9bc4a3a6d8703225b3433a5a67c6f4321e49d70ccedbbe3ac122dab331f1e6e3

Analysis

user interaction
yes
max time kernel
90s
max time network
93s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260618-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
28/06/2026, 16:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Wave/Wave.exe
Size 8.5MB
Sample260628-vbdpbaav9m
SHA256 9bc4a3a6d8703225b3433a5a67c6f4321e49d70ccedbbe3ac122dab331f1e6e3
MD5 f75863b754f9a4d393f98c1734e3d091
SHA1 ac131b494c296a465a232eb0ee2e4b447f487921
SHA512 9e2298309bd3d851f0a61f5e534b4f278e9b75491601627c8c7240b9eba66e0ecbd09de9dcb9d463d3dd4f24b6e78b7b37ed912db6dc08c14e1f757723a8f5b2
SSDEEP 196608:vGVF5MZhgMNv/dfXPl7OtttdTpY7A8MLybhZ0zLXv2Yrt3KuBbSWxzHKo+r8THXg:vWXMPNXd/hkvTp8DbL0zr1K+bSWxzHKV
TLSH
T12296232467E85663F5BD5776D8714992D7767E0A2A0BA38F2924389C0EF23C1CF32217
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
4108	Wave.exe

Loads dropped DLL 5 IoCs

pid	Process
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe

Checks whether UAC is enabled 1 TTPs 2 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Wave.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Wave.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates processes with tasklist 1 TTPs 1 IoCs

discovery

Process Discovery

T1057

pid	Process
3012	tasklist.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 32 IoCs

pid	Process
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
6348	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe
4108	Wave.exe

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedgewebview2.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1528	msedge.exe
1816	msedge.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134271389971176476"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3730367222-316663987-825798519-1000\{5EA6E5E0-7979-4E99-845A-7A1CB173CFCD}	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
5804	msedgewebview2.exe
6344	msedgewebview2.exe
1644	msedge.exe
1644	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	6348	Wave.exe
Token: SeDebugPrivilege	3012	tasklist.exe
Token: SeDebugPrivilege	4108	Wave.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
1644	msedge.exe
1644	msedge.exe

Suspicious use of WriteProcessMemory 61 IoCs

description	pid	Process	procid_target
PID 6348 wrote to memory of 5804	6348	Wave.exe	89
PID 5804 wrote to memory of 5716	5804	msedgewebview2.exe	90
PID 5804 wrote to memory of 3556	5804	msedgewebview2.exe	91
PID 5804 wrote to memory of 3556	5804	msedgewebview2.exe	91
PID 5804 wrote to memory of 3556	5804	msedgewebview2.exe	91
PID 5804 wrote to memory of 3556	5804	msedgewebview2.exe	91
PID 5804 wrote to memory of 1564	5804	msedgewebview2.exe	92
PID 5804 wrote to memory of 1428	5804	msedgewebview2.exe	93
PID 5804 wrote to memory of 1428	5804	msedgewebview2.exe	93
PID 5804 wrote to memory of 1428	5804	msedgewebview2.exe	93
PID 5804 wrote to memory of 4296	5804	msedgewebview2.exe	94
PID 5804 wrote to memory of 4296	5804	msedgewebview2.exe	94
PID 5804 wrote to memory of 4296	5804	msedgewebview2.exe	94
PID 5804 wrote to memory of 4296	5804	msedgewebview2.exe	94
PID 5804 wrote to memory of 4296	5804	msedgewebview2.exe	94
PID 6348 wrote to memory of 2232	6348	Wave.exe	95
PID 2232 wrote to memory of 3012	2232	cmd.exe	97
PID 2232 wrote to memory of 3232	2232	cmd.exe	98
PID 2232 wrote to memory of 3900	2232	cmd.exe	100
PID 2232 wrote to memory of 4108	2232	cmd.exe	101
PID 4108 wrote to memory of 6344	4108	Wave.exe	102
PID 6344 wrote to memory of 3328	6344	msedgewebview2.exe	103
PID 6344 wrote to memory of 3404	6344	msedgewebview2.exe	104
PID 6344 wrote to memory of 3404	6344	msedgewebview2.exe	104
PID 6344 wrote to memory of 3404	6344	msedgewebview2.exe	104
PID 6344 wrote to memory of 3404	6344	msedgewebview2.exe	104
PID 6344 wrote to memory of 3100	6344	msedgewebview2.exe	105
PID 6344 wrote to memory of 6592	6344	msedgewebview2.exe	106
PID 6344 wrote to memory of 6592	6344	msedgewebview2.exe	106
PID 6344 wrote to memory of 6592	6344	msedgewebview2.exe	106
PID 6344 wrote to memory of 6388	6344	msedgewebview2.exe	107
PID 6344 wrote to memory of 6388	6344	msedgewebview2.exe	107
PID 6344 wrote to memory of 6388	6344	msedgewebview2.exe	107
PID 6344 wrote to memory of 6388	6344	msedgewebview2.exe	107
PID 6344 wrote to memory of 6388	6344	msedgewebview2.exe	107
PID 4108 wrote to memory of 1644	4108	Wave.exe	109
PID 1644 wrote to memory of 2360	1644	msedge.exe	110
PID 1644 wrote to memory of 3396	1644	msedge.exe	112
PID 1644 wrote to memory of 1528	1644	msedge.exe	111
PID 1644 wrote to memory of 3396	1644	msedge.exe	112
PID 1644 wrote to memory of 3396	1644	msedge.exe	112
PID 1644 wrote to memory of 6092	1644	msedge.exe	113
PID 1644 wrote to memory of 6092	1644	msedge.exe	113
PID 1644 wrote to memory of 1804	1644	msedge.exe	115
PID 1644 wrote to memory of 3476	1644	msedge.exe	116
PID 1644 wrote to memory of 1804	1644	msedge.exe	115
PID 1644 wrote to memory of 1804	1644	msedge.exe	115
PID 1644 wrote to memory of 3476	1644	msedge.exe	116
PID 1644 wrote to memory of 3476	1644	msedge.exe	116
PID 1644 wrote to memory of 5324	1644	msedge.exe	118
PID 5324 wrote to memory of 6784	5324	msedge.exe	119
PID 5324 wrote to memory of 1816	5324	msedge.exe	121
PID 5324 wrote to memory of 1512	5324	msedge.exe	122
PID 5324 wrote to memory of 1512	5324	msedge.exe	122
PID 5324 wrote to memory of 1512	5324	msedge.exe	122
PID 5324 wrote to memory of 4388	5324	msedge.exe	123
PID 5324 wrote to memory of 4388	5324	msedge.exe	123
PID 5324 wrote to memory of 4800	5324	msedge.exe	126
PID 5324 wrote to memory of 2176	5324	msedge.exe	127
PID 5324 wrote to memory of 4960	5324	msedge.exe	128
PID 5324 wrote to memory of 2040	5324	msedge.exe	129

C:\Users\Admin\AppData\Local\Temp\Wave\Wave.exe
"C:\Users\Admin\AppData\Local\Temp\Wave\Wave.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:6348
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=6348.6356.16924982067018453442 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:5804
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView /prefetch:4 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x140,0x7ffa82e05fd8,0x7ffa82e05fe4,0x7ffa82e05ff0
    3⤵
    PID:5716
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1756 --field-trial-handle=1760,i,16828123365038063424,793588215201206927,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
    3⤵
    PID:3556
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2088 --field-trial-handle=1760,i,16828123365038063424,793588215201206927,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
    3⤵
    PID:1564
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2404 --field-trial-handle=1760,i,16828123365038063424,793588215201206927,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
    3⤵
    PID:1428
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3380 --field-trial-handle=1760,i,16828123365038063424,793588215201206927,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 /prefetch:1
    3⤵
    PID:4296
- C:\Windows\SYSTEM32\cmd.exe
  "cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_1f79fc0cccbc4daca9633738132d7afb.bat"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:2232
- - C:\Windows\system32\tasklist.exe
    tasklist /FI "PID eq 6348"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious use of AdjustPrivilegeToken
    PID:3012
- - C:\Windows\system32\find.exe
    find "6348"
    3⤵
    PID:3232
- - C:\Windows\system32\xcopy.exe
    xcopy "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6a805ad554204dfbb33e91321faff0de\*" "C:\Users\Admin\AppData\Local\Temp\Wave\" /S /E /Y /R /H /Q
    3⤵
    PID:3900
- - C:\Users\Admin\AppData\Local\Temp\Wave\Wave.exe
    "C:\Users\Admin\AppData\Local\Temp\Wave\Wave.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Suspicious use of NtSetInformationThreadHideFromDebugger
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:4108
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4108.908.3601656804310389538 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:6344
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView /prefetch:4 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x168,0x1c8,0x7ffa82e05fd8,0x7ffa82e05fe4,0x7ffa82e05ff0
        5⤵
        
