Overview

overview

7

Static

static

7

WaveTrial/Wave.exe

windows7-x64

1

WaveTrial/Wave.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    148s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/04/2024, 10:01

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    WaveTrial/Wave.exe
  • Size 7.0MB
  • Sample240409-l2b4qsfe4v
  • SHA256 2c51f67e236cf95e2d51df4178699da09869ab077924cff0b3df1c512878ef2f
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoverypersistence

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 38 IoCs
  • Modifies system executable filetype association 2 TTPs 7 IoCs
    persistence
  • Registers COM server for autorun 1 TTPs 64 IoCs
    persistence
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Checks system information in the registry 2 TTPs 6 IoCs

    System information is often read in order to detect sandboxing environments.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 10 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 38 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 8 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WaveTrial\Wave.exe
    "C:\Users\Admin\AppData\Local\Temp\WaveTrial\Wave.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3964
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4320
    • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
      "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe"
      1⤵
      • Modifies system executable filetype association
      • Registers COM server for autorun
      • Checks processor information in registry
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:3444
      • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
        "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" /update /restart
        2⤵
        • Executes dropped EXE
        • Checks system information in the registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3532
        • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
          C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe /update /restart /peruser /childprocess /extractFilesWithLessThreadCount /renameReplaceOneDriveExe /renameReplaceODSUExe /removeNonCurrentVersions /enableODSUReportingMode
          3⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Modifies system executable filetype association
          • Registers COM server for autorun
          • Adds Run key to start application
          • Checks system information in the registry
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2332
          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe
            "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe"
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Registers COM server for autorun
            PID:4460
          • C:\Users\Admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe
            /updateInstalled /background
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Modifies system executable filetype association
            • Registers COM server for autorun
            • Checks system information in the registry
            • Modifies Internet Explorer settings
            • Modifies registry class
            • Suspicious behavior: AddClipboardFormatListener
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            PID:4348
    • C:\Users\Admin\Desktop\WaveTrial\Wave.exe
      "C:\Users\Admin\Desktop\WaveTrial\Wave.exe"
      1⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3092

