34e4857e59c56dc488185bde93eac78c97f2ccb2f64e9aa1dd7ddb4f91e69611

Resubmissions

02/08/2026, 13:52

260802-q6jftstgqg

02/08/2026, 13:49

260802-q4wndabl7w7

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/08/2026, 13:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Wave.exe
Size 8.5MB
Sample260802-q4wndabl7w
SHA256 34e4857e59c56dc488185bde93eac78c97f2ccb2f64e9aa1dd7ddb4f91e69611
MD5 94d216a9d2432a5ec36a227212666c35
SHA1 aa129d643dec5e0de8ea6bdbc5a2c6294deca9f5
SHA512 ee2047cf7925011a2dfe43c232f62e834f25052f35b3190a2d803bf3ae8109885b0f31dde6b7723f55b01e57a925ca951df8a2d4cb793137082ced275b35182a
SSDEEP 196608:4xiWjBzGQi0za4NbVy3K5jtyVc0G3S9j7e0UGpF7bhqil0CFXiv42pXdvGFnxRdr:g/jBGx0zawwc0G3Uj7AGpF7bhqil0CF1
TLSH
T1CC96233823E81BA7E4FE4BB5D0714893CB75BE16260AD38E295439990F753D5CB32227
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution trojan

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
2588	Wave.exe
5380	Wave.exe
5672	Wave.exe

Loads dropped DLL 3 IoCs

pid	Process
2588	Wave.exe
5380	Wave.exe
5672	Wave.exe

Checks whether UAC is enabled 1 TTPs 3 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Wave.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Wave.exe
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Wave.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Discovers running processes 1 TTPs 6 IoCs

Running process information can be used to identify security tools or plan follow-on actions.

discovery

Process Discovery

T1057

pid	Process
5512	tasklist.exe
1452	tasklist.exe
3424	tasklist.exe
5924	tasklist.exe
4380	tasklist.exe
1748	tasklist.exe

Drops file in Windows directory 7 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_43386082\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_1703451276\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_1703451276\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_43386082\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_43386082\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_43386082\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3324_43386082\manifest.json	msedgewebview2.exe

Executes a command shell one-liner 1 TTPs 3 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
5716	cmd.exe
5736	cmd.exe
5900	cmd.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 3 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
5416	PING.EXE
1136	PING.EXE
4312	PING.EXE

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Runs ping.exe 1 TTPs 3 IoCs

Remote System Discovery

T1018

pid	Process
5416	PING.EXE
1136	PING.EXE
4312	PING.EXE

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
5468	msedgewebview2.exe
5172	msedgewebview2.exe
3324	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 10 IoCs

description	pid	Process
Token: SeDebugPrivilege	3480	Wave.exe
Token: SeDebugPrivilege	1748	tasklist.exe
Token: SeDebugPrivilege	5512	tasklist.exe
Token: SeDebugPrivilege	2588	Wave.exe
Token: SeDebugPrivilege	1452	tasklist.exe
Token: SeDebugPrivilege	3424	tasklist.exe
Token: SeDebugPrivilege	5380	Wave.exe
Token: SeDebugPrivilege	5924	tasklist.exe
Token: SeDebugPrivilege	4380	tasklist.exe
Token: SeDebugPrivilege	5672	Wave.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3480 wrote to memory of 5716	3480	Wave.exe	89
PID 5716 wrote to memory of 1748	5716	cmd.exe	91
PID 5716 wrote to memory of 2152	5716	cmd.exe	92
PID 5716 wrote to memory of 5416	5716	cmd.exe	94
PID 5716 wrote to memory of 5512	5716	cmd.exe	95
PID 5716 wrote to memory of 5488	5716	cmd.exe	96
PID 5716 wrote to memory of 4312	5716	cmd.exe	97
PID 5716 wrote to memory of 2588	5716	cmd.exe	98
PID 2588 wrote to memory of 5468	2588	Wave.exe	99
PID 5468 wrote to memory of 3536	5468	msedgewebview2.exe	100
PID 5468 wrote to memory of 920	5468	msedgewebview2.exe	101
PID 5468 wrote to memory of 920	5468	msedgewebview2.exe	101
PID 5468 wrote to memory of 920	5468	msedgewebview2.exe	101
PID 5468 wrote to memory of 920	5468	msedgewebview2.exe	101
PID 5468 wrote to memory of 5024	5468	msedgewebview2.exe	102
PID 5468 wrote to memory of 4256	5468	msedgewebview2.exe	103
PID 5468 wrote to memory of 4256	5468	msedgewebview2.exe	103
PID 5468 wrote to memory of 4256	5468	msedgewebview2.exe	103
PID 5468 wrote to memory of 2020	5468	msedgewebview2.exe	104
PID 5468 wrote to memory of 2020	5468	msedgewebview2.exe	104
PID 5468 wrote to memory of 2020	5468	msedgewebview2.exe	104
PID 5468 wrote to memory of 2020	5468	msedgewebview2.exe	104
PID 5468 wrote to memory of 2020	5468	msedgewebview2.exe	104
PID 2588 wrote to memory of 5736	2588	Wave.exe	105
PID 5736 wrote to memory of 1452	5736	cmd.exe	107
PID 5736 wrote to memory of 3240	5736	cmd.exe	108
PID 5736 wrote to memory of 1136	5736	cmd.exe	109
PID 5736 wrote to memory of 3424	5736	cmd.exe	110
PID 5736 wrote to memory of 4072	5736	cmd.exe	111
PID 5736 wrote to memory of 4284	5736	cmd.exe	112
PID 5736 wrote to memory of 5380	5736	cmd.exe	113
PID 5380 wrote to memory of 5172	5380	Wave.exe	114
PID 5172 wrote to memory of 3156	5172	msedgewebview2.exe	115
PID 5172 wrote to memory of 2980	5172	msedgewebview2.exe	116
PID 5172 wrote to memory of 2980	5172	msedgewebview2.exe	116
PID 5172 wrote to memory of 2980	5172	msedgewebview2.exe	116
PID 5172 wrote to memory of 2980	5172	msedgewebview2.exe	116
PID 5172 wrote to memory of 5744	5172	msedgewebview2.exe	117
PID 5172 wrote to memory of 1492	5172	msedgewebview2.exe	118
PID 5172 wrote to memory of 1492	5172	msedgewebview2.exe	118
PID 5172 wrote to memory of 1492	5172	msedgewebview2.exe	118
PID 5172 wrote to memory of 1468	5172	msedgewebview2.exe	119
PID 5172 wrote to memory of 1468	5172	msedgewebview2.exe	119
PID 5172 wrote to memory of 1468	5172	msedgewebview2.exe	119
PID 5172 wrote to memory of 1468	5172	msedgewebview2.exe	119
PID 5172 wrote to memory of 1468	5172	msedgewebview2.exe	119
PID 5380 wrote to memory of 5900	5380	Wave.exe	121
PID 5900 wrote to memory of 5924	5900	cmd.exe	123
PID 5900 wrote to memory of 2732	5900	cmd.exe	124
PID 5900 wrote to memory of 4312	5900	cmd.exe	125
PID 5900 wrote to memory of 4380	5900	cmd.exe	126
PID 5900 wrote to memory of 1680	5900	cmd.exe	127
PID 5900 wrote to memory of 944	5900	cmd.exe	128
PID 5900 wrote to memory of 5672	5900	cmd.exe	129
PID 5672 wrote to memory of 3324	5672	Wave.exe	130
PID 3324 wrote to memory of 1068	3324	msedgewebview2.exe	131
PID 3324 wrote to memory of 4196	3324	msedgewebview2.exe	132
PID 3324 wrote to memory of 4196	3324	msedgewebview2.exe	132
PID 3324 wrote to memory of 4196	3324	msedgewebview2.exe	132
PID 3324 wrote to memory of 4196	3324	msedgewebview2.exe	132
PID 3324 wrote to memory of 1548	3324	msedgewebview2.exe	133
PID 3324 wrote to memory of 4372	3324	msedgewebview2.exe	134
PID 3324 wrote to memory of 4372	3324	msedgewebview2.exe	134
PID 3324 wrote to memory of 4372	3324	msedgewebview2.exe	134