        PID:3328
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1752 --field-trial-handle=1756,i,17063796524593018848,2229932167593472992,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        5⤵
        
        PID:3404
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2000 --field-trial-handle=1756,i,17063796524593018848,2229932167593472992,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        5⤵
        
        PID:3100
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2396 --field-trial-handle=1756,i,17063796524593018848,2229932167593472992,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        5⤵
        
        PID:6592
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3496 --field-trial-handle=1756,i,17063796524593018848,2229932167593472992,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 /prefetch:1
        5⤵
        
        PID:6388
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://getwave.gg/resellers
      4⤵
      Drops file in Windows directory
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:1644
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x314,0x7ffa7f7ec188,0x7ffa7f7ec194,0x7ffa7f7ec1a0
        5⤵
        
        PID:2360
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,17907943641628506398,11241088952374687269,524288 --field-trial-handle=2360,i,17567807706054647966,10257080786621340111,262144 --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:11
        5⤵
        System Time Discovery
        
        PID:1528
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1704,i,10116312356340306334,9464090991515482879,262144 --field-trial-handle=2360,i,17567807706054647966,10257080786621340111,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
        5⤵
        
        PID:3396
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,2012989666196192490,15214624582369920085,524288 --field-trial-handle=2360,i,17567807706054647966,10257080786621340111,262144 --variations-seed-version --mojo-platform-channel-handle=3168 /prefetch:13
        5⤵
        
        PID:6092
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3580,i,2803586563832413015,8271456378425543765,2097152 --field-trial-handle=2360,i,17567807706054647966,10257080786621340111,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
        5⤵
        
        PID:1804
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3600,i,5977106987191661638,6342465979498695571,2097152 --field-trial-handle=2360,i,17567807706054647966,10257080786621340111,262144 --variations-seed-version --mojo-platform-channel-handle=3644 /prefetch:1
        5⤵
        
        PID:3476
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        Drops file in Windows directory
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:5324
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x2d8,0x7ffa7f7ec188,0x7ffa7f7ec194,0x7ffa7f7ec1a0
        6⤵
        
        PID:6784
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1880,i,13439621085076687670,13743582982058678589,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=2560 /prefetch:11
        6⤵
        System Time Discovery
        
        PID:1816
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,11843943525157485643,16504637085546020941,262144 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:2
        6⤵
        
        PID:1512
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2500,i,11391375322941949971,11639650730677852987,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=2892 /prefetch:13
        6⤵
        
        PID:4388
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,11061777029726731718,10525570023919144381,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
        6⤵
        
        PID:4832
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,11061777029726731718,10525570023919144381,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=4456 /prefetch:14
        6⤵
        
        PID:4800
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4472,i,10732742164764289460,2855526922533138667,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=4520 /prefetch:14
        6⤵
        
        PID:2176
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,13986452955538550599,16927859704992257136,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=4940 /prefetch:14
        6⤵
        
        PID:4960
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4536,i,12095271244761973134,7367783466946577148,524288 --field-trial-handle=2472,i,7725229275177072408,15419760222742279970,262144 --variations-seed-version --mojo-platform-channel-handle=4984 /prefetch:14
        6⤵
        