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          FileSyncClient.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncClient.dll
          • Size 5.0MB
          • SHA256 3d0250f856970ff36862c99f3329a82be87b0de47923debefe21443c76cddf88
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncConfig.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe
          • Size 553KB
          • SHA256 a3a4b648e4dcf3a4e5f7d13cc3d21b0353e496da75f83246cc8a15fada463bdf
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncSessions.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncSessions.dll
          • Size 3.7MB
          • SHA256 1e0c26ceecee602b5b4a25fb9b0433c26bac05bd1eee4a43b9aa75ae46ccf115
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncTelemetryExtensions.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncTelemetryExtensions.dll
          • Size 58KB
          • SHA256 a742c9e35d824b592b3d9daf15efb3d4a28b420533ddf35a1669a5b77a00bb75
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          FileSyncViews.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncViews.dll
          • Size 2.4MB
          • SHA256 146740eddcb439b1222d545b4d32a1a905641d02b14e1da61832772ce32e76ba
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          LogUploader.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogUploader.dll
          • Size 769KB
          • SHA256 fe49f22bb132fedf1412e99169d307fa715dbdd84fe71c3e3ff12300d30d4987
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          LoggingPlatform.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LoggingPlatform.dll
          • Size 504KB
          • SHA256 d5a538a0a036c602492f9b2b6f85de59924da9ec3ed7a7bbf6ecd0979bee54d3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.contrast-black_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-100.png
          • Size 1KB
          • SHA256 6f028542f6faeaaf1f564eab2605bedb20a2ee72cdd9930bde1a3539344d721b
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-125.png
          • Size 1KB
          • SHA256 cbdcf248f8a0fcd583b475562a7cdcb58f8d01236c7d06e4cdbfe28e08b2a185
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-150.png
          • Size 2KB
          • SHA256 36a6aad9a9947ab3f6ac6af900192f5a55870d798bca70c46770ccf2108fd62d
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-200.png
          • Size 2KB
          • SHA256 67d1bb54fcb19c174de1936d08b5dbdb31b98cfdd280bcc5122fb0693675e4f2
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-black_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-black_scale-400.png
          • Size 6KB
          • SHA256 5cb8fd670585de8a7fc0ceede164847522d287ef17cd48806831ea18a0ceac1f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.contrast-white_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-100.png
          • Size 2KB
          • SHA256 a024fc5dbe0973fd9267229da4ebfd8fc41d73ca27a2055715aafe0efb4f3425
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-white_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-125.png
          • Size 3KB
          • SHA256 e8b30bfcee8041f1a70e61ca46764416fd1df2e6086ba4c280bfa2220c226750
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-white_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-150.png
          • Size 3KB
          • SHA256 a0bbe33b798c3adac36396e877908874cffaadb240244095c68dff840dcbbf73
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.contrast-white_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-200.png
          • Size 4KB
          • SHA256 fba9104432cbb8ebbd45c18ef1ba46a45dd374773e5aa37d411bb023ded8efd6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.contrast-white_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.contrast-white_scale-400.png
          • Size 8KB
          • SHA256 9250ef25efc2a9765cf1126524256fdfc963c8687edfdc4a2ecde50d748ada85
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-100.png
          • Size 2KB
          • SHA256 8acbdd41252595b7410ca2ed438d6d8ede10bd17fe3a18705eedc65f46e4c1c4
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveMedTile.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-125.png
          • Size 4KB
          • SHA256 a5294e3c7cd855815f8d916849d87bd2357f5165eb4372f248fdf8b988601665
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-150.png
          • Size 5KB
          • SHA256 3df4590386671e0d6fee7108e457eb805370a189f5fdfeaf2f2c32d5adc76abd
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-200.png
          • Size 6KB
          • SHA256 3384357b6110f418b175e2f0910cffe588c847c8e55f2fe3572d82999a62c18e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveMedTile.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveMedTile.scale-400.png
          • Size 15KB
          • SHA256 deb0ec0ee8f1c4f7ea4de2c28ff85087ee5ff8c7e3036c3b0a66d84bae32b6bb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveSmallTile.contrast-black_scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-100.png
          • Size 783B
          • SHA256 292cac291af7b45f12404f968759afc7145b2189e778b14d681449132b14f06b
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-125.png
          • Size 1018B
          • SHA256 8efeacefb92d64dfb1c4df2568165df6436777f176accfd24f4f7970605d16c2
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-150.png
          • Size 1KB
          • SHA256 262b9a30bb8db4fc59b5bc348aa3813c75e113066a087135d0946ad916f72535
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-200.png
          • Size 1KB
          • SHA256 9833b80def72b73fca150af17d4b98c8cd484401f0e2d44320ecd75b5bb57c42
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.contrast-black_scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.contrast-black_scale-400.png
          • Size 3KB
          • SHA256 3a7ef7c0bda402fdaff19a479d6c18577c436a5f4e188da4c058a42ef09a7633
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-100.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-100.png
          • Size 1KB
          • SHA256 4e11167708801727891e8dd9257152b7391fc483d46688d61f44b96360f76816
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-125.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-125.png
          • Size 2KB
          • SHA256 69e432d1eec44bed4aad35f72a912e1f0036a4b501a50aec401c9fa260a523e3
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-150.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-150.png
          • Size 3KB
          • SHA256 7e3f35d5eb05435be8d104a2eacf5bace8301853104a4ea4768601c607ddf301
          • MD5 SHA1 SHA512
          Submit Download

          OneDriveSmallTile.scale-200.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-200.png
          • Size 4KB
          • SHA256 85823f7a5a4ebf8274f790a88b981e92ede57bde0ba804f00b03416ee4feda89
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveSmallTile.scale-400.png
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\LogoImages\OneDriveSmallTile.scale-400.png
          • Size 11KB
          • SHA256 9a0b901e97abe02036c782eb6a2471e18160b89fd5141a5a9909f0baab67b1ef
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDrive.VisualElementsManifest.xml
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDrive.VisualElementsManifest.xml
          • Size 344B
          • SHA256 d21077ad0c29a4c939b8c25f1186e2b542d054bb787b1d3210e9cab48ec3080c
          • MD5 SHA1 SHA512
          Submit Download