C:\Users\Admin\AppData\Local\Temp\Wave.exe
"C:\Users\Admin\AppData\Local\Temp\Wave.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3480
- C:\Windows\SYSTEM32\cmd.exe
  "cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_7c80363f7568499a89595f7398104130.bat"
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:5716
- - C:\Windows\system32\tasklist.exe
    tasklist /FI "PID eq 3480"
    3⤵
    - Discovers running processes
    - Suspicious use of AdjustPrivilegeToken
    PID:1748
- - C:\Windows\system32\find.exe
    find "3480"
    3⤵
    PID:2152
- - C:\Windows\system32\PING.EXE
    ping -n 2 127.0.0.1
    3⤵
    - System Network Configuration Discovery: Internet Connection Discovery
    - Runs ping.exe
    PID:5416
- - C:\Windows\system32\tasklist.exe
    tasklist /FI "PID eq 3480"
    3⤵
    - Discovers running processes
    - Suspicious use of AdjustPrivilegeToken
    PID:5512
- - C:\Windows\system32\find.exe
    find "3480"
    3⤵
    PID:5488
- - C:\Windows\system32\xcopy.exe
    xcopy "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6985c83b851344d985b53a006aa1ef99\*" "C:\Users\Admin\AppData\Local\Temp\" /S /E /Y /R /H /Q
    3⤵
    PID:4312
- - C:\Users\Admin\AppData\Local\Temp\Wave.exe
    "C:\Users\Admin\AppData\Local\Temp\Wave.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks whether UAC is enabled
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:2588
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2588.3120.8713566517461397431 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
      4⤵
      Enumerates system info in registry
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of WriteProcessMemory
      PID:5468
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView /prefetch:4 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x184,0x160,0x7ffb08405fd8,0x7ffb08405fe4,0x7ffb08405ff0
        5⤵
        
        PID:3536
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1712 --field-trial-handle=1716,i,10066568749200873812,10600752133860175914,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        5⤵
        
        PID:920
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2068 --field-trial-handle=1716,i,10066568749200873812,10600752133860175914,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        5⤵
        
        PID:5024
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2336 --field-trial-handle=1716,i,10066568749200873812,10600752133860175914,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        5⤵
        
        PID:4256
    - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3540 --field-trial-handle=1716,i,10066568749200873812,10600752133860175914,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 /prefetch:1
        5⤵
        
        PID:2020
  - - C:\Windows\SYSTEM32\cmd.exe
      "cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_a862ada7f7ae459487bfe17e97c9a6a1.bat"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:5736
    - - C:\Windows\system32\tasklist.exe
        
        tasklist /FI "PID eq 2588"
        5⤵
        Discovers running processes
        Suspicious use of AdjustPrivilegeToken
        
        PID:1452
    - - C:\Windows\system32\find.exe
        
        find "2588"
        5⤵
        
        PID:3240
    - - C:\Windows\system32\PING.EXE
        
        ping -n 2 127.0.0.1
        5⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:1136
    - - C:\Windows\system32\tasklist.exe
        
        tasklist /FI "PID eq 2588"
        5⤵
        Discovers running processes
        Suspicious use of AdjustPrivilegeToken
        
        PID:3424
    - - C:\Windows\system32\find.exe
        
        find "2588"
        5⤵
        
        PID:4072
    - - C:\Windows\system32\xcopy.exe
        
        xcopy "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_466920ae5fe545d7805f07479dde11df\*" "C:\Users\Admin\AppData\Local\Temp\" /S /E /Y /R /H /Q
        5⤵
        
        PID:4284
    - - C:\Users\Admin\AppData\Local\Temp\Wave.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Wave.exe"
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks whether UAC is enabled
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:5380
      - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5380.2736.4002639601758910345 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        6⤵
        Enumerates system info in registry
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of WriteProcessMemory
        
        PID:5172
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView /prefetch:4 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x50,0x1cc,0x7ffb08405fd8,0x7ffb08405fe4,0x7ffb08405ff0
        7⤵
        
        PID:3156
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1732 --field-trial-handle=1736,i,13777625367823065609,8594157857536024458,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        7⤵
        
        PID:2980
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=1960 --field-trial-handle=1736,i,13777625367823065609,8594157857536024458,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        7⤵
        
        PID:5744
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2444 --field-trial-handle=1736,i,13777625367823065609,8594157857536024458,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        7⤵
        
        PID:1492
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3500 --field-trial-handle=1736,i,13777625367823065609,8594157857536024458,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 /prefetch:1
        7⤵
        
        PID:1468
      - C:\Windows\SYSTEM32\cmd.exe
        
        "cmd.exe" /c "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_61dbf5dd8c94475fa6e03000a2a043c2.bat"
        6⤵
        Executes a command shell one-liner
        Suspicious use of WriteProcessMemory
        
        PID:5900
        
        C:\Windows\system32\tasklist.exe
        
        tasklist /FI "PID eq 5380"
        7⤵
        Discovers running processes
        Suspicious use of AdjustPrivilegeToken
        
        PID:5924
        
        C:\Windows\system32\find.exe
        
        find "5380"
        7⤵
        
        PID:2732
        
        C:\Windows\system32\PING.EXE
        
        ping -n 2 127.0.0.1
        7⤵
        System Network Configuration Discovery: Internet Connection Discovery
        Runs ping.exe
        
        PID:4312
        
        C:\Windows\system32\tasklist.exe
        
        tasklist /FI "PID eq 5380"
        7⤵
        Discovers running processes
        Suspicious use of AdjustPrivilegeToken
        
        PID:4380
        
        C:\Windows\system32\find.exe
        
        find "5380"
        7⤵
        
        PID:1680
        
        C:\Windows\system32\xcopy.exe
        
        xcopy "C:\Users\Admin\AppData\Local\Temp\WaveUpdate_5936de15123d449094c522abae9df46e\*" "C:\Users\Admin\AppData\Local\Temp\" /S /E /Y /R /H /Q
        7⤵
        
        PID:944
        
        C:\Users\Admin\AppData\Local\Temp\Wave.exe
        
        "C:\Users\Admin\AppData\Local\Temp\Wave.exe"
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Checks whether UAC is enabled
        Suspicious use of AdjustPrivilegeToken
        Suspicious use of WriteProcessMemory
        
        PID:5672
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=5672.4176.175408082635538272 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        8⤵
        Drops file in Windows directory
        Enumerates system info in registry
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of WriteProcessMemory
        
        PID:3324
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView /prefetch:4 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x1ac,0x7ffb08405fd8,0x7ffb08405fe4,0x7ffb08405ff0
        9⤵
        