        PID:2040

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5872

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4628

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 7250e4ddb51fa53ec8c4b9199831864f7ff3c5cca1fbf2e4e5086ae0576d31e1
MD5 d67d9caab78f31b2ab2ae61fc88b12e8
SHA1 c439af9d2a4c79b1936d0b654cdf2b2a6da22a5c
SHA512 f8e3ffb5bbcb1740ce2b25ded24b3be72c6285c98433cf97d12acea2ff455dd8da18d81f9348060457962fde88e3e33b5654dc94e329100848cdec215f571788
TLSH
T1C3D0C0513B2DB402C1241330882343706D09C503E332C10635BD140CDCDA4C4A3C1547
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fbfdc6639449912c7c98b931d8190c5dc58f3c2a0bf5687e437a1f10d8fb4d03
MD5 0648a8cda5509f4d21f145a8d2e85107
SHA1 0098998314a76ff86c61b0ea846ab42ba2d245f1
SHA512 d12c9f38e4b1be9f515149cbec2d53104d76f99eb87ea993bf787c888cea28fbc81e79244b64386a0c5a5111415c57c4251ad0e5528252f3302570bd3971bd56
TLSH
T1C1D0C0513B2DB402C1241370841343706D09C503E333C10639BDA40CDC9A4C4F3C1543
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 35266fa3d70023fb7bd146f2423b8d723df305fd8dd053bc808d19a4feeb2bf7
MD5 d399b74630dba676eda617f3d571b0b9
SHA1 8c11dc3d3fbbba1b841a4e4704f1447ed1bd9d9a
SHA512 d85162c523b242814c1d99bb43ffc9893117982eb34d9389d94e6606ec4854e935d2057e0b89827bc05ec4670b76deb5c1ceaa77d0b30f1781c6fcdd1ea91de1
TLSH
T1CBD0A7113A3D78D2D13823758522426069595A53A362820A7999984DDCB90D4A6C1D97
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 54f6f1a60248b0b8db9e1ec6a017aa7de6a7d1904060f04e4264abdde9e6e8c8
MD5 4d18bd28fb1207e7b630ca9a47304767
SHA1 a4cc2187608156368937f6bcb952a19d567348e5
SHA512 0b30b9dcca83dc6c6de3aedaef0eae12b617ec38b9fe6e385f88e4f274b38ff05368d4f8d5e76c98e85aa8416ff216f053ff1696a076be1bff08301cb2e7eec8
TLSH
T130F07DB6D831AC372CFC1B2860A4074BEB51131B3740845B3A3D870C8FB163B464582C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 4ebbb69ab0bbe6f92918356c7ae2e0fb78b2779b5ae95a1b1738bc6808d958e9
MD5 151e96bfab8e3d354eb8f2f8de42f958
SHA1 8e255c9aa263993b639cf4d6282175117b07c34d
SHA512 3b19369416033ec15e810edb692e0d0bfb9d2a0d9a86613c2fde4075a225315147f66334329583f22af33e1e9a13a1c43d2fff9ef5faad1832903d9394b69fa2
TLSH
T14371C7AE82AD45F8DB2553F79BE7248A37710F3A3F072E0524506C74789AFD624C1E10
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe592e0b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe592e0b.TMP
Size 3KB
SHA256 68b7f41729aa986d1bdcc501a18bab661c19d0dd7e27488cf0253cdeeab744cd
MD5 641820a8750ba5d812419d77c9add642
SHA1 311d39963d69ecba8579a02ac4ab113778829ac7
SHA512 5ace29f9372f0dccf454df4799cce2dd00d50161cb6a08261d899a21ed1d5ffc28d63a65319536143e642ec8d542f11bc021305909b5301e52a383e3b7eaf816
TLSH
T17471C6AE02AC45A9DB2953F79BE6208A37750F3A3F072E0520552C747999FC624C2F10
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2c653b855888e75538b8d00e8920b469edda74dcd2cf3af4fbf6a3b915229e30
MD5 f9fc7737a46edbf3612029db4e88d51b
SHA1 498ef930997165a8a10d0648083831e67cc7698f
SHA512 7430f9da7e8ea983b4332b5344678f2bba856c399db67a24bdc64e7ee732404f194589c5cc36024ee9dd8aeba565e9ff036db59663710f34921ff87a9da721f5
TLSH
T1AE51DEF783E4866DDA0196F0A714AE2BCE1D0914432C3D6AC9E0EF1BD3E3471E041A5B
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 3db2d942ce8b330d3488f22d72be77f12965e2ac606b8c56c87c4d726ce78812
MD5 f4759a11867cd61c9a29505a9dd22263
SHA1 61d7b54673dc51a6b15a2f047085ff5b85c3fae3
SHA512 18b20ace34eeb7b01ded42f75076b92f26fe69f97a1861eafcaff49076d258f91ee5dfb4dcc00b80ecf45539dbe7493ab967c712490c2dc9d3d01d034c5495a1
TLSH
T1C3C012A680B9E4F720284A7D19847D85BE7AD4350A419CA4D9F9937CA1910BF6E1502A
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 5aa94b4c5e64be13d67164f24c9243fed4fbbe483649b8bfd591f0984cb8c1db
MD5 fb9220c38742558872ae4511ea165aa9
SHA1 0892aa2e404afd535371920bf78d8d4e6f2583db
SHA512 b57de682becfaf642b1ffbe2801e7d6b6bfc94fa6114cadb725463933359e6b389ce15ebc85ef1f028d122fa3e2753c3b98d92673cf7ddbaf1b6631eb1978575
SSDEEP 384:sxRZGEQ/fisDWviXz7QHJclQ/57/+TDfptjH1:sdDQ/fdYiXacG/5D+Hfh
TLSH
T19772C705A928597BCDDBD319FA467F63D6F81563E2905E44AAFC8B0C00E76DD221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 c43067265234170d252e0bb1605d1a7bd8ace291b6f0fba5e3cb59623b2bf721
MD5 4d85e99b68ca0f33ff3ce13e6a15499f
SHA1 7157548bd32eb8116032333bbbffe8825b663840
SHA512 94135125ac70e6575e19b6ca17fd36ba8d1af532b2ca4202cccc6c9c48c7faf90567359bca0e39d22c8eff04b1e094e790538b11f2f1b260a3cedb10bef78c07
SSDEEP 768:hDiNNidNi/Jt7pLuL70DiEWg5Niuf+Xi08F1+UoAYDCx9Tuqh0VfUC9xbog/OVpo:hDiNNidNi/JbE70DiEWg5Niuf+Xi0u1k
TLSH
T11DE2FC3B680CC77E4F844E9CED29BE9B6DE801CB96D8CD9447EA440C03C6AEB51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 af3a11582d71304d7d546628c94f2d6eb96aaa4f96683fd7da5a90b18a999a3c
MD5 6a1570d92ed9e4244d5da2f03b0cf63b
SHA1 8d2f0d3f71d56cf012c88bf57c70aa120c4cb79c
SHA512 b11da618dd7cdd3de2373d64d129fc52645b8c6bb77df2943511418e364b303b593a503e68c1bd02e1a2e4410f89e56439dd40e2a224b7b7f9d66bf96ba8dc07
SSDEEP 384:TFUxVXrvC7WZd5J5PClV2Hlftp113RFJlbDNOzlRI:TFUxVXrvC7WZd5J5PClV2Hlftp113RFJ
TLSH
T13CB22511797E224138FE690CE1A5951F274230B3301AA63B7BBD60E60E67E005FFD9E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 de7bb2b238705effe48b57d87a55dcc957e04c93579b410cbdb7411685a46843
MD5 3a361cc78947182a2f03a859a20aef18
SHA1 6cb7b4ba3887080944d4c0ade96d8f2a6a016ed2
SHA512 629d73ff81fbb012e928d7932b21737d3650a36c1ca3a3e229cfe920b9c5e88a96eb9754cf75736fc686286857707eb4ac25e669bb64357d388c2f6c783f1003
SSDEEP 384:n0iF1tNn/s3n9Sd8NG8TUNTUlIRBu645jRtfLFGh2kGtxsRHITGT0IR8Lk1IzTx4:PF1j+9Ybwgi7hGsj4Hi+09v6
TLSH
T181C24A76D8A4DAB79DF65FC5B70A764AAEE001A3C0D869D8D9DC5D0C00871ED034BD26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 1fa01638967b79a852741f9a996bcb130e3c91c16e20a81ed8d4353b4f7dd3e1
MD5 483ecd15dd7c8b8072a70864ec798eb4
SHA1 1f99dd333f70b5c77ddc854a7568b91724fc98b1
SHA512 b280cd02c474746fefc2eee81faafda10af228445d8571f96d748bae2a16296ff7d8f4cde47ab7ef87753226f02c4acfeb8f2909668eb10a985271c92f9176c8
SSDEEP 384:nCiFEtNn/s3n9S38N78TUNTUlIRwu6m8RRtfLFGh2kGtxs/XO73env3Kt4Kakrnl:JFEj+9OywgFw/GsjGOynv6t4KzrnZpvZ
TLSH
T156E2073ADC55CA7F88EE7B88674E26569DE00173C4B89988EBC85F0C807719DE707D25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaveUpdate_1f79fc0cccbc4daca9633738132d7afb.bat

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_1f79fc0cccbc4daca9633738132d7afb.bat
Size 683B
SHA256 3f40a2561364972275a01119daf4c90ce5e77f20a1b5eb332ce0c140a4c0cb7f
MD5 efd9a7180a7740069cb9f32bf3c3b3b3
SHA1 27d70135d50d646f97b8e9ce01b9b81dbaa70fb8
SHA512 13143a94b7c94ff6fd38ae81b51d75b539fc92fba50e6e55c2575389389e5cac9684716aacb3dc52867c5b21877abdc322b0a67369e2c860e4e9fd3317baecad
TLSH
T150019E71258A5D9A08108B4F0BAE9B09DEBFC48F2F0B660D55B88489325E51B76A89C5
MD5 SHA1 SHA512 TLSH

Submit Download

Wave.exe

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6a805ad554204dfbb33e91321faff0de\Wave.exe
Size 9.6MB
SHA256 fdddc5f2d005696b1923e8192a0f66b599dbf92aff40447869f2c278a736c50c
MD5 1852c2d25f644263c7beb6fd8183e3bd
SHA1 380d73cc5e4edb0640a8911fcf39846974c734ca
SHA512 d7e49f7d0fe95c1f0f00a9ab815e121024d327c28aa66e2646b2366b0f0e702ccec741d7f0adae8c236f489d423e4eb3dc51410aa395bba42943363190069b19
SSDEEP 196608:2DyDXOliXInuU6ljcYtRRoyqgFk99AamtOjNswoTu5evlQm2mtnMUwEa9BeLibsF:2aKnd6lLBSgC99Ai5sw0u5evlQm2mtnj
TLSH
T128A6011897E85552D73E9B7CC126C543FEB1B886032592CF0818FD582FEB7C2A636636
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaveUIAuth.dll