          OneDrive.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDrive.exe
          • Size 2.3MB
          • SHA256 5d8273bf98397e4c5053f8f154e5f838c7e8a798b125fcad33cab16e2515b665
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveStandaloneUpdater.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDriveStandaloneUpdater.exe
          • Size 2.9MB
          • SHA256 969fbb03015dd9f33baf45f2750e36b77003a7e18c3954fab890cddc94046673
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveTelemetryStable.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\OneDriveTelemetryStable.dll
          • Size 1.6MB
          • SHA256 146811735589450058048408f05644a93786a293c09ccb8d74420fb87c0a4d56
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Core.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Core.dll
          • Size 5.1MB
          • SHA256 ad44dbb30520d85f055595f0bc734b16b9f2fb659f17198310c0557b55a76d70
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Gui.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Gui.dll
          • Size 5.3MB
          • SHA256 bcfe906135d759cca8c2c7e32679c85404a288d99f3d4da13d929e98f6e607d5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Network.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Network.dll
          • Size 983KB
          • SHA256 3d23eadcb60d469e974591e16d6e73f18e33939bbee1d27953e63df00e629c8f
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Qml.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Qml.dll
          • Size 2.7MB
          • SHA256 bdadc298fda94a9ad1268128863276c7f898bef3ae79a3e6782cecf22f1294a2
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5QmlModels.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5QmlModels.dll
          • Size 397KB
          • SHA256 4129b5228cd324103e2f35a07e718d03dfa814186126d7f4ed5a7e9d92306a56
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Quick.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Quick.dll
          • Size 3.3MB
          • SHA256 c0d9b9ecb002635f24dcaf53eb34f46c22bacf02afae768f2d0834656a5d581d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5Widgets.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5Widgets.dll
          • Size 4.2MB
          • SHA256 3705c8a18dd69f23f02a8a29b792e684a0dfcd360b8e7d71c2afe7e448044074
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Qt5WinExtras.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Qt5WinExtras.dll
          • Size 199KB
          • SHA256 8bc10ab2b66a07632121deb93b3b8045b5029e918babc2ee2908a29decdab333
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Resources.pri
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Resources.pri
          • Size 4KB
          • SHA256 e1252527bc066da6838344d49660e4c6ff2d1ddfda036c5ec19b07fdfb90c8c3
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          SyncEngine.DLL
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\SyncEngine.DLL
          • Size 8.3MB
          • SHA256 51b13dd5d598367fe202681dce761544ee3f7ec4f36d0c7c3c8a3fca32582f07
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Telemetry.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\Telemetry.dll
          • Size 451KB
          • SHA256 414f6f64d463b3eb1e9eb21d9455837c99c7d9097f6bb61bd12c71e8dce62902
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          UpdateRingSettings.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\UpdateRingSettings.dll
          • Size 432KB
          • SHA256 9fb3abcafd8e8b1deb13ec0f46c87b759a1cb610b2488052ba70e3363f1935ec
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          WebView2Loader.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\WebView2Loader.dll
          • Size 107KB
          • SHA256 41a13ba97534c7f321f3f29ef1650bd445bd3490153a2bb2d57e0fbc70d339c1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          WnsClientApi.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\WnsClientApi.dll
          • Size 668KB
          • SHA256 114ea2a7872a991a00f2ffd907248cafe1f7475cd399982fd383488f6d7f4839
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          adal.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\adal.dll
          • Size 1.3MB
          • SHA256 55234df27deb004b09c18dc15ca46327e48b26b36dfb43a92741f86300bd8e9e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libcrypto-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\libcrypto-1_1.dll
          • Size 2.4MB
          • SHA256 14c291c907296098c9d7859063333aff0a344471ddc69497bd1f8004641c11b7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          libssl-1_1.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\libssl-1_1.dll
          • Size 532KB
          • SHA256 82f4e59cc33375c7df0f68daff8acfbedfb1001a554fedc976bf4285cb04a0fb
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          msvcp140.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\msvcp140.dll
          • Size 425KB
          • SHA256 545bb4a00b29b4b5d25e16e1d0969e99b4011033ce3d1d7e827abef09dd317e7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          ucrtbase.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\ucrtbase.dll
          • Size 1.1MB
          • SHA256 5ade748445d8da8f22d46ad46f277e1e160f6e946fc51e5ac51b9401ce5daf46
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          vcruntime140.dll
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\vcruntime140.dll
          • Size 73KB
          • SHA256 c79241aec5e35cba91563c3b33ed413ce42309f5145f25dc92caf9c82a753817
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          OneDriveSetup.exe
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe
          • Size 40.2MB
          • SHA256 e70e80dbbc9baba7ddcee70eda1bb8d0e6612dfb1d93827fe7b594a59f3b48b9
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          logUploaderSettings_temp.ini
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\Personal\logUploaderSettings_temp.ini
          • Size 108B
          • SHA256 02f9db348ecff7072723d989e191e1339a88d14e1eda3ccf24bd2e73c9c87c2a
          • MD5 SHA1 SHA512
          Submit Download

          PreSignInSettingsConfig.json
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\settings\PreSignInSettingsConfig.json
          • Size 63KB
          • SHA256 543796a1b343b4ebc0285d89cb8eb70667ac7b513da37495e38003704e9d88d7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          DeviceHealthSummaryConfiguration.ini
          • Path C:\Users\Admin\AppData\Local\Microsoft\OneDrive\setup\logs\DeviceHealthSummaryConfiguration.ini
          • Size 77B
          • SHA256 14ef32c328c2e6e81e5b8455f3d385d48c07cce4738a657a94019f1c0da212a8
          • MD5 SHA1 SHA512
          Submit Download

          update100[2].xml
          • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\RXB2E2AL\update100[2].xml
          • Size 726B
          • SHA256 36a6bd38a8a6f5a75b73caffae5ae66dfabcaefd83da65b493fa881ea8a64e7d
          • MD5 SHA1 SHA512
          Submit Download

          aria-debug-3444.log
          • Path C:\Users\Admin\AppData\Local\Temp\aria-debug-3444.log
          • Size 470B
          • SHA256 0c261736c7c4c778e61f1c6e0345471f82f3641391970e8a1cbab90ad2f74cec
          • MD5 SHA1 SHA512
          Submit Download

          tmp4570.tmp
          • Path C:\Users\Admin\AppData\Local\Temp\tmp4570.tmp
          • Size 35.9MB
          • SHA256 bbc70091b3834af5413b9658b07269badd4cae8d96724bf1f7919f6aab595009
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          memory/3092-982-0x000001EB457E0000-0x000001EB457F0000-memory.dmp
          Download

          memory/3092-981-0x00007FF8BC8A0000-0x00007FF8BD361000-memory.dmp
          Download

          memory/3092-983-0x000001EB459D0000-0x000001EB45B91000-memory.dmp
          Download

          memory/3964-7-0x00007FF8C1030000-0x00007FF8C1AF1000-memory.dmp
          Download

          memory/3964-3-0x000001E2370D0000-0x000001E2370F4000-memory.dmp
          Download

          memory/3964-0-0x00007FF8C1030000-0x00007FF8C1AF1000-memory.dmp
          Download

          memory/3964-2-0x000001E236F20000-0x000001E236F30000-memory.dmp
          Download

          memory/3964-4-0x000001E251200000-0x000001E2512E6000-memory.dmp
          Download

          memory/3964-5-0x000001E2512F0000-0x000001E2514B1000-memory.dmp
          Download

          memory/3964-1-0x000001E234CB0000-0x000001E2353B8000-memory.dmp
          Download

          memory/4348-949-0x0000000004350000-0x0000000004360000-memory.dmp
          Download