c66f211717011231df4ad943a41349a5050a3a9e09ff8b51dd660f6247e39a1339b950508ce97f53
- SSDEEP 384:ieovPyS2Eb8AUVcreVfZ/9FuiDf6zAK+FmR4BNChH6cyvixQZgk4XwIvxl:ie4yS5heciB/iiuzgmiBNWacyZZgk4l
- TLSH T11492E1F0F90A56BD2E8BD70CF161FC66D660791D1EAC5C6D5145912B18323B8CA49868
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000056
- Size 32KB
- SHA256 c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
- MD5 856f85cc1b07156fa844b44a10c236c2
- SHA1 7cef457c0e1cd0c20f4e699564ea8997f0332021
- SHA512 bc0bb4fdbf799dd4a7d10d806a85de3b47f44bf7fc08aea2f80b39e57c1856759f1789dcf9b0860b9deaa60c6bb97976631d0cfedc4cf5b60a9d8e90cb7c3b79
- SSDEEP 768:JhgbjBw0d1w1NKfpba+BpVuSH8rRMKenziVH1akbR7id0/Xy:oXda1No1F9URMKeOKmJiC/C
- TLSH T132E2F1D9C02A47F0D63A6A73D4FB8F34648F049078479E51978653E8C54DCAA1CA3E6B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000058
- Size 18KB
- SHA256 0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a
- MD5 289ab8c3689e58c84c061039efc15d3a
- SHA1 9432c99c4915ea17dea97eec0bbd0f2fa6ff0943
- SHA512 4c0ea3fe4daefcd63f7337e7a8e86d169c0f4ce3543b12a69f9980a5bb598987521138454ad4df4474a1edb0fef0c38cfd2de312cb355c9c2665ea3445586787
- SSDEEP 384:UubNl0SziXg7u9lPk6A/BViMAf2zAeyrmYAUXKb+cu5E0GW6o6:dbj0S2XjRk6A+MAf2UeGIUEbM4WZ6
- TLSH T19182D1454A3D7753F235A6425DAEF8CAC2B5D42D56978C103BE2541A3DFF28E33109D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000059
- Size 152KB
- SHA256 8fcb6d9e1411dc75eb4004d805977d941094858b29bce622d2e547a2591a68b5
- MD5 bfe638ee469c063dfdf3103d3a0454e6
- SHA1 0e942b8eaabc7eaf44703c8cbe240bb9c4085a58
- SHA512 6c1751f4c184c5a18da655510620f5084d27c4a82c579a406c6bf0e6ebf480d5b0b8a96e8ba3cce86545de81923479265daf6830e94ae2e223e76902e5f5feb4
- SSDEEP 3072:1MAOYqn3QJYTMa81veilookn64EUhOTa6xptODY8nCLs5Gu9:1MAOAJCMaMofn6chOBEFCL2
- TLSH T1ADE3023E6727B3F26AD453209DED00A3F553E93EF5CB5E8844EB309125B7B8A9408935
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005a
- Size 144KB
- SHA256 9fb345849ad76be9d44e914eae5fadf7beea0ca361e3b421067b7927b20c8c1e
- MD5 8a0a5e1f8b2ded60d26be83717a7f16c
- SHA1 636c342109e57e82410a430d96e0980e9a330bfc
- SHA512 3d138560919db066c4b36c7cdee74120a05983c8d12e7e18987a2fef4ed0d1c4e7f0170c727d278c1a26fcecdb9e27fe174250185f7d6f442e85ab158f771850
- SSDEEP 3072:Wjg3H+skHsB2DD9wfWwvPjHO1IfsJz/vquKyC4PZZ7mqiYICn6GX:ssHSsBKD2fW16sJzK/xYZpxiYIC6GX
- TLSH T1DEE312285EAE1BCB166E87431F729D1F8CC612D852A32F696578950CB1F3414AECB162
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005b
- Size 26KB
- SHA256 4ef9cd1d908a8771e3b3147853428255e09c0f74360ddb02ab4917ba9fea7e81
- MD5 433293932aa2ebec3abac766857e2e07
- SHA1 2db8c9395c9299f66304e3a8a692c5930d83f7cc
- SHA512 73eff6d1a208b59e785dbdfef4da53fbb609af3401962bdd6c6f0643c382fb786344f09847b8e8157de7f3a4ef64d2575b3a3d94c6cc869a7ed4137871903d6f
- SSDEEP 768:yq8oFnofu7LdkroTDPPgS+ixnXuL417iRqd:PFofSLdNXPPgS+i5uLtRqd
- TLSH T1B5C2E14CAF890246C819A9F234F631AD3E76AFEA9DB98E54F0FC9276654C1E0457D180
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005c
- Size 24KB
- SHA256 80b234172b8143469f700ba151eb6496a5f698870df787ed6287827e9d1ff88e
- MD5 2df409e67db3fb45e569d94bad058216
- SHA1 c2a0ee795d443ef390d9c5342fb541f7f86d7407
- SHA512 df6f6c0aa3dfd6d6206a7e7859a3dabe36efeb7d4cfd61b09caef408d2b2339f602012200501a31ad11f6547324238817864885ffc6821edc8b07ee597438789
- SSDEEP 768:jK+LLzl6DqtuUQysKVEYKn2ZR7vT5W9NTMRV9:jXHl6+tSZ2/5mNTS9
- TLSH T153B2CF8446A0374CDF8A86221877DBB2F3A5DAF1B479D7AB1E7E44E30D96827004136E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005d
- Size 56KB
- SHA256 2689963dd06f9dd3114f4e1bd6a5f64516f207bdffefb674e06603bbe5ad1a5a
- MD5 5dd05ad835fa60735151855892e98a0a
- SHA1 97dc93b99b01d484d091f70fa9cb1789bb7e9385
- SHA512 0b139269020df3df18e6873f8cfc6b9cf5bb8ea428a1dcd56aaf1db7af977b547204d4e57cbd1924185d3cc35a97f829a07e5ec700461cd58b70820d2a172708
- SSDEEP 1536:Sa4VLNCNlJJRp1ZT1hwldEMqDsKxv25ehQXDny2tVH6Ya:SxVBCNRhZTiCn6/LtVaYa
- TLSH T16D43026F16D76A8D7B180C7BEEB543B0A852FC2E4D09D4A9880CE0997506DF703E599C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000060
- Size 20KB
- SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
- MD5 8bd8220ca4c1c9bf2756086b9cdd2737
- SHA1 c4b09065bdb49f26cb911e6c724d49cdaa771b6d
- SHA512 16c22bb9f89d11df3db453ab71365fd27de31ffe97b1159b5ba940932773b0c4fd02903d9ed55cb1f05eb88ede1b3561ee555e90a0a592abda4f826ebe5eb691
- SSDEEP 384:BoikZS4VhesCQMQABVDUA+6SxKg8Z848u3eI2Vci2jRYxqEafv:dGcsCQMQCVDUA+VxKg8Zv8VGi6GPan
- TLSH T11E92E17988A32D89689D4E44A3FF6B5A5E09C94B1D2F05FE59181CC863D4E8BFC2C45C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000061
- Size 1024KB
- SHA256 51b078ac825139ddced1a4a53a029303fb90f2227082414f8ad4a0ebfc574e13
- MD5 47992704d4daff5f88e3881fe17a8944
- SHA1 7afebbb6547e49752ed0bcf387d9e9fa71eeb618
- SHA512 b3d29c5576c402ee6751f9f8d30671f74e72fa098eccb3adc197be0578ca9d6b0c136ffde85b22e96e1c22ad2dd41279125a66099290b1e5ab58bee491e8f669
- SSDEEP 24576:1AfI+hFJC5AfBblZlmUKzj6OPl5AbiQBE2Toij//bmgc:OQ+hFwalZlAPzQBE2ToiL/bXc
- TLSH T162252369AB1C6805D92F527421D3630481BAD3CC436CA6CB2A3E1BDBFD91FD84E61E51
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000066
- Size 24KB
- SHA256 11a4611fb97bb9fa87f10c539bf468dee12c54f5243403732e0c5739abf38e58
- MD5 07edff631e3021edf8c9327639582699
- SHA1 897330f7bbe98e5847a9a022d7085a1d00d9cfa7
- SHA512 723d668696a3b261ffc2d4b4cea79bf0043f0647091957363b0b5983783aafcb82f9aa89319c55bb03ef84023a426379e38ae5cca99e78100ea37e21926979f4
- SSDEEP 768:n2qo4tRG1z49mnr0/AlzNRu0nNtYKrEYrx2bkq:n2qTtRn9mnr0/ABa0LrAb9
- TLSH T139B2E048670FD56BA450BB1929A8FCC50A880E301E584DB90BDA53C6BA98CFC9456BFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006a
- Size 77KB
- SHA256 f6565c7c659af62ede91fcc1e5d0eafb1e4a17cff47b679404430611d1df8ff3
- MD5 1843cb2dc07ba42607e08a807a4fe8ac
- SHA1 da83afd52ad810d130d9a3d4c46de8acf7a75de2
- SHA512 78ef162ad39a36fc4570074a86ea438c59532300bfd923dae961eb6a1bb0856b233ec5513bb3e9b39698bc0deca506ee66b255fd5f5ae2324963a9c3beb7a62d
- SSDEEP 1536:n0+OVLCyp0bQ8e9HnGzlIknABSxAQ/qCIBVkEmhQrod1TFjqHXVrHmfmUYFVaow:0+cLZ0bQ8e9mzlI7RRV5lod1hINHmfWm
- TLSH T19D7312C936FC3827ADF8378D52A079D1F1A134D626F74F0C01BC76294F0555AB1899B6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006b
- Size 74KB
- SHA256 70e4d628843c8aa128f28b04653deba8bc351b4b868d4d6e9ada67a3e2cfb400
- MD5 5c1cb34c1dd3766326afedfbef9f4aab
- SHA1 da51bf4e974c86eddbca6e3b7e07967b21a08367
- SHA512 a42ca1fe34d594fa550c9f806022d3c3674a7f03ccf0359b1bf623883b807fad668fdb2a05e89e4335a98a88bb94a8f9b47423e22f2bc9d882899ed6ff26de5c
- SSDEEP 1536:sl9xog1rbd61Os/oqNREWWFkSXI0SlxUbW8uIl/7SpLP/v9:s5Fp6l/RvWFkSu/d7Il8Pd
- TLSH T1DB730260BEEE2E1A9C337F0F5D94C9852562FE9B60CF16EC4FE44D98D15C1E682402A6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006d
- Size 18KB
- SHA256 12651915a13e8209ae0fe93c3c1f530c7a9082c31052f6f0ee99e7fd2a761605
- MD5 ab1bf3a4ce9ce3ae8f18d9b75b08c3a7
- SHA1 00bf903a5dcd1b316c3e7b0a33de489d5fb5fbbf
- SHA512 09d7f811663b422bdf6f102a6f97f4b801f331b26dc963b2e90e63cfbcbee96df8307795b196667a0b59e5b260a2b2222d3d12ea37429fe7049b0c7bc7a2403f
- SSDEEP 384:iHlGWlLX8trV5l3sWzRPGL5NqHi5gZNMgFE7akIxYhVQIHIFx/u2X:iHlGwGh8WzxGL5gHi5eMgF70XoDnX
- TLSH T17A82D076CDB9EAAB52B790178A48A2CC362B03CD4249D12B121FE1215C337BD3569D9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000072
- Size 45KB
- SHA256 ed38fde59d0b0265b72dabe70c49f155afb7e6b18c4f264f3de892ebd0e42f53
- MD5 05dd94391310ce24b0a8ab24006a8461
- SHA1 8a4089395e9198b1b4cca0be4f7db3a4a49bd23a
- SHA512 2d9d6a68e2cc023cfcfdb8a7c4737f91d62c791b15a97031ac2bee4f1dfd66c7c46eb46b3e17db0de7e8866c2a981169d4e538685acb942904e30084f80f004d
- SSDEEP 768:w+L/Z99aJWffdrqu6NN95JCHuYhk8YS3OMX5H4l//3+oHwREhjVUDJtP3R:wOIJWn96z9vzcYS3OMXp4ln3/mb/R
- TLSH T19223D0CF83D4783268B9E8BE5924AF9BF344CEDA468B41E80A6007497DD535E1C7258F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000073
- Size 47KB
- SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
- MD5 dcf31ebe107435bd68e0164d59e19b87
- SHA1 b68160c9333af833fe483928b3ef7128c07a56a0
- SHA512 130cd52c3cccc36a7029bf92b2ddb363b8b36d206454aacc246739919552fccec5cacbad615ba4ac3817da3e83239371fe51324bdadd08357e3495087f62cb08
- SSDEEP 768:Jzqdwl5YV7FVmpudK5a8dF8D8Z7J78VGnNFZEKh02dmSTPe9UiallHcOEi2c0NC1:9q+SYuMaVwZ7oGRNh02dd6UialBcOEpE
- TLSH T11623F218F29471F7EDECD4D500A18C72BAA528D442F116ED07B8D53CA36CA817A729FB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000075
- Size 22KB
- SHA256 40826852cedc2a5b25236783adced1e44a9bee2c9024b15904c8c443840f90ab
- MD5 d25a879f84fae76b3d4f72f0b21ff67b
- SHA1 19bc5e357eb9983ce575f69706b8bdc2f2a44dc6
- SHA512 7a07c6276630348f8eb6368756ddc149b86ac2623dcc233c20abc0fad54433c1e3464e6af84a2b9aae1105a93b5afa3e83058c3675d1d3b045f647705ae5f69a
- SSDEEP 384:BeK9RG/lLhZKCJucI0U5Nub7TySvoTQvA1YloTGymoGsmhL8E:BP7+lLhICITfCnybkS648JhIE
- TLSH T13BA2E13B28A2E821C43ACD37318B71F0642BC9048913AF1E690FD58840A23BD3DE9A35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000076
- Size 21KB
- SHA256 e6c563d8ffea759949ca06a6701f62f5c7f239ee11d8ed202bd9f9f88b039bad
- MD5 280aa23920327c5f00ee933ba33397f5
- SHA1 f0a1e4ee76fbc5710497ff640cfb192ab108b83b
- SHA512 2a3e4998274a4ca7abc30a52b42c69176a49d051f1c61dc5965879f4973b78064e240fbd017aa1a33ce9b60c68fbe1d8e136007e693241432ea7b0784aa31e32
- SSDEEP 384:EljIIzaIKDZ6nJ50klE7Ff1MUzAqX9Jj/IZM3wrmGT5mcvtNgQgBu9lFWqW1lh9a:EljIRIhJ/mp17zRXyM3ylT51vtNqjhta
- TLSH T1BBA2E146CDDAAC477FAD22816A0A75AFD99B2DC05F91DC410A809102F1F1CD5B8C5EEA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 1KB
- SHA256 a33487af23c03067a9b99b90ca9102460d5da18e31b42bf7aa4844c89e0e2d6e
- MD5 5027ef703f95e342d82fc4d6fde2f924
- SHA1 f9e50dc62935dadbc25bedbeea095335a0072a09
- SHA512 b28ab0863d77bd3dd07080d97eefa0d74237f947d9ff3e3cd14264601c84f326f851ad9bd80264867ef3ad3288c383ba939f13d97e2816afd8fc1fd3f59121ac
- TLSH T17321005DC09D6390FF18907A4AC37FADB4F49729C7770F8224635A7385BA3A041042EB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\temp-index
- Size 3KB
- SHA256 45d0f19b3be15abac82d07f116d492a7610082a8dc1c5227fb6ac18e144783d7
- MD5 574a9ffe4c5fbad14f9ab0b1046b3bea
- SHA1 07c4a315f4a8a9eabfb896ee605b7d37ed164d0a
- SHA512 a526d5d0c739b92ddb1dc50a9a06f726a1477b4cd7b907e859687d13fb654cde8ae378e0332100ce1bc5416441c4e7a54edc9370d2e331b6701bbaade2f80ed4
- TLSH T19B71CEBD83DC5A50EFA48A35E9966E5C7C66D22AB6260F4325C66F32CDE73D20001287
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 48B
- SHA256 e1d2d80990216b01aa331c3ecaf7f5c3f7ca8a77b952f82ca5d85fe1cc6e2bbd
- MD5 f6273c7efa8f591e3ee2e9578156882f
- SHA1 d05a98d3e170849de719c79c2aeadc5c8fb96ad4
- SHA512 e8d7caf9569432f0974f8e58d99c8c9e56a67e70deae8eda851117beee1a45fa760fcd1bbbd7a3ff480290b9bbbf59463b69276099079945d72db0d470a65375
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DawnGraphiteCache\index
- Size 256KB
- SHA256 cc56a4316839e3460702d85e920559aede5f0ebc02a2024da475883946fa189e
- MD5 cbcc50fb1836c5e03a3ae8d1955e31e3
- SHA1 ad2284bab041934fcedf8bf5d2195de45f492c44
- SHA512 e9f090d1814b7dfee329087700f2c961740060e33da4c2e2edc50c1fd3b1d4e5b0775439c35a4e0a070f87c24b7db674f1b5d617dc9c7b66fd4f577f80d876ea
- SSDEEP 3:LstlNllklkXlayll:LsX3lPaC
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata
- Size 9KB
- SHA256 2f8e54d837cfa5120824b5509592c95a3825af02685917939d9a2053c4835dc0
- MD5 9d66adeee2261e06eb113719a631437d
- SHA1 5ce6914bb7e007f1b1c7caa56713ecc7ca11652c
- SHA512 3a61903545470b367ae84e8ee96619605ce2e80da23e576cc2d8ad2f2f2a0d3cb6e70fe9834cc7fff9d217e78033b9a83b0172cc09d88bbcaad07579d1166e36
- SSDEEP 192:zNnrNOHRS02wTbGCYX2Ip4m06Cj+8orInrgw:ZnrORMobGCYX2Ip4nrj0rInrgw
- TLSH T163122BDF8F249502FF829DB0D2E9FD46FE3A57D758A2D5A4A4B2A3E015017D3671800D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extension Rules\MANIFEST-000001
- Size 41B
- SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
- MD5 5af87dfd673ba2115e2fcf5cfdb727ab
- SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
- SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon128.png
- Size 2KB
- SHA256 98df639f1a1cfaba805048435ac4b39b4c41cbce99868cd1799ab49df690dfac
- MD5 886b7647b7ea99e88e0d7b72de225936
- SHA1 dbf754e40003d6de6ff3db665fb62f192ee7b05b
- SHA512 d06ed157d8fe456be028ddb4c203303658704682e9249a6fbb49d2fe55a578d5bf3acfdc09515cefd5c4f028a520820b43657f0ae9cb207ad4e1abc3215749d7
- TLSH T1F4515B3DD1CCA479EB270C68685471D4325E2E9C608B7878235CD3D17BF7AA118AE1D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon128d.png
- Size 2KB
- SHA256 ac5adbd6ae46119ef69fdc7bb775fe8806f931ecd20333e329075a850ddd56c6
- MD5 8634ffb999e1d5b360ec7775c82482b1
- SHA1 154e6c6b4f6c36187590960134c9def555f6384f
- SHA512 27180f960339469b7415c87703cfffdc27f5a4e371cdd15edf98c2d61ee83c9b67a8d25145ab34af58c33ae9c4d1a8406ce6e7f7e03be09e244d70a015740da3
- TLSH T1AB514BB792C36AFB1D577812EC2725270C51B0D8790811DB41B06A2B2BEF489BCDDA87
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon16.png
- Size 380B
- SHA256 4dbd44358873eff6ad0786a3c56e9a8edbdb52e6e61d3818ba77bd948bf56721
- MD5 5daee146cab3f5e24fc7547f917ada2d
- SHA1 a2293b57152c9585747805a174ab0d5622212a12
- SHA512 f690e629bb4f1df275d1556e193a1848db277c4f60536bcf765ba4d2bc38dd7754600a2bc1d3003e8559b524d7860e43c1a21d3ec8b546dea0d2c39f631e0e91
- TLSH T1C4E0F827A3182ABA9885C2612A3AD04079B06B4E81EAC00261A9EA26121EE4D02C4433
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon16d.png
- Size 473B
- SHA256 bda87a28bddba2113f6ac94527bb2a977b8171e8b4faacc3377ca98e62cd1ce7
- MD5 95a2e5709862bc888209f9a04976ebbb
- SHA1 5ee8a68168087a44faec7848d5686344b193d88a
- SHA512 1e0b6eb020afc7b9d86b5e77b1ef5f6d68a5f7733c082023bd256bcc376067feeb36ab94369f9b15ecca24fc51e50e34662805ee06c668d9a40afdb54b3bf40e
- TLSH T16CF0D49232626C2BC7093F958433D325973A631C0D6900C8270B6E7962593595455AAA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon32.png
- Size 685B
- SHA256 05e9b89b0dd2a5d9975e75e5492deeca3d97ed32e2c29c8375a402af2e5d5d6f
- MD5 bb750a8fefcaaf09647312f5eea75863
- SHA1 dad016101aea9aa18c651810f81433fae1d379a4
- SHA512 f1a9c25df8c90342f66fbbb9058fee4063561d23fe6e717fd9561ea0b6862ff4335bc1cdb385edab08e75a28d281bb685e1cabafb42a6f0a090c7916ee9eb30d
- TLSH T1390183EF214DDC54E3A47EE11F54F496AC963822A2E86A184BC5BD1199F9A033150F98
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon32d.png
- Size 736B
- SHA256 5f0ccc21ae979eb091735415a44950c27c34c8fd71db21062b92d5e67a8b48d6
- MD5 2d42e8307c409fa7b2ca63e34b6bd5a2
- SHA1 15dca7a778e06d114772717a7bfea3d5002e3ac2
- SHA512 a9440376d959f036fd7add2f9c009aa34978b62f723d5e3ffeb78e4bd36ec6784ce868570e346c7882b178fa9c47335a2faefdec9adfba6da52403bfc8534f1b
- TLSH T1CD0199D39647460FFD815F5175598529FD136980537CCC280A85D750B31FE47A4B8315
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon48.png
- Size 1KB
- SHA256 38d50b35f2ae585221fac96a8f4cc505636007836dc58653c0dac1996376c04c
- MD5 3f1f80808e17dfc5f108c441c887b033
- SHA1 f429409ad88edbf603fb49d7f7cff7be5251791f
- SHA512 ec0b3a5d1cf1a2022ba3529e2ba4b762f04745ee9963e8ed55f19e568720f12c68fdb6498e8942dd7897ff0802098bf5c5a2b69667938ff8a88ceac00c0343c1
- TLSH T1DE11D8D2280BCAD14D4330E1C7FCEA845076E554E78D9B396A50DCBFA405E0FCB89207
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon48d.png
- Size 1KB
- SHA256 1fcdcdb7e228b8576257e4dbc1ed6d444ccc1efbef204ad5f38877d2ee6b2fe6
- MD5 9e931ef012af93c5cb6692cf8dc859d4
- SHA1 dc8812152c9961a88d00884d3dba441080934958
- SHA512 2a720453bf36f490d37aba84bc7e4ba6feb508499d2d6a0c9405d3e5bcbe2a2650b45dc2d4e45d850303151226826222be5277bb3d5a24ccff657af010a9ed0c
- TLSH T18311935B16BA71B5E89D6A3BD2018B420BF7C4805E75EBA40060E4206E66E06D6BC469
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon64.png
- Size 1KB
- SHA256 d221aa39490206d87838d96bfb331cca927f4977eea95f39ba4ec7eddb3d811e
- MD5 ae50649108818422fb36afbaabdde751
- SHA1 b229d58d56d373ee491b1234a1190c95d624e105
- SHA512 2c3ddafbca7865285f5752879d9730fef1764000052b4e30e7328e0599f96f3a8638e19e80914bf1308cdd54e05f8b4eaede051c528f6db433f27fa324b9b221
- TLSH T120210834434A13B7D3926BF28F0204D24F7731209E77C26AE33BD6284631B5E97AE111
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon64d.png
- Size 1KB
- SHA256 9eae73b3b0009c52fcbc872a1a1e01c7ce2077eace1e68ca8788dc3937f9314e
- MD5 94784af23177478ac3cab86fee46388c
- SHA1 350119c62558cbc7821609f0f04d274ff7620326
- SHA512 e2bf5972e0a9558f00325c81de56c54609c0a4ef3bef57be3d7e0fc681bb37b36e3e4e3f65631814ec20fce66c94bf3637c711fa00761dcfbbc2bdac20720b9f
- TLSH T1C421E98E68140ACE4BC06375171551BBCDA6221ACFC37DFDFA1C142CBC697308A74597
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\js\background.js
- Size 29KB
- SHA256 5de032325a3a73a85ee4dd34b7b4e3fe82814ce732695fac04a74f82c14dac43
- MD5 613e3083478fadd79197c25dbd127923
- SHA1 f9f1a2a907c6f8760077ce75e851372bbb559f97
- SHA512 aeeb5a8008f2ab6e7f0f560fb04e2eaaa697a50b9871118df83d6df204b99b5200b8a47ec0c8df8e2357daec7a049693c0d74ce632fac009273171b4f9a0b144
- SSDEEP 384:QLT+ye9CjkWth175q8ylN+NYzzKZpCIDdHfCzljGFOwrsmg7JFpZwFvfrc3ltUzP:wa9CRh1Nq8wzlht7JKfb7zJhs7kI0HD
- TLSH T1C2D2948E71E2F6E5E373E5EA40EB144EF22F5569680D44C8A974F5C1287A4CD8233B27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\js\content-script.js
- Size 47KB
- SHA256 25d3be12240dbf19edacf2c7ee581386ff8a22edf04f59b1cb094b0d69b98035
- MD5 f79e266e2d903bf2dadf5678740fff40
- SHA1 cb566fbb8f35926c53c153c364e4e4b12523b4c5
- SHA512 32dbd78ce18a684c424547e04b2878eab302bc029cb23a6265bae41e8243c331e22eb7e885885e886ac7235f05ff1ede31b3d79403e7b243b44d547afaaf67bf
- SSDEEP 768:HgwHu/7kJ8oFW0iffPxhzKC1Rh0rd5sa2jUUDjTx50GGJK1whFDr0lPMNBH1n03u:HE/7kJXFW0inPTzKC1Rud52jU/hv9mXO
- TLSH T15A23D75E31C4AAF2EAA991A518F6604FB137552C6808409CBD74F8CE18BDECC527377A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.10_0\img\icon16_disabled.png
- Size 473B
- SHA256 b2f777afd5e7728cb250a103eb5c48dfcceec0891a4e75c0c7abdfa04bb592ba
- MD5 9fc924396b88dfd0d84db1d817ae592b
- SHA1 6a575a55e733a3048db91c1993338676bfa0817b
- SHA512 328859ff8e620362358aa2e1947a1ba55580f1df3ca6ab1522ae072ba509bbd393aea680c3410d121bf76fcf16c6127474c8c90f123b06d6207ecff86b04f63a
- TLSH T137F0549273A8B8B4D0434F7B2A0AD088A08E977C8880E03C2411C5738204572C5D5B71
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.10_0\js\bg.js
- Size 23KB
- SHA256 a7f9a432f5fda9bb103e5753b55a875cb016832c8287aa23a671409b499f9dae
- MD5 caced995fe75fda1fac65ea012bff368
- SHA1 e900428092fb78a2bd8843a74c82ba55201bfb0a
- SHA512 44aea672c96e550ab4eee1403b86979e0162b0dd6040ccaafa24e6e375ae5afe7ac80df48cdd0751b658e3ed6b8dc73a75c1e6592bc4f29967b1c6e2efa7b99f
- SSDEEP 384:9yL3ltUzXHv9qQhUzK0s/Woy+K1JHqTHUc4X1gMOeuo5CifmVGc9ndGQW5hNxKWs:NHwAPK1sx4X1gMOVocSmVGcTGQkxKIIZ
- TLSH T116B2E80E20F6D2F1D8B8D5DB98E2262F6227C53E750840C46A78B51D24775CF8B35BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.10_0\js\content.js
- Size 10KB
- SHA256 a01757d2215cbfc4c9ded5c2af2fee2fce10e697a84600e34c156359f00441aa
- MD5 b2e1418ca03f4da4c85321970b0e481b
- SHA1 945dafec072c195d88cf4a9702da7e407c8ddade
- SHA512 4ed0875018ed6b4bf41c4760572566c8002e28cb4fd30e687ff0d582c16acf876d4a3683ab1a6e5588c7b19c1a6077ea37712fcdae1a0863006142305d236378
- SSDEEP 192:8cK39eK/GhVJWwW+5T3nWeW9nWkWPS4zBxD+g0SSZkH58JfDWez2VIWsxFlVaDAI:8H3ltUzXHv9qQhUzK2vZbr9kWtMePvG
- TLSH T15A22935F40F5C3F6E8B9D9CFA8D1596FA11BC1BFA80851CC0EB8A65924736CC8221727
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\index.ts-260dceed.js
- Size 15KB
- SHA256 f20d5eb98360d0cd17b7d62e93ae7e8356f1a93c8d37cfc801fb4d522ecb07a9
- MD5 1847e7bf0eaea46cc4a095f4e664c209
- SHA1 34ad153addf23e120588dc3d81b48e05ba4e0bec
- SHA512 af3d43acc75ec19274760ce3fdcbe0356df0838bcb7f406ba89a8ea99d0394ce2f85a93bdea4beb6e38ca4d28dc5ba19bf39e3aae03870c56d955414b81c08f4
- SSDEEP 384:3G1hAHHl0y2hTBOtlLsggxpKxMjGjs1DnhmvNvaXL:uAHHlyKAggxYxGGjcDhQvaXL
- TLSH T1C86229196328213C7D2384EFE9E1B614B21421C6FB2FDAA2F59E542137D56D786F3E08
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\index.ts-loader-a60d29f1.js
- Size 341B
- SHA256 a60d29f174a970dc8ed56f59f8309def79df9c9e55305f4647584dddcb4c55d4
- MD5 cb5447d2a82310d1eb614a274511b3e6
- SHA1 a286030f45baad79db62cb72dce8df852347d571
- SHA512 8f2b6d64753f98a874f61f1eab6b9eaf1df9000f8ab6a530831f95d2c64825623fcd5584da773b5494da325c2ba629f6312d1c9e7815bb8181c67937b74fe4be
- TLSH T1C9E0200F8DB14102037A075DDA1B50546136C30A5194FCDE3B7DD6151FC375A46497CC
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\messages-7de30af4.js
- Size 24KB
- SHA256 f4b79bdf60eefaf2594b48a6d37f7dcc3f95bb441608af657a590a54c436ae34
- MD5 5604176f12bfcb5ca185b1ea263bc79b
- SHA1 ec6f1920b552a23a84c34bf1bf38b7cb48134a5c
- SHA512 6d9a387459d042f7f245666afae0c8bb346f2da4435a611d926c75a3292e3328bc8c98581cc430751c33697a809d4e7dbfb1b497e1c001c080b8a9d81d9caf18
- SSDEEP 768:SYUjGtRJn44il7UmOv6Ms6Ry9X95nY7kmXjNfBEKF:SYSEl4p+ps6R+G7kmXjNfBE2
- TLSH T1E4B260CC7AD5B82A53A77574503F508BF23A5D64A80C8021F149F5E67CBD90D8A2BFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\types-57a07714.js
- Size 10KB
- SHA256 e1ef5fe357db841dc2f81edc4df2dfbe40253fdb4b6f0e53972a66465cb30736
- MD5 dd2ffd222b71aa71c46ce0db72966630
- SHA1 b16c192089d7c966906fc8dc90ee6dab367eabdb
- SHA512 742bc0f8702977a11aa6404732dd850174922c59bdbd3edc64bfb92a10111804c90ea1892b57db910874b923bc3c8b35c461c0100db8e883436200484297e6c9
- SSDEEP 192:6jlp2tMQmo6mj2e0pygTnTipwaIAZ4G7mO7Byg7RRzrJXrdxx8nsuBZ9SrJzUk:Ap8MQ2C2qgTeIAZ4s9VRzrlrdxxFa9S3
- TLSH T15E32B4D931C1B172536B00BA50AF4206F374A584740B85A1E1ADFCEE3E354AE06BBD7D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\service-worker-loader.js
- Size 40B
- SHA256 decb5dd8ecd9145e0b252d1e43dd07567af497d9a3343cc29034f4b87aaf3459
- MD5 1077deb424d94ad63b5440c32531e91c
- SHA1 d075cfaea0ce1568bf366c39e0b543489c3ed306
- SHA512 4acc88051eac881e000b69bdf1f1d28882bef21dec33bfdc591822c740f8eddfd13932f128064417723b2739b68e410df82fad0ff222db206dd68a6b59f67eb1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-128.png
- Size 4KB
- SHA256 5c5caac13fe50b3de5fe354c71b38ef04ddeeb2ecf9dad1da94e873cd8f2bfa9
- MD5 cdb813ac53053bf01ffa5664fb35381a
- SHA1 521bd5c5813d4e16ec89d2c14f99902eb870e03a
- SHA512 728c8595f5620db0e110674469ebdf441f4e0dac12979f816de1143cb245e0cb6494e31378be7e4b3dd2328af83df0fbf25f681a4b275bd81b7f1df2900e8d3f
- SSDEEP 96:j2AZsS0V2nq4KuGwu26NNmh+3IT6B9vOgj3OMFKpOLs0N2sYbeY/+:qcsdwnq45Giay+N6eXhgsVY2
- TLSH T1E9917E7AD89EF9E5A1DB1F25F22C876CD65367AC0750C09FB68B20720AB034058F5B92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-16.png
- Size 548B
- SHA256 65cda55dae5d579693d846ccd067abdf84a8eae6f3301a6c869e5fdd474f9e6e
- MD5 c399f7dc96215eefa5b23623147cb3cc
- SHA1 f307264604b757ba1dc858cb38f9e63a31845061
- SHA512 afeb7e99c5d3eb5c5935e255bb444b8bc9f5758a1d9b48f4da3ff0d48c5141912d9660296fdc67c0633940923c3ea905c758fe8e9c295f4c11919dfd4692ed5f
- TLSH T1C1F02645B3B439168917F1135D07D1F1ACD3110D02F5550D043DE1A2F29553725B5622
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-32.png
- Size 1KB
- SHA256 2bb9802966cd8139ece9da6e69cbf96b5ba353b10b5583db283a7a83c133c82e
- MD5 112f4502ea772d7c06d680d98f34ffca
- SHA1 d40654b6035bd7f19e870cb61c81d4e8bbb5521a
- SHA512 d151aa253ff5567534bc1e41bac80fe2a46b761fd4a4b3a0c11b9c637460b2409486d2a64a0a9a93732b7a0aa665dd69e156ea60549e5b0b779429e9d55b1b59
- TLSH T1BF1196817125746DCCE50E27DC064645899461EA8545DED51CF27C4FCA469892703895
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-48.png
- Size 1KB
- SHA256 95df8447478a8af7bbb652c37835a5843f964fe10ff31d2c3036075c81e742c5
- MD5 fd5beb6fbffd514ca116db3119d77d0e
- SHA1 e987ba8faa200e1bb837abccfb21f35fe2017682
- SHA512 f5460ff1e893a7d79d932a7c2f01c3528e419bfee06a92a2a6a8df1faa1d41e44cfc6fae5749cf3526db3884651919a60a56d0273155d63e1fbdc9400c7a9158
- TLSH T11231B6EDF6845EB2E41B34526492106F247C53A64B6A8C39584FCA75207E4D40F4873B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\background.js
- Size 142KB
- SHA256 4084a4a7f64bc033f6f1c1eec636e0c0c3e3a48bce5757b2b80da1fdddd8192b
- MD5 9aba998a4c8a5e874720c35ddfafdb71
- SHA1 34a26704c1c111f9030c09039ece4e6f4113faa7
- SHA512 b80231462b8f3d0f0daef3575bab68671dee56ebc1a55bbd1156f653a9d0ff5eed0d40a05c6a4ee602b857ff1799309e5fcce2177283189e842a14f475f799d5
- SSDEEP 3072:XnzWldaDih9tQ35uhVWVLmAj795oy2/tmkTIe:X6nT4g/tmkUe
- TLSH T183E30988B7A5B0A143A261EA106B540FF239941D7C0C446CF394D8EB2D7E9CD95BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\content-script.js
- Size 180B
- SHA256 68f41e053b7d6f9a68a168f3ed161f661ea8f1a88a86b2a3e0cc0a0b9674e694
- MD5 f423ec307fd0dc80bede6bcde341efaf
- SHA1 b6b1dce2dc4fcd63afde5c93ce6a5751446ece4c
- SHA512 b07ff72a742de505ffd8c1d55fd31e5992a2df34c1ef4dc47058400659fbd1efb364befaca277ca969c5dbc9b71d7477f444e119d75973c7ad970bc6eef166ac
- TLSH T198C0801C7CE6557C520415DBB477D7D4A65511343011F4411DEC8C7D7964F594C2FB44
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\icons\icon128.png
- Size 12KB
- SHA256 0014790e6d03258d6361bca3ac9e10f5f0dd77723ddbb0028894fde5b5e134f9
- MD5 cb89a3e27d5007ea1bcc8f64a4d896d8
- SHA1 e09697fbf1b5356036fdfe1ee97f62534968c238
- SHA512 c19ba3b4f080cc49aa2c3a9982dd8f177c22633d70af81ad119f02cf9178e3b309e2d7c95808349f7cea7b797c4f450f1beed7789a1fd82dc6d0914cf75c2a7e
- SSDEEP 384:E0KlSK4wFT05Mb/zaC+9cslUpvzHhd7Is:ylSK4W0Cb/z/ecuUp7Hz7Is
- TLSH T19242B014C9A38659F7636061494972B1D7CEBC109B93AF5982AEDF6305B3CF0ED0DB88
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\icons\icon32.png
- Size 1KB
- SHA256 e51983632ad274ced444ed6c51233c693ee619df7ded05d906f762c1d407085a
- MD5 688ecbf30ba595aa125531610afb846e
- SHA1 1db5e669f947d728344481b149805b4a71d96088
- SHA512 910a92747456a0e12ae05cbb3d1b9c13ea9d8b4a1905287871cd51568b457ac725501a0610395d5e01ba6b69b771207d04f827a0a02a7c8f69e2c73349949f6f
- TLSH T1B73119AF1B607FA9806B05E958718C587FB38129727CA97E0A296FB90C1A81021C5DCF
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\message-hook.js
- Size 1KB
- SHA256 003e4c87dadbb4037435d5d44d0441d2a90a3d5a66a58e748cdbf0c5ee0c082d
- MD5 4c240a4b73afb5ee5280e07a7b913f15
- SHA1 eb443977b05d0c57a1c05e4db193e28ae1bdf2d1
- SHA512 920d16ecb6dbc6af91de501bab79499b85a1000c6fc1052bcddeff6e4b28ace2b7361cbe342181fc6c7f35f27464e1569e72a62bbd844e6f220feef733860d7f
- TLSH T111118290BE51E5B967A2159142F39088F2347230F0207160362C9DFA84268D664F732E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\rules.json
- Size 661B
- SHA256 a8981debaf5f3ed192b1e5043b551a19986dee7dbcdcf14e590b303de726b682
- MD5 cc99546e13d9179dfc00c57ffff8d0eb
- SHA1 4f67294a156ab571868455bcda59429de339e9e0
- SHA512 b1d31d275cd5e660a30ab2487ccd5335653d8b3f15ee642fad9f29890a4219d010c12a8c19ec0d93694448e6e98c032e4b01957175d8fe941da3183d2ba83237
- TLSH T13E012826DC765D1306877238C1654A447470824BAD746C1F3E8C843F9F9E27DABA978D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\ebkihbjamcljmddijijlfachpgphldll\1.1.0_0\icons\icon16.png
- Size 382B
- SHA256 bd01d030dd30b3dfc9aa88373a2bebb6f2a1094c779de2089a4620aea38ed89c
- MD5 22ce1407dec404cf933e73d65f5e25ab
- SHA1 f1cad32a80564853e41e85b900536ff51e5afa3c
- SHA512 b71e006592c8c5397d15d415dbd9a9a2e3b40065799f17150a7d911f3ffad8eadefa01044271b91fc6b659aa1907f077b6a5c440a936f11c5d3c66168fb2562e
- TLSH T1F6E0F8C7BB92D9EC856F003B35C1D3748C960B2C83C30A00B08338B9020BA0C0CA812B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\ebkihbjamcljmddijijlfachpgphldll\1.1.0_0\icons\icon32.png
- Size 838B
- SHA256 7c1f2d59fb7e599f573ba099b02958950fc4752d901afc208703d71970c76788
- MD5 2e558eea396c88adf8dbbea54ce77cf2
- SHA1 c9a1a24044e8e7f16079e05d4b61d3c434c5c8f4
- SHA512 d64173519bc773654443994f6d91abce215aecb05b28b09cc58a036fe8616712e80dba336712f080767b30060ab2714e3fb6ac5740997199ea2944f6b93ab7a8
- TLSH T1410186D587EA9C68C57D03735137229B55B91068A902D70C546CB4AA1A3C3FA95CA6C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\ebkihbjamcljmddijijlfachpgphldll\1.1.0_0\js\background.js
- Size 28KB
- SHA256 647816dcd98801fce8ede32fce34ffba723a072adfd21918a4d57b55ce38c75c
- MD5 1bdac59c39b1cb020ff89b19ca456f76
- SHA1 f54fce46b8d978781fd00a96133e1f383f5bea16
- SHA512 d3f5a0ec4171e23324ac151fa65f8a9c5f8d745e14ee165ee070dc69e95c4856da9ec3709d1a68e565b3b390416ecf5231f5d85aff79591e6c6c17a5e751422c
- SSDEEP 768:D+SRjM47vXByczljMDiMjAOOEgexo7kUL7fH:DrRwOzljMDTsODo7kyb
- TLSH T115D2A5CE71D2E6E5D377D5EA40AB148FB22F856A640D44C8A935F5C2287A4CDC233B27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\gbohaofhodnpniflcnancekmknlomeck\1.0.6_0\bg-wrapper.js
- Size 84B
- SHA256 0a48213b9a577ba7d1dad1f28e6d7394d6ec81ddb6a3d240b6fa21071a22243c
- MD5 63abc1bee2e752534021d902bf4c8319
- SHA1 e77685d175296c90f04bfb586f71df7fc5c1e44a
- SHA512 0f5c3f5e6fb161600ef9d046e387626150ce3acb5e8f1de5b48544fdc4eae2089f7715f2ec0cbd516d4c879b6b78d829a628118e367f6eafbe38f9850ccf0976
- TLSH T13CA024530C54401D103403370337033F71C7D1540703FFC03014D5771100D000C11C05
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\gbohaofhodnpniflcnancekmknlomeck\1.0.6_0\icons\icon16.png
- Size 472B
- SHA256 2cb1d9744090d7f664e24b316fbf5ae21f0558d2b79e41108a6edbaec3769fcf
- MD5 13cfc79adaa8ca12b874d8fe7fc27975
- SHA1 26ea913e198c5fb7748b7d7778472609e3330208
- SHA512 481e5fb1a253253ac1f7d0db8bbdb2a2b120cfad0d3afff951bc2f79be0afda73391bfebe9dbc51836014b101bdfdc02f8dec39ce1504c2446ca58b7fcbec71f
- TLSH T12BF05CE66B380032BA3442FB411201210DB0E08B83E244323B2F687EE52834583A27EA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\gbohaofhodnpniflcnancekmknlomeck\1.0.6_0\rules.json
- Size 316B
- SHA256 8b8dca5d206ffcfddfabdf3c0c90f97da2bc8c993675ce616891745413ac93a7
- MD5 e89a86961cc6a5125dbd885e8f8bad5b
- SHA1 a2849b637bcec9dd3460b262c7869d8075438096
- SHA512 9b2a87e5eb5ae4c399e8fc43acab07cb73bd3d9762e418b6b3b6e777d2d047f49c422ea9d1dab2b6da885c945b680d0d703f1e0b2e3dbf24d06b5d28bdfecb37
- TLSH T1A3E0C23ACA26AC1302F72338E6660A01E4B0032B111044173EBC405E1F7506CE60AF0E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\background.js
- Size 735B
- SHA256 93c5908715f38e0a9361cd604b45eb7632fb63d59b47fb66ec3f64479a8122a0
- MD5 e1342e9e545822ca7d800ab203df9389
- SHA1 957864e4cfd5e647c292a911afa4f35736e05a75
- SHA512 2e365bba8fa2bc6d67c05d3567bdaaac209d6130cd3cafb42a31e688fcf48c0342010efc7965d742722d857ed80aae25dd207c778e6f6fb3578edf2d53f4a4fb
- TLSH T1EF01107C7E045A7717D049CFBE1B80CF921ACB5A314FA3542A4AC298023D51F45FA1A0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\contentscript.js
- Size 9KB
- SHA256 afc9e94c84348039ca52b2a526fa0a5d9fa90745960e1f5d7a33d7db6f0f4fb1
- MD5 ea7d7a0a100a1dc2b9ed46666d2da999
- SHA1 27dcd923ea2614306615ebd029aba5451021a9bf
- SHA512 2692f43ebefc6fd6d01cfb37968dbd35322e18a255d09b4afa6a398440c6cb77c7ab78ec89f843c7778ca55e70a054257b57fee1093194eb76912232e361f455
- SSDEEP 192:s33H5of/j9GQofIcxA0Ar8IhL02iKLm2sdbFNfjF3mwKb7ioiOGII0GT6eue6Y3+:s3araSE2in2sdbnjFWhioivIBbeF62e9
- TLSH T16712E79B35D913310E9104AEAB1F31C4F668C06D6214D2B074EAC2593F64E2865FABEF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\contentstyle.css
- Size 289B
- SHA256 3cf5cd8dd8adec156df9718c22c4097564017202cbebfa4f6e9411e1f025f7ce
- MD5 522122a0455d27733369012dc01b1222
- SHA1 409b03ec5d296d910019503073c5c2127e7311e1
- SHA512 60108c1f508da30106af5d2c2864d042d46981dece183856c90d978579fa64c8bc4271e3347255f789e55ec3c0702facaeaf81bee337a4385c8d75d4f8081a96
- TLSH T175D0C283F0A0981A552B0626088D3174FDBD588067A539B628D0C2E8CA04A60F72B026
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\extension-router.js
- Size 3KB
- SHA256 01b584d910e977b659f25c219722b955394ab3a96f0adf350c9ff6d3bfbb0c89
- MD5 0f72d3140d0746a9300f2143a743084e
- SHA1 e7da1b49d2bbaf0f5e403fd4becf611089aeeee0
- SHA512 16058802869376901d3d2fe40f60c467f7b5f24566959c876abefd30f1e6d2690c9ef3f368de789e4f037e64300a6b4b6088fed0962f1326b38cdb418b043a87
- TLSH T10C51729C2CD620671269913D9B5F50897328DA1320ACFF41BCCCC66C0F99A26A5FE3E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\logo16.png
- Size 512B
- SHA256 6838b229e93ac9317f2f3689b9276cf14195bde5857e5be58c7770b56f7f4114
- MD5 72a9ae9b647b38a8e35b68e68d622034
- SHA1 78b130de613b4e62eed7997e0a72b66dafa32295
- SHA512 3d002f4ef3b47adc8d447934735ee07f3c4e3ab206a6d1e06d1ce6914617a73e32e7607e9a4a695f16d0697379e87d718d5bde613641127f1ec34dcea56318db
- TLSH T1A5F005A3B39C285CED5A400E4D7601502DF9B51F31E7DE4C91626135050F744078D67F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\options\migration.js
- Size 4KB
- SHA256 b5f52cb979fcd7e6643695a0a21de4e9fa3382eacae2e031ab5e6fdff5ca1d8f
- MD5 b0de393da323cde26ec4251b45b621c4
- SHA1 2cada64a0e95bbc279e8b3ad33a7033692628db5
- SHA512 0eb1de05969a92d382603fba06dc33eb3822a1169f981f6473285691df4f313b105877699bd15ef9d49a1dac338b1f5d3765b067a324eb6e8d06f27c38377e9c
- SSDEEP 96:O4s3HFKdk59+M/y5W6QqIkP2+U5qKJeLHcyFwY6uyep60yeS63yar:O33HxefNNn2+Uw/D6uyi60yh63yar
- TLSH T191A13EAC55D217210E96A77EAE5FB045723A814B600EFA01398F925C4F1D13F07AABFD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\pdfHandler.js
- Size 13KB
- SHA256 8dd4c5b505a11cc5cf80a92e26e2b377c170986ab2ff9ca2fcd5437cad684b94
- MD5 9de59a2015b98d3918bde9f40a871972
- SHA1 f24121c9c073f0be963d7b5d58c37b8f414d8329
- SHA512 4b04934d46925f587f16236a93a146f3b02cce8970fc6884b4e5d27ed7e58f73b0729035bb2f470d1ad88f013adc79738aba57a0aabf5eae0ba9855ff32d1a61
- SSDEEP 192:S33HXEVL4GJ5/ANLJ0IH/ozVxDlv10z344W2O1qaNLb2JsMLDsYiVZFkjFtOfKJr:S3n+LR64VFJqz34Maxb8lLDsYiy
- TLSH T1FA52765F29F521221A57616CEB1F65817622C05B9A78FE20788F82182F4D13D82BB7DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\preferences_schema.json
- Size 7KB
- SHA256 8a85e181564e9139f95f906ec2ee51fab1f7e1fbbf2886641f7ed8ddeb13305a
- MD5 189e29755a905279c1989baf070b60a2
- SHA1 be3199481e6670838b898acd4d95cd111e281b35
- SHA512 fc9b3d39d633fec9fbf3d867f655a9ab14e9bfa1ec34d4efcf75255d56db5ba435e37fc5abbdf53bc4279ab45534fd5c0672340d1a1fed66c5ef112669fa224a
- SSDEEP 96:acWd1siedNXgueUtnxMrk727/H4xj59LPGTGYgadOkbDdeca6:IsiqNenYy/k/ltk66
- TLSH T1D5F19F44E464EC73004592299CEE4984A730194F8A917C2A3ACC947C4F8EA7FC5FAFED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\preserve-referer.js
- Size 5KB
- SHA256 43534eeab004adef92dd18ec416557cd6e9e6f6773f0cc70bd163bc31f0e3656
- MD5 6358bc9b21ec92e4cb2e2c3bbcd6d8d7
- SHA1 8761f99eecd941155bc0c46483baea44be6b2e7a
- SHA512 2fc283fe3a2149eb67391681564be7997bcf321b89d0f362795eb6bc15559dca8d20e5cdbad1e5382b97d8cd595b8c7d6da47ef404521423e63e74defb180559
- SSDEEP 96:F4s3HFKOKveVzWi4Q4s6Ys5Cvpj4JB5KHQ/2tmD5bT5+dwzVoALE:F33HOUzN4V54svKMTsdaooE
- TLSH T183C1859B59C62532091711A5FF2FD38E761988263030EA33305D82AA1F74EB8D2B5BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\suppress-update.js
- Size 994B
- SHA256 86d9a77423fd561a9eee56c4cacd702fda3473e8650ddfa5b3492ce3a34a02a0
- MD5 bc572a669646d5e073df704c52cc4dd9
- SHA1 72d4ce8915b5148b668b144bba6d4c71bafe1176
- SHA512 eeb30966f055756daf3898b8605766f2bde24c87f8abf52dcc4de5217d2e730f048d5715a1bf26dd1025b6357469de1871bf8b90abd538615e0f4d4060128c10
- TLSH T1211132AC2FC5227202D0558E7E1F80CA6759C1A9240FE7113895C060973D56744FD2E0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\telemetry.js
- Size 6KB
- SHA256 33f03d3d4180e1b2d660063561b80f03c0f0edd70a99c58f40fd85529e6c0aed
- MD5 7f63fe96465732a21cc3fb85a47a1b5b
- SHA1 ad319913c1679e0cd6ff3187a184ffe3fb205c2f
- SHA512 2fd32324f7eb42aef6fbb50132b01452404f9ad0090b54792e831995b0e531467b145e2022611b4dd6bb48e9e973d5f3168fa2996843d91c9e93989947403f52
- SSDEEP 192:O33HT614Ph/qtqSPrOknxjIGq6QZPTxmG+:O3jotnpy7+
- TLSH T144D1845D3AE62275096261FD6F1FA186B738412B212CDA1438AEC3593F0923D03FD7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.3_0\js\background.js
- Size 222KB
- SHA256 1da18f153be91951c5ba0da89ba5a9a3889471134826afbcb8730dc835b9a617
- MD5 3866e96cb2b04d98142a2bc3249aa7a7
- SHA1 48097a634b220625c796a5b058f08ad990f3acf3
- SHA512 364bd4e794af4ab006b7f01eed65e2f970e1b81e26813bd6695d80490e5f85d2fe39342b86c86751bd0e4f7afb3b0eda84813901ef0776c70ae88f164053baed
- SSDEEP 3072:TcppJWn0htB1OTIYCQiBcKzftNOTcleogQooyFKkpoMDVPKKX2m:wppMnkl2ICiqKKc6KID9Xn
- TLSH T14F243BCD76D1F0A647A360E5806F540FB2795A2CA80C84A8F355E8E62C7DD8D063BF79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.3_0\js\twitch.js
- Size 28KB
- SHA256 d48a0a041be7c0943955710e18dbf7a92d0c8d5533dc16c67c47d2e07c1c02e3
- MD5 24c235e3430f16b7c2ae257165b5c0ab
- SHA1 4875c585d39ecfd08af05c7fd4ea3fb4ee9fb07e
- SHA512 4cfd45919c40c6aca5797d8a3e60eb35fa71050db0e9a628be71ec06223ce36765de92ef8bcc982501e7ff76ea6d9e5f707146d2198849f9047d8c5d4e042544
- SSDEEP 384:7cXh7E06m8V1JRVEDdxJS3ltUzXHv9qQhUzK8+Gn1GQfrsWM1I4iqDT/bfPcpM3U:7kyz1jVEhxHHg+GnUgrseSfI2k
- TLSH T169D2D88B75E0F0F2E9B995DB508B040FB21B867FD44850C49AB8E8F628F75CE8225757
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.3_0\js\youtube.js
- Size 27KB
- SHA256 e861f125c7081e2075831e7179c89470adab37ac6f1b386bd2e2a326a54b1924
- MD5 4eefb6250eb47238bec239ccb48fd6c6
- SHA1 05cbeab090c340bf96f0154678e6ad86959a6ac4
- SHA512 09fd5b5a3dbec65e9d267f1ab7a3a8850add55e277fb1dec5bda8c49031355a97f922ce72215172cc99d89f61707d1694470b6ab914ed161b960e1117891ebb1
- SSDEEP 384:7lvhxEq6XlQ/3ltUzXHv9qQhUzKGt/1Gcfryx2M162ier7B3fjbOpZ:7lIjH6t/UUryao/JOf
- TLSH T19AD2C74B75E0E1F2E9B895DB508A040FB21B867FD45850C49BB8E8F628F71CE822575B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\background.js
- Size 985KB
- SHA256 be7660d33aff75fbb8510db53d7c8f92091056f3810b97ff62e435f5b2ee2d0d
- MD5 3e06922cb5812a29f8b2501e94a3f247
- SHA1 5986ec172900cfd98f0aa693f97e69cd25c48cf1
- SHA512 74f07d1f030f9b22be66207291ac99e391e42c9465feb4ff613f282dc1139d7dea90a594537abf4128bc838fb7bc9dc00a2121cc9502d971968dd9cf0f42eead
- SSDEEP 24576:3R4NxgPbPgiqs/Rx+9WPLCdm8hMtych2PkGuNRIfZ8I2ZUn+cFoa4Zks+lGquvn1:B4NxgPbPgiVRx+9WPLCdm8hMtych2Pkh
- TLSH T1EE25B2D17B10C02FF765015838A4745C596C12A4225CFED3ABF9C16A9AF0BCAF31E9B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\contentScript.js
- Size 3KB
- SHA256 177fd8e3363bdafde32f4ef0931306b21cb2f8bece66db68f396e18bab14ae96
- MD5 ccfbbb16d601549a8e913f20e3cc87a5
- SHA1 796a2d8a7bb57b216e09f6eef808becbd9be76b6
- SHA512 c9dcee69d3de3e4eb1364491da14aab373dcb82a6231391da60f43451b9f4f3d8bae5e20889a7ed1760ed9d9a96d21bd108327e8e060db37ca05200f6631d8c5
- TLSH T1A8810E586664C43F343F17A3E573A7CAA470213EB9066052653DDCAA200AED246A6FB6
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\icons\icon_active_16.png
- Size 502B
- SHA256 af427a15676b0fb1f3b130dfbb0775b0ced72cff5aa809204b627ac0f8415db1
- MD5 555b4dff37f2912f90d15de465f9a002
- SHA1 cd3a9e8fe4c9849cd496fcf973301a174e0dc0b2
- SHA512 169bfd3f6015f961d09f47b54c4ceb3f5e11f24a608cc1fcb2ec85f38c7b87022c3fc1c729db730afd55c8c8b3b6ab7f9d3e10cf85553784ec3f2b060c818cff
- TLSH T136F00E89A32E3E26C1A7A143D9ABDD83D4B7C018CA3044CD4643D6F4AB7A2C698E4575
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\icons\icon_disabled_128.png
- Size 3KB
- SHA256 a341dc32c5af1a8b6519ca7882478e98b805a29d0dae41f06ed3140530a48dd9
- MD5 d8f8af56cb880385a5b02e13b3362161
- SHA1 0a27ba7b1729c613d211f7ab184edd4bf0aaa9d5
- SHA512 fd115d0ecfec58caac373ad79d697da6ca56b2b49117e91a62d705877dfd777568fbd93397202a1a3d8db70fdb48dcb97a0cfb2c85c6ae273a333e26d574086a
- TLSH T1D7615EEA72DC6246811F99191DC7167D4B54AB6D8B424350A720D3381FF1AC18FF46F4
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\background\background.js
- Size 11KB
- SHA256 eb857ffbf146c8bb250ecf54a03fd16d0eae938c278519f36843e620864a4856
- MD5 50833bc15799479afa41fdf43fbdc68f
- SHA1 e1f030190fd164a7083a74a882697c2c4ca00184
- SHA512 bab119aab0eb49c2ebb088c95d2b1718890f5ae0d9ae30279ab34cb163a513db6d24b50fab1a03a1bf71e67089b39b2ec3f7ee2436b0d7455fda1e23536b1270
- SSDEEP 192:G8K39eK/GhVJWwW+5T3nWeW9nWkWPS4zBxD+g0SSZkH58JfDWez2VIWsxFlVaDAk:W3ltUzXHv9qQhUzKA3IXiu2xgF1AXOFt
- TLSH T12432E85B40F5C7F6F4B9C9CFA8D1186FA12BC1BFA44890C85EB8BA5814B72CD8224717
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\contentScripts\content-script.js
- Size 12KB
- SHA256 8b96d012c9bcf12d06a9e8fc89aaae415d5be63a5f77376aea17df4d2eba7bde
- MD5 359a7aeeeeec47b2ad3f7272d5faf944
- SHA1 25e131cbd3adeacb3c2eed261b2100e8eb010604
- SHA512 094baa4295e707eaa279a5e584b879ed33d12ca4143f1d360b6ba5aa64f7642148c3c0c2d7a788e1df737ee9891ee7d4161d1a35a5f2327297a541ba4d1927ce
- SSDEEP 384:zDmkc3ltUzXHv9qQhUzKE5aF4LdufPrDFAz:zDmkrHA5aFuUPrDFAz
- TLSH T131521E9F60E5E3F5E579DDDB98E2182FA12BC1BF9408A0C85E75F55824732CC4221B2B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\images\icon16.png
- Size 658B
- SHA256 38f78b22e930ad358fa267b4563d03a6757860e802d61832e8594a9c9d1e74cb
- MD5 eb3c9ebd0855775d326eec5cc60a5787
- SHA1 87cffa1b6aa0adb2d6517e04564a023ea29b4dd1
- SHA512 0f53952eccbb9f6a7a07331d75bfe80bb15f9a44236325fed10d2b22ce8ff405812711aae6887ba6a8b16452634e47171b30a38a903f23cdff7ec5b6b44cba0c
- TLSH T14A0123A7BA8804BD8E6966194D1FC01BCEC1982540A242A8387F47D72728F4657615E3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\images\icon32.png
- Size 1KB
- SHA256 5ae70cd35048a15743defa8ed801b2160632508c14ee474696c3e0a3ce3938e3
- MD5 1c30ef5f86c62a112e76ad3ca08d7fe8
- SHA1 860fb1ca7489c6d5f6336fcd1ca05b407172d812
- SHA512 231b1aea03d6f32c48260e2dd13a80bfb266811f8afc293faa8ab52dd5d7125c2466dd5e76e9c0587752c7debde31f68eaf967a9d59f2c1f9aa49b971dd37bd4
- TLSH T13C211A925398E767299335C22613CCC1CFB5BD72CB749ECA4016B010594E688BE5D603
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\GPUCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\GPUCache\data_1
- Size 264KB
- SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
- MD5 d0d388f3865d0523e451d6ba0be34cc4
- SHA1 8571c6a52aacc2747c048e3419e5657b74612995
- SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
- SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_dnpmpbbfdefapbnfffohgcejpogkbjbp_0.indexeddb.leveldb\MANIFEST-000001
- Size 23B
- SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
- MD5 3fd11ff447c1ee23538dc4d9724427a3
- SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
- SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log
- Size 26KB
- SHA256 24ad5f72fbec3897002556569df12c3fdb8ed96154f236843f9e39b6fd3cdf0e
- MD5 9c0efde17e14948790f80efd00009da0
- SHA1 5ac951bee1303ebf8d8a358f1f5257652730b8b5
- SHA512 66fd3b9b9d22e46e28be552e4083bbf5df2ac43afccf6ad6c597fa7e373c274bc268f0b20bd2fde6b4a0559b06ba56d1f9dd33d734d94fcb79460f9199d3a3fb
- SSDEEP 768:zFlU3xH1AQzsUUEcD1vcHGZjaGP/pRY0iZeI8Ds2TOATT2sqMlOf:zFlU3F1z4UUEcD1vHZGGnpRY0iZeI8DO
- TLSH T12DC25B9F66E89E1AF8FB0670AD790F881772BD687D81D05EA080B37D8530990CA71767
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
- Size 444B
- SHA256 55356b9631618da72037e4699b5f1525bcc87780be314ee44ac2d2d7128aa0b5
- MD5 ed49eead133acd6f2a975190249d99b9
- SHA1 fdbd3dd764b469b7f0a97bd92c11ad235c507eb3
- SHA512 916212dac93fd56571ef42fce2967c31eec755f28bbb009db390234b7a3c897cd63df5e3d1106ba0dd7f42dcbb2059e2c4163d990b31754a1a32b8508c2dc340
- TLSH T195F0EC64998D871E655D556B86F0678EABB1740D97D838852F80DC90314694CA0ED232
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
- Size 403B
- SHA256 e251c90bdc943bc973f31bac57c5db83f1a34f4f610b621a40ed322210539f00
- MD5 c1e72a925cc1bf459fa7dc2bd3cb9de5
- SHA1 e9b71ae606ada13282eef5572f76f86c1b8875dd
- SHA512 5609f825b7ee74255872188ee3ce11ea022634d059dcafef56a0f80c5f4504166c61f853e45b1e70c7c3bbe9b1d1090fac8f4a5be22a42a17f5cd2cbe11408db
- TLSH T158E02B25CDC9871E612E96A64A70579A9F64181C97C839491FC0DD6431CB50CB4EE637
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\000021.log
- Size 1.9MB
- SHA256 ef884b57d33b8f3f671f595adb4808ca4910019da97487213df2a028d2c11c19
- MD5 522a7094722e9daf1ef4f5b9209aa5b8
- SHA1 065ce7e83cec30f2ffa1dadd637fe79b22975d1f
- SHA512 cc73f089e0d3ab81f8cfa9b90db27722e8ed7ecd8efa3fd9deb2a00337e5ccc85219a87c117bd309c31d9408f8e3fa77e1c7c57cf94e766c3925ad1d807ef4c3
- SSDEEP 12288:hakui2yGvg5rs6qQUhL0XO6yy+ng2v7ePC5BTHa:hIzIaMUhELQgEeoBTH
- TLSH T19795069F66755B23E5BF4E7518735F898A7B3C49FC808648E195F63D94B0AA0CA30B03
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\000023.ldb
- Size 2.1MB
- SHA256 f38843c67fc09e87174e91ff5c8a526ff7b0061c4a30ad5a2c80a9680b0a4c15
- MD5 57269a72d74ae31aa5eda9e40aa6e013
- SHA1 d4015ed86157be5bcca5ceaeba4a47ee7d7bf090
- SHA512 4f163090be7dedd30af9a9037b8211b2cec28f251b3bda2315793c4ba6dd317e00727470e12b3ca23fac096a1075953507d2a2488bf886616ff3dd5064e6a43f
- SSDEEP 24576:kizp5fIjtcUw4WEyIpOyiM1xsGoUlF23rDEESX6ABoAeU8QuTE59tr8S8:R5RWOyV/FHEydOU8IHc
- TLSH T162A5AF64E6F64224FBFB1FBA29B924154A7F7850B9306A9F223C340934506D1C9BEF17
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG
- Size 445B
- SHA256 ba7a74143b95fc9293bf7256dedc9d5a2b9964279d6dbea6f36283f700233d98
- MD5 6f6e8753e35c635dfb0255b23eb9b601
- SHA1 f6e376167cfa4e762f1b209921b012bfd44bb0bf
- SHA512 fcd75b01b05b8030ed76d1d9f05acfa485283d56be31bbc9114da7b9b0d63c0d13619cdc3f4b325e3fc8503f2dcd5a26f2fe7baa78310fe164e9aa4eb4b5b6c1
- TLSH T15AF05C30C8CE861FA54C405B41F4A748AF72B53C7BC83C4DAF84DCE0214150420ED675
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG
- Size 445B
- SHA256 b72d66524ba9257e904b0b9a21d0e4733d16aca1dd92c2210066309412d88fd5
- MD5 ac5471e33e7e074a76aca063f2d1f1b8
- SHA1 0f9137c5735d7f255f7faec4f500cfbd20c74028
- SHA512 21d99ceb5b42476d117e4a07fdc2acd6b0fe479633a616034de4bf1c8d3fd142e427773b142f13046291e9ae3df525bcd6e23d005caa9b14c4c558de6907d21b
- TLSH T1F1F0A334C88ECA1FA50D806741BA974C8F72762D7BCC7C4DAFC1DCE4254550418ED279
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG
- Size 445B
- SHA256 8542e044187221875f38fde0b5e32cd735cd9956a6f0caa43db0d35d0e332b0c
- MD5 9a142e128fed4fec2024263896049185
- SHA1 0bae9deb4e81bd26d5b71e5f3784bd2a3047ebd1
- SHA512 18b05fd21f266101c05f0bcc90864849826d10429adcd380f36ee48c2e4051c11bd11bf1981a6c213be56690f08a21c2f27ed8b8cd31b9ace785b3417be0e128
- TLSH T1BDF02730888E861FA50C405785B5A74C8B62662C6BC87C49AFC1DCE0218100458ED2B8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG.old
- Size 3KB
- SHA256 3783ae8eae5301fcd89fe3efb5c8c6ba1fe28ab680091beba95e8f143226202e
- MD5 d606ff5281aa1cd8dd728be4de09cc6c
- SHA1 ed3cf660fab7097316d2e1591a69d24e64a8f0bb
- SHA512 c1ef12bbca4b8f22b7c52ac14a1e72a60a6960ac488bec059c1ee036bdc6d2e6219a139d618754f1dcc0434a547729b093ac15f0827a7b82c65f553b3ffa0148
- TLSH T1D571E2295B489A7C520EF09683D789968E16B13EA34C48EC7ECEFF44349900DA4CD6FD
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\MANIFEST-000001
- Size 1KB
- SHA256 4be3dface405eb2a1a1d578457594f1fe430aa5d8bf896768c167607cf5e4a23
- MD5 6666f30f88317652523eb582c3a2b35a
- SHA1 61ca8d1ad3a7104822bca286ff9748ba6b6ba8e1
- SHA512 a1bea7c8ac5c0a8acdb38a5635e56ec1161335dd07cc3b7d920e5e584ed028466c5cf9a2fcc5f593aa5f611de48c463b086f883f575dcb29fec53bca7c723214
- TLSH T1F8310420D6F28B85F2F34C751876526BEE75364AF806EB4F611C651824A1EC28E70F1B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\514bbfa0-1197-46d8-8a38-ac5571b35be2.tmp
- Size 15KB
- SHA256 f0be4070f89e3bbde04067587b3fd629e553620394514d82ccb9427d57176d38
- MD5 aa657f90aae3b57c66be497f9b963f9f
- SHA1 a0771dc341cee89f4dfc9c7a0757514ae0bbc0e9
- SHA512 8d1826cc76ee04e635908645ffb53e1ff3b057a149feab025a3245734417f050c636ab55b88547b76ee4454f6717ac75dc61f47a07c6a64d6af0a08a2f2cfd94
- SSDEEP 384:DcZLIhTe+7eMH8xJhJryBuEjlUFSKc3E5kZUp45o3EVRP9IdRSTt3xBqYSt9RkKl:CHP2z/5Xy8bvI
- TLSH T1CE72BDF782E8C52EC81652F09B146A1FCE6D0528572C3C1BC9D5DE4B97E34B2E245A4F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
- Size 8KB
- SHA256 2bb9db9299835ee385a02b67f524b1203991d124b692fbae5d15ec91d89f360c
- MD5 9cdddd9ba2fc92282648e2d6bf699795
- SHA1 f34e1694ca51b7a0bdd4169df56dcb8c1d49f98e
- SHA512 2580cd20b6a3df767f94f717affc7604382c85ffbea072e5361bfcd859a95fcd8516303a85a47eb02d5753c97172c5c5a56a46eb1d3fec299bc30b7a6efa1ad7
- SSDEEP 96:bS52nYv0Jewj+NkyqGFeeYch6682oeYch6682qxMtdokgvYAoq4i/+XCzVLtQpEs:bSdv0+WIFNY+RY+8GtdvmidoQeAZ
- TLSH T1A302FCDDE040CCE39AB2990536F62E37E925966F18A4083AF97DED8C0F3357E0241D49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Secure Preferences
- Size 15KB
- SHA256 95ee6a607c261d406c2986319f37d0c73751a7dfb052c0153339fdc9d83686fb
- MD5 3a105bcd447379f54c06a2ff3dee9b34
- SHA1 a62e33c46f9161dbcf17769f3e85fad9b9c83a48
- SHA512 a7b3b6c685db7b78da7fc377718b314a7e87f6cf3890835455a82b0e273389981a563ddf33746fd5f9d3e7d5b29c11702150819ecb9ef99068c30ad4608bedd8
- SSDEEP 384:Wq28hFYUoYfB1c8hC3DAI44/oDdHQNcdOLTSVhoV:WKhFT/jLhCEIH/IBrdKNV
- TLSH T188722B261D4DDFB30FA08B28AC276F4BC9E80526A594AC1897F699CC03D3BD913475D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
- Size 986KB
- SHA256 0282b1ec492243145025e5e350a8fedfccea5c4374f15ce2576291ec7149a1a8
- MD5 5b61d8c830428cdd6b2b82b51c91bdba
- SHA1 9cf14fd95baf18d14cd3445d932baf8653698d13
- SHA512 699fe87748d4e8ed7a7ffba7cfb78f85c51c0462daf4592acbe5b497746353520c0311fdf84ddea2e327e4a00d05d9f93fd8b6f90561bb3d10acc0f91a708c91
- SSDEEP 24576:9R4NxgPbPgiqs/Rx+9WPLCdm8hMtych2PkGuNRIfZ8I2ZUn+cFoa4Zks+lGquvnP:H4NxgPbPgiVRx+9WPLCdm8hMtych2Pkb
- TLSH T11925B2D17B10C02FF765015838A4745C596C12A4225CFED3ABF9C16A9AF0BCAF31E9B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_0
- Size 11KB
- SHA256 238a76c4de184e592ecfdcd4ff046c43d846fc4a5a7c650c0a12857a92be8c02
- MD5 79ce47fc161f84bef1e4ecb5be4c1f52
- SHA1 c83f0de7ab318997111fc2b1517a783444ab3de1
- SHA512 a9815a2debf8621304e2f71ed489330940ecdb68f9fcfe01e3c7c7771dd3b36fad4a03106e3d83dde23881aeef3a556f371536ad2d4cc9172bebef56f72acbe5
- SSDEEP 192:G8K39eK/GhVJWwW+5T3nWeW9nWkWPS4zBxD+g0SSZkH58JfDWez2VIWsxFlVaDAl:W3ltUzXHv9qQhUzKA3IXiu2xgF1AXOFc
- TLSH T12232E95B40F5C7F6E479C9DFA8D1186FA12BC1BFA84890C85EB8BA5814B36CD8224717
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_1
- Size 25KB
- SHA256 c268a9e78daca67225141e449c45f7a2effb5e5a04cf01acc4fee037967dd210
- MD5 4d383e560de95c602c908e7e3e4fa4fd
- SHA1 f36d675fa7c6ebe6c5d1c5d9f7fc5df8c296976f
- SHA512 fda29cb68e87f18ecb2f7c301fae5bd1efefc6a3e038cac09cef4a6be1cef41b290e7873691f0dfed66f9fe3a22018810d097d8ae0cd8898975af2b38c332275
- SSDEEP 384:gYbcRvFH0kaxlpgTEKFgN881l8wy1MpwIjBNXV2txBIyUoEZx8hIYLdQ8Qx8:gXtxi1S5MpwWBNhuIRw
- TLSH T12EC2811183605A3BCD3D47FE42A3161A33B561083BC3D70F5576972728A2396BCAEF66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2687cdb408524ecb_0
- Size 6KB
- SHA256 dc4fd8691efc5b72c403fa4faddadef3f8cbfa22bec4f97466df223d5bb39234
- MD5 50d78f1db1bd304596c2d75db384c935
- SHA1 a3ff1a538599d47ec170639ba90065b4f8a2b33d
- SHA512 910c8bda913077d1a6417c295e4fefe14a1c78cc9993b04edde150847eba0834df9cf8b9df5d7bc8b133f8e0f0d5c33a39c7d79a6735af8841b924111e15b1f4
- SSDEEP 192:r33HT614Ph/qtqSPrOknxjIGq6QZPTxmGUGD:r3jotnpy7Uu
- TLSH T1A0E1A61D39E61271496261FD6F2FA186B338412B212CDA1438AEC3597F0923D03FD7DA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0
- Size 23KB
- SHA256 da7d28dd23714e39327b0fd4dd1e1765ebd57bceb6c1c30745f2bc0e621c8a35
- MD5 32204c78dc579198e7ffecb63a44d522
- SHA1 9f1f8d279823a3b359f7f2feefe2a2ef348e95b7
- SHA512 f4df1be61850fe4c09f85865767b877770edd00fbac88f3364549eb815552e213f0dbf025bc079885a047e0bc182d0d4ea2708848b1b2d6fa6f9275ce9f7d36e
- SSDEEP 384:iNyL3ltUzXHv9qQhUzK0s/Woy+K1JHqTHUc4X1gMOeuo5CifmVGc9ndGQW5hNxKG:idHwAPK1sx4X1gMOVocSmVGcTGQkxKIJ
- TLSH T161B2E80E20F6D2F1D8B4D5EB98E2262F6227C53E750C40C46A78A51D24775CF8B35BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_1
- Size 56KB
- SHA256 fd95e2214e7e8e8d08d62ddaa6fb77de127c93fdaa0d6859656dce33f18e200f
- MD5 82cc8dea08ff7ffdd1b7ea6ecefbe15e
- SHA1 8447e86e25e6f5cd939ddebe02f4bc7d7bba4a02
- SHA512 4217328468a01acf55057d9e2a950c24942006c561083ba0f63ab7899d3447dfec18c36ea542aff28afb4dbe6a05d1d95e81d52b62b8e9358cafe437137f1297
- SSDEEP 1536:iTapb3leMan2eLVbMJqH0jjBgj/1iGMdh:iTanatuJqH0jjBgkBh
- TLSH T1AE43D6114361562BCE3947FA8293460777B950083FC3D31B166293276CA63F7ACAEF5A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2a0afd649b00527b_0
- Size 142KB
- SHA256 ec6c2584c53401c918ea8a034c49e7af211a34bdbba8fbf1037d1da2ccea0bd5
- MD5 1daeef0029d1d163fbabcfadf68eee45
- SHA1 09fba18601758cb466a16698230040ab93e64cad
- SHA512 a54ccc68db6245d2abd0c245f783a8cee867262a22c65481b1cd6c9a2d8195aa84fe06438443bc3ba67d0b039aaaeef12d638b30d9ab8ffb81facd478bc14f51
- SSDEEP 3072:mnzWldaDih9tQ35uhVWVLmAj795oy2/tmkTId:m6nT4g/tmkUd
- TLSH T1FDE30A88B7A5B0A143A261EA106B540FF239941D7C0C446CF394D8EB2D7E9CD95BBF39
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\6fc459ba53cb570a_0
- Size 6KB
- SHA256 a042b08d0cb10a8e7b2eca1520d9a6bfe02c5a42c93712a37c318cd1466fa9e5
- MD5 91de5642292e111b48bbeb322010c9f2
- SHA1 9b13f016ad8a918c3974575bc6a51cf79300591e
- SHA512 dbc976ec8af0fc61598122a33debffac2f6d70995dfd9dcdfe774da5f51c3f1d00580ca5b17dacc70bda44dcb64a28476cdebeb9191155d5aaa97a505b625e13
- SSDEEP 96:P4s3HFKOKveVzWi4Q4s6Ys5Cvpj4JB5KHQ/2tmD5bT5+dwzVoALfsF:P33HOUzN4V54svKMTsdaoofsF
- TLSH T16FD1869B59C61632C91611B5FF2FD78D761988223030EA33305C82A91FB4EB8D2F5BC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\91baa182c7a11977_0
- Size 13KB
- SHA256 eabf35a49686516b466d904fc5aaac912ac20a00d3cd1e57b032c597f1c4172f
- MD5 f0dc7e87bbcc0c0b7a755e1a051fa51b
- SHA1 d405bad1516ce9ae8f1bcc6f3c3903f74da2c7d3
- SHA512 b04a533161e3b0fba024b6ac0d192c5f5ae1b71ebc12a815b142a783fe3d90cc55a93ff44b469de98137c33cd31d9155f4dbd1c845113ff3ed06600451afb460
- SSDEEP 192:a33HXEVL4GJ5/ANLJ0IH/ozVxDlv10z344W2O1qaNLb2JsMLDsYiVZFkjFtOfKJz:a3n+LR64VFJqz34Maxb8lLDsYiW
- TLSH T18952965F29F521225A176178EB1F65817622C05B9A78FE2074CE82182F4D13C82FB7DF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\ad0c92dfa52e69b6_0
- Size 168KB
- SHA256 14ca0210823bb228ed0e5ab1299580606995c3bafaa2e0c9366657a5abfd7769
- MD5 834a10d45cbf9451c74b901aa1e00720
- SHA1 c7981fe5d97b72a17d5db9029717df77db06fd03
- SHA512 b72af7f342353a27d138a4b96034f9c6f6f7ed244396b0f9d742a26ce815f15f9d54207a5cfe75ec4a3ef91bc38b254ee0a6ff30893833cba65118dde09653ca
- SSDEEP 3072:dFyQzqnwzhgdll1QZTzlhoxdBo2k5P7xGcFTf:dFinwzhgd0oP6P7dTf
- TLSH T17AF3F789F2C3F06563E3A1B4406F650BF279B818680E8994F655E8E2AC7C94E5137F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\afe1e5264eea33bc_0
- Size 5KB
- SHA256 32227257a9512cdc6f08b51b0d38cecfe5aafe03a6cdead1256e64a0d0511825
- MD5 f4fa6065a0125ead0fba063117c48576
- SHA1 f58a0129a0524912c740bb5ff2da5b2f714b951a
- SHA512 87e448673e8a4dcd672cdd8b44a378d9c91bfade1932fd03c5321c5c6423c361ba0b9ef00421cabf0c2d57732e06f2edcd2fd99eb913c62b44e86ad1dea3298d
- SSDEEP 96:h4s3HFKdk59+M/y5W6QqIkP2+U5qKJeLHcyFwY6uyep60yeS63yaZy:h33HxefNNn2+Uw/D6uyi60yh63yaZy
- TLSH T10BB15F5C15D207218E86A77EEE5FB0457239814B600EFA01398FD25C4F1D23E0BAABED
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\b3bd0d67f800d222_0
- Size 3KB
- SHA256 50b1d3eb68232588fceb3d4f29a95b47c86080cb2f3c407a4f020231b01765d8
- MD5 865af129cc0d0cf9f86d00aebdab6c4c
- SHA1 af2aaef8a4903367d37c1ca030748a589d1adc19
- SHA512 7eca91185a49e7bc49217acd5f79eb0862fe98170797133a7784f4ed068cc539825bd1a81025d4e15dea12e0be84443cf2c10a6cf75e5e37c79c6d46fb7905ef
- TLSH T12171A39C1CD62067D669913D8B5F44C47328DA1320ACFF41B88CC66C0F99B65A9FD3E5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_0
- Size 223KB
- SHA256 0011c8fb613669d237c88894fdc989a36c22ef4b839033a99f040a962c9ac6ea
- MD5 41f1a424f17e391ccf4f3c9784fe09db
- SHA1 4a52b00ec6b6d1eb51b8fe5e329da3a7d80f33af
- SHA512 a8423690cb1c5ca3de5224063e01c31b2eafb608ea34d68389035c38677b3aa575522d141fc311b74929b39cf532e905dc9022667a7cea82ca92d3f2f53b02a9
- SSDEEP 3072:AcppJWn0htB1OTIYCQiBcKzftNOTcleogQooyFKkpoMDVPKKX23:rppMnkl2ICiqKKc6KID9XO
- TLSH T161243BCD76D1F0A6879360E5806F540FB2795A2CA80C84A8F355E8E62C7DD8D063BF79
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index
- Size 24B
- SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
- MD5 54cb446f628b2ea4a5bce5769910512e
- SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
- SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
- Size 624B
- SHA256 3edbab7fc1114a40cadaa1a7459606c5f95915aae5c99970de763352b915321a
- MD5 69391c3e09b89d6cbdf8d361da32f278
- SHA1 cffd107a209937eff1c7f367a7d31c46f01b3ec1
- SHA512 c94f8f397372f8907b1fdafea114da8e485ba68faa2feb9e896cc5b99c51e6c3383bcf3782afd2d34a790bfc870a24a7bf3e3c6f8751f87472fa1a6811ca1e99
- TLSH T12EF0AB2BC251188FC5AC87F8088B206B7337CBE3E71A13C6A72CA16D1EB03B06D0D941
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
- Size 72B
- SHA256 7fe867814adb902ecd7d8abdb82d8ebc680cbe0fe965c4412b944d207fcffc9a
- MD5 17464444ceaa4243d6d7364f01246d48
- SHA1 894481c06e12fbecd3d31880016289aa03582e71
- SHA512 e9a6e15be1a52181f53349eef6aebd275b9d3790e88fa6debaf5c1b6e8594e5a57698e74bcda89f7b498d3a1d4db09b01e88ffc1fc8274a09a52fd4c5ec095c8
- TLSH T1E8A0021703418510C10013F07825E3882A00B965811047237AD503469C640904A51155
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Sync Data\LevelDB\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\aef3154a-a273-4ad9-a2fb-3b604acb6d7d.tmp
- Size 17KB
- SHA256 7e314b0ef77fe8065a569fcfc3f254fbb59b92bc871217c3a24fdeb46a746a9c
- MD5 c5d7ff8931405a0a79f775ee0b26b488
- SHA1 c0856a851c6b981120514c0c95be53f982a9eebc
- SHA512 ad5d682516966cb461c0ad5b246adcc505e550b2e0b1a8994e09abdafa3afd3d303bd6c6c7e1a8036e87c9097c6431c8cd9e9a324e8a68e7baedaf539d9c4af7
- SSDEEP 192:zQ9hybPrxxNalnv7EaWIFNY+RY+8J0dcz9BHsb+WNgYphc0lgazdMVhEHqv6yIs8:zg0bTxxIvAKFIJ0YHwFlJWVhoYTw
- TLSH T12182D5DDA500E8B79EC6C909FAF53E7BE6F5602624A41D34E6F8DD6C09836ED2207407
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\e2caa75e-f917-40db-a385-d1a6c046e485.tmp
- Size 173KB
- SHA256 ec9b028add099e8686cdb3e84db8cb7d26eeb58be8990996af4fb172d7358370
- MD5 2dcec976e45b240e1afc51e59d57d366
- SHA1 7279ac2c20a806c72e6a0d589ec9099cec5faf26
- SHA512 4be5dc64cef2026938b516346792342e059dfe46c03383988e03c2c70803988f6a48335a16eb584bfe7508fafa638cd4ba2842ba80a8f940bf6b84643169cdf3
- SSDEEP 3072:zd1QxHY+1g5wKOPhs6E9ZBNPI3Pbk7M0wBnx+gtUcOZW2:/oh1giKOPrEF67Bnxhyf
- TLSH T16A04FAB10DA6E6FAF535F7FD44ABD4FA46CA3C033524835BCC3270E04A6264A9D27466
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State
- Size 5KB
- SHA256 cfbfbb565136f4c8e48df2c1845e78dba98146eb203f7692878d3eb8ab3d794e
- MD5 96f60e11bc8d63027b88350d8b141740
- SHA1 7829e2608869798329ead9223130555ec4e53540
- SHA512 ac12a8d8bb8616d61003e7ea53272573a23e0d316d582ffe51de62414973b8950d8ce2168a5d05b7b7e170164438557310b86367be63c0a21bb5857785c32a9f
- SSDEEP 96:4aNkyqGFeeYch6682oeYch6682qxH08efO+CpCIH1kKDu6BtDdH5bM4ZiATNeo:4aWIFNY+RY+8J08KNuluuH55Zi7o
- TLSH T17BC16FED7140CDE2E6C3CC4A63FA7C3F2939E0AE99A54A38F985FE510A5703D1615C06
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\101ec906-e486-4dc7-a72d-cbc43e4eb462.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
- Size 7.6MB
- SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
- MD5 2b5ba9d713ef228cd28c7fe7c23b2317
- SHA1 f79686e2054f484e5052e346780f2e4af4b96fe3
- SHA512 ce94780b820c7c067fb0f22e0d022abc7b404c948a43a13f15cd066ae90799a165cdb719659e64965db3b122769126b4d1a4dc32e9ccdb48a8c668d5a40c0e75
- SSDEEP 98304:AMRrxe4Zx+IkBSSCt77Vm1K3eWwqnPtoFtVPbDY082enzL3WfzxYHT9D5:Fqyx+IkBq7VzkqVwp6JzLGfGh5
- TLSH T12986C02DB6B4102B4DBB4325D4472693617B805DC74D4B8890ECEDBD358268E92BBBFC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\2d040f1e-4964-4674-9420-8dfdaa24e934.tmp
- Size 132B
- SHA256 83ec4e32ae04eaaed1160bad1682081fb331078f54be6333809d96d34bba09ce
- MD5 220ba4c92fb265866444456d0dac9234
- SHA1 784d0385f1c5088caca814df8c72341b8a7925ee
- SHA512 00880feadecc1c0f5e8a0ec4a26c2dd5cc667cdacde57c513b0675f1862d28894e43e9102e8a45f8f2ab93cb0b872070f3b316a11c3c6e25b715007a2fcbe9e3
- TLSH T16FC02B01885E1580CDC9148F40CC078D5142373462E4393905128FA0040D9AC805A55D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\2f9c6ff7-ef17-471a-9352-1cb540c50c01.tmp
- Size 612B
- SHA256 af3d302fa99367ab5980bbba4cdf02cd16c709ca67dc8041b15f1eda7d19079c
- MD5 116e4e3e709628b23a586322de6770bc
- SHA1 8db6fc69a14572b2991168f2fb3e385f1fa8fe05
- SHA512 9f2f53ab6e1099e26a3ee1845a260f44ea3390f96ba360cac2f8a7232291065799bebde81597c9b2e6fe0d0c142cb0f282feb43e293fcb226f6ce0828c8a9cca
- TLSH T118F0AC66FD6D47CB8B9E882F309932AE81C57730F1E079B97542EB48091D13C600203E
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\34334f90-e7c4-4df6-bfc0-03b4e6535d5f.tmp
- Size 372B
- SHA256 48e6e1568364b0006485e7bc5176ddb7199aff2a2026f8c5113212b116198e82
- MD5 80013bfafd78569681f64e5c4653f0c4
- SHA1 dad9ffb8c04031913ab9ea70173a6a859bc82376
- SHA512 69e53f56c94fc2b72e5f6e6fe1a9a4b86bf7b5f749b73264fe4deaa33bde28c54c0b0d9ca344c7e410802631f68fedda01022a09f8b470ee29c402d6e60b4c36
- TLSH T15DE0C05DEC6D0B8F8F9A896F30CC33EC85C67271A2E13A797101EB580C0E16D591202D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657
- Size 178KB
- SHA256 3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657
- MD5 4a373c18ce6f385bb60ac1d0c1b693f8
- SHA1 01867b49466650133f543340a06fbd04d4abd7a8
- SHA512 12c55e5718e52f02d51568202dc253d3faa0b24d4889d8465e155cafc6aa823f4b91af2d4f5010fa08a0471b448d515294749ec96273ea1d01c9296e33db93bc
- SSDEEP 3072:zhmxm6uVFA/79bVcmxgyOarbOn9n01m9XDHjVjVYYa8u9xXG2O:1Is479umxenFDQEu9xXG2O
- TLSH T164046D45FC8B02A06F4780C99FAC66D72105B2F473B5CADFB77FB2A56D4089720894B9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\55dc7cb9-eafa-449b-8332-a73279379e83.tmp
- Size 492B
- SHA256 958f32ec6d9aad1b652e79a47e7635347032715dad4d32085de9a900764a6f62
- MD5 2baa63f16db9045f37a6502a9886c149
- SHA1 88fc8f82c11a08dd21fea09d4222e33c679197d5
- SHA512 0b7fc90e073e342fd598a55c8a7dc7af5e3c79d194aaecf9d6e7c2cb52bcdac4fae319878a3df8af9120cc464bc75d61aef8e3ac87a18453f15ba208f6b8e050
- TLSH T1D5F09E55FD6D468B8B5E891F304D32EC80D57220A1E13A757501EF48490E12D541646D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\a092fecb-ebfc-4c5d-93c8-52dad5bdc825.tmp
- Size 252B
- SHA256 9b2c2859131579d0862cc314b9bf1676a615e55b68fe0022c561eaa105b1b09f
- MD5 96eee12e025a48efbdc7abacc3b0a251
- SHA1 4078580c139793b62426a2bcf61c7df46a7009b4
- SHA512 6e2cd63d422e9f7ae5e3883f3409f919039b77b29d903f7909e13287e829b371877613e65aa9a44b50a212155efa0b37a655af34f7bb278a7e0af77ebbd512e9
- TLSH T18AD09719E86D0BD9CD9E9C8E608C22D8A29A326463F03D762412EB69080E6AC940705D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\1c9b6f80-21b4-491b-a410-709032dfdfb5.tmp
- Size 16KB
- SHA256 0009adb6a85f2401f8968b5d3695ada8097249e9e85f1116a09ee5c3be28b11f
- MD5 649c3975a1fa7be9e2d8f3082343add9
- SHA1 713b97f1954e72f4e68335133f68b68d7e0c2fe3
- SHA512 f832f2695908c16ffd7198af2f84581004d3e671bb54c5363965fb18b67d9a91fe9e26378f0504d9d1bf600148c9c9fd750ccc10617e1e5569b453aa3ad63b10
- SSDEEP 384:z3+OBqImmJvGBLx3NaFMJFJNb8WL8JPnSypg6rFf:qcvGtlNp+PnBr5f
- TLSH T1CC729EB52C655A233CE78809FA8D674BDB616267C0E57FE4CDDDAF0E012B1841393D16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\33efa781-fa32-4b61-a77d-62e497548366.tmp
- Size 2KB
- SHA256 618dedfe2f3faf65047896a2359aab497f437dc7bb4513933e54ff72872e39a4
- MD5 37df234eef58799710226e9970be7bbb
- SHA1 99beca81c1b869792f178b32b9541cb539e32ad0
- SHA512 71faa683c10bd1f4d0cb189af386c886d88d27a035216175deecc476f0198f55e4d4c7de06eed0e0a03d04b09f7119e224679e3ffcaadd05583bc0c214670908
- TLSH T11C51D8B3B814AB3798E39A14FA4E3F16DE75907195661F6085DE1B1C00EB69C1393C27
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\4b15be3b-b383-4f75-a344-3788ce932ce9.tmp
- Size 16KB
- SHA256 5ab11418db9eb49bdcc84940f904a3ee7f18e31245a121a1cb1d116455511296
- MD5 1820a1be67a484e5dbf70c60232fecbe
- SHA1 4da4995ad3ebd24dd109852831cdd238b370c147
- SHA512 fec1fc8499894472f0a49750eee180cfc8e9893578636ebc8e636d5dc5b4eb988882d615c70e96a4b60538b2a3eee8a7f5330b01502854d37898a409e38a7bb7
- SSDEEP 384:zm+OBqImmJvGBLx3NaFMJFdNbYWL8JPnSypg6rFf:vcvGtlNJ+PnBr5f
- TLSH T1E9729EB528655A233CE78809FA8D274BDB616267C0E57EE4CDEDAF0E012B1941393D16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\61ac63d7-e03d-47a4-888c-8c7c2e8469c4.tmp
- Size 16KB
- SHA256 9e415074759b6e8f87349d33dc227209a1ea21ddea1e966f243e3d9a9a2f7160
- MD5 54a7b750f9312f423956d58d460fcf01
- SHA1 268699e60ad6da49b69c04122e2213c5b6520176
- SHA512 56e75586e6c026705e30e8597710624575f229c31debacca37137e6224bd9c21ef11e8e0d97b4d32fdbe30813e3660ab71b11a868076b3f35da2b71e803dccde
- SSDEEP 384:zd+OBqImmJvGBLx3NaFMJFNNb8WL8JPnSypg6rFf:McvGtlN9+PnBr5f
- TLSH T1B772AEB528655A233CE78809FA8D274BDB616267C0E57FE4CDDDAF0F012B18413A3D16
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\8ab0f2df-aaad-4bf4-bd3c-b89975674f68.tmp
- Size 3KB
- SHA256 8cffe058ae379518ecb56bd40eb6447348fb8878879145c33f60dd5ea869fcf9
- MD5 a577903b57e4b415c5d64ea5c3d8f22d
- SHA1 7b340c8f648d9ec500236a3f7fd52522ed27dc0c
- SHA512 2fb5654c4ae057e777abf9740eaf70535448a9924230fcefeff690b63d3efaaba5d795ba877f15f90546dc9b8e0d646968490821f9fee5f19135f987ccc61c4b
- TLSH T1A771A6B2B864A9374DF39D05F98A2B0AFAA55032D4952FA4C9ED0F0C00EB3DC1392C13
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Crashpad\settings.dat
- Size 280B
- SHA256 0cbeac2bf450f8c92b0e53cb0d361591c68fcbdfcfbd6ec595dc5c57897ba28e
- MD5 d9667c370b17249ba58a331c55386ed8
- SHA1 ff9c9d36b1038832b91cf296573bcc953fa4d66b
- SHA512 3bfae208442b3e3560ff8631971f710e717aea7e8c639e534528dad72c1830a1d8d0c01a9183770bf69f92b131f8d19d6c14a7dbeba367741dd5fa2fd75b3ddb
- TLSH T1CBD0121237060238C410B033255261880410D10F4149C001583D877D5A045A01A17442
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\00c25549-21dc-4e9d-b104-b2e4fde3cceb.tmp
- Size 6KB
- SHA256 0fe9b12680721cb92296d2ef9087642f72e50d62ac0bb19531a580fd9b58c391
- MD5 f8aca240af9715b3566f3f477d1fb1ad
- SHA1 aa6abfe48dc8688d7a3ee68b8f1a97a3d8b295ba
- SHA512 f598f27a59d17bd43830cda875084f8ec6ad10c513178a53bf450de5922bada1e4fc8819dfd2b2274790531bd829f63f05cac26e4ac1d020a1e6b82a01e64416
- SSDEEP 192:stN0V+fMZ8pajx/S+WiTUmImqdq5nzRswMC:stWV+Lu/VQ1mqSnapC
- TLSH T171E1D942AE2869774CC7E61DBA35BF06E2FA606261C40E44EBFDC71C04E66DD120780B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\0f87febb-e0b7-4e66-92c5-ff6efa54fd03.tmp
- Size 6KB
- SHA256 4f0bb295326214a106be540be12f7fd81cff57a550720f13dc5ba383c10c9deb
- MD5 e64f9f09179ab748266ff4edad1b7730
- SHA1 fe818caec0de3fc36dce0f39a253b1553e450bf1
- SHA512 10805ff96e2f296ab003117350c529d08c60030c160c25ff7f424d23c96b5cf1a888c77fa74c34207da1f5e4b97e83681b905db20cf66e843753f1b79b1b896b
- SSDEEP 96:stN05oaR+hb9cFff0Z8i0vhEYkt4m/7qx+WVHMSm+uecJdNjMdQjT+gfyAswMEB:stN0VdfMZ8pajx/S+WiTdNodqVswM8
- TLSH T1ABD1DA42AF2869774CC7E61DB935BF06E2FA606165C40E94EBFDC61C04E56DD120790F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\Code Cache\js\index-dir\temp-index
- Size 312B
- SHA256 09905e840303b9cd388b860fd98aba65c5c8663be70861d5ec4c0bd510553e4f
- MD5 c64c8c757ceabb273c5645de39ab64d3
- SHA1 8e6ac2cbe5af034b84704996b48aa20a9435838f
- SHA512 86bf963fe7e35838cab485005f12bfb0f8dd3d372ed31b1d56ea31e8f418aab4fd358889290fd9ef7b545cc398c0f74ccdf22803298bf92fb5d4367f6b8ac756
- TLSH T161E0A9CC088D2E28C30822B000D2B46DBFB528586AF32F7EC64C42319B90380003A314
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\Code Cache\js\index-dir\temp-index
- Size 408B
- SHA256 278af9ad65ddc9602826e4335879d4cf07b9bc99f40c4c7f71d58ae07f1d9e14
- MD5 016e753be6af9bd11f2708436f9e35d0
- SHA1 1329f26bd812cdf60d7864a5b9b78968f314e2eb
- SHA512 0fca11eed2efe504497633a85369a924e11cf914a44b8edd6fcc4334ffc2bd1c8436d505bf415df90a899a199833dfebcaa5a7912fa561673c55269d015438d7
- TLSH T1D4E02B8D787D3D95C314127011C1346CBF3118A96AB31F2DD7545A348FD03990137320
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
- Size 48B
- SHA256 2cba30091c03c0e03a880cec0cacab507b2a38d990e07bf2b3096a0ec7105430
- MD5 fc2f4213fdb16e995fb68aef25e1c85c
- SHA1 41c0973358ace3442dd4fc8b4a6bccabbe6a0765
- SHA512 82dac39fb9e32084e86c8c057efe2fd450ab49860c9f43f10668300114aa26c9a520c7bf88badf25b018a7efb390f4978b23fff05202d8937b89e21d46fb2733
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Local State
- Size 1KB
- SHA256 87ac26b9ac8662ecf03fc78ed0d31954c81a05de86ef8829736adc72cd112a2a
- MD5 a0628274f7b466fed54abef8c37a596a
- SHA1 55cc5a62e683ed291bd8b89f1931d8b7878c80dc
- SHA512 f06756f030841212c0661696d8f871ceb70b976bcc3216d677f06d9742ed7d89667fd621de6f9650c27f3722430b95b3a66ee772d86b725466b8cdaa86e71d59
- TLSH T1F52187F3E4947B7178E65955F30B774E6D60903581184F1891DD072901AF5EC8AB7C33
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\d8527f75-067e-44df-a930-703a2a560264.tmp
- Size 1KB
- SHA256 70c9671f36771397ca06a1ac4b188851b76f918091f04ae452dd035430daf49b
- MD5 ec95b6501e7c25d08d535b1159446787
- SHA1 e9c2f9545137282bc19cbecc8dad3ffbb712e5f1
- SHA512 66f76a0a0a757cd56f1aebb5e8b99fd504d50c4c54a34bbbc63cbf7b200656256dd6262243869066b55f9ce79244ff384e39a5182413ef24ef07434e267437b8
- TLSH T10E3185F2F4902B327CE26A56F24A7B5BAD605036C1154E5491DE4B2C00BB2DC99BAC33
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wave Browser.lnk
- Size 2KB
- SHA256 08b047b013f365c86f6f77918f7034a81260eddb822da1de469c19849b87f249
- MD5 baa43449c8ddb835a69b0bab354ff040
- SHA1 1907dfdc481900ddccf933540ae46e562ea86cec
- SHA512 234e7bdeac7896d717cdf020b2e7beb73d38309ca84cbf1c703200701f0955a2b32750abe565fa4ef8b0040491853a883b4e908656c671d58c972429a4dcc9da
- TLSH T190419E461BE61711FB3F8D364475A9B1A13234A3FD99CEAC024492491772218D9E8F6F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Downloads\Unconfirmed 515731.crdownload
- Size 12.7MB
- SHA256 6716f76086ed209c3d00ed26cea5615b1e6a61dbf6c9886ed3e53bf8fb3ef929
- MD5 d713d2962a2787376dddc0f1dcb77398
- SHA1 8812cc6e42170e0176222b2144e5ed58b287a37c
- SHA512 85fae3d7c1d534aaecaa50d393a7de415fb9733022d9a50dc1ad998d5c2191f54c65b3c027328ebb056b5fe1fbd17323c9d83d0729c2ec2489d662d300057989
- SSDEEP 393216:6MolpE03BV9ZHhyFMwdywihmLha082Iot0D0E2zkwHij8/6TORpZNG+CCFPO35TK:dolpjrPal82I1Pl8/PQK
- TLSH T1CFD6AE02B5A14374F4A33232A43D677E5D217E625B3585CB9BB43C849FB8AD2203A75F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Downloads\Unconfirmed 975056.crdownload
- Size 1.6MB
- SHA256 d886a422b288e22fdab3b66b4f91d6589700e639900e1bf04b2fb87af92f61e9
- MD5 092459b6cabf160c64dad016594d54e9
- SHA1 ff277db1cf56be1d67e8d7ed8a16f9fb0de43891
- SHA512 db2ced61eb949186a8f1819f935f742a0240efd006a6d25dd13423670d16bd22abbfd3c2d73f8bb2ddcd52e15642c68c220c6eb1734c9f11d1e4b1777037233f
- SSDEEP 24576:cuFhYFgd+PRODKFWAJ+D/RU1381jGKxF3sYaGfAX8vcZWtP6cQ2Du3kVz6O7:BLYFKI6jRUsxmKIZW5q3kVeO
- TLSH T11F75CF2215F0C875F4B2EAB4C8B3E1F545DA7C12E439C59B9D103CAEBE70B4299273A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\1.142.1.0\Locales\en-US_FEMININE.pak
- Size 18B
- SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
- MD5 65f69bd2d8b6458d3ecf77d84d70dc1c
- SHA1 679bdfb03cbaa594ace5af4340a061ddc514309d
- SHA512 39f2728a1898bc9406516fa737c58c349e3bd7f779276a2f6679b3e3f0db43f956e03ad25e5d9bf4b07b19909febcc6c0560f71ab4f4fa6b5dd1f021ef742c60
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\master_preferences
- Size 1KB
- SHA256 8626a10dd14165b1f1b31ac29753a63ffd6cc0c02f14b16bbac086765ea033a9
- MD5 56d225d8a35652e62990d56b4ef19a07
- SHA1 b72b4931daef6649f4a66769034598b40013c8cd
- SHA512 ee1c126fd37d4f9c19a7d4c4d99b7eb55c39897fd2ed70f863885b3be2f2b6dd4e60c1d7daa33ae0517ac169c0e3d7c002ac2f4cd61b70f969491ab84203deb8
- TLSH T18921FE34E074DCB21CA16021E89D6501E921AD074D453C2E77DF999D4F0DA8F21B967C
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\wavebrowser.exe
- Size 4.5MB
- SHA256 a65b973a682e65f803907c605739573dfbc6169c13454c7c543278aebd8f3a6c
- MD5 bf7008a8c27c03423d8b14a3ab002da9
- SHA1 254220e633d208386e23099eea2b7ad990fcc0d7
- SHA512 69e42a58995549934c6a422a142c7d9d6c0582f54755ba0b7ed7c71f26b13e4cac8c3336f69ff624f83665e60f5a6e8af99ad9ac82f8d2054fc083fdfbd96502
- SSDEEP 49152:FdcwL9ckLga455dTYivWQTfRNsIPUXgG0SwIn5cAIafM0059IxU1JwQ:Fr0rWqfmIx1JF
- TLSH T108263A53E26180B5D40EC874CE3E96B296153C4A87F193EF29D43DE63A72AC53B39B50
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\wavebrowser_proxy.exe
- Size 1.4MB
- SHA256 9fad4e07a51cc8776b256744188fc8b7d527d1d83784778a1a1e8a2728de517d
- MD5 01d80024c883ebf3527654f9c6269bd5
- SHA1 eeef2e33f4b3f881f597c54c43848347fb4a49be
- SHA512 e193f8671549451ae096e4c030a3fd1ee9487ef5171e3a8b9c680f5e18305f0d7221e874afd2554681253637a946bc90090fa61312548cb6c904f152c0dabfd9
- SSDEEP 24576:L/vk58qL00PJ594yg6Qlvu465qGmBlVDoDJ3mxToPWWJO:y8qL3PJ594HAm/uJ3mP
- TLSH T1D0659D13F2D900E8D05AC178C7569632EA62BC050B35BAEF0B90B7562E7BBE45B3D711
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\Wavesor Software\WaveBrowser\1.142.1.0\default_apps\external_server_extensions.json
- Size 26B
- SHA256 99e69aef8d0350e8d9ff494d01bc977609ffa19d9aa029d90372a97a5e78adda
- MD5 de2d4add95a5a18bc4dcc795d5531988
- SHA1 0104f226c0c45ba4c3ac58cefd00f94f2fb5c35a
- SHA512 7859a94f97618abff055547d5c4a9eaeed54640ab58699c28d6b201ed4d15134322fd6cc29de673c5d345146aa7d4366f34770eb7c7b6ce16ac776af65918372
- MD5 SHA1 SHA512
- Path C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.VisualElementsManifest.xml
- Size 398B
- SHA256 259ccf1a90530faf93ad5582cf010003c263c45d1da7bd48091b6e44c62446c7
- MD5 22098c984c36ba4f465d39a9df5d46c9
- SHA1 2f99ce1e5b2816bf52ccfbefb3bc16bacb2dae5f
- SHA512 7d64d8cd6b63f0a5efa2d920eda5f184e923031c214bf88856ab6377ab64550620dd3116b4214e872962e408297d42ae6786d8c6f293a4bd36cde13943a104af
- TLSH T16EE0659C72141780937796A9845B674AB01C55D7D3C7008AB59C057927AEB991C1F381
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_1624715625\manifest.json
- Size 108B
- SHA256 9e02b1c8419edb1a14e0e670b3ce21ded91edf660b5677e20900731ae8c37dd4
- MD5 1fd9615b3137d25dbb9bc86267af16c7
- SHA1 260fbc35265da7f324e62f5dbc693b69daa7c386
- SHA512 1293706d270b36b170224e8b40d9599d1525844799031ed0092f3776219af9f27f29ad203ad88776cd4f862b47a85bb4af91864ccbf84b3f0d50c00f89e263aa
- TLSH T1E4B012F1980C56A724C167FD1A224343AB645D07104078170697908123AAB3713B331F
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_366222502\manifest.json
- Size 72B
- SHA256 a408d874f731da9fd242aca690324d2fa05a2b80ee0744e49543dd514a1cb07f
- MD5 bd84dcd1b7b6ac2e9dfead1e4ec90558
- SHA1 0917b2b682533b96e9edada6a686e5bd01d5a290
- SHA512 cf7e3a56fbb93eb5a59fb6ad5c0837c3fd6ee0f616b62d3e61775701c3910097989f264d888e5604cc6b0d135a0c36fee786a20c4fe682545b15555ecd01d085
- TLSH T18EA02230AC00883330C82B300032838383F02E022020FE0A0E0B208022C8A3E20B228C
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\manifest.json
- Size 73B
- SHA256 a279579b53f209aecebe0c332fe96f54a7b89578208d24cf7ffb8e9c6a9eb4a7
- MD5 96e78423b99e4b0318c10391cbbd01e6
- SHA1 b833d38807c177788e09acf15bb09f9e0dbad716
- SHA512 fe37f98c06a4f3e1457355d7b52b4abda1ee423a1e77c6aea7462799c6ff4e36cb88fdb93c0c6068d35ca2f0d11a60c2ab02caa7d74aab41a3f87ed62b7ff5ce
- TLSH T125A02238FC00A0332082232C0030C3C383A23E0B38002A020A233C80238C33B203033C
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_618120771\manifest.json
- Size 96B
- SHA256 89d1a79a7889b80e20c6ca2d261fe6049df59870a77f510bf3c7791bf6ca2053
- MD5 424f4e7c3f68c1b6ab51a1f0da42fe31
- SHA1 5082b652c9c365f6cd98b6b44b8ad94c74fbdc4d
- SHA512 e1d5a51697f97403c986043afd85d4cc8b680a61fa5933776ede2844219bb34f64dd344baaec2ee20605de2481f6343502d65fc9e41cd917b8ae7771400952dc
- TLSH T13EB0121068407A63D0C40B7045B282C383B29C82301D6401060A10C0299423B01B332C
- MD5 SHA1 SHA512 TLSH
- Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_926385488\manifest.json
- Size 108B
- SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
- MD5 70045b6ede48125f626e7f9971984e3d
- SHA1 1354618eb0b8f463579de7a25b39f748ca06fb50
- SHA512 4561e8e3b77f295187104b3a331cf4c5552bfe02e61ccc3e285c86682cc518f130e17366aabf37c1837bb5375c4484714b2a35ff65561036a64c3c0c8244fc51
- TLSH T17DB012766D00797754CA0760253563C2E7E47C0E68557D429B332492115B73A41B132C
- MD5 SHA1 SHA512 TLSH