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6a805ad554204dfbb33e91321faff0de\WaveUIAuth.dll
Size 20.6MB
SHA256 2f0941e4c4714d207f866861555e1606fd54e12b865b9f4d3d50ceb9f78fd403
MD5 91ec65fcb1665c1f55198a868bb8224f
SHA1 c244ec97d014809e568ef3611fb1bd625b52a35f
SHA512 e1f49032fb739b7dec9f2cb17c32828c0e9117b64a44d39d9d25c82fa838a48f3dca98a153917729130ac9dc9dbdbcdee538cc0a6ed40e06d3a46f8abcb99104
SSDEEP 393216:DBt6fSdHPPmgT9x/5qecpP3QU2cV6OkI/x0wlIWy3ZAHPoK3e3UAFW:T+2PFx/8NPsQ3x7+fIYrF
TLSH
T1B42723E524D411FCD896C630E25E2BEDF1D578494DB9A82E7FC608012F31E9BC9A2937
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6a805ad554204dfbb33e91321faff0de\WebView2Loader.dll
Size 156KB
SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
MD5 daf9a81004a961e39650a0e2bafe233e
SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
TLSH
T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 941f9efeba9935d689bc5dcdf4c145662141ceb4a4dbbf49a69cde42d5fe0083
MD5 9529bc8abe242118c90747467b45f95b
SHA1 60d718bbe23a31881eeb505f9f371b5c5c92036b
SHA512 711736593aa864c768297a99c43824ca111f1c9cb9b1d71dd30b79ec0b445774beb0799555caa90bca4254ca1a445a7547f7530dcc7a348c8805c1c2314d9531
TLSH
T1B1D0122333010134C0102173002365080802C28F41464000942CD92D6F244902916441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 b8cfc1c7076da92ec675592ff7d0775dcafe539f0c99300b314466eed32667c4
MD5 39ffe4ec5cfb4c5e094a0d482d412ecb
SHA1 831836418daf158b1efd00a4aabe31c50988d037
SHA512 3148ec8c1bc153c809f9fc47065f19fb3c1a6c4d81515223bf08fc494acfaef86463129c70519979fc111b2ce37c6e7817bea4bdd0fef347c6054a9dacfcd144
TLSH
T1E1D02B23F310023EC01030B30163E5281E03F38F20434015D42CCA2CAE284D71B818A1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 cbe9a19e7afebdcf45f0f91fbf0b5324e756554738246f6bc479636da29c351c
MD5 ce5659a22a81833efa1ba2c2054da057
SHA1 f86785cddfce9f3df0badd8059ede6585efa093d
SHA512 b8aff572529ce41fbd58ac4a91be306e547ae49f0365bc04030176a1f092f47601f843e3d1322447f50acd199280c2d042c6d66df7603584c819cef6d79aabdc
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 6e4785d2a2b24964a056d093e7d1eeadf0852bef8997860ea051bb6cac60005b
MD5 68209cec7d1095be22140343ac99d76e
SHA1 b9e3210e719dee76459ae6f4766fbd4d2856cff2
SHA512 388d8f07bc467fac4ba32014688bed615f667ca2e6d51f5567f909cd50e865884a788d115c0942de7b4a92ec3cae2b58a67410b77c911cc03e3677d255da1ae8
TLSH
T19FD02223E300063AD010317206A3E1692A02B30F20028045E02D862CDA194C71B81CE2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 f97994113abf77dfadd231095528226aa1d45b4cf2a1daec919ee5574e542f69
MD5 d62da05ca48e71ce59a76504954bfc5a
SHA1 aa22a306e1cd56f1eca0de359a14bfa9d32a78b8
SHA512 862ece219f006b8ed9f5da12788c5d1459854230f95a442da99f77b1476496a30fab8f3e3fe18b3a730e21f2917d280487ee93bb560b07dda804124126e77a56
TLSH
T1C1D02223E300023AD01032710662E1692B02B30E20028145E02D862CDA1A4C75BC1CE2
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

0d231bd3a333b8eb_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\0d231bd3a333b8eb_0
Size 261B
SHA256 bff65f72ba771b3c0a899e9b3bf4e7a6615a5438d14eaecbea1bd1e9b61c8858
MD5 9481d3a5d347cd3f3d34b29e5539d5d1
SHA1 13d6c02178e047f55ded4eaa7fa8ca7e2e8c34f6
SHA512 7896ed8fa0938c90544c8444b1d82582a1221775fd8248fe497c84cf008eb733e9146cde5ffc1bd92c12033efb7474f6221b5fd56af8c59fc0211a64a1bf396b
TLSH
T19FD0A76786437153D31EA0FDFE965284AB4BC4471F8CED814661F0D21D31A38796FA8C
MD5 SHA1 SHA512 TLSH

Submit Download

2111c0e0cd715f61_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\2111c0e0cd715f61_0
Size 250B
SHA256 ed627834c0f918013e0ca26f97f9d75236d98cc47af4b8f0fc60a4c062ec3aea
MD5 1c54c869a185058744174b80c64793f4
SHA1 f36cd5dacfefbde5e9ae3dad42e2fffeeb1c41ab
SHA512 8ebc03326b7ed1483682119bf78af3b53c1c31d6892fdcbc0be15ec915f82b6c9d1a07050f62c4da0dbb058d5ada7960841f894562a0de7958ed58399f066dcd
TLSH
T12ED0978300280700E20A9AFFDF2B22462242C1A42EAC9E800820F4A20C30A70A13A18C
MD5 SHA1 SHA512 TLSH

Submit Download

34172a61f398c545_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\34172a61f398c545_0
Size 246B
SHA256 e8f0052c5ed2477d27569db700e03b82ce0f313f3f06733350b4ff3237ad6be3
MD5 76cbf5669acbbd230db8a3543861d585
SHA1 514ed1e84441ef88c858c7c7d4d77d7d90a567b0
SHA512 eb67b01978e4f2bddd1a05cd689c7b6ecd91ce7d86b565382d81f94429594fd4b2400df386524d4b9ff1d34a6a685ab3984a3d5305c75cf426624cb5e96a6e79
TLSH
T184D0A767A5062740E65416FEDD6B3386568B8010AFAD9D80C4B4F8932F01E78D37B56C
MD5 SHA1 SHA512 TLSH

Submit Download

35447c90235c8f42_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\35447c90235c8f42_0
Size 274B
SHA256 191763af30c7ae8e86f750d54ec23e9790b41ed7b87d954706758e9de17f0914
MD5 d13ac8ef00a9f5751834f9b39964fb5f
SHA1 f4592a6566f36dd02af7f7ba5888ac189db39328
SHA512 962d7d5187a83ddb8dc0e132704a18e8ddb2ab575f4041dde7f5ab8cc507588b9379abfd0c978587d67fe0ed3868c7d320fdae4be305141b15db4322a7754611
TLSH
T1BDD09783CA013B01E74C24FE8F129728C1C7D0900E9CCE828204F182AE31E7C306CBC9
MD5 SHA1 SHA512 TLSH

Submit Download

44a35ab935c3b4de_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\44a35ab935c3b4de_0
Size 274B
SHA256 e98d103c41675ce460c84ce0554f490a1af2957e36a676401ebf169abe8ed0c4
MD5 e16d5b0c99f35bd17544734c6409c671
SHA1 cef280a6e9ed6c186bc616b5fe5455283214df20
SHA512 36cbb42b7abffd330a18f0bad6a990f01f64b63b6d6a205ce61750102618cba14195489440946dea700dd34eea3a68d65423ac480266f5575fab3b3eb4e50d6a
TLSH
T102D02B5374C12206DAA5B4FD8E4B3200C303C0062FC8DD450401E0990D5197835A9D8D
MD5 SHA1 SHA512 TLSH

Submit Download

460e8f59bf69a5c4_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\460e8f59bf69a5c4_0
Size 279B
SHA256 b653fe561c2db591e6d8112e0b2773fe4e975c8a977274822194ee6032d78800
MD5 ffb8553eaa5693208a82bd858a30759d
SHA1 fc74c1e142ef0a49c3f493ba39a185710f73e72d
SHA512 2857ef63d326507259605378dac449390c946aab229ef44ec46a8944753b30bf90fe4269b3926833f89bda8f33e832067a79ab06e527546be7fb3eb0a7fbaf23
TLSH
T16FD0955384411616DA9C7CFCC56B7305E547C4804F58CD019156F1611D40FF434AD4CD
MD5 SHA1 SHA512 TLSH

Submit Download

46a906a06bf6b348_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\46a906a06bf6b348_0
Size 284B
SHA256 20945f2546a4a8cc0daeb479a87e24961ee32fcbcc43544df07992b4c0ef74b5
MD5 f5907758d3af190d0b4dffe025c61719
SHA1 7b34db2ed038202bbfeac20c818042f4fd1e2cb8
SHA512 92277caec5a76c128333d6b70581b047938a7576409a237187af4c97448fe34e5dc2a783e07e80aa5e535c2ffdf6bebf740eee256b27e48dc20c1cb2523fc948
TLSH
T16BD02B5BC5222502E75665F99A9256048113D10149CC6C41582AE021D991E7478DF64D
MD5 SHA1 SHA512 TLSH

Submit Download

5588d1f53550af08_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\5588d1f53550af08_0
Size 278B
SHA256 5f7dedacecfdb713e4841e6d06bce7511298d901c3d22bc3999c0a2f6892416d
MD5 e7a9f40f84723d6b7dd69d21066b92cb
SHA1 0f4d0f15dff4d2d5e206dec60a689b05c3946608
SHA512 4ebcff0a774843c8c4a1e2193d4ae6197f719382ccb59c0c49d4925d88749c712f0a8da5165beeca1046ee7d48461bc4e23a42ff14d5c734e41793d6a209983d
TLSH
T1C1D09513C1658946C706F8FD9F96974D9723E94A0FC85D031201F0D10441D7874F9D4D
MD5 SHA1 SHA512 TLSH

Submit Download

6c19a8da5e1f86d4_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\6c19a8da5e1f86d4_0
Size 286B
SHA256 7809e1647a8fa9e5ca3876aa32baf09a1399f73301d2ae6cce8cb441c3a71cfa
MD5 1b936622a8e3c49ad198d0d21a3d18c2
SHA1 d9fa2f16ee5be8f393fea25b6e1f84366639d1d9
SHA512 7f83c9c374cac68b23b6d3fb0c0b0b86184c176e3ff3a343b932643d9048fad824ae3b3efbd958917d2ae1098e994c3665dbc4511cf93f301fb3ccf83d0957af
TLSH
T133D0956741312502C20468FCF765F205D703C0012FCCDA400911F2535484F753D7D5EC
MD5 SHA1 SHA512 TLSH

Submit Download

8e5ec9b6aa4c52f5_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\8e5ec9b6aa4c52f5_0
Size 270B
SHA256 43fba24f9792b336d33d506efc4bc0f367c8269db71ab1e005e79815f922b2f1
MD5 779f2eef2e85910d1b9dcb9a35069cd7
SHA1 5b999cfdb50b18c826929f7ded82692d855a8262
SHA512 595c471a116e3e07e16539b300463c7db0a9bb4f8bb2dba02a7656d4027262417820498f06c846a84bd319d53051b43206bd36cfa677476169316a4f44e24102
TLSH
T19FD0971782412206C7083CFEDAF263028A23C4402FCC8C521B15E1A39C00FBDB22D9CC
MD5 SHA1 SHA512 TLSH

Submit Download

8fd358090e76d673_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\8fd358090e76d673_0
Size 277B
SHA256 d6069014ba16161d3501fe53d6f9baced80a72b2f2324634d00bc5891f0351dd
MD5 99b21bd5776089c772669d4c59288b25
SHA1 55fe187d69649fe15d1efa57f8e91f2acd9368bc
SHA512 c80fb443120bbddd5651c621c7d57471ed1294f5ea44d23fb9d0b54c1b9bd29839490babee1d0be26b9f42f7730390717777e01fab19b64f343c95e431190558
TLSH
T19ED095274E511199D31960FDD5815501E507C0420E4CDD014102FD625B12E7C75BF588
MD5 SHA1 SHA512 TLSH

Submit Download

924c1a6b01892fc1_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\924c1a6b01892fc1_0
Size 278B
SHA256 2405049d27e9313f768e29b4eec4fe07802c6a471bfa3eb1bba5b7702287376a
MD5 2a6b569213685d024deac93521b2dec7
SHA1 4ff3598827e862ac7ca4ae2849a70a84afe96af5
SHA512 4532a5a7ac2afb9aa4a5d91583b9bae1228f39400acbe3fc08a5dae03b9ee6961f112e77d4752a63db87eb01e59bbf19b9cee24acd97b702f3d506afe2236986
TLSH
T11BD02B5786006617D602A5FCDB66220493C7C4010F8CEC41A528E052248DA3826ADD89
MD5 SHA1 SHA512 TLSH

Submit Download

975f6f8b10713172_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\975f6f8b10713172_0
Size 281B
SHA256 2ef74e752811ba83c7bc95d103962b241bb661bb2961e20a08908cbe13d65e93
MD5 bce4ececa5219f9c476ce31b9f6989a6
SHA1 01b6a85ea35c949692612f7e5d11fe5f7faa516c
SHA512 07cfc8ea670025d17a215447452699e21ca1b76b0b275852cc9ab5e558f8fdc97d53624b9efe7020bf558051aa919bce68dcdd6773bf9d3d7e54394113e72b55
TLSH
T17BD0955748136206D7492CF9BF6B12459903E4572F48CD411519F7D05950FF42C5FD4C
MD5 SHA1 SHA512 TLSH

Submit Download

a345e6a62ded00a1_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\a345e6a62ded00a1_0
Size 251B
SHA256 b7aab5079af4f18c58e407edd8441ce2b1076365b6808a32ce7b385c54ccf5eb
MD5 8a7c9d1e865213a2caab2871eb9f5bf4
SHA1 7f84043830fe9ddab23ce730765023f47a82474a
SHA512 2039666df5188ddf885247234321da54eea24536a5a9d3957602fc815dd48047ed33d8cea3defcc8afa4a03c7893181bda56d7eed8be60e2729d835cfc26d0b9
TLSH
T111D097CB84402B04F50872FCD7C61244C30380AA6ECDCD120013F0A10410DB8A12F5CA
MD5 SHA1 SHA512 TLSH

Submit Download

ad307ff62b09f34f_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\ad307ff62b09f34f_0
Size 276B
SHA256 92642ff75f8178618d81526f15f4d2c11b829e478eb2dc31d4d486937d09fa8c
MD5 158e9f82ead92f5646727de467c2b7ac
SHA1 6a2c24f1b272dffb987116b651234b8d2b598b7f
SHA512 dce5b6cb7401ce15edd964919d6d8a62c3199b16163916188ab4b597da59966461df87e1aa85cff52879b6447d8020295f760ed3b06b99650412351a886ee444
TLSH
T179D0970383012A41E30878FCCAC71B0AC303E1450F8EDCA14611F273DE96E3424AEAC4
MD5 SHA1 SHA512 TLSH

Submit Download

b1cb1e1770871d2d_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\b1cb1e1770871d2d_0
Size 285B
SHA256 4da2f8a441e262dd84461516f546cd72a75df35b26dda725311560768f7b37e5
MD5 c10f680f52b627eaea59054acb551ba6
SHA1 c54d35d4de54064cd56cf63c0a7dfe3284b9829c
SHA512 df0de3cb141819f55ec247649625444f0efce524b19b2df60e981621f2a777301629047620f19647dc77531c4b817f2cf37624d7024febe680b90c774c1b14e7
TLSH
T1ADD02B6390852755D75964FCFE5712408827C1040FCC68454668F056B491E78B8BD494
MD5 SHA1 SHA512 TLSH

Submit Download

b58e079f87c416ba_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\b58e079f87c416ba_0
Size 285B
SHA256 4fbb5cca796b11dfc4fd242f8712b227342ef5e5e5de8b232a17a975d4cd0d5f
MD5 7090ff7463e69bcc87f0ba3b6b2b6111
SHA1 7fcd2062b62f4dea9c804ebaec3cbfea1e24d64f
SHA512 f557e7a071b1579c173a39ffb26afad3b5ef84f94852bbe58f41b48b3723c83a67ce5cc17aae98f5b8abdef9ba6f8d44e44a9fe058cc3c2de89f5574bdf4a9f2
TLSH
T1AFD02B5784441601C28654FCDB2647088543C59C0E8AEC914626E8A73423F39685CD55
MD5 SHA1 SHA512 TLSH

Submit Download

b91e180e13b78e55_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\b91e180e13b78e55_0
Size 271B
SHA256 63a199b116fa2e6d59b199817f723627132b3df6ce19f63263583f9e0ec08b3b
MD5 4f14966070f466d009426a55a0cbcec7
SHA1 fc96c88b31cc8f0862c5f5e2522cc378041ca045
SHA512 31d47094cedd37e939e266a3ecf17da5ed211bdac71de2ce3da0b107f767667bff532e16a29ba7d988b17e6d631a7dd3733d78b7bf6fccab70d27a49f00d7793
TLSH
T1DAD02E67C0612106D20E68FDEA8B4688EA87C5101FAC8E080192F8820813E3865AF488
MD5 SHA1 SHA512 TLSH

Submit Download

ccf192b74808933f_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\ccf192b74808933f_0
Size 279B
SHA256 7e0cca86f70c0647e11669dc29a1be5212795c1d4ebfb200424233266215d40e
MD5 b84dd62efe42fc29ddb380a286405863
SHA1 c352fb701d5067f905ca9c9d3c1215ed857ab2a9
SHA512 4bf055a9fdea47b0db42e5ebce5cb8201cf078a3065bedad5846d9e0de1321c2fbbace201399b036b5913da9175e6d018c377b38a7d192dcf7fbbdfb1d13f4fd
TLSH
T1AED097A305221343D3AC34FC89A71B1EC60BC2521FCDDC820005E0A18D1693AA6EF5CC
MD5 SHA1 SHA512 TLSH

Submit Download

d3f0b7a467d3578c_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\d3f0b7a467d3578c_0
Size 276B
SHA256 0c277df539a939a305ea5fe2485a853d42de87f0760ba835cfcadff423de9207
MD5 89db39b435244b9001f74ed503cf07d5
SHA1 ba7ba4279f27fde751e1df3d34f0344bbbba96d6
SHA512 6ceb287cbf06daa3b9fbc8c842e92f0ac807f01bbd147bb142a3fd36b3a8f7d6b821f5f2bc51223db548aafc687576a2a0ab8bf2682eadf48f388ae38e7fb86e
TLSH
T158D09767C2082602DB1E62FECA1FB305E943F0440F9EEE005922E0B23E4263C317DB84
MD5 SHA1 SHA512 TLSH

Submit Download

d861217e7d147038_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\d861217e7d147038_0
Size 277B
SHA256 f0afde0e86817adb3fa018b75913e7c683ea527f4e22ef506496f1c6bb297c34
MD5 4f8a63c11d0fb57467d388deed5dac1e
SHA1 7391799b5129efd0df06b942e1506614604018b8
SHA512 5cca02127da686e9fb003d17156bb15fb0225a31b5ba1cde86ef3f35b38e4c35de17d4e19eab167eecdb46a67b3660d95fbabbf53f81c9608310b4be4e2b05a4
TLSH
T1E8D0978346202609E20E5AFCDAE7AB1A9D03E0980E8EDCC28046F4421F62E38355CF4A
MD5 SHA1 SHA512 TLSH

Submit Download

df4d582db97ebbc2_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\df4d582db97ebbc2_0
Size 279B
SHA256 e95c1a6ab7eb366970400cadcc3e8c7823703a1501a83ecfc969186779929003
MD5 dc92703dc9d9037d4200de2a1a32f12c
SHA1 ce528b014a9eacada6558715189ded85f844b0ea
SHA512 1d273d394c55d22134d8e7fa914e9357126dbf96b008d326d9051fd2d81c3f066190fe34b52d6d5752367a9755f225aadbc0adf7d5bf0d8ff1a1e3fd92aa43c8
TLSH
T1DFD02B9351355A01D224A0F8EB529A10D303C0511ECAAD240925E0C13450A34399C8DA
MD5 SHA1 SHA512 TLSH

Submit Download

e085dcb27335d651_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\e085dcb27335d651_0
Size 269B
SHA256 10faddcb358297d4662062bf078a9542f9106a782a7712db78d36506dee19c3c
MD5 8e353d64f9c881bb353529da064c9502
SHA1 1a51a8f4fd0b8c9648c137379c827fb7b244b81a
SHA512 d314df4d8622305ce32c53f369b9326117d29ae49ee58ea042b6129a04494e7eb2e64019f44dcc0f4976ec5b355ffa25d363f4e695d9f1aaa189b19465067a7f
TLSH
T14AD0979740642905CA08A0FCD3DF2302DA67C0058ECC5C062260F8A18C82AB838BEA48
MD5 SHA1 SHA512 TLSH

Submit Download

ebb09f51d8b5da0a_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\ebb09f51d8b5da0a_0
Size 263B
SHA256 39b10185354a33a5755f937111f318f60e89e3c01df94e2625dc82cbba4a02c6
MD5 36aafbac25b73c740b37e3de6cae1129
SHA1 067bb5f5c93f6e50e4dd72ef5265ebace31d9937
SHA512 32a455e4c4433abfe9a8ca43a86aa3f8939aee284d6fde0db44b95fc0214f7af43d9b19bf397c2b51685c119461f09480387597f78f20f0fb9e74e4ff4b268d6
TLSH
T125D0979F81043A89D3E32AFC86414300E103C2185DCCCCC7991AB4012E61CB890AD64C
MD5 SHA1 SHA512 TLSH

Submit Download

f0cfd725623b9e32_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\f0cfd725623b9e32_0
Size 275B
SHA256 5311c6031d7922a01b783775c796bdad6c5c39ebcdb08efa50929def289d3fa1
MD5 ebd38cb9e7067cf8743b5619fa3371e5
SHA1 18991848df9db622313c74f0361ac41e612bca06
SHA512 1d4ec39e393101d43409acc934fe1bfd5ca1607204f98e972cfcda7004d4122354e0f0fd1af06bf419e97eb6aac5b67a4b2335f14d7fc186dce380259291b2cf
TLSH
T178D09747D7206E41E645A0FCCFAB0210E20BC0DBAF8ECC100A60E0910C72E3C37AE988
MD5 SHA1 SHA512 TLSH

Submit Download

f63c96b1907ec615_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\f63c96b1907ec615_0
Size 275B
SHA256 cec4ae9e3796e40fb2a788feb688efb072d4938d5f36799f849946e94197aee9
MD5 4c890470c8fa4738a201e0913e87b6a4
SHA1 f2778186b36005ce8fb6f5f1529e109c6d133ff2
SHA512 a347be572a1a3caaa29eae57de18473eee216549a57d335619b3037b54d77ac2cae20a609379874a9c1275a8533ffed91b1679250de860b3d7fd0a18421606a3
TLSH
T1E4D02E07C4A82201EBAAA0FC99662244E353C1612ECC9D12091AF9F20851A2829EA8D8
MD5 SHA1 SHA512 TLSH

Submit Download

fb14408676a6a7ab_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\fb14408676a6a7ab_0
Size 234B
SHA256 cab89b3d200dfcf1dce2ec377c5234bc17da2ab7e54cfb5cd3712120c82f387a
MD5 2242ca2c3f89068469a861925566dd7f
SHA1 eb6f490afdd6e9fd3f19df7ea87ecb44d8c3bd41
SHA512 70ff3ee2b2b8f26ab8a9db71a97b2bef01596c250df7bd4661ab811332f16ccda3cd468d31c1367fc4c3fd0137315a93dfb34b7935688a096eadee6b52a35728
TLSH
T111D0A7A3B0551304D54648FCC95E1606A74391901D6E99428424F45A0D68A76A5EDA8D
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 696B
SHA256 0ffefe1a0c73dad574b6f8d9fe82dc77cda00baf33bcf3ea4f49c2ce6d4fdf09
MD5 86b5cb0c2da7a83e649170967e9645ae
SHA1 336a67d9ab89ffcb9727cc1b49677f464310450e
SHA512 80dca6883bd107ddec107ec76bab88d0b52a129b1bb184b188727450988dc03598294add1a5c95ca50d53a0dce2a3048e1773c883341b7c2fd5087c9a911cc16
TLSH
T1CC01202E5BC5017BEB116D3D65C26C2277B2D26378C3BF43A74C48B9998B7C0151F981
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 f85a4d8bcb23d505a78195e0d76dd9f244bd8762c6eb8daf7f881c379b091d63
MD5 7d7e1c4ac9bba5b297dec68795d646a7
SHA1 a4427723a43cb75275fed332863bb95f781add59
SHA512 7af25e7f695bdc056cc85c602cff1749a4cc12361f8035a7c00bd21b0ef704651ff1400830f2be69d74b5d063a18a67a5c10e3c87155e5d03c3bbdd2ddcfcccb
TLSH
T1DC01C92ECB0D363BE30126BE52C6103123B2D2937AC2F541930D08AA78CAA07001F8C5
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58b745.TMP

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe58b745.TMP
Size 48B
SHA256 7d1fe8fd8e66783e0b6090c8eefd1e977d72cda97a4872d47899c0fcf9e017ac
MD5 8dd85b978df6eaa915e7b9502da6d92d
SHA1 2ee0c6031acc290168a5d60f4c385a8707cbb5c3
SHA512 dcfdb6576e140bef834a64c22f1ffa05f7a07bedc8055da1e516749542e3214de5305eb0dcaba65f1d69f78c239ea208c9b2cd4d14f3cceb0d06b27c63c61cfe
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Favicons
Size 20KB
SHA256 2db221a44885c046a4b116717721b688f9a026c4cae3a17cf61ba9bef3ad97f4
MD5 b40e1be3d7543b6678720c3aeaf3dec3
SHA1 7758593d371b07423ba7cb84f99ebe3416624f56
SHA512 fb0664c1c83043f7c41fd0f1cc0714d81ecd71a07041233fb16fefeb25a3e182a77ac8af9910eff81716b1cceee8a7ee84158a564143b0e0d99e00923106cc16
SSDEEP 24:LLiXxh0GY/l1rWR1PmCx9fZjsBX+T6UwcE85fBmI:iBmw6fU1zBmI
TLSH
T1AA92EE075E383407DBA10E7D266B187A8E3FE26C5FA29C94347410618CF9482D5394FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\History
Size 164KB
SHA256 4594d1a466cbdd4e7306f820475c508544e585cac1aa1b9efff8b23cfc314e9d
MD5 9d95ff76ad0fc13fb54453f1992b2a00
SHA1 187d56ba16219b32862e9ba9679eb6ca02f63f8a
SHA512 bf3629289deea5ff94e9ab1d191ee8d3cd28c723f49391a13394db9142967b1cdc20e533e4a24f7b92f12018e277fa07aa5bb6efd07dc55df2f71649ac654d59
SSDEEP 96:8Bql0LqL/uejzH+bF+UIYysX0fxQp97CEHt/DfLVVVN6zRk/E0XQ:8BzqL/tH+bF+UI3iWGVCWNVVV639
TLSH
T122F30C5E5F243312CDBD913B68E745B3587DF03F872366866C6204B1CEE2656A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3c78bf3c-15de-4f2d-8e6a-9757ed813c61.tmp

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\3c78bf3c-15de-4f2d-8e6a-9757ed813c61.tmp
Size 188B
SHA256 fc18c197a6dcb787a7be1dce30e15b2eae5c5bcaae6bb1adf21285cb0ced5be2
MD5 b8e293eb185d2f101d0cd61d1c657abe
SHA1 fd20d9f85becddff5912d965d6f7cfdacdffacfd
SHA512 9ad6da395d8a2a102fe0056f5af6f71a173d4572be83f7197413904dedbc780b0b8694a4a3a41ff28423db2343570c9a32ce88e2a83d1ae8e94b8b413b90654f
TLSH
T18FC012B241F9ACB750B806252D846E45AF36E5750182A4E8A556867CB15117B6607026
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe58b7b2.TMP

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\Network Persistent State~RFe58b7b2.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

d1239cf9-0077-4d2b-88c2-2d2f4506c62a.tmp

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\d1239cf9-0077-4d2b-88c2-2d2f4506c62a.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 332dfb06429729cceafeb7c07a951db30be78b41aeef202e3886f52dfa18cd61
MD5 9c92687ed75461328d726c2391c4042d
SHA1 e1edb8eb7f67f172e609303ec30192acf5e73846
SHA512 25301945af77425c914aeea7554ffebb72b3dc0eba500c3e96ea4a751ebead0a178f17f01a2393101dec5ab5d848a98be7237d7e538a6762e5bda8f6d426da85
SSDEEP 96:stf/dhsKoNmpbDSkq4o5h16Zdcs7/x+6MhmuecjyqMkkjelK+gNw28XM1C7K:stngcseoocsV+F3yqwj3bwG6K
TLSH
T13ED1C6025E24697B8CC6E609BA2ABB0BE2F9943235D11E48EBFC471C15DB6DD6207D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e61b55af0afdb4769fdd98ecb7d14928566b9e28b9b5ec0c7910bdb7f5ae4e68
MD5 e186a094f252d52f252d17e1150cd99d
SHA1 093e76afae53d1bc2c47d7bf2211067dc58f7a9a
SHA512 df6f12f54dabf3d1c3a0b6f28290062ccab89e687f3f49c82bbf277c2d66944dbc3e488396a01bf29b1b6f31ab8be4487aba20f1706b9b121c84007b232af35e
SSDEEP 96:stf/dhsKoN5b9Skq4o5h16Zdvs7/x+6MhmuecjKR1ejelK+gZiI8XM1C7K:stngEeoovsV+F3KRQj3Hig6K
TLSH
T143D1A5025E28A97B4CC6E20CBA2ABB0BE2F5943275D51E48EBFC471C15DB6DD6207D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58b755.TMP

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Preferences~RFe58b755.TMP
Size 6KB
SHA256 3a94179f6d31940b5bf3fe14f3effa690beb44a5f307726d12a3bc24075a0247
MD5 2a51f5eba624f5c0d4f3d8442b38dfab
SHA1 f088199d143c59505b0b41b3d625b0f7cadad918
SHA512 ddf74597ca0e7c469cb1c24c4cd30592c51d2b9a97faa4b8c563994ef400e824335e4c521499eab7b56eebd141c715858286319f650f29c69b0b92dfc0b23dfd
SSDEEP 96:stf/dhsKoN5b9Skho5h16Zdvs7/x+6MhmuecjKR1ejelK+gZ+28XM1C7K:stngEcoovsV+F3KRQj3H+G6K
TLSH
T11CD1A6025E28697B4CC6E20DBA29BB0BE2F5943265D51D58EBFC871C05DB5DD2307D07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 b24bc39f247168b987aa518a3bb0f99f7f298978a93056f25cef5acdd83d7940
MD5 c13f96118d248a2db4614fcf8548aad8
SHA1 36d288393713dcb144f7e20894fe017de55642d9
SHA512 a037dcd50b239212ac87294e070c0375a9ed8a7aa2b5020625545e8878042ffe1546cebbf1f9433678085245d9ed11f1cb659372b78fde98a684d7597306d5fe
SSDEEP 96:v8i8Plf/ROo1pkF5d18ip7VaTEv9V5h5pg5+e0NcTb8pBMO2I1/dcP:Fov8P9lt+b8pBMoG
TLSH
T1EAC1B693056DC175BF444BEBEC397ECF8EA600DF98DA480992E2C44807C2EFD21DA495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Site Characteristics Database\000003.log
Size 112B
SHA256 ada1c4e87ee99bd1f87016f9bde74bbc0cc9f85ddff18b66fd47337bb8a79af4
MD5 93582dcef26a87e130d37298c879a744
SHA1 0915bff4b32e867b1b01734352e93cd388fc71b1
SHA512 70fb642ee8f6bfe731c74656b5f990aa5593d388eef0d11967ac9c03821c8c94a2ec17b50371337c4d090a47670d0e4d3239602ee9162625c53e00ab98dff72a
TLSH
T12DB012507706F667C4CD4E300AF0CF407240E54200C04413C81CBFB00E4BAA82F44CC4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Site Characteristics Database\LOG
Size 305B
SHA256 0fcadc90952a9b979f6945a939d6c932129644cc263a0bc71a991c507d864fed
MD5 e0b37f8ad6c0588c10b9fd134b56cce5
SHA1 11669230e3bcf7e82008b49fb6379acc01bc23a2
SHA512 8851c4b8aee28fc2d529246443b0dd40eda9db578441716a7f17a8cabf6eb71e48ca2fab45407fa635396485365411e3246dfe31f64dc72ab25097d5423e9505
TLSH
T17BE0863066CEC6B7168F4DEF527AA349C766740AF6DA66265D2CFAC43507904B042742
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
Size 283B
SHA256 cbc57f3f366aa99da994e8ff0ed04360f7904b80287a2ab6fa7c5f9128270335
MD5 73bcce6adf12a98cb25d896ac2fe15c6
SHA1 ee1c9a5109f497a85d9c4fbf0e2390cffdfd629c
SHA512 a865c86e8e51413dc653d06bc2db087c5afcf11e1ce8067179ede0041ac59f9e2a896bb3b1438def0bf6d502d03b7076942b311cc5b360c8ae2c806d4b4f3806
TLSH
T186D0CD7095C9C2B5088A8CDB41B9535AC3757806B7C63B294B1CE9C43403514B051543
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Visited Links
Size 128KB
SHA256 0a2643f4f3752074cadfecd3f879716aac4e008b1792f64cc5d7aa3f59890002
MD5 86360cf4ed95c4bf0077e593a1e19875
SHA1 84e3625bb4d7c9ef81000675eba10d7d9848235d
SHA512 54ffca964122eaff14a97735c98cbed3593d0df01199da8614bac27913919094267222043bf25ae039d58c9435b5d9ceb876d1f7fa329d8570a4339702379384
SSDEEP 3:ImtVugGyH/vn/l:IiVugGq/Pt
TLSH
T17DD3041507C51500C00C047454074D4F7414C3040113455143F5050745C40C51303441
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Web Data
Size 210KB
SHA256 db93cc6874e6ae80c9a151c1dd6a326ffee07b127e5899438873c19399c79b85
MD5 de64b3487ba692a60d246d8fecc05bbb
SHA1 e2c1d6c0c2ef943be79fee667d2895d5579f279f
SHA512 13e75703aa5562b559896e564a264385fddfcde4ca29de673c1ba7582425776f51c6aeda5a324d89207b0d69b0c915284a1290577774220302a45d3b0fae8f1a
SSDEEP 384:FihpPI2DnEDsKc1IysvHEBMehIv0QKIqJOw:wzPDDnEAKc1Iys/LIIvfKIqJOw
TLSH
T1A724554A7B746100DDE2D9B21CB080771A3CB16D8F22E6925DB264694DF7853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 3ef5b3aab5031b6fbc0f9ec530c717f90db5a3f71a41d74c4523bbac734781bd
MD5 eb089207c3fe89aedaca1b3ad022da94
SHA1 74ff1c758dbbef9e8c6ebf41e5cf98f66bebeea8
SHA512 ad30c02624a8fbc11e8d120ac2e27c9891ff4567f673271f6fc5f490f96c9804cf9539c9b4632340044d7d3c53383b46cfb26b875962cad129eeb76159e0db7c
TLSH
T1DD71967B6DA4A9378EB2DB0978862B07ABD08076A9C13F55D6EC0F0D11C725C1343D26
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 15KB
SHA256 63ca057fa1eeed1539c1a99845701577acd315cdf9f2efe24b0967f099296096
MD5 a75ca73c7634812cc56de9e33eab8ae6
SHA1 da780cbdf5add4b79b916c2abb5e90674aa1bf87
SHA512 a0dfba745772360815ae6ed2612f969028d2af3576a84ab6bdf125cda07909d6b7cf10bb44ece27720028a2c942ac3d4963b89420e3562ecf8fd0126943f650c
SSDEEP 384:Dsrv+89zHqlDNP9oid6NBSpnC/mTV3pNt:4rv+4UNbdDm2V3pNt
TLSH
T17872BF33E5BC9637DEB3C949B44B6A0B3FB8A09651C25B60D99D1B4D428B0DA2307E13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 15KB
SHA256 b3c815f9160bd11a5db785ecdffe307ed05b06f7651a5cc22ceaad2eb3d486b8
MD5 70d92baf514ebbd93818305f2a357892
SHA1 50de65f8f09ef9519bd6c7c6dd0c7780fffb96e5
SHA512 0e616effcbbbc505e831607287841a63209709b61f2fe99a2f4c1e5e12dc8667a2169949bd0dd2c58e15e845bf964aec7d915e6435d371fd1c9dba541f2512dc
SSDEEP 384:Dsrv+89zHqlDNP9oid93NBSpnCHmTQH3pNt:4rv+4UNbd9qQ2I3pNt
TLSH
T1F372BF33E57C9637DDB3C949B44B6E0B3FB8A09651C25B60D99D1B4D428B0DA2307E53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 2KB
SHA256 008ed001f492286d653b93373fb1023af64193b24b4e1b76d9dbec455d4a41b6
MD5 e7ce93da0d8e0c25c8f2f287b6241098
SHA1 aea7971396d0664d7cf6e41a3df3f15e25c74e18
SHA512 cb24aef8beab3a0b7bce719ac1b6dccbf6435f30da589e57ec576a168257444872c50e5920274d4fc98a1805b5526d6c6d05de548921be2d9a78edf40a2e90b0
TLSH
T1AF51A5736D94AA37CAB2CB0979872F57DEB490A1AB912F50ABDC0B0D02C751C2307C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe587829.TMP

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State~RFe587829.TMP
Size 1KB
SHA256 f2c0325130506dfe3bd0c511d4310b6cca8177ad58961f98802db38f6c458a77
MD5 2d06c618790714aea0f2cd19d1d86e5e
SHA1 68493235fd9da596463487a2add821c5d27bc180
SHA512 4dccc18e2f5e6da68ebeffad5781fe31a7d201058fe420cbe89a3ef4b5af554c10561a390c2f68b4da7131fdae0f8f810939fac084541f3eb890f99a6ec85330
TLSH
T1D73189B69DE45E32ED56A34B3142AF8B9E6090B562905F4076CD870D12D310C652FE35
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 9aaf05da198c21b40d8969b719dc00c632390e5f11bf5ec49779cece19806716
MD5 08274f8c9716886f4db613121ac7f28d
SHA1 a1bc68b96454979321de266e6bb3669baa514827
SHA512 5acff962a3b6f9e7c32bf1363fea85c6ac843662abc19aee8795ea448335d6d9880ad8e22c3afb73dabd12fba23283740efdb420fbe98219cfd4ff8c0f7785a7
SSDEEP 3:LsOllllklkXl6:LsUlP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Variations
Size 86B
SHA256 59bdae85374b19ef28c78cee822ad961c78c83e3616500017a076115c17d0096
MD5 31390225a4b62c039eb8371070b30416
SHA1 f2ab8dd8eeb493ada6b798ac556f64f9e8d2acc4
SHA512 03edaccc9a3e76fffe157ab5ebc48bedda57cf51202c72a8d1f4417d2466d0d91c16c443a8dd82eb1852bf8c82519221b59fa3bb47b1c65e47908edcfdea01fe
TLSH
T1C1A0120384738407E4144051C45C1341287C84570129C0012068931704240CB039643A
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3404-904-0x0000021F8DA50000-0x0000021F8DAF9000-memory.dmp

Download

memory/3404-551-0x0000021F8DA50000-0x0000021F8DAF9000-memory.dmp

Download

memory/3556-233-0x000001E4B65C0000-0x000001E4B6669000-memory.dmp

Download

memory/3556-392-0x000001E4B65C0000-0x000001E4B6669000-memory.dmp

Download

memory/3556-26-0x00007FFAA9A70000-0x00007FFAA9A71000-memory.dmp

Download

memory/4108-553-0x00007FFA7D240000-0x00007FFA7F81D000-memory.dmp

Download

memory/4108-525-0x00007FFA7D3B0000-0x00007FFA7F98D000-memory.dmp

Download

memory/4296-234-0x000002322A340000-0x000002322A3E9000-memory.dmp

Download

memory/4296-102-0x00007FFAA9A70000-0x00007FFAA9A71000-memory.dmp

Download

memory/6348-204-0x00007FFA7D8F0000-0x00007FFA80067000-memory.dmp

Download

memory/6348-235-0x00007FFA7B150000-0x00007FFA7D8C7000-memory.dmp

Download

memory/6388-552-0x0000021636C90000-0x0000021636D39000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads