d3796ccc40807d132eb63b71fb75e36d2f98885fff1ad4ca61c670853d788f1b

Analysis

user interaction
yes
max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260629-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 15:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
VoidWare.exe
Size 178KB
Sample260706-srbhsag14v
SHA256 d3796ccc40807d132eb63b71fb75e36d2f98885fff1ad4ca61c670853d788f1b
MD5 3216e2664a4361e144734e2c57b6a0f9
SHA1 2d9fb1b72fbcb550a31142f176b9e4ce1d5049bc
SHA512 06b6d37b33b2b7af80767d4ffac2cef454b5634a2d45491a0fc00439c3009fb909c5e06b106f9c2ddaf3ec08f4545d1cbb555dd0a5952f9f1eec021bef6ae9c7
SSDEEP 3072:/qvmgiYSoIk8uIHzlqRwa/EB26mJIgu8dI+vh7Azp:/64k83TlEvSeIgP576
TLSH
T1D8043A07A2AC51BEE1B79779CDA24941EB72781A8B71E7CF075049B60E737D09E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
6372	javaw.exe

Loads dropped DLL 14 IoCs

pid	Process
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe
6372	javaw.exe

Drops file in Windows directory 10 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_1954531945\ct_config.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_20564362\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_797358683\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_797358683\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_1954531945\crs.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_1954531945\kp_pinslist.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_1954531945\manifest.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1704_20564362\data.txt	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2996	msedge.exe
5888	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134278249676139128"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-759331733-200834466-1207319849-1000\{47BC01B5-073D-459F-BDE4-3E09CD499032}	msedge.exe

Runs net.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe
4896	msedge.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4896	msedge.exe
4896	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
6372	javaw.exe
6372	javaw.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5808 wrote to memory of 6372	5808	VoidWare.exe	91
PID 6372 wrote to memory of 2748	6372	javaw.exe	93
PID 2748 wrote to memory of 5288	2748	net.exe	95
PID 4896 wrote to memory of 3776	4896	msedge.exe	98
PID 4896 wrote to memory of 3244	4896	msedge.exe	99
PID 4896 wrote to memory of 2996	4896	msedge.exe	101
PID 4896 wrote to memory of 3244	4896	msedge.exe	99
PID 4896 wrote to memory of 3244	4896	msedge.exe	99
PID 4896 wrote to memory of 1248	4896	msedge.exe	102
PID 4896 wrote to memory of 1248	4896	msedge.exe	102
PID 4896 wrote to memory of 2932	4896	msedge.exe	103
PID 4896 wrote to memory of 2932	4896	msedge.exe	103
PID 4896 wrote to memory of 2932	4896	msedge.exe	103
PID 4896 wrote to memory of 4492	4896	msedge.exe	104
PID 4896 wrote to memory of 4492	4896	msedge.exe	104
PID 4896 wrote to memory of 4492	4896	msedge.exe	104
PID 4896 wrote to memory of 5784	4896	msedge.exe	105
PID 4896 wrote to memory of 5784	4896	msedge.exe	105
PID 4896 wrote to memory of 5784	4896	msedge.exe	105
PID 4896 wrote to memory of 1704	4896	msedge.exe	106
PID 1704 wrote to memory of 3332	1704	msedge.exe	107
PID 1704 wrote to memory of 5888	1704	msedge.exe	109
PID 1704 wrote to memory of 6432	1704	msedge.exe	110
PID 1704 wrote to memory of 6432	1704	msedge.exe	110
PID 1704 wrote to memory of 6432	1704	msedge.exe	110
PID 1704 wrote to memory of 6164	1704	msedge.exe	111
PID 1704 wrote to memory of 6164	1704	msedge.exe	111
PID 1704 wrote to memory of 5688	1704	msedge.exe	115
PID 1704 wrote to memory of 6596	1704	msedge.exe	116
PID 1704 wrote to memory of 3508	1704	msedge.exe	117
PID 1704 wrote to memory of 3340	1704	msedge.exe	118
PID 1704 wrote to memory of 6080	1704	msedge.exe	119
PID 1704 wrote to memory of 6080	1704	msedge.exe	119
PID 1704 wrote to memory of 6000	1704	msedge.exe	120
PID 1704 wrote to memory of 6000	1704	msedge.exe	120
PID 1704 wrote to memory of 3460	1704	msedge.exe	121
PID 1704 wrote to memory of 3460	1704	msedge.exe	121

C:\Users\Admin\AppData\Local\Temp\VoidWare.exe
"C:\Users\Admin\AppData\Local\Temp\VoidWare.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:5808
- C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\bin\javaw.exe
  "C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\bin\javaw.exe" -jar "C:\Users\Admin\AppData\Local\Temp\VoidWare\VoidWare.jar"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:6372
- - C:\Windows\SYSTEM32\net.exe
    net session
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2748
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 session
      4⤵
      PID:5288