        PID:1068
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1780 --field-trial-handle=1784,i,7975664170610275793,6616276564146553601,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        9⤵
        
        PID:4196
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2044 --field-trial-handle=1784,i,7975664170610275793,6616276564146553601,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        9⤵
        
        PID:1548
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2520 --field-trial-handle=1784,i,7975664170610275793,6616276564146553601,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        9⤵
        
        PID:4372
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3516 --field-trial-handle=1784,i,7975664170610275793,6616276564146553601,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374 /prefetch:1
        9⤵
        
        PID:3492
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2064 --field-trial-handle=1784,i,7975664170610275793,6616276564146553601,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        9⤵
        
        PID:3448
        
        C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView" --webview-exe-name=Wave.exe --webview-exe-version=0.0.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=1 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=840 --field-trial-handle=1784,i,7975664170610275793,6616276564146553601,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:1600c373424bd5dc782779f1975d1dd3c5037374
        9⤵
        
        PID:3208

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Process Discovery

T1057

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Wave.exe

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6985c83b851344d985b53a006aa1ef99\Wave.exe
Size 8.5MB
SHA256 34e4857e59c56dc488185bde93eac78c97f2ccb2f64e9aa1dd7ddb4f91e69611
MD5 94d216a9d2432a5ec36a227212666c35
SHA1 aa129d643dec5e0de8ea6bdbc5a2c6294deca9f5
SHA512 ee2047cf7925011a2dfe43c232f62e834f25052f35b3190a2d803bf3ae8109885b0f31dde6b7723f55b01e57a925ca951df8a2d4cb793137082ced275b35182a
SSDEEP 196608:4xiWjBzGQi0za4NbVy3K5jtyVc0G3S9j7e0UGpF7bhqil0CFXiv42pXdvGFnxRdr:g/jBGx0zawwc0G3Uj7AGpF7bhqil0CF1
TLSH
T1CC96233823E81BA7E4FE4BB5D0714893CB75BE16260AD38E295439990F753D5CB32227
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_6985c83b851344d985b53a006aa1ef99\WebView2Loader.dll
Size 156KB
SHA256 4cd3ffd5f52122432b6537b360c2317f96650928c927bb3caa59d5807da573a9
MD5 daf9a81004a961e39650a0e2bafe233e
SHA1 62f863adbef09905c75f475cdd5ce68b0aaaf73f
SHA512 95f1ffa93b0c16fdbaf9eb2d9f9fdbe63b1946a7cea0e366a9c68fd4695a97c7681bf9e2b2f372c8ab6430c0a37cac733154e94b1d7a76cbfa3c1de340d5ce33
SSDEEP 3072:8nVs+j4uIGieBiCIV6A9S4arvNQG/pTNgWEtJctHVA9rWt:gj4NCy6A9S4YcWEtJeVAk
TLSH
T174F34B5BB2E90077E17BC278C5A34A16E776B8111750AAEF036447791F237D0AE3EB21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WaveUpdate_7c80363f7568499a89595f7398104130.bat

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_7c80363f7568499a89595f7398104130.bat
Size 673B
SHA256 b4accfd57bf3dbb0e80e6e229124adc063ad04e54836f14b0f4874028f34a18d
MD5 be844649b34e0deadeeafd05384771b3
SHA1 e46c9ecadb97b4d7fcb10792b81c0da0bddbf570
SHA512 27a9cff1d6c25f26ef7cecd063d023b026cab48ce23ac73af572b5d480930a403022e98dcd23a63a627803a94df214f279794586c7c1872f7d5ab4e2d505864a
TLSH
T156012362314E4E9A04204E4F0FBE9708DE6FC48F2F0B610C99B44449366F51BB6E8DC5
MD5 SHA1 SHA512 TLSH

Submit Download

WaveUpdate_a862ada7f7ae459487bfe17e97c9a6a1.bat

Path C:\Users\Admin\AppData\Local\Temp\WaveUpdate_a862ada7f7ae459487bfe17e97c9a6a1.bat
Size 673B
SHA256 2b4d1ad1040f165a720530508a31f2725bf44e30be1175c0b266811df67a65e8
MD5 b5d798cc00c5257a264def7ea9af2ac1
SHA1 86bc3ab711f6d8b56f0dfcaeb4a5ff456d6bf540
SHA512 1ef9420dbf2a2b807b1f6288eb68e8607de445bcdd5b38f82377ddc6f177d2e0db209d59e61bf10adf912288b7834aef507b317d031e4d5fbef6a9843ebef3d2
TLSH
T1EA01D3A2254E5D9A1420894F0BBEA708DFAFC48F2F0E620C59B4445D366E507B7EC9C1
MD5 SHA1 SHA512 TLSH

Submit Download

tmpcjnvxj.tmp

Path C:\Users\Admin\AppData\Local\Temp\tmpcjnvxj.tmp
Size 8.0MB
SHA256 95c577e85fb632a585430c2d10c48821eda4103016f8700d942f136b83234b0d
MD5 905910ccd89b8fc069750edd10d47946
SHA1 624e7a7a14ebd1ffe6c146ccf3c62b24e0a29895
SHA512 9da8d00f3fee7e6e0e332e9e8cc77858038daba8feb73f3f60ac844b2573c785632c8eeb5b0eeabf763516f14260275e6c5896ec549f7b54b28b32c4fdcea895
SSDEEP 196608:4grrHdLOYPVe9zLFWh/TS/c/styvI+hk8V:4gXNR9epV/KstKD26
TLSH
T16886333C423B66F9F2CA7833B1F5854989B3E75E3568DD74FF4881A117229C5BC62A20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 fa0324fa646ec76cdd62b198d3a7c3e3f43c320f48e2299f75915a5f017834a0
MD5 573e92234d15907d16a2cb28496673b1
SHA1 95319dfdcc256ec09d4c5a39e19071998fbbc9bf
SHA512 87faa57e8320be84a0c19905e4133de6bc221b3a4480a98f26c4e5fda4345ff065e83934556c828ddb84030829cc15cbaa03ee6a6d3b3664ce5e0459a5e0d0ad
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 8cc92f1b98b4b74f2edd8b1177bd26abb3c7282e609d62d6aa56a70bb89889c6
MD5 9857eeb539e51b79f542e571d78eaf1d
SHA1 005ddd5ccd83df5c9b7740ac1fded845d044ca50
SHA512 0691e33dcd549ee5d5504587e7524500135818f81bd1e9364e1d3a5fbc994a79c35e600656695fd976358297997f16bf65fe71ca12bb7857bee687639c29e2bb
TLSH
T147D01212B611117AC411253B4119660C4541C41A414542049429856F6E440540E43441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 0290764d913bf1d11e5aeeb5f0dad4cfd18e56407285d1326a08f2d5f767eabf
MD5 dbb5a6df9b68c3a56f7f41c7379b3934
SHA1 0477f4491f59fa3db62d9648e2034a88969bbadc
SHA512 f0ef26b8559d9ae49aa7e4a1e0c975936c294201a442b15f671780980e8abe4e5843929cdc73e4c0261eea1d4b511a796fd333e5caac461020d252c8d8eaede0
TLSH
T126D02413F311017FC411343F411F770C4441C51F40454104D43DC55F7F440540F03441
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a39048ea61c7c293a65ba3e95514ac715c5b2a2091f21608df0bdf8cdf3efd77
MD5 6b8e21bd98afa998a3563c1ebd4c8add
SHA1 a721164fdbe32209000921253bacf5fcd8b808e5
SHA512 acef2aec102e186c5494d7dafa4677a0d91005daee633dee17476de21d3fea71e1c9eaa15751432802e5d9193d20dbddc03f91bbb334bb43a3b4f8dd02e32ec8
TLSH
T1E1D01212B211017AC411243B4119660C5451C41B44454104942D856F6E440640E03441
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

0d231bd3a333b8eb_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\0d231bd3a333b8eb_0
Size 261B
SHA256 db68a011af88deffe40f1e6757a491bbb0f9c13d307e93f6a01179b5979ac3c6
MD5 b6893f53f4aefa859fff28df46327ded
SHA1 f2ed2527bad13e7fec27d4e18b2cac0f061e4a9b
SHA512 cda8aeed0913b422b5371d3a918bc3d976df2f1f81d0c5befcabd9607e76d9fb20442ae1bd52cf2518b5b1c97c5de162599a5131268c7e758be557c87f7614d0
TLSH
T143D0973786433063C31AA0FCFF975280AB07C0460F4CEC804A60E0D3AD22E38392E94C
MD5 SHA1 SHA512 TLSH

Submit Download

2111c0e0cd715f61_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\2111c0e0cd715f61_0
Size 250B
SHA256 b3415cf7f87862350cbc5acf4533ab641e6c960514661e5baea30647da971b87
MD5 678e25d196e10bbdd45650d7b70216b2
SHA1 1863a848873101ed653ed5c59f1d257500aae706
SHA512 7305645c8b11443e9d954f89f4c0c9be96822358b4b5ed6909e2d413b0b467d030437ecf6a76967b11ce9e52e2d93a234b52bbcdea07a9355b3384aa26d05487
TLSH
T132D0978300180B01E18AAAFBCF2B2285A24280A42C6C9F410820F4222C60AB0A17114C
MD5 SHA1 SHA512 TLSH

Submit Download

34172a61f398c545_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\34172a61f398c545_0
Size 246B
SHA256 97b3da69fe8fe3ef411114833abf90c7ca7a7f1c23ae2f54e067ea8966330644
MD5 ef1dcdd18189ca5eef8ae360568f878e
SHA1 ca48af88c5b645e753bbc3c6ec36d7ee6749b9c6
SHA512 7f765a8b03cae6701535388064bacf335aac6beecf7cec530702e15da100c7aa28bd21336ed0eb72577cd9fffdb8cee466a4f8764ec084f6209cdfd9b97e15b6
TLSH
T11CD09733290A3B00E20016FEDC67228952878000AFAC8D90C8B0F4832E00E78827BA5C
MD5 SHA1 SHA512 TLSH

Submit Download

35447c90235c8f42_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\35447c90235c8f42_0
Size 274B
SHA256 6e758593a86d7d9212ec947a9a7dc2aab536917119da0ac33d1b32f24636bc13
MD5 f09bf6cdd010dc7ccccc53144ad3d84e
SHA1 f246ebcf6e6dfdbcfa2e275553ca36a28ab3a7c2
SHA512 b44ced138b2f60643aaa977fd2ad2279f8b3b8bcc04ba51dc91cb730429e871bc9d50c5ab14682af2e445ae91d83107e60a13be9981fdf39edc5ae378f516563
TLSH
T1B8D02B5389022601E60814FD4B069310C1D7C0E01E9CCD878504E183692197D216D749
MD5 SHA1 SHA512 TLSH

Submit Download

44a35ab935c3b4de_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\44a35ab935c3b4de_0
Size 274B
SHA256 5680ed3084eeabc4f6d57581b738c41555c519386a0fbe7f12452e3a17c68f62
MD5 14936b8f7afd75d6962ccbfb68aacf21
SHA1 a25ff75ef2a384d2a4198597d1d8f6e1075140ac
SHA512 7fdebdbd9d653701abb97ebf2c0dc6c2faba8ee36ba287def3d347efad8f3fd381ff8bfdb6b6c39d0112a15bd85c218c19a7f8f316a7a923bfd90b32549a9c75
TLSH
T147D02E836882264ADAA0A5FC9F1B7300C303D0022E98DA890001E0DA5C99A7838AAD8A
MD5 SHA1 SHA512 TLSH

Submit Download

460e8f59bf69a5c4_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\460e8f59bf69a5c4_0
Size 279B
SHA256 689f129918360636d556ddea1c68d21f50a5eea38f32cbf5e733782a31f71f3a
MD5 bbc0849b20da588d02a87521820dcad5
SHA1 3c068632cf334dd8b4cdd05f48697d1c64a1981a
SHA512 cf8a1ccde6157eacd770deff50a3b6b2763ddd9e6b0d4f644703c9dc611df7581ceb73d1bf1986a20e3853f1cf5e1bf53721815d87eb90f5e0118c3e22f7c767
TLSH
T150D02B4788466616CA98A8FCC66BB305B14784804F1CCD019211F0512941E743579499
MD5 SHA1 SHA512 TLSH

Submit Download

46a906a06bf6b348_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\46a906a06bf6b348_0
Size 284B
SHA256 dba4de4b28cc0fe01fb90487038d8f05c56fafe85a944f3a236580552bec0c87
MD5 824c5e700b09275a2931a06bcd68ac16
SHA1 8dcb2a8aa5594d11c8f1fee71fff11426a9b393e
SHA512 804ed99dc338b8b644f98dbdaf639c456e3988796e68cdad71ba689e30d500fabafb01b8b1bb2ba880bc6d868a951587c6e8134ff78110fc25a24c1a7402e64f
TLSH
T110D0956BC5237501E65A25FDAF83D501C113D0405DCC5C529815E036ED92F74BDDF64D
MD5 SHA1 SHA512 TLSH

Submit Download

5588d1f53550af08_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\5588d1f53550af08_0
Size 278B
SHA256 b2488619cbfc3566b25c0638ec3c8739979f448b67943e919270cd508951df0e
MD5 b2ec7159bf485ca251bccb67140feb0b
SHA1 18f6e318c5f2bf74ebde82ea96240c585ac36f3e
SHA512 4d3b4e6c192a8ce25d5ba0479b0d961d94a13376d074cd5622d502378ca7517968f2be94fca176b0e802491d9c1d86a0982620264dd433de0b91c88f56c3240b
TLSH
T130D02B13C6559946C605F4FD9B566749A353D4450B8C8D060200E485190297875E5D5D
MD5 SHA1 SHA512 TLSH

Submit Download

6c19a8da5e1f86d4_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\6c19a8da5e1f86d4_0
Size 286B
SHA256 32f1576e1c5f43915ea09240b17f03b2701995bb4e5a4e6370d0dac3357f7312
MD5 97ad0daeda27634da97a1127b861a091
SHA1 a6cf1d13c1f0a226af841bb2b79404b2c05c7359
SHA512 9383f2f3bc94b22ce869fc72ddb02d55cef1e3dac98e708fe35a33d1b3060443b7fe30a7b4e0cdc99ff2ad4fee04eee708bcdd1c973cd0deb63123057717a8ca
TLSH
T167D02B1341222402D24428F8E796E205D603C0453E8CDA510951F2A35844E7539794A9
MD5 SHA1 SHA512 TLSH

Submit Download

8e5ec9b6aa4c52f5_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\8e5ec9b6aa4c52f5_0
Size 270B
SHA256 f0a9750579347a0f0df000cd9e4962688e52e35470f14b61fd38379e23351a40
MD5 1acbdc9a6b7a75d5c990203d442245c9
SHA1 889b2e8dace31d74fbc8f104035157e9f881a43e
SHA512 399bbe94fce42ee08735fbcfbfc408178491c8003ca07b3ad746df4e8b81fe87f709e63a4ef9d29fed71ddeb8114b050532c83714e7835ffcb60d4b837bb0f79
TLSH
T19BD0A7578281160BC7083DFEDBA2A70AC623C4502E8DCD561B55E1F3AC09BB9B56D9CC
MD5 SHA1 SHA512 TLSH

Submit Download

8fd358090e76d673_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\8fd358090e76d673_0
Size 277B
SHA256 29e71571109db3382413e75d6e430bdafa3cebb4418b097f796a35e45a111f78
MD5 6bba3905944baf203dd817c70b8ddca3
SHA1 685b2f6749dba2797d8720ef8982f8fe16af1682
SHA512 79b0d16ca4dab14a3defa41b4dd59f009f91a01cf5f1506c4027dd3f62bf98d1777cd0db3a2c0415e7df5ee15e8b4f8145774950643dfb418a356abc846a899f
TLSH
T104D02E238D5310DBD21860FDEA839600E206C4862E8CAE020502E8629B12E7CA4BBA89
MD5 SHA1 SHA512 TLSH

Submit Download

924c1a6b01892fc1_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\924c1a6b01892fc1_0
Size 278B
SHA256 e72081956f9a7116bdedb51db40e18ba40587130e03b59f9e8b07f031c7044a3
MD5 dd5a2aa6be22519a567f4b46e0dd38ea
SHA1 8560fa4dcc21f2c4064fdc71274a62b263d25115
SHA512 49cb4302548cc9a7b7d5bdf81ad62a784155f088e0b4a738b96bd6f00793f8493fa7045b06d12bb2b04ca73a5f4b732ad4c419274ffe2a7998d22f62bdd5a657
TLSH
T168D02B57C900A117D706B5FCDB67620463C3C4400F8CDC419564E043288AA3826A998A
MD5 SHA1 SHA512 TLSH

Submit Download

975f6f8b10713172_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\975f6f8b10713172_0
Size 281B
SHA256 5e458fa8edc76a7dfb9ad3cddbbb74f3e01778fca36378fe48a9fbd76497abca
MD5 30bf75b38f140e845792905cf0fa6715
SHA1 86eec10c2f8279c21ff7ba395d5f70d9a65f5bd1
SHA512 6e874cf37095e549d3865628ca49ac8cc7d837d2fb054af7c2f955d22a614c37564e535527389cefe4876d74612fec5e01ddc1a989d3320cf11986544c4e3654
TLSH
T192D095471C135106D78918F9BB7712459E03D4662E0CCD451415F7916D50FF8385FD4C
MD5 SHA1 SHA512 TLSH

Submit Download

a345e6a62ded00a1_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\a345e6a62ded00a1_0
Size 251B
SHA256 d219d10f912507e1d038d00e6eff05b9811c8e2ded000a9ec8d26ee9f1cd7684
MD5 95c8bbf1042abc58254c82c1105d06e0
SHA1 50e7af30ceb791b9ae8f811620efae3102da1509
SHA512 c507a96e9a6a21277e581b2300da3588629c63e1f6d38374446c29b3f13dbec02ddd4c9d2abc17ea7f99a2cad38b80010f0c4b77e83fcf855d125aaced7f7d05
TLSH
T171D0978B8C056200F10836FCC6479240E20390896D8DCC131112F0A25812CBCA3AA9CA
MD5 SHA1 SHA512 TLSH

Submit Download

ad307ff62b09f34f_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\ad307ff62b09f34f_0
Size 276B
SHA256 a975c8e116a3f7f0d895fcf9410997a4354b6b3267cebcbe90ef42d9f68c8801
MD5 14e64eae7c20611a8e2ff831453556cd
SHA1 17bd7b31a714a1f7026c4dc57b1764bb042bd6bd
SHA512 6a22bb8688a3fc18fe0db36eb7ab1f055fc1b6189e05da2f6a978c66d43f4078249677fca8b51b00717fedb6b20c23178e5aaf7cd0a9d2d175f24e850b067ea5
TLSH
T1D2D09703C7032941E758B8FCCAC7630AE783E4400F4ECDA14650F523DE9BE3436A8A96
MD5 SHA1 SHA512 TLSH

Submit Download

b1cb1e1770871d2d_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\b1cb1e1770871d2d_0
Size 285B
SHA256 b6ea3ca8533040105d0fbeb0f397160cdb019e212c98dfc28361151e522a748e
MD5 a6305104f451d5d18f6c76525ad1ed6c
SHA1 2b443121622465cd03663a453365ecc9f092eb74
SHA512 88e65c21dc62899ccbf121703a4b85e33044a519f01a41769c2d9937bf72c99acc9e40cc47830639818f9eed439a2efd1d9434b1c26a8fce0d686ae0ae35043e
TLSH
T186D02B63D0861654C75964FCAA6752409933C1044E8CA9494268F45BF891FB4B4BE4D4
MD5 SHA1 SHA512 TLSH

Submit Download

b58e079f87c416ba_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\b58e079f87c416ba_0
Size 285B
SHA256 fa0d4f7a208e52fe7f0a9c7fc20f22df348efac041164a5c76ed1e5f2a482ab4
MD5 4136ec8bb76333ccc59dcef0b06dc560
SHA1 72cb1bff9a0666356ebd3fe0b7ee7a9899d95700
SHA512 d2a85e73cad7c942c36499c6308abad4b5f6365d40eb44d8fdc967b883c376d55826f24296c7d02daddc4aba46303c6f7accbe08c5f1d0c30d7a4eab421efdc2
TLSH
T154D02B5784041611C18565FDDB2793089547C49C0E8EEC514521E8A77823F39685CD66
MD5 SHA1 SHA512 TLSH

Submit Download

b91e180e13b78e55_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\b91e180e13b78e55_0
Size 271B
SHA256 d56799311fe8988fec6ef6a589504dd31b3f163ded6c7a15a99b3df2a4f424b7
MD5 f9980c25fd7bcf23d8830b7fc26928d8
SHA1 814d675c8abcb58e7d4ff99ee367deb292491972
SHA512 33ac770218728996a9b4a862d7a226c1a1e60ae4aef76df117f3d87c4007c033abccec6a87c995cd7c58bf0d5933126fff36ec199413b7791beeb5d647f2140d
TLSH
T166D02E27C2291006D60A68FCEB8B4288D243C8001E4C8A040542F8820C2AE386AEE48E
MD5 SHA1 SHA512 TLSH

Submit Download

ccf192b74808933f_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\ccf192b74808933f_0
Size 279B
SHA256 2b7744e6c1f13f9ba4ff5acb474c59037cda2d3e6dcb1a85b2fbf93f96e8f944
MD5 7facc663941a638e5b49de969afef958
SHA1 b436ed6e073d437805f2cf020c35ae9c7df5c57f
SHA512 60799575bad32ff0a7dfda5b3828fa7d75c4dd6220ae49426611f0e6f1406f1bee06465608dedf7fb62b4c537695818fc0066647586f099221851fedbb277476
TLSH
T129D0957745231243D37C30FC85971309D64AC5501FCDCCC20404E4518D1593576A76CD
MD5 SHA1 SHA512 TLSH

Submit Download

d3f0b7a467d3578c_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\d3f0b7a467d3578c_0
Size 276B
SHA256 1e9dd12d5aa614549cdf0aa593093275cefd7e169bf68deefc07acdc8c9f41c7
MD5 07841ec4634342413b5114922cdb09f9
SHA1 b9208da10307fcd0c904a2ce9e21ccb332bd28dc
SHA512 f3bf6f44bbecca6b73a69d9bc657274be787b0d4864b0ef29e2f38790aa74e7c0b98aae52d39a965f1609512ac2796b6033dad0a2e927acdb4195f251963591c
TLSH
T1C4D02B6381196503D70922FDCA5BB205D543E0445E5DCE115521D0A21E01538316D745
MD5 SHA1 SHA512 TLSH

Submit Download

d861217e7d147038_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\d861217e7d147038_0
Size 277B
SHA256 c32d715d26126aaa14a13739a6065d5e67e313de4842f091d7011c2b99b4a7a9
MD5 2780ce497c7890d423d2cf83597f8fbb
SHA1 3e16e084dce3d5809225608116e00df609fabfa2
SHA512 924e634809ee8beada3ade57ae59ee1327fa40172bfd66229521bfa88633d80ba93d84ecfbd9dfc48f43482d94034768059a171994c3107cfe93d04784088c00
TLSH
T17CD02E8382612A4AE20D5AFC9AD7A20EA803C0941E8EDC828141E4035F22E783959A07
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 696B
SHA256 070be59042680a9b38cbccea05aaf1d763933f7739cb8e39650711d468c5e282
MD5 c3eb80bfe2cfcc9711a566edb0f7e8d6
SHA1 3fffec7efcb7c40c30c84172b0e225589b8cf141
SHA512 c024885cd1cdc57f8e9813a809e626fa38ea24903316bdff22476b6b5da13594e29fd03aa8b6ed38162ac06215444cfaa81e79485b39e063749c042a5379d47a
TLSH
T166012B3F4FC149D8EF2455F291D52D57B933752061137FC390810974CD4FBC5696A952
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 1a8b6b9a4144811d2b29ad8be335b1db90ee7be7f0703ffe09194f3990266059
MD5 6cb4f90f7f6f981c26acca91ff4a63f8
SHA1 f224add6102ee769221529e96f603b3ba09ba67a
SHA512 7caa68b3a8193c5d5eb97f9abfabc2d3c49dae4cca61d0e3648e26d11e18641a83c4854ea226cc48ecf2a2c5ea6b48074728dc6c8373d897c0bea32aef73efa5
TLSH
T19401973FCF4576C8E31069F282CD6167BF3266606203B7828282197DFE0E909666B956
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 792B
SHA256 ce3514938b4abec92ced5ad97a05b8e1e2ae8639e6a103481c311726eb9b63c4
MD5 a899c309a04eea872fa6c02eaa659e04
SHA1 70c32ad3a8764bf5a2cd7e76b62bfd6c74d2b9e2
SHA512 64dbfa231c3f0f328e887883e00fce3ccb2aaef27464195f0960e078628bf03b7b315f351b5ab8132106c8b3d8ebf1fce9eee110b3175a817ed92bcd28dea265
TLSH
T11B019E3FCF0576D8E31099F281CD115B763266206517B78140825879FD4E908595E962
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59bf7e.TMP

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59bf7e.TMP
Size 48B
SHA256 4b4634cc184fc5e54e821df11b179e930623a2522dade3490ac2089558e2d136
MD5 690ac7b691ce5131e8194a943069ff8e
SHA1 00f1c678677ececf80f33d94f378590daaf01141
SHA512 67803a47d84741b0aded31920ce00e882922d7f2e22fbaf8bfcf45174705286072fd85fc2b4a2e2001eed6b058bc94677b5a88569a5b48e92b8cb9e250435500
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\History
Size 164KB
SHA256 3d44ab999df71e537da4b1cd50717b266405c9888b06883dc48705563dbcc3f4
MD5 2c4bc6f03664b5956c3337c4b3b785f5
SHA1 1821e9ce934aa64c8f9c9169dc5ea5a0cdf7c0bb
SHA512 72a359038aeee9ebb35c63c84cf1e29861d9f165f473f76642a85652dea5c86172aec7bdf2f4345dab16fb1ffd39a93cce06a60188f0392d5005b6db34e667ce
SSDEEP 96:8B5OG0LqL/uejzH+bF+UIYysX0fxQp972EHt/DfLVVVN6zRk/E0wASQ:8BGqL/tH+bF+UI3iWGV2WNVVV63NAJ
TLSH
T1DEF3FB5E5F243312CDBD913B68E645B3587DF03F8B2366C66C6244B1CEE2656A02C4BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\Cookies
Size 20KB
SHA256 0628922305d2478ba75a48efadf932d439616eaf1ff908be334793f7bde28107
MD5 91dbaf73c1a8c55254d90272f998e412
SHA1 2b86b31c8c00c937291e5ac3b1d134a5df959acf
SHA512 109f4f59616cc1d1682b4d9468804f7668c77ce1878afec06a57037193f31a9c1c39f5d269277462936373b129d26488cddcc34d455c27185534e7754baaa988
SSDEEP 24:TLWr6bXYFpFNYJqH1kwIY6UwpQ9YH8rwZ6HfB:T+6LopFS+awWUOh8B
TLSH
T126926B4E5F346221C0F48B36EDE1855B2F7C201CD3B32655DA5860F3DE9299BF10956A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Trust Tokens

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Network\Trust Tokens
Size 36KB
SHA256 2d4ccf8ac8ae4f5c6ec8e0566210ff56585b6ba0290501a1a11ed9b23bfc226e
MD5 7289d4bdfbd73ed571278f95cb4c1939
SHA1 7c911f54243d9777a34666f4526a49c7e7aea244
SHA512 6e7d48e18b0317449807c4ac2c377b3cccf5bd6121077d51152d7e188ba1ea3cf62372b7611036938986dd0c84465dbd747fe8580e3a699f8470229a6d57a749
SSDEEP 24:TLB3lIIAoDJ84l5lDlnDMlRlyKDtM6UwccWfp15fBIe:T131DtX5nDOvyKDhU1cSB
TLSH
T1D8F2689BE93C6FA3CCC56FB08B47E5B51F752BDEE68276C4247130A10EA860055E7443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 e66806a28e9d3c5717b3d58338344a31097c685d2e978365a7bc39d347748bfa
MD5 8123db33374881bb3276ebe0f57ab272
SHA1 06a14813d84d66a50c7aa2b22e8b3cdcb2e60517
SHA512 36407cde4243423e2a594e5d51836c992d9be4291f8a2f991e8941be3d364d3d5a10feb58d1055af50bde82edcf416c8c3d6e8bdca4a0f282c92485b77c1b9b6
SSDEEP 96:rjU/dhsAsCb9pkqKdo616ZdRs7/x+6MhmuecjX641ejekK+gqI8XM1C7K:rEgA2ovRsV+F3XFQjUwg6K
TLSH
T10DD1B6036A28B97F4CCAE508BA65BA17D2F5503275C51E58EBF84A6C08DB6DD6307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 dfa46334ce6d2d0736d1c2fc8073f05b755ef9048c7fd614113ab227fdca0e3d
MD5 e03dba0e0ff5c8e42abe534f3c295336
SHA1 584ab456fb8bc8b5153d3272f05c2c1a969965d9
SHA512 4221c17d3c8781feb932d92aac85a0dfe0ac55c5986772a479e185cbee506a01206924f728577d2b9cbf1ee7de2453490f2641ce1d78e3ba4ffbbe9fa3f046fe
SSDEEP 96:rjU/dhsAsxbDpkqkdo5h16Zd+s7/x+6MhmuecjuE8MkkjekK+gZI8XM1C7K:rEgdooo+sV+F3uFwjUPg6K
TLSH
T1C2D1B502AE28B93B4CCAE508FA25BA17D2F9503274D11E18EBF8456C04DB6DD2307C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 6b62a97d0a6e23e9bcf2b312c54b7a5fcfaffd553ed0891ee3188a8718ebb81a
MD5 232eac281e99f2ec00c7301b5ccfbde8
SHA1 ca6f72fd324e6f32c2d83df35cf0dccc2b3278ef
SHA512 8df95538e41f18d7621f0f9402a0a024523d2bd8db222ff1fa834da55055fdaac50ad0762dfb520691fe6b258c916bbdd8fe51fbbdbd0496880b09b850928472
SSDEEP 96:stjU/dhsAstbDpkqkdo5h16Zdns7/x+6MhmuecjK5OdjekK+gl28XM1C7K:stEgpooonsV+F3K52jU3G6K
TLSH
T1A8D1A506AE28A93F4CCAE508FA75BA17D2F9503274C51E58EBF8456C04EB6DC6317C0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Secure Preferences
Size 6KB
SHA256 dad9ba3f09fb31d0ae225ae6e9042efc7d88692c685a0e7ddf6ed2274a51f75b
MD5 dcd86eef0d13837fa70aac522bd68bfb
SHA1 461c80217695880ebfdcaddf09ac3496fadf85aa
SHA512 6f1a5f244f096c8d03fb5ae6866854cde96cd160b1463d149963708339d127d2103beb768f7e1814d29333c6726837559d1a2392073d795987240ff35dbff382
SSDEEP 96:vNi/Plf/ROo1pkF5d1Ni67VaTEv9V5h5pg5+e02V9HG7jcXUPGwo5:8fvJy9lWV93XUBm
TLSH
T1ACC1B6A3466DC234AF444AEADC397ECF9DB600DF88C64C1A96E2C08806C1EFC21DA495
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 48B
SHA256 e41b80b473a43f6b70d9163a27fc85af329aeddf6a4fe8614e4e74dcbf21650b
MD5 4cd20c481fb04a44db72871478f67c2a
SHA1 659895252989a87089f2c5b2cc1ae2402808158b
SHA512 89a3f8ad7e40a8db54eaefd0f5f431a9aee1e398a1cca5fabe8975ff96afd26366e46da3174421774bb74946338b63396a9ed994624c5cc0f206ec7fd8adf32a
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Shared Dictionary\db
Size 44KB
SHA256 79b107307408e5ad9a145c87533316174fd13f4ad943497d079522fbe325b3b1
MD5 71ccdda9f3186c8e729bb559f93bb992
SHA1 3712c11bb21b8e2a74bb879d47b2819ed1ac14a8
SHA512 19f8134fcd1211964111b07884b52878b1649644b6ec623bb586df1a9b7dabc7f8c8a755d2a52c908b563bdd968135f4f703cc35103696e40d0ab0020c8dc4bd
SSDEEP 24:TL6iuaJhPwMuz6G0ZestjteXUSQeCl7ZIeNa6+6Uwg8hPq81fBG:T2TaOk17ZfnUdoqSB
TLSH
T1B0139A0F2E587564D1BD0635E9A34E6B2B7E30489B8329D125F02AF24DE251C5D2F27F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Sync Data\LevelDB\LOG
Size 283B
SHA256 7e93300681662887bc5e576ae0bfcab12637db734758c5a20c95c4a08f734b3e
MD5 45abdf45b8e6803736fe48f6a1ec745d
SHA1 fa5ce5fb841462b5b0da15a450bc42a669501028
SHA512 72b661a985ee6b8ef6d12ee3b6e664eb27e2045de3037f6f95ca969bf8fdf076045fd991038fdfb3d8c100e719272563d8653362735b7294a11bb49f956b30db
TLSH
T127D0CD3054CA85F50C8B89EF45B6A75BC3B4F8077BC57759DA0CD5883407418B055A42
MD5 SHA1 SHA512 TLSH

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Default\Visited Links
Size 128KB
SHA256 4a7f27ded42280150bfb687b205b59f7cd4611485d3f98dbc81562c784a452e0
MD5 87aec725758953eb18e89d0170c01788
SHA1 e97f4317a7a9cd247678fbf71cfa2da57876cc9d
SHA512 51a9aa98e56491779704c701e777f4d562183083b2301055bf1dbff4783a5d02a309e8575fc3a435479e0546c37f414f4dde4035cd2f53f083a7c523137f8d97
SSDEEP 3:ImtVuNxk+l//IQX:IiVuDkq/IQ
TLSH
T19DD3040503D1DD1DC11704F144101D4DF57CD1500055030303F415335C501C1C107D10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Last Version
Size 14B
SHA256 d75607a88bb0f572f8863a3ea4737b635664178e97e0b7cb057887f2736fe3fe
MD5 3b746b6e8b8e101ee7cd41df1bb565d0
SHA1 ff5ff645ada097814fb4890d00dba8a309e1a506
SHA512 71d487cff7f744f046d993889c770a877075378b8d47d6c2f80fd94a5c1150a627f4a69d9e55f272f3aa4257e5dbb5296643591d5d23804a95550a3f2d91e2d9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 2KB
SHA256 2f8fef487b12dcd595e4360b6a8afe770f0ac5acb4fbdb81e583ce2bff9657be
MD5 67196fa34476641e868e7926a6b3b5e0
SHA1 966447beeade1e2a879ad3aaf5968702f1fb88c0
SHA512 6af2a2127cda9bc5ba7e9df42fbcd2311c7eeebaa6bc1a42a20bfcc05908439cb96fcb13cc22566870ffc4b0be2df51c9027fffc5bd8b5a35c57b50b84530e6b
TLSH
T1C951A433BC28BB37DDE25A04B88A3B27DB755072DA122F60DADD0B5801C75AC2746C36
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 1aae7b9ba7018648a5c60334ede72083ff50e1635ef2dd346ab158a9716e487d
MD5 489072f2077fc457b3070b6c5ee872ef
SHA1 f218c21d57f064eeb36df57f273fe1a6cacc25d1
SHA512 1bf861bfa226056a5751d65b22b6cf1ca89d9a68fe719ba4d9884adb4598444930a613d9762735cb5d7ee10abba01a3b3de37911ca9a0cf23dabd93f90fcfe94
TLSH
T1EF617727A834BA379DE29A04B8C63B16A7A55037D5813FA5DAEC0F1C01D729C1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 d5fe1b466ebe764851ccbe42005dc110e7487a55a54791c764387d927bc5fb47
MD5 ac6df153b3c99ef8c7e3ab2935e450b9
SHA1 771f79627e0767979ed375f32667c0f5e03c8057
SHA512 59e7bfcc4b754ec3e276590a708a4b79afd57443efdbb1927c94dde44f54ab9a76cea3efa91207a35a300dd5c72151e8341590fa90e9a8352d05773485e9a1a3
TLSH
T1B47194276878BA279DE2DA04B9863B17A7A45033D5857FA5DAEC0F1C01D729D1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 1f48b88734bcb9a81f5bd05017c89851733042fb88533008e346db6a2a13e612
MD5 5aaa9029d2f0081d6e1bdf800fb01d51
SHA1 50f4682710fdb99fe97920099ada7b5e1a267c71
SHA512 e96408d8bb175ddeb610fa51c01219744b5a9d9e0aa3a80ddc3962f299d8c03bbac6452ce743d5362532b3a2eb8755c0926a04f8cbbf11a3efd02f70ac2703cb
TLSH
T1348194276838BA2B9DE2DA05B9C63B17A7A45033D5857FA5DAEC0F1C01D72ED1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 8ce1a95dac2429564276c14fa63d7573aed281701b48cf2b28e3acee0bc1515c
MD5 01a78e4387005eec34919972a665353b
SHA1 eb8dc7ebe6f3950c14d846e027b08cc91dc3b84e
SHA512 033d3a3b2d3aba5c9478788ec70ea2090e27e35cd3578a9cd836ea06bf4976797984b5ffa8095aee261ada1590b08cc1540c475aabd79e9a4e1cbfddf02d3983
TLSH
T16F8195276874BA275DE2DA05B98A3B16A7B45033D5857FA5DAEC0F1C01C72AD1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 c51c37053d1eb88d2fd19b8f8def67341f6a4f86699b5f2869b6a5aeae527710
MD5 9b2be6f3502c5550bf7645e7516bc525
SHA1 b154ef636bcaadb4c5336fb9a2e5b368814d7161
SHA512 29814b88bd295d672eb99a362ac5facf0a422fbaf7f000dbba38511702f0dd39f227ab9fda7d589e79be943b1c591cd4062860f09df1ee3ebc312632574ab971
TLSH
T11681B627A838BA275DE3DA04B9863B17A7B45033D9857FA5DAEC0F1C01C72AD1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 14KB
SHA256 90e04b004eb71631ed287c4ccd32aeb3ff3c4b31920ae1dba2c9f17aa062f83c
MD5 3f17038c70fbf8d2420be3fbd33a56e1
SHA1 5eb1c6d503464c917d8b1e34f9c46b364965d913
SHA512 8af6ea26e8f1c46f2f88c869979bf1913f39870e2c6ac9ada981053067b42f08fae0342ec6c3af6387a5b57202b3d9d3fddddfd064abb48fb4810dc53eb38b70
SSDEEP 384:hw+aQikB+z/xvxjg/qhE5NBSdZMh9/O9z/:B/UxvxjgC+dPWF/
TLSH
T102628F2B687C7E27A9F3EA047989575FD7B8547294C16DB88EFD1F090AC73A80342C16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State
Size 3KB
SHA256 a9daba89a119122fc618549fcc80abf76259d0403d9924fa7335087343725eba
MD5 a0a07c588ed3867a4c76b211289dba88
SHA1 1dbfe61ad0074ae9ba5f66c467bc8d0721c7185a
SHA512 b62bdd8ba2d5ebb0d8646d4373fb8308e1542804ada284a309877ffc6dea664cc98b31aefbe5f2e0db2ba2cf8d5a22f0cef1862a00c60ac336c3836fd26cbe89
TLSH
T1B581A627A878BA375DE2DA04B9863B16A7B45033D5857FA5DAEC0F1C01D72AD1342C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59af51.TMP

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Local State~RFe59af51.TMP
Size 1KB
SHA256 1fcf32ddf38e562b4774a0ba33aaa154af6098739553084189f60a7131d3358f
MD5 84ffa2e6e2be4774eadb402908946add
SHA1 277c2b61124b0bfd7e1f1621f9b26f66bd3f36e1
SHA512 85531ba123f1d69b4984da93652260f4c7f2c00b444aa88f668a0bef825271e40acd6edc704ac3ffc73ac56a717cac64eaae5377fa3ee4eb02115d9583cdad78
TLSH
T1112165B3E8387B33FC41261571977A1B9F70207AC2004E00E5CE4BA816D749C696AC31
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\ShaderCache\index
Size 256KB
SHA256 dc8e7cb87ca2d88b6136d77eb37549a9d544247517ac35a49bdc2611b64e561c
MD5 d986461506d55c5cf94e88a8ac5054f3
SHA1 f4c4ffe40c72e3383db64369307c99583108a03b
SHA512 5cd65d854e4facd309b5dbfcf2ddf601107300e161aaafbe361c02e6a5ab8bb29270148e5a7fd4f29addb80c23eddf1a3c8311f66104868f53eab20f353cba4b
SSDEEP 3:LsOllllklkXltrm:LsUlPtr
MD5 SHA1 SHA512 SSDEEP

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Wave.WebView2\EBWebView\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

Untitled 1.json

Path C:\Users\Admin\AppData\Local\Wave\Recent\Untitled 1.json
Size 161B
SHA256 f7ef57273541e0a6bc857f6adbad2f3849a79a5fd997cb94cc0de6c3a84637e2
MD5 690f5d3be01579037eebe65632114698
SHA1 54690025041fd18d75aa01c2dd5b8cc87deb6330
SHA512 697f7b392fea3cc963d884d3b7dc82ef961e45f92a1550ca5571e60e831004ee019f038e38c671bcbfbe0594bde361af104ee22570b31061665a3a73fef6fe6a
TLSH
T170C08C3642E0184A3FA2026BB8CC0CAD7000AF2B40610C41B7BF03940080470428FEAC
MD5 SHA1 SHA512 TLSH

Submit Download

345098452.json

Path C:\Users\Admin\AppData\Local\Wave\Tabs\345098452.json
Size 160B
SHA256 5f04553baae06253429e3d80816a9700e9b8cfed9998da354dc6865f8c01dfe2
MD5 66aa4a30a39ed0adf97ef60b85436403
SHA1 3bfd82f36e6acefcc7fbf9bb1350d32fe8eb2284
SHA512 deb431ac0671f8ba825db5aebcd3bd25594aba3b0da84ab2eab211f7766a64290be6d77132ab3004139030935feb58ba7739036779dabea158814f7a9ba61f5c
TLSH
T150C08031CC44547D63BD468E955064C73C001B5303B04C57397B465E017225016487CC
MD5 SHA1 SHA512 TLSH

Submit Download

memory/920-33-0x00007FFB2DD60000-0x00007FFB2DD61000-memory.dmp

Download

memory/2020-126-0x00007FFB2DD60000-0x00007FFB2DD61000-memory.dmp

Download

memory/3208-646-0x000002CB3BFA0000-0x000002CB3BFCF000-memory.dmp

Download

memory/3448-626-0x000001E68EA10000-0x000001E68EA3F000-memory.dmp

Download

memory/3448-608-0x00007FFB2E0B0000-0x00007FFB2E0B1000-memory.dmp

Download

memory/3448-609-0x00007FFB2D8B0000-0x00007FFB2D8B1000-memory.dmp

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads