Analysis

  • user interaction
    yes
  • max time kernel
    420s
  • max time network
    422s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260911-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260911-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    04/11/2026, 22:38

General

  • Target
    http://sightwords.com/
  • Sample261104-2kfnlaeh39

Malware Config

Signatures

  • Downloads MZ/PE file 2 IoCs
  • Checks computer location settings 2 TTPs 55 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 10 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Drops file in Program Files directory 46 IoCs
  • Drops file in Windows directory 23 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 2 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 30 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 15 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

  • System Time Discovery 1 TTPs 2 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 9 IoCs
  • Modifies registry class 64 IoCs
  • Modifies registry key 1 TTPs 1 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://sightwords.com/
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4772
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x21c,0x220,0x224,0x1f8,0x228,0x7ffd6800c728,0x7ffd6800c734,0x7ffd6800c740
      2⤵
        PID:5368
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1608,i,8982060012973687718,9771050265923004752,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2124 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:4024
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1768,i,10676239163926484559,13927824986766390919,262144 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=1884 /prefetch:2
        2⤵
          PID:3472
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2432,i,8446430268454790266,2279229334778269707,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=2592 /prefetch:8
          2⤵
            PID:2280
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3012,i,13890180857887713222,2252502600386362416,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3040 /prefetch:1
            2⤵
              PID:3604
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3024,i,10538891347559068888,12197948231290210180,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3064 /prefetch:1
              2⤵
                PID:2792
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4252,i,861641028033604794,7765851158020158531,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4276 /prefetch:2
                2⤵
                  PID:1496
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4688,i,1925199508014593751,8618041982444819926,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4708 /prefetch:1
                  2⤵
                    PID:5396
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=3300,i,13684457993536341845,13050788301500808173,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3260 /prefetch:1
                    2⤵
                      PID:3836
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4816,i,6012702062483299280,8620933633453029637,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3324 /prefetch:1
                      2⤵
                        PID:4872
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5556,i,15478108295896383018,3092317160288889069,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5084 /prefetch:8
                        2⤵
                          PID:3796
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3124,i,17026174435459343622,3671768197078153971,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3416 /prefetch:1
                          2⤵
                            PID:2632
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5984,i,10132493475358630402,14804418239938349676,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5572 /prefetch:8
                            2⤵
                              PID:4220
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5960,i,8004754324609521547,16449812723779134422,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6248 /prefetch:8
                              2⤵
                                PID:3664
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5948,i,2858948217381204492,9620198967790176629,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5932 /prefetch:8
                                2⤵
                                  PID:3548
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=4252,i,10952367748538778200,13553003370772910714,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4388 /prefetch:1
                                  2⤵
                                    PID:3860
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=1172,i,4785199068732200855,10229688092108026510,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4864 /prefetch:1
                                    2⤵
                                      PID:4104
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=4340,i,11739526339993473210,6908163299890698932,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5952 /prefetch:1
                                      2⤵
                                        PID:5360
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=4344,i,2278317595532104842,7137700906616552100,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5996 /prefetch:1
                                        2⤵
                                          PID:2432
                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=500,i,12797701077091885891,12310255433117498514,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3064 /prefetch:1
                                          2⤵
                                            PID:6124
                                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6100,i,3161065827383372815,11431403653306960134,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=3952 /prefetch:1
                                            2⤵
                                              PID:4328
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=6532,i,4606875913029017667,16435996500469734358,262144 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5996 /prefetch:8
                                              2⤵
                                              • Suspicious behavior: EnumeratesProcesses
                                              PID:4636
                                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6400,i,15336109035931908722,2368167772323169237,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6528 /prefetch:8
                                              2⤵
                                                PID:4836
                                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=1108,i,6023837135701249778,6296483302116593285,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=5996 /prefetch:8
                                                2⤵
                                                  PID:464
                                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6772,i,14144731580028623895,11324725933450632855,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=6736 /prefetch:8
                                                  2⤵
                                                    PID:5736
                                                  • C:\Users\Admin\Downloads\Wave Browser - 2026-11-04T224042.817.exe
                                                    "C:\Users\Admin\Downloads\Wave Browser - 2026-11-04T224042.817.exe"
                                                    2⤵
                                                    • Checks computer location settings
                                                    • Executes dropped EXE
                                                    • Reads the TCP/IP host and domain name from the registry
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:476
                                                    • C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
                                                      "C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"
                                                      3⤵
                                                      • Executes dropped EXE
                                                      • Drops file in Program Files directory
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious use of WriteProcessMemory
                                                      PID:4984
                                                      • C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe
                                                        "C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe" /install "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1"
                                                        4⤵
                                                        • Checks computer location settings
                                                        • Executes dropped EXE
                                                        • Loads dropped DLL
                                                        • Adds Run key to start application
                                                        • Checks whether UAC is enabled
                                                        • Reads the TCP/IP host and domain name from the registry
                                                        • System Location Discovery: System Language Discovery
                                                        • Suspicious behavior: EnumeratesProcesses
                                                        • Suspicious use of WriteProcessMemory
                                                        PID:812
                                                        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /regserver
                                                          5⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Checks whether UAC is enabled
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • System Location Discovery: System Language Discovery
                                                          • Modifies registry class
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:2632
                                                          • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                                            "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user
                                                            6⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Modifies registry class
                                                            PID:1052
                                                          • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                                            "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user
                                                            6⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Modifies registry class
                                                            PID:1708
                                                          • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe
                                                            "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterComRegisterShell64.exe" /user
                                                            6⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Modifies registry class
                                                            PID:4928
                                                        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping 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-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDQuNDUyOSIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0Y2RjYwQUNFLTcxQUQtNDYxMC04MEQ0LTkyNTM3MjlGQjRCN30iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4xNTcuMCIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBpbnN0YWxsX3RpbWVfbXM9IjExNjMiLz48L2FwcD48L3JlcXVlc3Q-
                                                          5⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Checks whether UAC is enabled
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • System Location Discovery: System Language Discovery
                                                          • System Network Configuration Discovery: Internet Connection Discovery
                                                          PID:600
                                                        • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                          "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /handoff "bundlename=WaveBrowser&appguid={EB149AD2-CE4E-4F51-B7FC-A149FAA4CCAF}&appname=WaveBrowser&needsadmin=False&lang=en&usagestats=1&installdataindex=1" /installsource otherinstallcmd /sessionid "{75C8BA14-6AF9-45B6-87B7-8AFF93EC667D}"
                                                          5⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Checks whether UAC is enabled
                                                          • Reads the TCP/IP host and domain name from the registry
                                                          • System Location Discovery: System Language Discovery
                                                          PID:4492
                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=5744,i,14402811543347243838,3882984808288237809,524288 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4356 /prefetch:8
                                                    2⤵
                                                      PID:1508
                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7072,i,1520100530417127544,14583352145384211117,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=4592 /prefetch:1
                                                      2⤵
                                                        PID:3376
                                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=7228,i,16136449081822984800,599268164308722207,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7196 /prefetch:1
                                                        2⤵
                                                          PID:7048
                                                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --metrics-shmem-handle=6948,i,4339865417086668493,9585071475220200461,2097152 --field-trial-handle=2092,i,6503025694299297271,4736361248708697603,262144 --variations-seed-version=20260911-090036.930000-production --mojo-platform-channel-handle=7364 /prefetch:1
                                                          2⤵
                                                            PID:6448
                                                        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
                                                          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
                                                          1⤵
                                                            PID:2360
                                                          • C:\Windows\system32\svchost.exe
                                                            C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                            1⤵
                                                              PID:3676
                                                            • C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe
                                                              "C:\Users\Admin\Wavesor Software\SWUpdater\1.3.157.0\SWUpdaterCore.exe"
                                                              1⤵
                                                              • Checks computer location settings
                                                              • Executes dropped EXE
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:5420
                                                              • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /c
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • Loads dropped DLL
                                                                • Checks whether UAC is enabled
                                                                • Reads the TCP/IP host and domain name from the registry
                                                                • System Location Discovery: System Language Discovery
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:5476
                                                                • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                  "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /cr
                                                                  3⤵
                                                                  • Executes dropped EXE
                                                                  • Loads dropped DLL
                                                                  • Checks whether UAC is enabled
                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                  • System Location Discovery: System Language Discovery
                                                                  PID:1984
                                                            • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                              "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe"
                                                              1⤵
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Checks whether UAC is enabled
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              • System Location Discovery: System Language Discovery
                                                              PID:3460
                                                            • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                              "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" -Embedding
                                                              1⤵
                                                              • Checks computer location settings
                                                              • Executes dropped EXE
                                                              • Loads dropped DLL
                                                              • Checks whether UAC is enabled
                                                              • Reads the TCP/IP host and domain name from the registry
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious use of WriteProcessMemory
                                                              PID:3912
                                                              • C:\Users\Admin\Wavesor Software\SWUpdater\Install\{8932E352-EF84-4FDD-939A-0223602517D0}\WaveInstaller-v1.142.1.0.exe
                                                                "C:\Users\Admin\Wavesor Software\SWUpdater\Install\{8932E352-EF84-4FDD-939A-0223602517D0}\WaveInstaller-v1.142.1.0.exe" /installerdata="C:\Users\Admin\AppData\Local\Temp\gui7329.tmp"
                                                                2⤵
                                                                • Executes dropped EXE
                                                                • System Location Discovery: System Language Discovery
                                                                • Suspicious use of WriteProcessMemory
                                                                PID:2800
                                                                • C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe" --install-archive="C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\wavebrowser.packed.7z" --wid=090g6qpa --installerdata="C:\Users\Admin\AppData\Local\Temp\gui7329.tmp"
                                                                  3⤵
                                                                  • Executes dropped EXE
                                                                  • Drops file in Windows directory
                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                  • Modifies registry class
                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                  • Suspicious use of WriteProcessMemory
                                                                  PID:2500
                                                                  • C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe
                                                                    C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.142.1.0 --attachment=C:\Windows\SystemTemp\wavebrowser_installer.log --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff66a6765c0,0x7ff66a6765cc,0x7ff66a6765d8
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    PID:2636
                                                                  • C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe
                                                                    "C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe" --verbose-logging --installerdata="C:\Users\Admin\AppData\Local\Temp\gui7329.tmp" --create-shortcuts=0 --install-level=0
                                                                    4⤵
                                                                    • Executes dropped EXE
                                                                    • Drops file in Windows directory
                                                                    • Reads the TCP/IP host and domain name from the registry
                                                                    • Suspicious use of FindShellTrayWindow
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:2664
                                                                    • C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe
                                                                      C:\Users\Admin\AppData\Local\Temp\nsb73D6.tmp\setup.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=ver=1.142.1.0 --attachment=C:\Windows\SystemTemp\wavebrowser_installer.log --initial-client-data=0x29c,0x2a0,0x2a4,0x278,0x2a8,0x7ff66a6765c0,0x7ff66a6765cc,0x7ff66a6765d8
                                                                      5⤵
                                                                      • Executes dropped EXE
                                                                      PID:1712
                                                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" https://gowavebrowser.co/thank-you?tid=090g6qpa&src=d-cp21976981197-lp0-obgc-wav-igVAvjokFCUKFTExrktgKwg-ab51-w64-brwsr&cid=21976981197&iid=wav&uid=22627eee-0250-48e8-96ab-bf2dd4d97263
                                                                    4⤵
                                                                    • Suspicious use of WriteProcessMemory
                                                                    PID:568
                                                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ffd6800c728,0x7ffd6800c734,0x7ffd6800c740
                                                                      5⤵
                                                                        PID:2784
                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --install-type=1 --cd-upload --from-installer
                                                                      4⤵
                                                                      • Checks computer location settings
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Drops file in Windows directory
                                                                      • Reads the TCP/IP host and domain name from the registry
                                                                      • Checks processor information in registry
                                                                      • Enumerates system info in registry
                                                                      • Modifies system certificate store
                                                                      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                      • Suspicious use of FindShellTrayWindow
                                                                      • Suspicious use of SendNotifyMessage
                                                                      PID:4132
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\WaveBrowser\User Data" --url=https://sentry.epresources.io/api/37/minidump/?sentry_key=6d70218a5e72941a159dd0c8fde06ae8 --annotation=channel= --annotation=iid=wav --annotation=plat=Win64 --annotation=prod=WaveBrowser --annotation=src=d-cp21976981197-lp0-obgc-wav-igVAvjokFCUKFTExrktgKwg-ab51-w64-brwsr --annotation=uc=20261104 --annotation=uid=22627eee-0250-48e8-96ab-bf2dd4d97263 --annotation=ver=1.142.1.0 --initial-client-data=0x144,0x148,0x14c,0x108,0x150,0x7ffd409ad758,0x7ffd409ad764,0x7ffd409ad770
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:2944
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1752,i,18086524988898211439,6061674177290077561,262144 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2060 /prefetch:2
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5264
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --start-stack-profiler --metrics-shmem-handle=2348,i,7233927934390165673,3053445487193653663,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2320 /prefetch:3
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                        • System Time Discovery
                                                                        PID:1856
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2460,i,5539036552179758558,1215558909890888715,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2752 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:6048
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3632,i,3313573973230688690,16448293703960381553,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3624 /prefetch:8
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:4620
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3792,i,653884637494472540,12874286100485781378,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3808 /prefetch:2
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:4300
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4316,i,1232917744653306319,2583863863860326855,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=4332 /prefetch:2
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:3860
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4372,i,2013881640740344567,8592091834793623654,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4488 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:832
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3756,i,710588001813861186,6546074360454517474,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4648 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5952
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4632,i,2711310803328986371,8186785295914074813,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4692 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5848
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4676,i,15316565916161019818,9456810540457734249,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4752 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:4508
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5080,i,13035532153306828145,15322420867999720868,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=5112 /prefetch:1
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:4588
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --instant-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5084,i,1636977882485641380,10842879070862990506,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=5144 /prefetch:1
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:960
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5632,i,7308682695392559703,818835297843928755,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=5580 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:1576
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5756,i,13113389137730437876,14082950771773462629,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709000367499229 --mojo-platform-channel-handle=5764 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5564
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=5772,i,17658266622941666509,2763043386386756999,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709001304541078 --mojo-platform-channel-handle=5756 /prefetch:1
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:5104
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5680,i,16678495037188737905,9230290798521829405,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709002241582927 --mojo-platform-channel-handle=5708 /prefetch:1
                                                                        5⤵
                                                                        • Checks computer location settings
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:3928
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5912,i,8799288917595007762,833753487763082761,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709003178624776 --mojo-platform-channel-handle=4872 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:1660
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,3488572673309662041,11329323409900343889,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709004115666625 --mojo-platform-channel-handle=6168 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:3132
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6436,i,358808529142946668,2175284583158919728,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709005052708474 --mojo-platform-channel-handle=6452 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Loads dropped DLL
                                                                        PID:3428
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6596,i,2192056072856246009,10962255280273412149,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709005989750323 --mojo-platform-channel-handle=6600 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:3460
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6752,i,1084530633840398346,1216119795755740378,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709006926792172 --mojo-platform-channel-handle=6448 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:1036
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7084,i,14340535220730558708,1001496176149881816,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709007863834021 --mojo-platform-channel-handle=7088 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:6080
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6944,i,15014320448972630600,15901739797024521680,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709008800875870 --mojo-platform-channel-handle=7264 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:1484
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7300,i,3105217423627833118,15656888235955131714,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709009737917719 --mojo-platform-channel-handle=7324 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:4104
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7124,i,10986719972316135681,3537443382905321348,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709010674959568 --mojo-platform-channel-handle=7592 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:6140
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7728,i,17554634477563858307,12061112947312059248,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709011612001417 --mojo-platform-channel-handle=7744 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:2060
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7892,i,12648908805215783688,14793674275985884248,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709012549043266 --mojo-platform-channel-handle=7904 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:5044
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7924,i,15004265723540126228,7549002351180064099,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709013486085115 --mojo-platform-channel-handle=7940 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:5552
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7256,i,8106766101703344912,13736835968757069875,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709014423126964 --mojo-platform-channel-handle=8068 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:5048
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7856,i,15106543116584893698,956186353381740954,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709015360168813 --mojo-platform-channel-handle=7840 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:3936
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=8004,i,3678022362706446250,11777589149058205941,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709016297210662 --mojo-platform-channel-handle=8044 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        • Reads the TCP/IP host and domain name from the registry
                                                                        PID:4208
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6916,i,10388714317097905397,6305563423896859172,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709017234252511 --mojo-platform-channel-handle=8144 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:2296
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7744,i,10548381220478346649,11650973457121662682,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709018171294360 --mojo-platform-channel-handle=7748 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:5280
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7868,i,7618529001289460232,8513383489298480715,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709019108336209 --mojo-platform-channel-handle=6788 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:648
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7736,i,8869001283059884394,218925485477124793,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709023793545454 --mojo-platform-channel-handle=6868 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:1484
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7768,i,4379755859982543088,9633680766248989872,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709022856503605 --mojo-platform-channel-handle=6880 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:4404
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7860,i,15932846372147805304,6675506050609048062,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709021919461756 --mojo-platform-channel-handle=6900 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:2116
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7728,i,10368397617745381064,4395466363278661925,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709020045378058 --mojo-platform-channel-handle=6784 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:2648
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7764,i,8991067585873785280,12499460580533702095,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709020982419907 --mojo-platform-channel-handle=6924 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:4104
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7816,i,6558384369942296507,87137445120599898,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709024730587303 --mojo-platform-channel-handle=6844 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:3936
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7596,i,17813502123533120298,7179877663757803908,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709025667629152 --mojo-platform-channel-handle=7280 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:5044
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7584,i,14357896377739639611,11282052398868809303,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709026604671001 --mojo-platform-channel-handle=7408 /prefetch:8
                                                                        5⤵
                                                                        • Executes dropped EXE
                                                                        PID:3332
                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5900,i,18384029954951866017,15488134377398433610,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709027541712850 --mojo-platform-channel-handle=5820 /prefetch:8
                                                                        5⤵
                                                                          PID:4464
                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8168,i,12383368714040583380,7717216785294198775,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709028478754699 --mojo-platform-channel-handle=8284 /prefetch:8
                                                                          5⤵
                                                                            PID:6232
                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8440,i,17794432615350328136,10973667477135862668,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709029415796548 --mojo-platform-channel-handle=5892 /prefetch:8
                                                                            5⤵
                                                                              PID:6704
                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6704,i,13117866541598061176,16305231632190848478,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709030352838397 --mojo-platform-channel-handle=6716 /prefetch:8
                                                                              5⤵
                                                                                PID:6720
                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8576,i,17479773440968231684,8556669692050587157,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709031289880246 --mojo-platform-channel-handle=8588 /prefetch:8
                                                                                5⤵
                                                                                  PID:6372
                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6652,i,262109523444318039,15824962073773626403,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709032226922095 --mojo-platform-channel-handle=6664 /prefetch:8
                                                                                  5⤵
                                                                                    PID:6824
                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7152,i,2063705294334235366,186001540231423658,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709033163963944 --mojo-platform-channel-handle=7656 /prefetch:8
                                                                                    5⤵
                                                                                      PID:6844
                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7632,i,16472870244055259052,8978214136089870548,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709034101005793 --mojo-platform-channel-handle=7044 /prefetch:8
                                                                                      5⤵
                                                                                        PID:740
                                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7360,i,15594192354709713396,7759304122754620821,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709035038047642 --mojo-platform-channel-handle=6760 /prefetch:8
                                                                                        5⤵
                                                                                          PID:7024
                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6976,i,4094003099823944468,14811806775759882195,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709035975089491 --mojo-platform-channel-handle=6788 /prefetch:8
                                                                                          5⤵
                                                                                            PID:6252
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --metrics-shmem-handle=7392,i,8942884177242146497,11216107678500667500,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709036912131340 --mojo-platform-channel-handle=6368 /prefetch:2
                                                                                            5⤵
                                                                                            • Checks computer location settings
                                                                                            PID:6352
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --metrics-shmem-handle=7424,i,2122288784054881929,1536936697064533003,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709037849173189 --mojo-platform-channel-handle=7580 /prefetch:1
                                                                                            5⤵
                                                                                            • Checks computer location settings
                                                                                            PID:6648
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --metrics-shmem-handle=7348,i,5473985757895068785,291032275818663197,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709038786215038 --mojo-platform-channel-handle=6732 /prefetch:2
                                                                                            5⤵
                                                                                            • Checks computer location settings
                                                                                            PID:6512
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --metrics-shmem-handle=7824,i,2749852141406743553,6525429183982546150,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709039723256887 --mojo-platform-channel-handle=7832 /prefetch:1
                                                                                            5⤵
                                                                                            • Checks computer location settings
                                                                                            PID:6916
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --metrics-shmem-handle=7452,i,18084307300926562473,4201442532224608779,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709040660298736 --mojo-platform-channel-handle=6216 /prefetch:2
                                                                                            5⤵
                                                                                            • Checks computer location settings
                                                                                            PID:6644
                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7976,i,11509766569775602005,72427017886263096,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709041597340585 --mojo-platform-channel-handle=8116 /prefetch:8
                                                                                            5⤵
                                                                                              PID:6652
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --metrics-shmem-handle=8768,i,6253781259968769387,17968763515272209775,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709042534382434 --mojo-platform-channel-handle=8764 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6712
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --metrics-shmem-handle=8984,i,14778532951552819182,7205313797460193110,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709043471424283 --mojo-platform-channel-handle=8988 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:2296
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --metrics-shmem-handle=9200,i,6870142444868238374,3163684045915792175,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709044408466132 --mojo-platform-channel-handle=9212 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:380
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --metrics-shmem-handle=9248,i,4762797212369394000,11145610462005803378,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709045345507981 --mojo-platform-channel-handle=9256 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6240
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --metrics-shmem-handle=9540,i,15155303826205996216,17304358227537216301,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709046282549830 --mojo-platform-channel-handle=9544 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6436
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --metrics-shmem-handle=9780,i,17822139048166664404,5075224405370657248,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709047219591679 --mojo-platform-channel-handle=9776 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6936
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --metrics-shmem-handle=9976,i,9660489481664688478,18303013743804831602,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709048156633528 --mojo-platform-channel-handle=9980 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:1324
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --metrics-shmem-handle=10148,i,13703913020886314006,6251981950826525628,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709049093675377 --mojo-platform-channel-handle=10144 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6180
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --metrics-shmem-handle=10296,i,18279073993049925673,12528337520283963317,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709050030717226 --mojo-platform-channel-handle=10356 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6336
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --metrics-shmem-handle=10552,i,11343711691853854579,7684800735336611429,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709050967759075 --mojo-platform-channel-handle=10556 /prefetch:2
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6880
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --metrics-shmem-handle=10852,i,8375789171486107294,17334281945896626635,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709051904800924 --mojo-platform-channel-handle=10612 /prefetch:1
                                                                                              5⤵
                                                                                              • Checks computer location settings
                                                                                              PID:6724
                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8080,i,11200379530768919895,338953820040892129,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709052841842773 --mojo-platform-channel-handle=6888 /prefetch:8
                                                                                              5⤵
                                                                                                PID:6708
                                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --metrics-shmem-handle=6148,i,314767159807948420,5360624587000462494,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709053778884622 --mojo-platform-channel-handle=7720 /prefetch:1
                                                                                                5⤵
                                                                                                • Checks computer location settings
                                                                                                PID:6380
                                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=9300,i,13116804427172445620,5850952630914636741,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709054715926471 --mojo-platform-channel-handle=9512 /prefetch:8
                                                                                                5⤵
                                                                                                  PID:6392
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --metrics-shmem-handle=8084,i,9247702677067190811,16770292233758648228,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709055652968320 --mojo-platform-channel-handle=10744 /prefetch:2
                                                                                                  5⤵
                                                                                                  • Checks computer location settings
                                                                                                  PID:4828
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --metrics-shmem-handle=7888,i,12507920526373925944,3576972733790615003,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709056590010169 --mojo-platform-channel-handle=6516 /prefetch:2
                                                                                                  5⤵
                                                                                                  • Checks computer location settings
                                                                                                  PID:1920
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --metrics-shmem-handle=10952,i,17498719582019699293,1493784803845984504,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709057527052018 --mojo-platform-channel-handle=10800 /prefetch:1
                                                                                                  5⤵
                                                                                                  • Checks computer location settings
                                                                                                  PID:4492
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --metrics-shmem-handle=10472,i,3867696412227258943,13931633151949415691,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709058464093867 --mojo-platform-channel-handle=10476 /prefetch:2
                                                                                                  5⤵
                                                                                                  • Checks computer location settings
                                                                                                  PID:1320
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --metrics-shmem-handle=3748,i,779418891355014069,4799908388845843947,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709059401135716 --mojo-platform-channel-handle=7396 /prefetch:2
                                                                                                  5⤵
                                                                                                  • Checks computer location settings
                                                                                                  PID:7164
                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=10072,i,5817101072376251511,6621094091058973969,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709060338177565 --mojo-platform-channel-handle=10716 /prefetch:8
                                                                                                  5⤵
                                                                                                    PID:2196
                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --metrics-shmem-handle=9456,i,705464227424993535,12655965207760086638,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709061275219414 --mojo-platform-channel-handle=3824 /prefetch:2
                                                                                                    5⤵
                                                                                                    • Checks computer location settings
                                                                                                    PID:2376
                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=11212,i,3219106179360497416,15625526994647067167,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709062212261263 --mojo-platform-channel-handle=11220 /prefetch:8
                                                                                                    5⤵
                                                                                                      PID:5128
                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --metrics-shmem-handle=11240,i,3524423631526362423,16593795105415633820,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709063149303112 --mojo-platform-channel-handle=11012 /prefetch:1
                                                                                                      5⤵
                                                                                                      • Checks computer location settings
                                                                                                      PID:6596
                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --metrics-shmem-handle=10180,i,6159148718206058145,4082245906772658143,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709064086344961 --mojo-platform-channel-handle=11136 /prefetch:2
                                                                                                      5⤵
                                                                                                      • Checks computer location settings
                                                                                                      PID:3488
                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --metrics-shmem-handle=10992,i,15977924665033288463,10871861583267364427,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709065023386810 --mojo-platform-channel-handle=11116 /prefetch:1
                                                                                                      5⤵
                                                                                                      • Checks computer location settings
                                                                                                      PID:3820
                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --metrics-shmem-handle=11236,i,17151176312230000951,15078132096378466009,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709065960428659 --mojo-platform-channel-handle=11172 /prefetch:1
                                                                                                      5⤵
                                                                                                      • Checks computer location settings
                                                                                                      PID:5204
                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5848,i,5001441700434165366,14162031243808835940,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709066897470508 --mojo-platform-channel-handle=6868 /prefetch:8
                                                                                                      5⤵
                                                                                                        PID:5064
                                                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8332,i,6520709196180427963,15185674499946176457,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709067834512357 --mojo-platform-channel-handle=8388 /prefetch:8
                                                                                                        5⤵
                                                                                                          PID:4280
                                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --metrics-shmem-handle=7128,i,16469684654738453342,4137155087785951474,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709068771554206 --mojo-platform-channel-handle=8232 /prefetch:1
                                                                                                          5⤵
                                                                                                          • Checks computer location settings
                                                                                                          PID:2380
                                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10540,i,12688925142626738702,10165915804189802585,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709069708596055 --mojo-platform-channel-handle=8332 /prefetch:8
                                                                                                          5⤵
                                                                                                            PID:1160
                                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=8992,i,18254891433489061154,12597890895636822023,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709070645637904 --mojo-platform-channel-handle=8604 /prefetch:8
                                                                                                            5⤵
                                                                                                              PID:6152
                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --metrics-shmem-handle=11148,i,11515294938251231105,12550733104189837152,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709071582679753 --mojo-platform-channel-handle=10592 /prefetch:1
                                                                                                              5⤵
                                                                                                              • Checks computer location settings
                                                                                                              PID:5660
                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --metrics-shmem-handle=6956,i,18144735744482327489,11225569378783495317,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709072519721602 --mojo-platform-channel-handle=5728 /prefetch:1
                                                                                                              5⤵
                                                                                                              • Checks computer location settings
                                                                                                              PID:6180
                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --metrics-shmem-handle=8624,i,15563737398921229227,6189541464776570272,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709073456763451 --mojo-platform-channel-handle=3896 /prefetch:1
                                                                                                              5⤵
                                                                                                              • Checks computer location settings
                                                                                                              PID:5328
                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --metrics-shmem-handle=7308,i,4061350298673028867,7524235421588036184,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709074393805300 --mojo-platform-channel-handle=10964 /prefetch:2
                                                                                                              5⤵
                                                                                                              • Checks computer location settings
                                                                                                              PID:7064
                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=272,i,9796992219738046924,7824534042456259995,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709075330847149 --mojo-platform-channel-handle=10632 /prefetch:8
                                                                                                              5⤵
                                                                                                                PID:3032
                                                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=7120,i,9573771885025619420,2114242922155258399,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709076267888998 --mojo-platform-channel-handle=10132 /prefetch:8
                                                                                                                5⤵
                                                                                                                  PID:6416
                                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=7604,i,4083772997057447869,12833510393391276423,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709077204930847 --mojo-platform-channel-handle=8208 /prefetch:8
                                                                                                                  5⤵
                                                                                                                    PID:6480
                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6508,i,12621655544509705323,8856772404625856135,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709078141972696 --mojo-platform-channel-handle=6500 /prefetch:8
                                                                                                                    5⤵
                                                                                                                      PID:1484
                                                                                                                    • C:\Users\Admin\Downloads\PDFToolSetup.exe
                                                                                                                      "C:\Users\Admin\Downloads\PDFToolSetup.exe"
                                                                                                                      5⤵
                                                                                                                      • Drops file in Program Files directory
                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                      • Modifies registry class
                                                                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                      PID:2744
                                                                                                                      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                        powershell -ExecutionPolicy Bypass -NoProfile -Command "Remove-Printer -Name 'Open PDF Studio' -ErrorAction SilentlyContinue"
                                                                                                                        6⤵
                                                                                                                        • Hide Artifacts: Ignore Process Interrupts
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                        PID:6260
                                                                                                                      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                        powershell -ExecutionPolicy Bypass -NoProfile -Command "Add-Printer -Name 'Open PDF Studio' -DriverName 'Microsoft Print to PDF' -PortName 'PORTPROMPT:'"
                                                                                                                        6⤵
                                                                                                                        • Command and Scripting Interpreter: PowerShell
                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                        • Suspicious behavior: EnumeratesProcesses
                                                                                                                        PID:6900
                                                                                                                      • C:\Program Files\Open PDF Studio\open-pdf-studio.exe
                                                                                                                        "C:\Program Files\Open PDF Studio\open-pdf-studio.exe"
                                                                                                                        6⤵
                                                                                                                        • Checks whether UAC is enabled
                                                                                                                        • Drops file in Program Files directory
                                                                                                                        • Modifies registry class
                                                                                                                        • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                        PID:4448
                                                                                                                        • C:\Program Files\Open PDF Studio\pdfium-worker.exe
                                                                                                                          "C:\Program Files\Open PDF Studio\pdfium-worker.exe" 0 4448
                                                                                                                          7⤵
                                                                                                                            PID:7080
                                                                                                                          • C:\Program Files\Open PDF Studio\pdfium-worker.exe
                                                                                                                            "C:\Program Files\Open PDF Studio\pdfium-worker.exe" 1 4448
                                                                                                                            7⤵
                                                                                                                              PID:1060
                                                                                                                            • C:\Program Files\Open PDF Studio\pdfium-worker.exe
                                                                                                                              "C:\Program Files\Open PDF Studio\pdfium-worker.exe" 2 4448
                                                                                                                              7⤵
                                                                                                                                PID:7040
                                                                                                                              • C:\Program Files\Open PDF Studio\pdfium-worker.exe
                                                                                                                                "C:\Program Files\Open PDF Studio\pdfium-worker.exe" 3 4448
                                                                                                                                7⤵
                                                                                                                                  PID:6908
                                                                                                                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=4448.6884.5178904677036557932
                                                                                                                                  7⤵
                                                                                                                                  • Enumerates system info in registry
                                                                                                                                  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                  PID:4820
                                                                                                                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd55fab078,0x7ffd55fab084,0x7ffd55fab090
                                                                                                                                    8⤵
                                                                                                                                      PID:4320
                                                                                                                                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1776,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2
                                                                                                                                      8⤵
                                                                                                                                        PID:4172
                                                                                                                                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1944,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:3
                                                                                                                                        8⤵
                                                                                                                                          PID:5196
                                                                                                                                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2348,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:8
                                                                                                                                          8⤵
                                                                                                                                            PID:1152
                                                                                                                                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                                                                                                                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView" --webview-exe-name=open-pdf-studio.exe --webview-exe-version=1.84.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3480,i,10757915192404393643,9430724278071977181,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
                                                                                                                                            8⤵
                                                                                                                                              PID:7428
                                                                                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                            "powershell" -NoProfile -NonInteractive -Command "(Get-Printer -Name 'Open PDF Printer' -ErrorAction SilentlyContinue) -or (Get-Printer -Name 'Open PDF Studio' -ErrorAction SilentlyContinue)"
                                                                                                                                            7⤵
                                                                                                                                            • Hide Artifacts: Ignore Process Interrupts
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:8060
                                                                                                                                          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
                                                                                                                                            "powershell" -NoProfile -NonInteractive -Command "Get-CimInstance -ClassName Win32_Printer | Select-Object Name, DriverName, Default, PrinterStatus | ConvertTo-Json -Compress"
                                                                                                                                            7⤵
                                                                                                                                            • Command and Scripting Interpreter: PowerShell
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:7180
                                                                                                                                          • C:\Windows\system32\reg.exe
                                                                                                                                            "reg" query HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.pdf\UserChoice /v ProgId
                                                                                                                                            7⤵
                                                                                                                                            • Modifies registry key
                                                                                                                                            PID:7412
                                                                                                                                          • C:\Program Files\Open PDF Studio\pdfium-worker.exe
                                                                                                                                            "C:\Program Files\Open PDF Studio\pdfium-worker.exe" 3 4448
                                                                                                                                            7⤵
                                                                                                                                              PID:5800
                                                                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --start-stack-profiler --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=10040,i,10676951258248010116,11831626680173684160,262144 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709079079014545 --mojo-platform-channel-handle=9452 /prefetch:8
                                                                                                                                          5⤵
                                                                                                                                          • Suspicious behavior: EnumeratesProcesses
                                                                                                                                          PID:4120
                                                                                                                                        • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                          "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10396,i,14565688525725509026,14563966836775458921,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709080016056394 --mojo-platform-channel-handle=10464 /prefetch:8
                                                                                                                                          5⤵
                                                                                                                                            PID:2296
                                                                                                                                          • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                            "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3220,i,9337497423420115278,1008713470427609365,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709080953098243 --mojo-platform-channel-handle=11140 /prefetch:8
                                                                                                                                            5⤵
                                                                                                                                              PID:4824
                                                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --metrics-shmem-handle=10004,i,16700368374039645752,14846309307815018518,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709081890140092 --mojo-platform-channel-handle=10000 /prefetch:2
                                                                                                                                              5⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:2296
                                                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --metrics-shmem-handle=9744,i,3365582315247528735,16738907829133158484,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709082827181941 --mojo-platform-channel-handle=10204 /prefetch:2
                                                                                                                                              5⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:6216
                                                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --metrics-shmem-handle=6376,i,12973981141123541592,13361491720141064772,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709083764223790 --mojo-platform-channel-handle=10396 /prefetch:2
                                                                                                                                              5⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:6456
                                                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --metrics-shmem-handle=3824,i,17320398363440160202,15365990636129803218,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709084701265639 --mojo-platform-channel-handle=6356 /prefetch:2
                                                                                                                                              5⤵
                                                                                                                                              • Checks computer location settings
                                                                                                                                              PID:7656
                                                                                                                                            • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                              "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=6416,i,16463379785886486571,4659137612025141098,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709085638307488 --mojo-platform-channel-handle=9012 /prefetch:8
                                                                                                                                              5⤵
                                                                                                                                                PID:7408
                                                                                                                                              • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=3796,i,15187153097455637729,7332264185422576693,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709086575349337 --mojo-platform-channel-handle=11108 /prefetch:8
                                                                                                                                                5⤵
                                                                                                                                                  PID:8104
                                                                                                                                                • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                  "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=10824,i,513939172584489477,5460153789184143094,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709087512391186 --mojo-platform-channel-handle=9912 /prefetch:8
                                                                                                                                                  5⤵
                                                                                                                                                    PID:8084
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --metrics-shmem-handle=6392,i,14662950580312286081,11628391700828432238,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709088449433035 --mojo-platform-channel-handle=9460 /prefetch:2
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:8148
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --start-stack-profiler --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --metrics-shmem-handle=10108,i,14803466114336743786,7565147464736812866,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709090323516733 --mojo-platform-channel-handle=11244 /prefetch:1
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:7896
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --metrics-shmem-handle=10424,i,7179027675396126321,9169547861518763693,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709089386474884 --mojo-platform-channel-handle=3220 /prefetch:1
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:7900
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --metrics-shmem-handle=10588,i,13681767044438369417,7015671457674814722,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709091260558582 --mojo-platform-channel-handle=6548 /prefetch:2
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:7928
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --metrics-shmem-handle=10000,i,14702394660096176301,2043643832148104229,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709092197600431 --mojo-platform-channel-handle=6168 /prefetch:2
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:7892
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --metrics-shmem-handle=6504,i,12891516910079693207,4888315721706607049,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709093134642280 --mojo-platform-channel-handle=9888 /prefetch:2
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:8068
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --metrics-shmem-handle=3816,i,3781899265101812698,10432911182528455939,2097152 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709094071684129 --mojo-platform-channel-handle=10832 /prefetch:2
                                                                                                                                                    5⤵
                                                                                                                                                    • Checks computer location settings
                                                                                                                                                    PID:7460
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6284,i,11193631993646015435,8937858009326495535,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709095008725978 --mojo-platform-channel-handle=7936 /prefetch:8
                                                                                                                                                    5⤵
                                                                                                                                                      PID:6636
                                                                                                                                                    • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                      "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=7600,i,8231879423978810701,14353155030731468014,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709095945767827 --mojo-platform-channel-handle=9932 /prefetch:8
                                                                                                                                                      5⤵
                                                                                                                                                        PID:7848
                                                                                                                                                      • C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe
                                                                                                                                                        "C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --metrics-shmem-handle=3912,i,9902447558128243534,16695656790928038379,524288 --field-trial-handle=2064,i,7306825069364825937,10968138120485415899,262144 --variations-seed-version=15 --trace-process-track-uuid=3190709096882809676 --mojo-platform-channel-handle=7092 /prefetch:8
                                                                                                                                                        5⤵
                                                                                                                                                          PID:7868
                                                                                                                                                  • C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe
                                                                                                                                                    "C:\Users\Admin\Wavesor Software\SWUpdater\SWUpdater.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJTV1VwZGF0ZXIiIHVwZGF0ZXJ2ZXJzaW9uPSIxLjMuMTU3LjAiIHNoZWxsX3ZlcnNpb249IjEuMy4xNTcuMCIgaXNtYWNoaW5lPSIwIiBzZXNzaW9uaWQ9Ins3NUM4QkExNC02QUY5LTQ1QjYtODdCNy04QUZGOTNFQzY2N0R9IiB1c2VyaWQ9InsyMjYyN2VlZS0wMjUwLTQ4ZTgtOTZhYi1iZjJkZDRkOTcyNjN9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHJlcXVlc3RpZD0iezk0NjNENjZELTlDQjgtNEFEQS05QTZBLTUzM0RGOTRCNTExOH0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iMTYiIHNzZT0iMSIgc3NlMj0iMSIgc3NlMz0iMSIgc3NzZTM9IjEiIHNzZTQxPSIxIiBzc2U0Mj0iMSIgYXZ4PSIxIi8-PG9zIHBsYXRmb3JtPSJ3aW4iIHZlcnNpb249IjEwLjAuMTkwNDQuNDUyOSIgc3A9IiIgYXJjaD0ieDY0Ii8-PGFwcCBhcHBpZD0ie0VCMTQ5QUQyLUNFNEUtNEY1MS1CN0ZDLUExNDlGQUE0Q0NBRn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMTQyLjEuMCIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIiBpbnN0YWxsYWdlPSItMSIgaW5zdGFsbGRhdGU9Ii0xIj48ZXZlbnQgZXZlbnR0eXBlPSI5IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-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-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc291cmNlX3VybF9pbmRleD0iMCIgdXBkYXRlX2NoZWNrX3RpbWVfbXM9Ijg0MCIgZG93bmxvYWRfdGltZV9tcz0iMTU3NDAiIGRvd25sb2FkZWQ9IjExMjY3MDg3MiIgdG90YWw9IjExMjY3MDg3MiIgaW5zdGFsbF90aW1lX21zPSIxMzk2MCIvPjwvYXBwPjwvcmVxdWVzdD4
                                                                                                                                                    2⤵
                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                    • Loads dropped DLL
                                                                                                                                                    • Checks whether UAC is enabled
                                                                                                                                                    • Reads the TCP/IP host and domain name from the registry
                                                                                                                                                    • System Location Discovery: System Language Discovery
                                                                                                                                                    • System Network Configuration Discovery: Internet Connection Discovery
                                                                                                                                                    PID:6036
                                                                                                                                                • C:\Windows\system32\svchost.exe
                                                                                                                                                  C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                                                                                                                                                  1⤵
                                                                                                                                                    PID:5228

                                                                                                                                                  Network

                                                                                                                                                        MITRE ATT&CK Enterprise v16

                                                                                                                                                        Replay Monitor

                                                                                                                                                        Loading Replay Monitor...

                                                                                                                                                        Downloads

                                                                                                                                                        SWUpdater.exe

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdater.exe
                                                                                                                                                        • Size 108KB
                                                                                                                                                        • SHA256 676edd3695c74aac087de2e11b05f1dc2673830065d8fbc1fcfcfb5a15919fb0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        SWUpdaterBroker.exe

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterBroker.exe
                                                                                                                                                        • Size 97KB
                                                                                                                                                        • SHA256 76e5d19341e52ebd80fc13ad81d8bf0bccf8e599217d06058a21dd2b0d43e4fd
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        SWUpdaterComRegisterShell64.exe

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterComRegisterShell64.exe
                                                                                                                                                        • Size 190KB
                                                                                                                                                        • SHA256 49e8c3f605019149b8ede45676c269346ba2ec101608a63933bd090787b7b81c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        SWUpdaterCore.exe

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterCore.exe
                                                                                                                                                        • Size 208KB
                                                                                                                                                        • SHA256 f3d4a8f1bd4070af6bb4460f4940c15b2670719d7563192669956f4f8d900c67
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        SWUpdaterOnDemand.exe

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\SWUpdaterOnDemand.exe
                                                                                                                                                        • Size 97KB
                                                                                                                                                        • SHA256 3b231a2121c07b2153b4dfe3f402308b795904827960d8c390fe6192416125e7
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        psmachine.dll

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psmachine.dll
                                                                                                                                                        • Size 259KB
                                                                                                                                                        • SHA256 ad2143218dcb5761c96f656e630560a291c53163b5a023ddebadfd14c44ac318
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        psmachine_64.dll

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psmachine_64.dll
                                                                                                                                                        • Size 323KB
                                                                                                                                                        • SHA256 05c209ca2512b2b7edd70df56753ff2a137fad63c456f9d558e5b8cb89e07b05
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        psuser.dll

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psuser.dll
                                                                                                                                                        • Size 259KB
                                                                                                                                                        • SHA256 306f117f853405bb44e6e95430b6bb2eac87747afa1c65b0eb59097336a3b97a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        psuser_64.dll

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\psuser_64.dll
                                                                                                                                                        • Size 323KB
                                                                                                                                                        • SHA256 d7b61a7cd898e62e2d2a3377ad9d66dd9d5bb8d45e0475d6f871aaa17ed083e8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        swupdater.dll

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\swupdater.dll
                                                                                                                                                        • Size 1.0MB
                                                                                                                                                        • SHA256 fb241530e3d716c753be0141376ab8974e812aa62facbfda251c67a60d7720a7
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        swupdaterres_en.dll

                                                                                                                                                        • Path C:\Program Files (x86)\Wavesor\Temp\GUM12D9.tmp\swupdaterres_en.dll
                                                                                                                                                        • Size 42KB
                                                                                                                                                        • SHA256 be83143f61ca49317613663b6025c9df5b52482b454235b76c478817a6c611df
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        open-pdf-studio.exe

                                                                                                                                                        • Path C:\Program Files\Open PDF Studio\open-pdf-studio.exe
                                                                                                                                                        • Size 35.5MB
                                                                                                                                                        • SHA256 f7693e1f5be94ad9fe3cc9020243956849fa6811fb054385e4c7b1e1d9f2b04e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        013a64c1-06e5-4dc3-b1e2-1da039fe559f.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\013a64c1-06e5-4dc3-b1e2-1da039fe559f.tmp
                                                                                                                                                        • Size 132KB
                                                                                                                                                        • SHA256 bf9b0ab4eed144a2a1cb8946fe7a79bae6ef5abeae36b699ae8b6ed22b1f6cd9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        04cd8299-f175-4125-8475-9941e8dc6ff7.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\04cd8299-f175-4125-8475-9941e8dc6ff7.tmp
                                                                                                                                                        • Size 132KB
                                                                                                                                                        • SHA256 f48551c75e2420d3aca7203c718f0de54615f0110795d58e1bb761a9f010b504
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        0f1e76af-83a2-46e6-a15d-ec6ea55778e5.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\0f1e76af-83a2-46e6-a15d-ec6ea55778e5.tmp
                                                                                                                                                        • Size 132KB
                                                                                                                                                        • SHA256 26123029f7263b3048e8a534cca940cb53c2ec8ec3723657aeaa68623e46b72c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        13b25f56-ff61-460a-8d8d-3026358058ba.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\13b25f56-ff61-460a-8d8d-3026358058ba.tmp
                                                                                                                                                        • Size 132KB
                                                                                                                                                        • SHA256 c2b54bf7eb3a55cad9fe3fa5a609f148a08ae85ce54ee2025a57e55caae1ce90
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        2394e4ec-f6ee-4ffb-ba74-70994c515086.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\2394e4ec-f6ee-4ffb-ba74-70994c515086.tmp
                                                                                                                                                        • Size 132KB
                                                                                                                                                        • SHA256 27de8df8c425ad68c5cbd3bfafa459ae3819c5fa84fe30a24068d8924d62875b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
                                                                                                                                                        • Size 40B
                                                                                                                                                        • SHA256 de63eaed34d3403559afc4223f5a0cd45edd919caf693c3dcf06ceb217af4fe0
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        294901e8-0520-472d-a8b7-e1d96acf21c8.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\294901e8-0520-472d-a8b7-e1d96acf21c8.tmp
                                                                                                                                                        • Size 12KB
                                                                                                                                                        • SHA256 4dffef3569f1ae2c902713e7a4512c79104e68a7cbc89e4ec877fba4067ac921
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        50e192f1-8419-4004-92b8-7d173540da54.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\50e192f1-8419-4004-92b8-7d173540da54.tmp
                                                                                                                                                        • Size 17KB
                                                                                                                                                        • SHA256 bff6e389719bb777fa7fd4033d39d92c9c068d450ab2ad7a94625a4c9a8c7fd5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        6dc887e8-cb2c-4f0f-996e-345d6d38eaf3.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6dc887e8-cb2c-4f0f-996e-345d6d38eaf3.tmp
                                                                                                                                                        • Size 414B
                                                                                                                                                        • SHA256 a3c40f3583540171f5b801243faa327c2cd9355efd5f089e2ea0e82cb72270a7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        f_000011

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000011
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 89c8e0669dd411b4f91f79771522f9686bba1aca7f1c870cad8901c021296728
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000012

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000012
                                                                                                                                                        • Size 18KB
                                                                                                                                                        • SHA256 321eacf2b78212cb20ae3ebb27d35cc9b2c7ba8a9fa65ad8b7c292f826bf8099
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002a
                                                                                                                                                        • Size 28KB
                                                                                                                                                        • SHA256 aa8bd3300c2b29c5f5bddf21a5ad80538f248b468ce44a78d2cd918a27bb3efd
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000033

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033
                                                                                                                                                        • Size 41KB
                                                                                                                                                        • SHA256 dbb362d29b9b4111e7722bae880e8a79ef8efe96db4cdf7869195f5cd0066fc5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000034

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000034
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 c3c9c7f4c37ed9de6eca7e969980383f3f7c94fd1f7f1f9be596219a25a19360
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000037

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037
                                                                                                                                                        • Size 33KB
                                                                                                                                                        • SHA256 e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000038

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 2326b68a516618dfd0e8fcbfe8aca9d60ac7b66a13296fbd820d042f76f473d1
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000039

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039
                                                                                                                                                        • Size 21KB
                                                                                                                                                        • SHA256 5db61fb734da4c38695f4fa032682bb57103509e00204785229e5fccdf143bc2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00003a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003a
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 649674e87a90ae80d5f886bf2f6974ba32282a669d0d5619adf550b5c669e05e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00003b

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b
                                                                                                                                                        • Size 46KB
                                                                                                                                                        • SHA256 db88088ab42e35955fb7614597fbdca3c25600ed0556febb44494069df605aef
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00003c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003c
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 a3df6dee7af91883dec6523c9b30d14b30375345298b389eeb12567820eb4129
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00003d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d
                                                                                                                                                        • Size 170KB
                                                                                                                                                        • SHA256 0aeba119a834e5d9fc215354e97a7d4331c4d1559a532959b866b0437b507996
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00003e

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e
                                                                                                                                                        • Size 160KB
                                                                                                                                                        • SHA256 ad30ae6988fb9aab42d083dd96b0d5464abdbd46362eaa8961a8c39134afa699
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00003f

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f
                                                                                                                                                        • Size 41KB
                                                                                                                                                        • SHA256 1115a65c808667f4bbba3cb7b0598402ec81f9b4dc15ab35cffa1def016e5964
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000040

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040
                                                                                                                                                        • Size 203KB
                                                                                                                                                        • SHA256 f6e9eeccfbe076df70a838946f632a513ee840ff287b0bcccdd42b239d0d1475
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000041

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041
                                                                                                                                                        • Size 153KB
                                                                                                                                                        • SHA256 9349457d0e909726e9a9a89038a310618e8d54100e1aa02c06c785fa6bb24547
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000042

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042
                                                                                                                                                        • Size 176KB
                                                                                                                                                        • SHA256 1afee98c81032ea93959eb679653b97ff20e80c0c622ad952f441847afc1a5aa
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000043

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043
                                                                                                                                                        • Size 176KB
                                                                                                                                                        • SHA256 e022677655a5df63b992d830b264ca88d5acdbd5e54dc3493e1c8465d446e263
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000049

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049
                                                                                                                                                        • Size 143KB
                                                                                                                                                        • SHA256 14a992ac2d67b3b1b576a616dbf966ccb89adbe391c38cdf9882e82a401f1c91
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00004d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d
                                                                                                                                                        • Size 43KB
                                                                                                                                                        • SHA256 7ef26b78b23f2fc011d6c174f0b72a35448ba8bf99ac24a1fef89a9b358a2e34
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00004e

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 688c0bc13deb1d30fbc17d66729eb3cfa6982e2461f0e70be0e34acf1c44b18e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00004f

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f
                                                                                                                                                        • Size 47KB
                                                                                                                                                        • SHA256 3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000053

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000053
                                                                                                                                                        • Size 30KB
                                                                                                                                                        • SHA256 f6b8782acadffa9a87315d9e2f3c1557a5c2f4aebc8f8e6b00d4a0263164fd14
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000059

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059
                                                                                                                                                        • Size 160KB
                                                                                                                                                        • SHA256 865659617621c40d9f884ae7b8c1ca5d6a6d61b2090deeda06d553640f6bfab6
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000067

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067
                                                                                                                                                        • Size 73KB
                                                                                                                                                        • SHA256 b0bd8c105dcdba1cd816cdda627b61679879777fc6606accdde278dd3ad03cea
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000068

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000068
                                                                                                                                                        • Size 96KB
                                                                                                                                                        • SHA256 1bd468bce27771a601b0870c0a398e613ffbf254af54b36bfdf58f997b0d1395
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000069

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000069
                                                                                                                                                        • Size 32KB
                                                                                                                                                        • SHA256 a9ca7e1341faee1ca19a9323457ab68d093d9f7a17eb1d3be4eb78860eb97fc8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006b

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b
                                                                                                                                                        • Size 20KB
                                                                                                                                                        • SHA256 74e3ea93996afde37d6be8371a2a74176d97dc0466f72b637a3773048be944a0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006c
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 cf123c9b56bd9292573ff898d14eb8510b99a61f8fda739b46ca9479b7e48eee
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006d
                                                                                                                                                        • Size 18KB
                                                                                                                                                        • SHA256 d069fcf848849ff3ccf0b5ccabd54cb584f1dbc1905d638691e45e2ea44009c0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006e

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006e
                                                                                                                                                        • Size 25KB
                                                                                                                                                        • SHA256 386aa74ad787615e620c1e484cd153046a0c5dc1887ab878b9172e59feca0386
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006f

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006f
                                                                                                                                                        • Size 42KB
                                                                                                                                                        • SHA256 cf8f0a7103997862fb5a5bec27480203b48ee49d1309092fc550c470b3d19e9f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000070

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070
                                                                                                                                                        • Size 45KB
                                                                                                                                                        • SHA256 2ac12e6cee1593355ec7c6d7223fc92d6ac09b8f494be25e7074977abdd98fd5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000071

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000071
                                                                                                                                                        • Size 34KB
                                                                                                                                                        • SHA256 82848fb98ced89a19d5ff1f35d3eaa96dc2db0de9a1f835104b21e84255c84d2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000072

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                                        • Size 89KB
                                                                                                                                                        • SHA256 f534b7f57862ce225c98f50c90db744b01e01ae17396c1dd3dcff89e7f43fb33
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000073

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                                                                        • Size 154KB
                                                                                                                                                        • SHA256 158dde82e5ef1ad7cf529d70a2fc9775d2c1a2e016aafdc58df3a9bf94fbab45
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000074

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000074
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 12e72308a6a8244d3fa5ee3679d5ceb456014190f89ecde8567558540ecd2906
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000075

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 eb3dbf0899ce09641aee1c02aaf5333ecddd3d90ce631b28f18f7932cd266a0b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000076

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000076
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 60516e7255497606f5d0750b2bc08ad2fd8751524c26baae7bb4a2ec8dcd25eb
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000077

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000077
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 f322b5357f2bdc735cad5338abe174bb713f5f09f5792c2a2bfcab9499c6a8a3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000078

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000078
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 febc7c2ab874a4fe8acc13523f0db3fb90900f71966508fb4f7be6af8844ee07
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000079

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000079
                                                                                                                                                        • Size 183KB
                                                                                                                                                        • SHA256 5dfb45c78a85ee51cf54c0605449a855d665b89c540bdc9733a0c7b5136e5050
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00007a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00007a
                                                                                                                                                        • Size 104KB
                                                                                                                                                        • SHA256 fcd022f6bb502b213734340a7e26e855fcab82e08f02d777d77a2e6cf442d4f9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 578b705b9c4fba616002a749c7ac3f7dbef8b90f10b654e574ac5348861fc853
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 6ddb7654f691e1d245d75f8db10d0dd26557002e594e2c4cc4a118c74cdbb2c3
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 696B
                                                                                                                                                        • SHA256 b3dbf1ad088b0c44bdf6f79ba4b12efd735c43e7a949670b383791f5618780ee
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 ea593a308facad8f1e3449aedea4f66441e9aa19a846908f98bf3ca3afc465a2
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 408B
                                                                                                                                                        • SHA256 c1219d78762d35761dea31e577eb228e1b1f7008e71891722132428f5954c4ec
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        091c0b6c-65e6-4214-9d4b-0c71f6615192.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\091c0b6c-65e6-4214-9d4b-0c71f6615192.tmp
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        7121041c-5e4a-4099-ac9d-c788ae556ff3.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\7121041c-5e4a-4099-ac9d-c788ae556ff3.tmp
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 36f9aea36956eada478bf1beb696d3690776d1a4de09d93f9d81089c1892f968
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        722244ba-dc36-4407-a4cb-830c071cdcf5.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\722244ba-dc36-4407-a4cb-830c071cdcf5.tmp
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 551902b758c65c806e0d9418d17cec3ee8660d4fca965bdbd3dba3b2756b434a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                                        • Size 120B
                                                                                                                                                        • SHA256 90113355ae20dc448d302900221eff3e2a4e9738a8d1238ba4f0f28d8854bb58
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                        • Size 96B
                                                                                                                                                        • SHA256 1727ead2ee2636e09facbf41f0fcfc73b6ae8b72caf95dac29b117161672741c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        aed57bcf-07bd-421b-992e-7e1dd5f80f86.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\aed57bcf-07bd-421b-992e-7e1dd5f80f86.tmp
                                                                                                                                                        • Size 14KB
                                                                                                                                                        • SHA256 52a26794473549fbe923b479037359d05612143ce9f8fc8fdf4e6c7a33cb061f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        b6346408-3e50-45aa-9e7e-e8112ce33a59.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b6346408-3e50-45aa-9e7e-e8112ce33a59.tmp
                                                                                                                                                        • Size 14KB
                                                                                                                                                        • SHA256 0c2ee5e5ed1e42ae32edf30715c70f1b5332c9a78d8eee48b9e2dff80bdbdbf3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        b9f23923-9269-4b09-a05c-a4f012763441.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\b9f23923-9269-4b09-a05c-a4f012763441.tmp
                                                                                                                                                        • Size 15KB
                                                                                                                                                        • SHA256 77d6170ed38a64b36014daaff0342e0fe99f3b65595225072fbcdf16bd9c3299
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        cef2309f-cacd-44d7-9860-e28458c995e7.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\cef2309f-cacd-44d7-9860-e28458c995e7.tmp
                                                                                                                                                        • Size 6B
                                                                                                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        f4e26ec9-3ac8-4279-a204-dc46b4fecb18.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\f4e26ec9-3ac8-4279-a204-dc46b4fecb18.tmp
                                                                                                                                                        • Size 15KB
                                                                                                                                                        • SHA256 72be6ff95aa47b4b2a0cec3473ef77d27301a910203adff1fd66cfafef610e1f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        b6fe988b-0844-4c65-aa3b-4f7ed5e4431f.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\b6fe988b-0844-4c65-aa3b-4f7ed5e4431f.tmp
                                                                                                                                                        • Size 131KB
                                                                                                                                                        • SHA256 1263b9d3ff4fc8504d6b07c80e23b3dab77039ba7f533f7e7208324c8df45a92
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        d3203d7c-17b7-411b-9a0e-857eec856417.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\d3203d7c-17b7-411b-9a0e-857eec856417.tmp
                                                                                                                                                        • Size 132KB
                                                                                                                                                        • SHA256 eefa877fdc705f674b9e37a63bbfdce2ea076d1e6c343c141648f443c24b7f97
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 7f04cdd2457b4d15dbb3eee57a05596dc4fd6459aff330edd95a1352a0236f62
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        i[2].json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\PE5SQ38U\i[2].json
                                                                                                                                                        • Size 59B
                                                                                                                                                        • SHA256 a55bf726d4905cb6f6e4ae72ea80c1c5c59fa65680aea8faa5fa823330148ae0
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        SWUpdaterSetup.exe

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\Wave\SWUpdaterSetup.exe
                                                                                                                                                        • Size 795KB
                                                                                                                                                        • SHA256 d6590aecba25227fc950fc2951d604a41ad3ce496db8c1b76035dacefd795596
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        __PSScriptPolicyTest_yxj2re4s.nif.ps1

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_yxj2re4s.nif.ps1
                                                                                                                                                        • Size 60B
                                                                                                                                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        gui7329.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\gui7329.tmp
                                                                                                                                                        • Size 5KB
                                                                                                                                                        • SHA256 5139be339b720588566e1f89af194c15f01ff0f23211fdacb715e246b898bf9c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        System.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\System.dll
                                                                                                                                                        • Size 12KB
                                                                                                                                                        • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        UserInfo.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\UserInfo.dll
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        modern-wizard.bmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\modern-wizard.bmp
                                                                                                                                                        • Size 25KB
                                                                                                                                                        • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        nsDialogs.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\nsDialogs.dll
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        nsExec.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\nsExec.dll
                                                                                                                                                        • Size 7KB
                                                                                                                                                        • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        nsis_tauri_utils.dll

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsd69AB.tmp\nsis_tauri_utils.dll
                                                                                                                                                        • Size 33KB
                                                                                                                                                        • SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        messages.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1028632806\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                        • Size 167B
                                                                                                                                                        • SHA256 7e1c55d00bd918d5997da97a2e86337808c060c16ef56bca2772d5e66d3ce26f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        messages.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1133535755\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                        • Size 75B
                                                                                                                                                        • SHA256 ec483267323e699f4671435da3bd470a1e68b19a1c73203b69463031c271f572
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        sidebar-icon-128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-128.png
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 77e6c0d3d315f749a624631280c7f4015167fe671cc954505122224fce069f52
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        sidebar-icon-16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-16.png
                                                                                                                                                        • Size 567B
                                                                                                                                                        • SHA256 e6b3b0479ef3462a37cf516e0b4512df3f6f9ff5d3db06114c6b7885d402f17a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        sidebar-icon-32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-32.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 b8b24ec34a5426196a274d0ca41d5f07290ccd9b2f37c01b3c291f0384cf68aa
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        sidebar-icon-48.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1462753670\CRX_INSTALL\src\assets\icons\sidebar-icon-48.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 fc359cce0e73f3aa76820730429220c1910b75be6bc99201d9db86279aeddebb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon64.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_1807635942\CRX_INSTALL\images\icon64.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 b6e010d9cdbfa7a7c11717b75ff4e8e462a9b7e078ec6964f7902978c1701ee4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon128.png
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 fddacc07d54a8117d7402593349bd8bd0c29fc2c021333471faea616b33f1db8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon16.png
                                                                                                                                                        • Size 682B
                                                                                                                                                        • SHA256 e4f4637ca0636d4e4595ca4675fbfb8735b9a268642c2759591f92f445520bcc
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon32.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 ff03b25a93436cc76509f1df9066672e230d12872d96634f2bf9297118184402
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon48.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon48.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 2411043babdc90e076d22a43016ad6688ea795d96a448f500cb603e6af830b6a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon64.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2036310996\CRX_INSTALL\images\icon64.png
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 aae26c428b294d0a34fed081da519d9c0c904ba40e2de089abecf83cacb47577
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon128.png
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 b4a6c6d992c326e56738e14ae501c584e9084f57e6b2e05035f1e221ff0d4d9a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon16.png
                                                                                                                                                        • Size 445B
                                                                                                                                                        • SHA256 ebc979b76573ce9da13a06b367baa2fee22a4ac3fd3a4a1d645a3ec6cfa151f3
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon32.png
                                                                                                                                                        • Size 772B
                                                                                                                                                        • SHA256 2a919ec67034fd93c04fc5343355a5fcc3ef920e85a1b6307fe7476d0b6ed614
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon48.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon48.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 41952e72e94a6c4ea64c01f92686604b68e6108ac97cb1584c6d64378432f233
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon64.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_2047684533\CRX_INSTALL\icons\icon64.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 eaead6149c035cfb779ac9b564bb51e1136c8577721e84172bfd74aa8e47bfb5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        messages.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_554170916\CRX_INSTALL\_locales\en\messages.json
                                                                                                                                                        • Size 75B
                                                                                                                                                        • SHA256 932df778acff86fad03667a727caa81379f860dae53cf158607a131411dff6b7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon128.png
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 c16e7d782dbfea6ba547f027ea3dba565112dcb8977c6f8138dd12a28a8ba237
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon16.png
                                                                                                                                                        • Size 500B
                                                                                                                                                        • SHA256 c35cbfbbbead56f366ac472a065d9d16e82b52d9605a59dd78deef1ff96c7808
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon32.png
                                                                                                                                                        • Size 996B
                                                                                                                                                        • SHA256 80adcfa5b912df3405b179b504524eb7badd3fa008e196c01992cc441bcc2750
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon48.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon48.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 000e9d7e3adf77a5b7c47a72d84eb8228a6fec24995212f1eee70fd6d5826a27
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon64.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4132_607279586\CRX_INSTALL\icons\icon64.png
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 2a31937236f9e866183cda68085a7e6f2ce6d5dc85e460c91bcf6a720f8c4375
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        56e977d2-2a9f-4096-87c7-8464eaca0254.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\56e977d2-2a9f-4096-87c7-8464eaca0254.tmp
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 0a575f434f1cbe5682f88e3d1a0fa3ddb78edd8efa7c5672ed6e8a2d9a461f6b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Crashpad\settings.dat
                                                                                                                                                        • Size 40B
                                                                                                                                                        • SHA256 8d518badabb11190f27af8a51c5f83e583c5ff80439c30490ba26b47915e91f7
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        0a350b4d-e980-454f-910e-7872a6267579.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\0a350b4d-e980-454f-910e-7872a6267579.tmp
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 8573759b948db7a7200344d3e79190346b040a3a36dcc327545b9774f0f270f2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        198338aa-c4b5-414e-bf72-f1685535e347.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\198338aa-c4b5-414e-bf72-f1685535e347.tmp
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 98874373821a3cca6fe025a589c5706e62f60fdfbf93d0fa7a065c62fb77bea8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        22f480bc-8853-4034-8c22-4480f910cd55.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\22f480bc-8853-4034-8c22-4480f910cd55.tmp
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 8e0e394320bea7bd9317c85fc2b7b5c87ccdd3587bfc882f21be84ba590ea7b8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        42327279-277c-4378-9b0a-366ab266c1b4.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\42327279-277c-4378-9b0a-366ab266c1b4.tmp
                                                                                                                                                        • Size 46KB
                                                                                                                                                        • SHA256 562d8bcfdfbbdccd231e2f032ad9a5a5669422da06e26d9acbad8c635dcb5559
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        6aaf082e-edfa-4167-8904-d89f2ee7b208.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\6aaf082e-edfa-4167-8904-d89f2ee7b208.tmp
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 159579f508ca72c6b95376ef924cc8304ed0162f92090e2adacefd23d729ab49
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        701d05ec-3bed-44e6-9c09-d0a895bd04de.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\701d05ec-3bed-44e6-9c09-d0a895bd04de.tmp
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 a959c26e002791151ce2f37b5560972b29143b9c06ed4b030fa6e47898851ae0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        7e34d08d-d0ea-4e25-b4c1-0f722e802a81.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\7e34d08d-d0ea-4e25-b4c1-0f722e802a81.tmp
                                                                                                                                                        • Size 26KB
                                                                                                                                                        • SHA256 5ea5e817550210a82aaf06e4ae14897f8148494520f6d8fb90589c4f44a25ae4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        9bf4c0c4-2a8e-42f2-bc0f-ae782cb74ed6.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\9bf4c0c4-2a8e-42f2-bc0f-ae782cb74ed6.tmp
                                                                                                                                                        • Size 21KB
                                                                                                                                                        • SHA256 0e900ef12cda2d977a9058e185da083ed0c9c31ac5fb6f50c988598892577bcd
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        9ec5554f-2f19-4607-97d5-25da8219e680.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\9ec5554f-2f19-4607-97d5-25da8219e680.tmp
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 8e8fb02c28fdf34b52f2daeef4dbcae91b98d3b1ee52dce0979c43f70703ce4d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00000c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00000c
                                                                                                                                                        • Size 167KB
                                                                                                                                                        • SHA256 424fd3a79bab0f546b7e095da0d5132fd38d438a136ecd42403a531aea502d8a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000011

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000011
                                                                                                                                                        • Size 59KB
                                                                                                                                                        • SHA256 9776754d89e8f56f4800a18086e4c14b2c4cbb98d5847e5bc2a1cc4046437aef
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000017

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000017
                                                                                                                                                        • Size 39KB
                                                                                                                                                        • SHA256 89bbb371c785cefb4205a422de44f0906031e64c1eb3ad4c4824c0a31e43a38b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000021

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000021
                                                                                                                                                        • Size 335KB
                                                                                                                                                        • SHA256 85dc536d1274cb088e70163eb79bb2d9332d29f26bc12103bb7b659a2c860090
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000022

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000022
                                                                                                                                                        • Size 101KB
                                                                                                                                                        • SHA256 37692f06664bc37b48a167ec280972d272b4037f7f27e4f18480109d66396323
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000023

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000023
                                                                                                                                                        • Size 273KB
                                                                                                                                                        • SHA256 408804608525f84cbb3eb22fa04f2b92adb6ea5f0df22346cc1156597901db55
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000024

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000024
                                                                                                                                                        • Size 34KB
                                                                                                                                                        • SHA256 4fdf43ee9e939292f67cfd9534fbdfb2cc19eae833860438e98b2acb9659e51b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000025

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000025
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 707774c9c52b444c6e36dc037b504ef7f5650d10e83d92dada96acbe36725970
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000026

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000026
                                                                                                                                                        • Size 75KB
                                                                                                                                                        • SHA256 e9309361e537ef2088c253177f222cc0a7303aac4969d882d58bab37a440d8a2
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000027

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000027
                                                                                                                                                        • Size 25KB
                                                                                                                                                        • SHA256 d5d69bac3e4fdc8f3a712b97e85ae149ba31ee75d8173b8e9dd0da5fab67859b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000028

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000028
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 e44a6269f4bd6517c7c7dfebe47e59239ea46137c535f234e47e241751d53826
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000029

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000029
                                                                                                                                                        • Size 60KB
                                                                                                                                                        • SHA256 96690fc4f853bdfd008604f4fe4bf0819777731af65d174d72760096acdc96d4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002a
                                                                                                                                                        • Size 167KB
                                                                                                                                                        • SHA256 0e3e325a1bcf4d52fe83e3ac828dafa35f29e71cfb057dcf7ed9d00fc0b7194a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002b

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002b
                                                                                                                                                        • Size 21KB
                                                                                                                                                        • SHA256 efb854988a43ea78f0f81453db2b253d44af862ef7331dea10ed34de70ef3a35
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002c
                                                                                                                                                        • Size 34KB
                                                                                                                                                        • SHA256 2e5220b4d55a53fdc78a66da4fd55b46fa067ee6b68f66f08d7bde52397bd8d4
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002d
                                                                                                                                                        • Size 30KB
                                                                                                                                                        • SHA256 a2b39d0fa0859e357d8702a2556d3fb405536ae79d84b0beff1474c507158783
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002e

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002e
                                                                                                                                                        • Size 76KB
                                                                                                                                                        • SHA256 c884bb5d8e3cb4513f66d3d141b1361df234366a6410d4bda3423592e501e280
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00002f

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00002f
                                                                                                                                                        • Size 47KB
                                                                                                                                                        • SHA256 f78e357cc08c1089eaebda9cb9f95afa3a3e6a97f9a52df2dc3b4374a08f0e06
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000030

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000030
                                                                                                                                                        • Size 126KB
                                                                                                                                                        • SHA256 f908b5fd34f54fb58033096940fb2582bb5183357ef580b567a0995c239c060e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000031

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000031
                                                                                                                                                        • Size 31KB
                                                                                                                                                        • SHA256 c993f09d290baceb6e48c6ab4a32842981a20d189a5651375460913370c864fd
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000032

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000032
                                                                                                                                                        • Size 21KB
                                                                                                                                                        • SHA256 bab5b5fd5dae6a2945931b7cbaf74186dbf24297bd2cb24eabd5c484476f2d65
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000055

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000055
                                                                                                                                                        • Size 19KB
                                                                                                                                                        • SHA256 ad1d65b1dddaa61e05fe5681f6156c64ea8d0a846ce0667374c62f8ceed963f6
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000056

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000056
                                                                                                                                                        • Size 32KB
                                                                                                                                                        • SHA256 c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000058

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000058
                                                                                                                                                        • Size 18KB
                                                                                                                                                        • SHA256 0e44026ad31376af1b56593cd4acb4f353f8e8789c51759e18f64578e4ef296a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000059

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000059
                                                                                                                                                        • Size 152KB
                                                                                                                                                        • SHA256 8fcb6d9e1411dc75eb4004d805977d941094858b29bce622d2e547a2591a68b5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00005a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005a
                                                                                                                                                        • Size 144KB
                                                                                                                                                        • SHA256 9fb345849ad76be9d44e914eae5fadf7beea0ca361e3b421067b7927b20c8c1e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00005b

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005b
                                                                                                                                                        • Size 26KB
                                                                                                                                                        • SHA256 4ef9cd1d908a8771e3b3147853428255e09c0f74360ddb02ab4917ba9fea7e81
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00005c

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005c
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 80b234172b8143469f700ba151eb6496a5f698870df787ed6287827e9d1ff88e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00005d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00005d
                                                                                                                                                        • Size 56KB
                                                                                                                                                        • SHA256 2689963dd06f9dd3114f4e1bd6a5f64516f207bdffefb674e06603bbe5ad1a5a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000060

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000060
                                                                                                                                                        • Size 20KB
                                                                                                                                                        • SHA256 57e12433622a0f043d950bc766a5bc423008d0468cab6497f3ead4e55df7c1c7
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000061

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000061
                                                                                                                                                        • Size 1024KB
                                                                                                                                                        • SHA256 51b078ac825139ddced1a4a53a029303fb90f2227082414f8ad4a0ebfc574e13
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000066

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000066
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 11a4611fb97bb9fa87f10c539bf468dee12c54f5243403732e0c5739abf38e58
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006a

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006a
                                                                                                                                                        • Size 77KB
                                                                                                                                                        • SHA256 f6565c7c659af62ede91fcc1e5d0eafb1e4a17cff47b679404430611d1df8ff3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006b

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006b
                                                                                                                                                        • Size 74KB
                                                                                                                                                        • SHA256 70e4d628843c8aa128f28b04653deba8bc351b4b868d4d6e9ada67a3e2cfb400
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_00006d

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_00006d
                                                                                                                                                        • Size 18KB
                                                                                                                                                        • SHA256 12651915a13e8209ae0fe93c3c1f530c7a9082c31052f6f0ee99e7fd2a761605
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000072

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000072
                                                                                                                                                        • Size 45KB
                                                                                                                                                        • SHA256 ed38fde59d0b0265b72dabe70c49f155afb7e6b18c4f264f3de892ebd0e42f53
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000073

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000073
                                                                                                                                                        • Size 47KB
                                                                                                                                                        • SHA256 d8e4fe0452aa2076429a9bb5d8757d00a994dd95986cf950e9a1a371b9a072a0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000075

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000075
                                                                                                                                                        • Size 22KB
                                                                                                                                                        • SHA256 40826852cedc2a5b25236783adced1e44a9bee2c9024b15904c8c443840f90ab
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        f_000076

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Cache\Cache_Data\f_000076
                                                                                                                                                        • Size 21KB
                                                                                                                                                        • SHA256 e6c563d8ffea759949ca06a6701f62f5c7f239ee11d8ed202bd9f9f88b039bad
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 a33487af23c03067a9b99b90ca9102460d5da18e31b42bf7aa4844c89e0e2d6e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 45d0f19b3be15abac82d07f116d492a7610082a8dc1c5227fb6ac18e144783d7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 e1d2d80990216b01aa331c3ecaf7f5c3f7ca8a77b952f82ca5d85fe1cc6e2bbd
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DawnGraphiteCache\index
                                                                                                                                                        • Size 256KB
                                                                                                                                                        • SHA256 cc56a4316839e3460702d85e920559aede5f0ebc02a2024da475883946fa189e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                        DownloadMetadata

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\DownloadMetadata
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 2f8e54d837cfa5120824b5509592c95a3825af02685917939d9a2053c4835dc0
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        MANIFEST-000001

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extension Rules\MANIFEST-000001
                                                                                                                                                        • Size 41B
                                                                                                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        icon128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon128.png
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 98df639f1a1cfaba805048435ac4b39b4c41cbce99868cd1799ab49df690dfac
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon128d.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon128d.png
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 ac5adbd6ae46119ef69fdc7bb775fe8806f931ecd20333e329075a850ddd56c6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon16.png
                                                                                                                                                        • Size 380B
                                                                                                                                                        • SHA256 4dbd44358873eff6ad0786a3c56e9a8edbdb52e6e61d3818ba77bd948bf56721
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon16d.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon16d.png
                                                                                                                                                        • Size 473B
                                                                                                                                                        • SHA256 bda87a28bddba2113f6ac94527bb2a977b8171e8b4faacc3377ca98e62cd1ce7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon32.png
                                                                                                                                                        • Size 685B
                                                                                                                                                        • SHA256 05e9b89b0dd2a5d9975e75e5492deeca3d97ed32e2c29c8375a402af2e5d5d6f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32d.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon32d.png
                                                                                                                                                        • Size 736B
                                                                                                                                                        • SHA256 5f0ccc21ae979eb091735415a44950c27c34c8fd71db21062b92d5e67a8b48d6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon48.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon48.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 38d50b35f2ae585221fac96a8f4cc505636007836dc58653c0dac1996376c04c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon48d.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon48d.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 1fcdcdb7e228b8576257e4dbc1ed6d444ccc1efbef204ad5f38877d2ee6b2fe6
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon64.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon64.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 d221aa39490206d87838d96bfb331cca927f4977eea95f39ba4ec7eddb3d811e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon64d.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\icons\icon64d.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 9eae73b3b0009c52fcbc872a1a1e01c7ce2077eace1e68ca8788dc3937f9314e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\js\background.js
                                                                                                                                                        • Size 29KB
                                                                                                                                                        • SHA256 5de032325a3a73a85ee4dd34b7b4e3fe82814ce732695fac04a74f82c14dac43
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        content-script.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cmjgfhnpipbddcdmmbcfjodjgpfecdaj\1.1.0_0\js\content-script.js
                                                                                                                                                        • Size 47KB
                                                                                                                                                        • SHA256 25d3be12240dbf19edacf2c7ee581386ff8a22edf04f59b1cb094b0d69b98035
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        icon16_disabled.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.10_0\img\icon16_disabled.png
                                                                                                                                                        • Size 473B
                                                                                                                                                        • SHA256 b2f777afd5e7728cb250a103eb5c48dfcceec0891a4e75c0c7abdfa04bb592ba
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        bg.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.10_0\js\bg.js
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 a7f9a432f5fda9bb103e5753b55a875cb016832c8287aa23a671409b499f9dae
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        content.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\cplonachkpjlngkgbicfcmaelgeojmhe\2.0.10_0\js\content.js
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 a01757d2215cbfc4c9ded5c2af2fee2fce10e697a84600e34c156359f00441aa
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        index.ts-260dceed.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\index.ts-260dceed.js
                                                                                                                                                        • Size 15KB
                                                                                                                                                        • SHA256 f20d5eb98360d0cd17b7d62e93ae7e8356f1a93c8d37cfc801fb4d522ecb07a9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        index.ts-loader-a60d29f1.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\index.ts-loader-a60d29f1.js
                                                                                                                                                        • Size 341B
                                                                                                                                                        • SHA256 a60d29f174a970dc8ed56f59f8309def79df9c9e55305f4647584dddcb4c55d4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        messages-7de30af4.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\messages-7de30af4.js
                                                                                                                                                        • Size 24KB
                                                                                                                                                        • SHA256 f4b79bdf60eefaf2594b48a6d37f7dcc3f95bb441608af657a590a54c436ae34
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        types-57a07714.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\assets\types-57a07714.js
                                                                                                                                                        • Size 10KB
                                                                                                                                                        • SHA256 e1ef5fe357db841dc2f81edc4df2dfbe40253fdb4b6f0e53972a66465cb30736
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        service-worker-loader.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\service-worker-loader.js
                                                                                                                                                        • Size 40B
                                                                                                                                                        • SHA256 decb5dd8ecd9145e0b252d1e43dd07567af497d9a3343cc29034f4b87aaf3459
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        sidebar-icon-128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-128.png
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 5c5caac13fe50b3de5fe354c71b38ef04ddeeb2ecf9dad1da94e873cd8f2bfa9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        sidebar-icon-16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-16.png
                                                                                                                                                        • Size 548B
                                                                                                                                                        • SHA256 65cda55dae5d579693d846ccd067abdf84a8eae6f3301a6c869e5fdd474f9e6e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        sidebar-icon-32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-32.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 2bb9802966cd8139ece9da6e69cbf96b5ba353b10b5583db283a7a83c133c82e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        sidebar-icon-48.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dkfaejedefgggmibkkddljhbafdcdgjn\1.1.6_0\src\assets\icons\sidebar-icon-48.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 95df8447478a8af7bbb652c37835a5843f964fe10ff31d2c3036075c81e742c5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\background.js
                                                                                                                                                        • Size 142KB
                                                                                                                                                        • SHA256 4084a4a7f64bc033f6f1c1eec636e0c0c3e3a48bce5757b2b80da1fdddd8192b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        content-script.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\content-script.js
                                                                                                                                                        • Size 180B
                                                                                                                                                        • SHA256 68f41e053b7d6f9a68a168f3ed161f661ea8f1a88a86b2a3e0cc0a0b9674e694
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\icons\icon128.png
                                                                                                                                                        • Size 12KB
                                                                                                                                                        • SHA256 0014790e6d03258d6361bca3ac9e10f5f0dd77723ddbb0028894fde5b5e134f9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\icons\icon32.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 e51983632ad274ced444ed6c51233c693ee619df7ded05d906f762c1d407085a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        message-hook.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\message-hook.js
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 003e4c87dadbb4037435d5d44d0441d2a90a3d5a66a58e748cdbf0c5ee0c082d
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        rules.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\dnpmpbbfdefapbnfffohgcejpogkbjbp\1.0.6_0\rules.json
                                                                                                                                                        • Size 661B
                                                                                                                                                        • SHA256 a8981debaf5f3ed192b1e5043b551a19986dee7dbcdcf14e590b303de726b682
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\ebkihbjamcljmddijijlfachpgphldll\1.1.0_0\icons\icon16.png
                                                                                                                                                        • Size 382B
                                                                                                                                                        • SHA256 bd01d030dd30b3dfc9aa88373a2bebb6f2a1094c779de2089a4620aea38ed89c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\ebkihbjamcljmddijijlfachpgphldll\1.1.0_0\icons\icon32.png
                                                                                                                                                        • Size 838B
                                                                                                                                                        • SHA256 7c1f2d59fb7e599f573ba099b02958950fc4752d901afc208703d71970c76788
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\ebkihbjamcljmddijijlfachpgphldll\1.1.0_0\js\background.js
                                                                                                                                                        • Size 28KB
                                                                                                                                                        • SHA256 647816dcd98801fce8ede32fce34ffba723a072adfd21918a4d57b55ce38c75c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        bg-wrapper.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\gbohaofhodnpniflcnancekmknlomeck\1.0.6_0\bg-wrapper.js
                                                                                                                                                        • Size 84B
                                                                                                                                                        • SHA256 0a48213b9a577ba7d1dad1f28e6d7394d6ec81ddb6a3d240b6fa21071a22243c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\gbohaofhodnpniflcnancekmknlomeck\1.0.6_0\icons\icon16.png
                                                                                                                                                        • Size 472B
                                                                                                                                                        • SHA256 2cb1d9744090d7f664e24b316fbf5ae21f0558d2b79e41108a6edbaec3769fcf
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        rules.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\gbohaofhodnpniflcnancekmknlomeck\1.0.6_0\rules.json
                                                                                                                                                        • Size 316B
                                                                                                                                                        • SHA256 8b8dca5d206ffcfddfabdf3c0c90f97da2bc8c993675ce616891745413ac93a7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\background.js
                                                                                                                                                        • Size 735B
                                                                                                                                                        • SHA256 93c5908715f38e0a9361cd604b45eb7632fb63d59b47fb66ec3f64479a8122a0
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        contentscript.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\contentscript.js
                                                                                                                                                        • Size 9KB
                                                                                                                                                        • SHA256 afc9e94c84348039ca52b2a526fa0a5d9fa90745960e1f5d7a33d7db6f0f4fb1
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        contentstyle.css

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\contentstyle.css
                                                                                                                                                        • Size 289B
                                                                                                                                                        • SHA256 3cf5cd8dd8adec156df9718c22c4097564017202cbebfa4f6e9411e1f025f7ce
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        extension-router.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\extension-router.js
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 01b584d910e977b659f25c219722b955394ab3a96f0adf350c9ff6d3bfbb0c89
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        logo16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\logo16.png
                                                                                                                                                        • Size 512B
                                                                                                                                                        • SHA256 6838b229e93ac9317f2f3689b9276cf14195bde5857e5be58c7770b56f7f4114
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        migration.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\options\migration.js
                                                                                                                                                        • Size 4KB
                                                                                                                                                        • SHA256 b5f52cb979fcd7e6643695a0a21de4e9fa3382eacae2e031ab5e6fdff5ca1d8f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        pdfHandler.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\pdfHandler.js
                                                                                                                                                        • Size 13KB
                                                                                                                                                        • SHA256 8dd4c5b505a11cc5cf80a92e26e2b377c170986ab2ff9ca2fcd5437cad684b94
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        preferences_schema.json

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\preferences_schema.json
                                                                                                                                                        • Size 7KB
                                                                                                                                                        • SHA256 8a85e181564e9139f95f906ec2ee51fab1f7e1fbbf2886641f7ed8ddeb13305a
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        preserve-referer.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\preserve-referer.js
                                                                                                                                                        • Size 5KB
                                                                                                                                                        • SHA256 43534eeab004adef92dd18ec416557cd6e9e6f6773f0cc70bd163bc31f0e3656
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        suppress-update.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\suppress-update.js
                                                                                                                                                        • Size 994B
                                                                                                                                                        • SHA256 86d9a77423fd561a9eee56c4cacd702fda3473e8650ddfa5b3492ce3a34a02a0
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        telemetry.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\hbgjioklmpbdmemlmbkfckopochbgjpl\2.0.0_0\telemetry.js
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 33f03d3d4180e1b2d660063561b80f03c0f0edd70a99c58f40fd85529e6c0aed
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.3_0\js\background.js
                                                                                                                                                        • Size 222KB
                                                                                                                                                        • SHA256 1da18f153be91951c5ba0da89ba5a9a3889471134826afbcb8730dc835b9a617
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        twitch.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.3_0\js\twitch.js
                                                                                                                                                        • Size 28KB
                                                                                                                                                        • SHA256 d48a0a041be7c0943955710e18dbf7a92d0c8d5533dc16c67c47d2e07c1c02e3
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        youtube.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\jpmlmlnhnfoennkonhhgmcidkedckkcf\1.0.3_0\js\youtube.js
                                                                                                                                                        • Size 27KB
                                                                                                                                                        • SHA256 e861f125c7081e2075831e7179c89470adab37ac6f1b386bd2e2a326a54b1924
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\background.js
                                                                                                                                                        • Size 985KB
                                                                                                                                                        • SHA256 be7660d33aff75fbb8510db53d7c8f92091056f3810b97ff62e435f5b2ee2d0d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        contentScript.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\contentScript.js
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 177fd8e3363bdafde32f4ef0931306b21cb2f8bece66db68f396e18bab14ae96
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon_active_16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\icons\icon_active_16.png
                                                                                                                                                        • Size 502B
                                                                                                                                                        • SHA256 af427a15676b0fb1f3b130dfbb0775b0ced72cff5aa809204b627ac0f8415db1
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon_disabled_128.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\mccchmdkmjpgjlhckmbinjaioihkcnkc\1.1.13_0\icons\icon_disabled_128.png
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 a341dc32c5af1a8b6519ca7882478e98b805a29d0dae41f06ed3140530a48dd9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        background.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\background\background.js
                                                                                                                                                        • Size 11KB
                                                                                                                                                        • SHA256 eb857ffbf146c8bb250ecf54a03fd16d0eae938c278519f36843e620864a4856
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        content-script.js

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\contentScripts\content-script.js
                                                                                                                                                        • Size 12KB
                                                                                                                                                        • SHA256 8b96d012c9bcf12d06a9e8fc89aaae415d5be63a5f77376aea17df4d2eba7bde
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        icon16.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\images\icon16.png
                                                                                                                                                        • Size 658B
                                                                                                                                                        • SHA256 38f78b22e930ad358fa267b4563d03a6757860e802d61832e8594a9c9d1e74cb
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        icon32.png

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Extensions\paippcdepmodlgjjhapogigcdfbjcjop\2.0.4_0\images\icon32.png
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 5ae70cd35048a15743defa8ed801b2160632508c14ee474696c3e0a3ce3938e3
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        data_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\GPUCache\data_0
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                        data_1

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\GPUCache\data_1
                                                                                                                                                        • Size 264KB
                                                                                                                                                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                        MANIFEST-000001

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_dnpmpbbfdefapbnfffohgcejpogkbjbp_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                        • Size 23B
                                                                                                                                                        • SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        000003.log

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\000003.log
                                                                                                                                                        • Size 26KB
                                                                                                                                                        • SHA256 24ad5f72fbec3897002556569df12c3fdb8ed96154f236843f9e39b6fd3cdf0e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        LOG

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG
                                                                                                                                                        • Size 444B
                                                                                                                                                        • SHA256 55356b9631618da72037e4699b5f1525bcc87780be314ee44ac2d2d7128aa0b5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LOG.old

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_gbohaofhodnpniflcnancekmknlomeck_0.indexeddb.leveldb\LOG.old
                                                                                                                                                        • Size 403B
                                                                                                                                                        • SHA256 e251c90bdc943bc973f31bac57c5db83f1a34f4f610b621a40ed322210539f00
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        000021.log

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\000021.log
                                                                                                                                                        • Size 1.9MB
                                                                                                                                                        • SHA256 ef884b57d33b8f3f671f595adb4808ca4910019da97487213df2a028d2c11c19
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        000023.ldb

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\000023.ldb
                                                                                                                                                        • Size 2.1MB
                                                                                                                                                        • SHA256 f38843c67fc09e87174e91ff5c8a526ff7b0061c4a30ad5a2c80a9680b0a4c15
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        LOG

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG
                                                                                                                                                        • Size 445B
                                                                                                                                                        • SHA256 ba7a74143b95fc9293bf7256dedc9d5a2b9964279d6dbea6f36283f700233d98
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LOG

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG
                                                                                                                                                        • Size 445B
                                                                                                                                                        • SHA256 b72d66524ba9257e904b0b9a21d0e4733d16aca1dd92c2210066309412d88fd5
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LOG

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG
                                                                                                                                                        • Size 445B
                                                                                                                                                        • SHA256 8542e044187221875f38fde0b5e32cd735cd9956a6f0caa43db0d35d0e332b0c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        LOG.old

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\LOG.old
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 3783ae8eae5301fcd89fe3efb5c8c6ba1fe28ab680091beba95e8f143226202e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        MANIFEST-000001

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\IndexedDB\chrome-extension_mccchmdkmjpgjlhckmbinjaioihkcnkc_0.indexeddb.leveldb\MANIFEST-000001
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 4be3dface405eb2a1a1d578457594f1fe430aa5d8bf896768c167607cf5e4a23
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        514bbfa0-1197-46d8-8a38-ac5571b35be2.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\514bbfa0-1197-46d8-8a38-ac5571b35be2.tmp
                                                                                                                                                        • Size 15KB
                                                                                                                                                        • SHA256 f0be4070f89e3bbde04067587b3fd629e553620394514d82ccb9427d57176d38
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Network Persistent State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Network\Network Persistent State
                                                                                                                                                        • Size 59B
                                                                                                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Preferences
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 2bb9db9299835ee385a02b67f524b1203991d124b692fbae5d15ec91d89f360c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Secure Preferences

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Secure Preferences
                                                                                                                                                        • Size 15KB
                                                                                                                                                        • SHA256 95ee6a607c261d406c2986319f37d0c73751a7dfb052c0153339fdc9d83686fb
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        013888a1cda32b90_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\013888a1cda32b90_0
                                                                                                                                                        • Size 986KB
                                                                                                                                                        • SHA256 0282b1ec492243145025e5e350a8fedfccea5c4374f15ce2576291ec7149a1a8
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        08b99d499107ba17_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_0
                                                                                                                                                        • Size 11KB
                                                                                                                                                        • SHA256 238a76c4de184e592ecfdcd4ff046c43d846fc4a5a7c650c0a12857a92be8c02
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        08b99d499107ba17_1

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\08b99d499107ba17_1
                                                                                                                                                        • Size 25KB
                                                                                                                                                        • SHA256 c268a9e78daca67225141e449c45f7a2effb5e5a04cf01acc4fee037967dd210
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        2687cdb408524ecb_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2687cdb408524ecb_0
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 dc4fd8691efc5b72c403fa4faddadef3f8cbfa22bec4f97466df223d5bb39234
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        297ecea5cebb5dfe_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_0
                                                                                                                                                        • Size 23KB
                                                                                                                                                        • SHA256 da7d28dd23714e39327b0fd4dd1e1765ebd57bceb6c1c30745f2bc0e621c8a35
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        297ecea5cebb5dfe_1

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\297ecea5cebb5dfe_1
                                                                                                                                                        • Size 56KB
                                                                                                                                                        • SHA256 fd95e2214e7e8e8d08d62ddaa6fb77de127c93fdaa0d6859656dce33f18e200f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        2a0afd649b00527b_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\2a0afd649b00527b_0
                                                                                                                                                        • Size 142KB
                                                                                                                                                        • SHA256 ec6c2584c53401c918ea8a034c49e7af211a34bdbba8fbf1037d1da2ccea0bd5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        6fc459ba53cb570a_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\6fc459ba53cb570a_0
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 a042b08d0cb10a8e7b2eca1520d9a6bfe02c5a42c93712a37c318cd1466fa9e5
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        91baa182c7a11977_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\91baa182c7a11977_0
                                                                                                                                                        • Size 13KB
                                                                                                                                                        • SHA256 eabf35a49686516b466d904fc5aaac912ac20a00d3cd1e57b032c597f1c4172f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        ad0c92dfa52e69b6_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\ad0c92dfa52e69b6_0
                                                                                                                                                        • Size 168KB
                                                                                                                                                        • SHA256 14ca0210823bb228ed0e5ab1299580606995c3bafaa2e0c9366657a5abfd7769
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        afe1e5264eea33bc_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\afe1e5264eea33bc_0
                                                                                                                                                        • Size 5KB
                                                                                                                                                        • SHA256 32227257a9512cdc6f08b51b0d38cecfe5aafe03a6cdead1256e64a0d0511825
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        b3bd0d67f800d222_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\b3bd0d67f800d222_0
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 50b1d3eb68232588fceb3d4f29a95b47c86080cb2f3c407a4f020231b01765d8
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        d0757ff92c7cde0a_0

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\d0757ff92c7cde0a_0
                                                                                                                                                        • Size 223KB
                                                                                                                                                        • SHA256 0011c8fb613669d237c88894fdc989a36c22ef4b839033a99f040a962c9ac6ea
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index
                                                                                                                                                        • Size 24B
                                                                                                                                                        • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
                                                                                                                                                        • Size 624B
                                                                                                                                                        • SHA256 3edbab7fc1114a40cadaa1a7459606c5f95915aae5c99970de763352b915321a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                                                                                                                                        • Size 72B
                                                                                                                                                        • SHA256 7fe867814adb902ecd7d8abdb82d8ebc680cbe0fe965c4412b944d207fcffc9a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        CURRENT

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\Sync Data\LevelDB\CURRENT
                                                                                                                                                        • Size 16B
                                                                                                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        aef3154a-a273-4ad9-a2fb-3b604acb6d7d.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\aef3154a-a273-4ad9-a2fb-3b604acb6d7d.tmp
                                                                                                                                                        • Size 17KB
                                                                                                                                                        • SHA256 7e314b0ef77fe8065a569fcfc3f254fbb59b92bc871217c3a24fdeb46a746a9c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        e2caa75e-f917-40db-a385-d1a6c046e485.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Default\e2caa75e-f917-40db-a385-d1a6c046e485.tmp
                                                                                                                                                        • Size 173KB
                                                                                                                                                        • SHA256 ec9b028add099e8686cdb3e84db8cb7d26eeb58be8990996af4fb172d7358370
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        data_2

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_2
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                        data_3

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\GraphiteDawnCache\data_3
                                                                                                                                                        • Size 8KB
                                                                                                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\Local State
                                                                                                                                                        • Size 5KB
                                                                                                                                                        • SHA256 cfbfbb565136f4c8e48df2c1845e78dba98146eb203f7692878d3eb8ab3d794e
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        101ec906-e486-4dc7-a72d-cbc43e4eb462.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\101ec906-e486-4dc7-a72d-cbc43e4eb462.tmp
                                                                                                                                                        • Size 13B
                                                                                                                                                        • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
                                                                                                                                                        • Size 7.6MB
                                                                                                                                                        • SHA256 23759e3f6d0119a00038b963cec9fb7abafd7b65a35a7e83c7697511db59e6e7
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        2d040f1e-4964-4674-9420-8dfdaa24e934.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\2d040f1e-4964-4674-9420-8dfdaa24e934.tmp
                                                                                                                                                        • Size 132B
                                                                                                                                                        • SHA256 83ec4e32ae04eaaed1160bad1682081fb331078f54be6333809d96d34bba09ce
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        2f9c6ff7-ef17-471a-9352-1cb540c50c01.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\2f9c6ff7-ef17-471a-9352-1cb540c50c01.tmp
                                                                                                                                                        • Size 612B
                                                                                                                                                        • SHA256 af3d302fa99367ab5980bbba4cdf02cd16c709ca67dc8041b15f1eda7d19079c
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        34334f90-e7c4-4df6-bfc0-03b4e6535d5f.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\34334f90-e7c4-4df6-bfc0-03b4e6535d5f.tmp
                                                                                                                                                        • Size 372B
                                                                                                                                                        • SHA256 48e6e1568364b0006485e7bc5176ddb7199aff2a2026f8c5113212b116198e82
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657
                                                                                                                                                        • Size 178KB
                                                                                                                                                        • SHA256 3b1293b1cd2b0b9ebc8c64bf5c6a0407ffad78a0364bbac71c5fe7d3e1bd7657
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        55dc7cb9-eafa-449b-8332-a73279379e83.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\55dc7cb9-eafa-449b-8332-a73279379e83.tmp
                                                                                                                                                        • Size 492B
                                                                                                                                                        • SHA256 958f32ec6d9aad1b652e79a47e7635347032715dad4d32085de9a900764a6f62
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        a092fecb-ebfc-4c5d-93c8-52dad5bdc825.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\WaveBrowser\User Data\component_crx_cache\a092fecb-ebfc-4c5d-93c8-52dad5bdc825.tmp
                                                                                                                                                        • Size 252B
                                                                                                                                                        • SHA256 9b2c2859131579d0862cc314b9bf1676a615e55b68fe0022c561eaa105b1b09f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        1c9b6f80-21b4-491b-a410-709032dfdfb5.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\1c9b6f80-21b4-491b-a410-709032dfdfb5.tmp
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 0009adb6a85f2401f8968b5d3695ada8097249e9e85f1116a09ee5c3be28b11f
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        33efa781-fa32-4b61-a77d-62e497548366.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\33efa781-fa32-4b61-a77d-62e497548366.tmp
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 618dedfe2f3faf65047896a2359aab497f437dc7bb4513933e54ff72872e39a4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        4b15be3b-b383-4f75-a344-3788ce932ce9.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\4b15be3b-b383-4f75-a344-3788ce932ce9.tmp
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 5ab11418db9eb49bdcc84940f904a3ee7f18e31245a121a1cb1d116455511296
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        61ac63d7-e03d-47a4-888c-8c7c2e8469c4.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\61ac63d7-e03d-47a4-888c-8c7c2e8469c4.tmp
                                                                                                                                                        • Size 16KB
                                                                                                                                                        • SHA256 9e415074759b6e8f87349d33dc227209a1ea21ddea1e966f243e3d9a9a2f7160
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        8ab0f2df-aaad-4bf4-bd3c-b89975674f68.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\8ab0f2df-aaad-4bf4-bd3c-b89975674f68.tmp
                                                                                                                                                        • Size 3KB
                                                                                                                                                        • SHA256 8cffe058ae379518ecb56bd40eb6447348fb8878879145c33f60dd5ea869fcf9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        settings.dat

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Crashpad\settings.dat
                                                                                                                                                        • Size 280B
                                                                                                                                                        • SHA256 0cbeac2bf450f8c92b0e53cb0d361591c68fcbdfcfbd6ec595dc5c57897ba28e
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        00c25549-21dc-4e9d-b104-b2e4fde3cceb.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\00c25549-21dc-4e9d-b104-b2e4fde3cceb.tmp
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 0fe9b12680721cb92296d2ef9087642f72e50d62ac0bb19531a580fd9b58c391
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        0f87febb-e0b7-4e66-92c5-ff6efa54fd03.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\0f87febb-e0b7-4e66-92c5-ff6efa54fd03.tmp
                                                                                                                                                        • Size 6KB
                                                                                                                                                        • SHA256 4f0bb295326214a106be540be12f7fd81cff57a550720f13dc5ba383c10c9deb
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 312B
                                                                                                                                                        • SHA256 09905e840303b9cd388b860fd98aba65c5c8663be70861d5ec4c0bd510553e4f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        temp-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                                        • Size 408B
                                                                                                                                                        • SHA256 278af9ad65ddc9602826e4335879d4cf07b9bc99f40c4c7f71d58ae07f1d9e14
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        the-real-index

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Default\Code Cache\wasm\index-dir\the-real-index
                                                                                                                                                        • Size 48B
                                                                                                                                                        • SHA256 2cba30091c03c0e03a880cec0cacab507b2a38d990e07bf2b3096a0ec7105430
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Local State

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\Local State
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 87ac26b9ac8662ecf03fc78ed0d31954c81a05de86ef8829736adc72cd112a2a
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        d8527f75-067e-44df-a930-703a2a560264.tmp

                                                                                                                                                        • Path C:\Users\Admin\AppData\Local\org.openaec.openpdfstudio\EBWebView\d8527f75-067e-44df-a930-703a2a560264.tmp
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 70c9671f36771397ca06a1ac4b188851b76f918091f04ae452dd035430daf49b
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        default.dic

                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                                                                                                                                        • Size 2B
                                                                                                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        Wave Browser.lnk

                                                                                                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wave Browser.lnk
                                                                                                                                                        • Size 2KB
                                                                                                                                                        • SHA256 08b047b013f365c86f6f77918f7034a81260eddb822da1de469c19849b87f249
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        Unconfirmed 515731.crdownload

                                                                                                                                                        • Path C:\Users\Admin\Downloads\Unconfirmed 515731.crdownload
                                                                                                                                                        • Size 12.7MB
                                                                                                                                                        • SHA256 6716f76086ed209c3d00ed26cea5615b1e6a61dbf6c9886ed3e53bf8fb3ef929
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        Unconfirmed 975056.crdownload

                                                                                                                                                        • Path C:\Users\Admin\Downloads\Unconfirmed 975056.crdownload
                                                                                                                                                        • Size 1.6MB
                                                                                                                                                        • SHA256 d886a422b288e22fdab3b66b4f91d6589700e639900e1bf04b2fb87af92f61e9
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        en-US_FEMININE.pak

                                                                                                                                                        • Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\1.142.1.0\Locales\en-US_FEMININE.pak
                                                                                                                                                        • Size 18B
                                                                                                                                                        • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        master_preferences

                                                                                                                                                        • Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\master_preferences
                                                                                                                                                        • Size 1KB
                                                                                                                                                        • SHA256 8626a10dd14165b1f1b31ac29753a63ffd6cc0c02f14b16bbac086765ea033a9
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        wavebrowser.exe

                                                                                                                                                        • Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\wavebrowser.exe
                                                                                                                                                        • Size 4.5MB
                                                                                                                                                        • SHA256 a65b973a682e65f803907c605739573dfbc6169c13454c7c543278aebd8f3a6c
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        wavebrowser_proxy.exe

                                                                                                                                                        • Path C:\Users\Admin\Wavesor Software\Temp\source2500_1406251303\Chrome-bin\wavebrowser_proxy.exe
                                                                                                                                                        • Size 1.4MB
                                                                                                                                                        • SHA256 9fad4e07a51cc8776b256744188fc8b7d527d1d83784778a1a1e8a2728de517d
                                                                                                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                                        external_server_extensions.json

                                                                                                                                                        • Path C:\Users\Admin\Wavesor Software\WaveBrowser\1.142.1.0\default_apps\external_server_extensions.json
                                                                                                                                                        • Size 26B
                                                                                                                                                        • SHA256 99e69aef8d0350e8d9ff494d01bc977609ffa19d9aa029d90372a97a5e78adda
                                                                                                                                                        • MD5 SHA1 SHA512

                                                                                                                                                        wavebrowser.VisualElementsManifest.xml

                                                                                                                                                        • Path C:\Users\Admin\Wavesor Software\WaveBrowser\wavebrowser.VisualElementsManifest.xml
                                                                                                                                                        • Size 398B
                                                                                                                                                        • SHA256 259ccf1a90530faf93ad5582cf010003c263c45d1da7bd48091b6e44c62446c7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_1624715625\manifest.json
                                                                                                                                                        • Size 108B
                                                                                                                                                        • SHA256 9e02b1c8419edb1a14e0e670b3ce21ded91edf660b5677e20900731ae8c37dd4
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_366222502\manifest.json
                                                                                                                                                        • Size 72B
                                                                                                                                                        • SHA256 a408d874f731da9fd242aca690324d2fa05a2b80ee0744e49543dd514a1cb07f
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_556037089\manifest.json
                                                                                                                                                        • Size 73B
                                                                                                                                                        • SHA256 a279579b53f209aecebe0c332fe96f54a7b89578208d24cf7ffb8e9c6a9eb4a7
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_618120771\manifest.json
                                                                                                                                                        • Size 96B
                                                                                                                                                        • SHA256 89d1a79a7889b80e20c6ca2d261fe6049df59870a77f510bf3c7791bf6ca2053
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        manifest.json

                                                                                                                                                        • Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping4132_926385488\manifest.json
                                                                                                                                                        • Size 108B
                                                                                                                                                        • SHA256 ba6fcb8964f3dd492fec803586a6cf000789745e0f6dee9a89f7eb1ab9d470be
                                                                                                                                                        • MD5 SHA1 SHA512 TLSH

                                                                                                                                                        memory/476-613-0x000000001AD30000-0x000000001AD40000-memory.dmp

                                                                                                                                                        memory/476-612-0x0000000000040000-0x00000000001DC000-memory.dmp

                                                                                                                                                        memory/476-685-0x000000001AD30000-0x000000001AD40000-memory.dmp

                                                                                                                                                        memory/476-614-0x000000001BE00000-0x000000001C328000-memory.dmp

                                                                                                                                                        memory/648-1431-0x00000253DE040000-0x00000253DE041000-memory.dmp

                                                                                                                                                        memory/648-1745-0x00000253DE010000-0x00000253DE03B000-memory.dmp

                                                                                                                                                        memory/832-1158-0x0000026467D20000-0x0000026467D4B000-memory.dmp

                                                                                                                                                        memory/832-1109-0x0000026467D50000-0x0000026467D51000-memory.dmp

                                                                                                                                                        memory/1036-1316-0x0000022FC57A0000-0x0000022FC57A1000-memory.dmp

                                                                                                                                                        memory/1036-1344-0x0000022FC5770000-0x0000022FC579B000-memory.dmp

                                                                                                                                                        memory/1484-1423-0x0000026197F20000-0x0000026197F21000-memory.dmp

                                                                                                                                                        memory/1484-1747-0x0000026195940000-0x000002619596B000-memory.dmp

                                                                                                                                                        memory/1484-1347-0x0000026A8D4A0000-0x0000026A8D4CB000-memory.dmp

                                                                                                                                                        memory/1484-1327-0x0000026A8D4D0000-0x0000026A8D4D1000-memory.dmp

                                                                                                                                                        memory/1576-1160-0x000002B4080C0000-0x000002B4080EB000-memory.dmp

                                                                                                                                                        memory/1576-1147-0x000002B4080F0000-0x000002B4080F1000-memory.dmp

                                                                                                                                                        memory/1660-1300-0x000002BF59160000-0x000002BF59161000-memory.dmp

                                                                                                                                                        memory/1660-1341-0x000002BF59130000-0x000002BF5915B000-memory.dmp

                                                                                                                                                        memory/2060-1336-0x0000016A666A0000-0x0000016A666A1000-memory.dmp

                                                                                                                                                        memory/2060-1349-0x0000016A66670000-0x0000016A6669B000-memory.dmp

                                                                                                                                                        memory/2116-1696-0x0000017745D20000-0x0000017745D4B000-memory.dmp

                                                                                                                                                        memory/2116-1427-0x0000017745D50000-0x0000017745D51000-memory.dmp

                                                                                                                                                        memory/2296-1436-0x00000199820B0000-0x00000199820B1000-memory.dmp

                                                                                                                                                        memory/2296-1661-0x0000019982080000-0x00000199820AB000-memory.dmp

                                                                                                                                                        memory/2648-1425-0x000001B9030D0000-0x000001B9030D1000-memory.dmp

                                                                                                                                                        memory/2648-1651-0x000001B9030A0000-0x000001B9030CB000-memory.dmp

                                                                                                                                                        memory/3132-1321-0x0000022BC3C10000-0x0000022BC3C3B000-memory.dmp

                                                                                                                                                        memory/3132-1302-0x0000022BC3C40000-0x0000022BC3C41000-memory.dmp

                                                                                                                                                        memory/3332-1662-0x00000214CF240000-0x00000214CF26B000-memory.dmp

                                                                                                                                                        memory/3332-1437-0x00000214CF270000-0x00000214CF271000-memory.dmp

                                                                                                                                                        memory/3428-1342-0x0000023482080000-0x00000234820AB000-memory.dmp

                                                                                                                                                        memory/3428-1309-0x00000234820B0000-0x00000234820B1000-memory.dmp

                                                                                                                                                        memory/3460-1343-0x0000027FAD570000-0x0000027FAD59B000-memory.dmp

                                                                                                                                                        memory/3460-1310-0x0000027FAD5A0000-0x0000027FAD5A1000-memory.dmp

                                                                                                                                                        memory/3936-1655-0x000001F1221D0000-0x000001F1221FB000-memory.dmp

                                                                                                                                                        memory/3936-1429-0x000001F124330000-0x000001F124331000-memory.dmp

                                                                                                                                                        memory/3936-1381-0x00000211871B0000-0x00000211871DB000-memory.dmp

                                                                                                                                                        memory/3936-1374-0x00000211871E0000-0x00000211871E1000-memory.dmp

                                                                                                                                                        memory/4104-1346-0x000001AD27A50000-0x000001AD27A7B000-memory.dmp

                                                                                                                                                        memory/4104-1469-0x00000201020B0000-0x00000201020B1000-memory.dmp

                                                                                                                                                        memory/4104-1326-0x000001AD27A80000-0x000001AD27A81000-memory.dmp

                                                                                                                                                        memory/4404-1441-0x0000026411B00000-0x0000026411B01000-memory.dmp

                                                                                                                                                        memory/4404-1746-0x0000026411AD0000-0x0000026411AFB000-memory.dmp

                                                                                                                                                        memory/4464-1930-0x000001A5BC0C0000-0x000001A5BC0C1000-memory.dmp

                                                                                                                                                        memory/4508-1159-0x00000179A7270000-0x00000179A729B000-memory.dmp

                                                                                                                                                        memory/4508-1121-0x00000179A72A0000-0x00000179A72A1000-memory.dmp

                                                                                                                                                        memory/5044-1340-0x00000175101B0000-0x00000175101B1000-memory.dmp

                                                                                                                                                        memory/5044-1660-0x0000023AA5650000-0x0000023AA567B000-memory.dmp

                                                                                                                                                        memory/5044-1433-0x0000023AA5680000-0x0000023AA5681000-memory.dmp

                                                                                                                                                        memory/5044-1350-0x000001750DDD0000-0x000001750DDFB000-memory.dmp

                                                                                                                                                        memory/5048-1373-0x000002689A540000-0x000002689A56B000-memory.dmp

                                                                                                                                                        memory/5048-1371-0x000002689A570000-0x000002689A571000-memory.dmp

                                                                                                                                                        memory/5280-1663-0x0000026034570000-0x000002603459B000-memory.dmp

                                                                                                                                                        memory/5280-1439-0x00000260345A0000-0x00000260345A1000-memory.dmp

                                                                                                                                                        memory/5552-1366-0x000001AA9A120000-0x000001AA9A121000-memory.dmp

                                                                                                                                                        memory/5552-1368-0x000001AA9A0F0000-0x000001AA9A11B000-memory.dmp

                                                                                                                                                        memory/5564-1161-0x0000010F2C120000-0x0000010F2C14B000-memory.dmp

                                                                                                                                                        memory/5564-1149-0x0000010F2C150000-0x0000010F2C151000-memory.dmp

                                                                                                                                                        memory/6048-949-0x00007FFD776E0000-0x00007FFD776E1000-memory.dmp

                                                                                                                                                        memory/6048-950-0x000001FD594F0000-0x000001FD594F1000-memory.dmp

                                                                                                                                                        memory/6080-1345-0x000001709CD40000-0x000001709CD6B000-memory.dmp

                                                                                                                                                        memory/6080-1319-0x000001709CD70000-0x000001709CD71000-memory.dmp

                                                                                                                                                        memory/6140-1348-0x000001CAEF440000-0x000001CAEF46B000-memory.dmp

                                                                                                                                                        memory/6140-1332-0x000001CAEF470000-0x000001CAEF471000-memory.dmp

                                                                                                                                                        memory/6232-1940-0x000001F5820B0000-0x000001F5820B1000-memory.dmp

                                                                                                                                                        memory/6260-4154-0x0000000007410000-0x0000000007442000-memory.dmp

                                                                                                                                                        memory/6260-4169-0x00000000077A0000-0x00000000077B1000-memory.dmp

                                                                                                                                                        memory/6260-4141-0x0000000005BC0000-0x0000000005C26000-memory.dmp

                                                                                                                                                        memory/6260-4140-0x0000000005AF0000-0x0000000005B12000-memory.dmp

                                                                                                                                                        memory/6260-4139-0x0000000005320000-0x00000000059EA000-memory.dmp

                                                                                                                                                        memory/6260-4138-0x0000000004C10000-0x0000000004C46000-memory.dmp

                                                                                                                                                        memory/6260-4166-0x00000000075B0000-0x00000000075CA000-memory.dmp

                                                                                                                                                        memory/6260-4167-0x0000000007610000-0x000000000761A000-memory.dmp

                                                                                                                                                        memory/6260-4168-0x0000000007840000-0x00000000078D6000-memory.dmp

                                                                                                                                                        memory/6260-4147-0x0000000005C30000-0x0000000005C96000-memory.dmp

                                                                                                                                                        memory/6260-4150-0x0000000005CA0000-0x0000000005FF7000-memory.dmp

                                                                                                                                                        memory/6260-4152-0x0000000006290000-0x00000000062DC000-memory.dmp

                                                                                                                                                        memory/6260-4151-0x0000000006240000-0x000000000625E000-memory.dmp

                                                                                                                                                        memory/6260-4165-0x0000000007BF0000-0x000000000826A000-memory.dmp

                                                                                                                                                        memory/6260-4163-0x0000000007450000-0x000000000746E000-memory.dmp

                                                                                                                                                        memory/6260-4155-0x000000006FE80000-0x000000006FECC000-memory.dmp

                                                                                                                                                        memory/6260-4164-0x0000000007480000-0x0000000007523000-memory.dmp

                                                                                                                                                        memory/6372-2016-0x0000016169D50000-0x0000016169D51000-memory.dmp

                                                                                                                                                        memory/6704-1986-0x000001E2EC600000-0x000001E2EC601000-memory.dmp

                                                                                                                                                        memory/6720-1999-0x000001DDB9390000-0x000001DDB9391000-memory.dmp

                                                                                                                                                        memory/6900-4183-0x000000006FE80000-0x000000006FECC000-memory.dmp

                                                                                                                                                        memory/6900-4175-0x0000000005D70000-0x00000000060C7000-memory.dmp

                                                                                                                                                        memory/7180-4449-0x000002C127B80000-0x000002C127D42000-memory.dmp

                                                                                                                                                        memory/7180-4447-0x000002C127620000-0x000002C12764A000-memory.dmp

                                                                                                                                                        memory/7180-4448-0x000002C127620000-0x000002C127644000-memory.dmp

                                                                                                                                                        memory/8060-4426-0x00000147A0F80000-0x00000147A0FA2000-memory.dmp