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://voidware/
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7fff4539c188,0x7fff4539c194,0x7fff4539c1a0
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1688,i,863178762188001862,7571178886889243388,262144 --field-trial-handle=2308,i,13489663840905190262,15853422477250651038,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:2
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1908,i,13416155224338231409,5200324459258344289,524288 --field-trial-handle=2308,i,13489663840905190262,15853422477250651038,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:11
  2⤵
  - System Time Discovery
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2232,i,15001056028140767056,4883834267285085404,524288 --field-trial-handle=2308,i,13489663840905190262,15853422477250651038,262144 --variations-seed-version --mojo-platform-channel-handle=3108 /prefetch:13
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3560,i,16413954512222760455,6096510751910302431,2097152 --field-trial-handle=2308,i,13489663840905190262,15853422477250651038,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3568,i,6151343253904963933,15675417187731781573,2097152 --field-trial-handle=2308,i,13489663840905190262,15853422477250651038,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4984,i,13017145331143906448,9665227582279169467,2097152 --field-trial-handle=2308,i,13489663840905190262,15853422477250651038,262144 --variations-seed-version --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:1704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7fff4539c188,0x7fff4539c194,0x7fff4539c1a0
    3⤵
    PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2064,i,12943074609359346430,17456845046450200884,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=2708 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1844,i,14672214451603477219,16267268114126073487,262144 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=2676 /prefetch:2
    3⤵
    PID:6432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2428,i,16154458013245199155,11091649058753256950,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=2724 /prefetch:13
    3⤵
    PID:6164
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,6501162995643672493,976004156554044938,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
    3⤵
    PID:680
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4344,i,6501162995643672493,976004156554044938,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=4400 /prefetch:14
    3⤵
    PID:5688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1244,i,12341416802413102975,1435247264978158002,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=1232 /prefetch:14
    3⤵
    PID:6596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1248,i,17586472686201824432,6734577322020678013,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=1336 /prefetch:14
    3⤵
    PID:3508
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1252,i,6139828114077683624,11054579496576916706,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=4856 /prefetch:14
    3⤵
    PID:3340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4968,i,2507853352780225175,9308146474498430137,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:14
    3⤵
    PID:6080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4944,i,5213339776143839943,4450898991344733129,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:14
    3⤵
    PID:6000
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,16017349105771100646,14804760797626415884,524288 --field-trial-handle=2680,i,1865997749965254960,7294192146424665206,262144 --variations-seed-version --mojo-platform-channel-handle=3136 /prefetch:14
    3⤵
    PID:3460

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4384

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:6532

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d27158eebf482333709292486790045376be986643b5bf9f8e823c47416e03c5
MD5 48cbaca9a0f53de2b3ca305171aaa474
SHA1 d512958b854013e14a6864979ecacbc18a58e543
SHA512 d8e9599cce41df3234ab8a1d0415f89d57aa6a938386a511ded24cbc36c3292b01cf672a4affdf11881d0046bbc056c4079baeeca74b5ccfa649aae23d8c9547
TLSH
T161D0C07437286C02C52231718C20C300B6F980342399C0023201C10C4C7F4829347006
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 78b24b2d65b9be0f6df01dc52b04a154c849f693b62d1b21bab7d0153c5dbf7a
MD5 f6c762ff1fc2835061a946c193b86a58
SHA1 8b6959e685f406f6b5c02e5dbb3e732a4cea1400
SHA512 bce2d2e20b5093d4d770da02bf6da132ba7b6fc1e0faa61640af9880059deb3b22d94646e733851679b4e98ab66ee842b8a2d54e67422bd9b0139ad68dec04f3
TLSH
T190D0807437696C02C56635B59814C700B6F99535239AC5027251D14D5C7F486E747146
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 17b030ef44f3da3ab6497030a3cabf5c353ede1b6b77f1df590249ec2cfd65db
MD5 30a0bca28a8b57d3fe769e4518623c7a
SHA1 037180dc1f17f3142e7649a9af76edc57f8113d3
SHA512 677171f39642ee7f9609490ace0dedb521e06e0ec4f98506fb14baa5b78caf8242a4269527b2f0871dc4d41a4ce9ac359a2e5e830a251a46413e4eb48822a360
TLSH
T116D023343F397CC2D13631BA8420C700BAFD5573239641067301C50D8C7E4C3E687686
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 930fa4a1e633e23b965113a4a56b7da63a68125cc77897fe8e2bec69750f36f1
MD5 6fa85834f2004c9d73346609ed8729d0
SHA1 7edf049db78df12fd85cf3e61ea6491e55783184
SHA512 d9e8ca968b709ea0754a2b95ea199478bfbffd1722bfe9682eeaa032b4cc217d2a3be8b223e3c142adf5d789db39a37aba0ef7848ca7d8c702f3def717c92644
TLSH
T19FF028BAC921EC371DFD1B1834A44B4BE75013672B80995F3B3D820C8FB063B468682C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 78650dc4ed477d6943d83cb0b242849c83cc12ee2631dd3dda8cab74cf2b857e
MD5 57741f1ff266c9c44ad0d258ef0624d4
SHA1 e8f572eec31c4fb2e8fd025353683b24da81571d
SHA512 64f9ee688e2158008cf288b0116f5dc8e0111c77776d3b92aae3dc0e1d9b1ce9400183a08910af2cf609ee784ea8ac9ed1b0348da8af9e451082efbb468313bc
TLSH
T17941CEF783F4856DDA1195F0BA186E2BCE2C0914832C7D5AC9E0AE1B93E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 7deed121b234192f5b3b55e690c3285af65f20609c62e47bb27f903c313bebce
MD5 850c2ffe548a89d14df8b355993f1cd2
SHA1 076c552d37f2c310d6d1d63c5182b6b7ddce0baa
SHA512 7ef8853514cfbe2174547361b43375579fd5f74c57e13a09efabb63800a87b818987d4f160982c0403890e960faec8804a19efa971f3338aab36e99b3cb2ffaf
TLSH
T14851B1F7C3E4856DDA1195F0BA186E2BCE1D0914832C3D5AC9E09F1B93E3471E14195F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 8fd9c1b5d40c938c28353497feac206f5d655f53b22388705595b20584c62c8e
MD5 efa3cacc53e134e4fcb4b92b94e5b6e7
SHA1 13215edcca833b551e5d0c00a19b73258070541f
SHA512 dd39f575cf2873edb2b75fca785a3421fd7d16662bcb3ea91aae6e5df7f0cdd05050413d2fa80ab5835a8e4177fd38a29d2253bf84c3ebbfef9821a63470f6dd
TLSH
T199C0223280FCE0320024053D0E887885AE34D030100068F2D8DA833CB0C00BB5B0206E
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 9607dd2db929856e6487403398806914e62e1908955c0875e360007f65f58281
MD5 bc018d5d6d7e0d0e9ea3d3b48aa73aaf
SHA1 029a0edf9c883f0c12e10b61e22ba62b596a2e50
SHA512 fa66d3cddbe961e49dc22f251491ae3f4ac10ffcd0cd20dcc08dec5e8e2c055ec43350c081bf06267aee42f6771b0ec4488e7c425af1c71fe1d0c1c2c6f20f96
SSDEEP 384:sxRiMcr/fvsX2Wvr/BaSRiMOxw/5ICDsXIrjs:sm9r/frYr/ED/K/5ICDsXIM
TLSH
T1CE72C815A538993BCCCBD219FA557F63D7F91523A2905E44AAFC8A0C01EB6DC621383F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 32KB
SHA256 0d16720190286f1f2876bd33a8bb425d6deaff6a71276ea24085bf54a3c9d479
MD5 9ad1c47f697ebf0fe96244eec4f07a3f
SHA1 9d0fdeb46354bd5b61c22ef5344944760da029cf
SHA512 fdd6501718933f79795b5ab3de7809e0ea9820cb158266b8810dd2c52f04aa5198354f7da9c0220801604261cf2d6bb413ab1e44872905d41b03292c35b1bb18
SSDEEP 768:PRbg3u7pLuL75sWgtVfwp8F1+UoAYDCx9Tuqh0VfUC9xbog/OVWokUfYHroJRzBr:PRbg3uE75sWgtVfwpu1jatokoYUJRF
TLSH
T1D0E2FD7B680CCB7F4F804E9CEC2ABE9A6DD802CB56D8C95447EA840C03C66EB55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 8bcc1640d9272e7a1ae1ef0e815a0284050e120ef30aebd415eb7fa163135a15
MD5 926a9b241ffeddcd3adcea29d6b47e8b
SHA1 432c33bb4a5187b50c005c9aa1dcdaf01fa23703
SHA512 d6dbd21f406ba4cd79451284c0fe24621dba2f02dbe85b72a4e393c363f0239191c094068adc76c6e0c59edea1ab04226a08da8e84babb0908c2c793c055f5f6
SSDEEP 384:9Xu7n9ZdQBcLfDd3Vof/sVnuRMFxn//mv6hRRL3bKlk4aIs/e/n/i/5/5/p/T3/1:63bU/YVVlTv7Id1gr17Ajd7OLmb2BrBz
TLSH
T1A4B27E5171BA2B00383D250EA2B9881F594630A230DEA97B7B6931E56F67F004FFD6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 629cf81ed9f5cf8c1fa0a31e463d6ae096dd5cdbcab4762397a71671e532675e
MD5 1cdd411e6cf01051ca8be2b2ce7e8773
SHA1 22ec8416bf747fd17b9dbc1e2709ad63f3f068a6
SHA512 5993a0e5eaa0812ec2905826f98253cbc70ccf40147b81bd119cfeedbaf9193624735af54ef1effac67bb5c0330e7eec784807fc5cc4147c72559b5a7631caa9
SSDEEP 384:nviF1tNn/s3n9Sv8Nh8TUNTUlIRG0zvBoPOfoFGB4Po34TeM/Lap0mn15wbAjEJs:6F1j+9SEwgr8GWDTj/Ly0mn12bfJKv
TLSH
T1ACC23936E8A4CE6BECE78FC9B7497616EEE4126385D819D4DAD84D4C00972DD130BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 e764a75a6ddf12e718d31b241dd4b0058f435acad7954361ca2db6075819adca
MD5 2c2d0875af119bac24c751e6d3ba7c6f
SHA1 5e499919e29eb05b7726f7892d8f3a793b937046
SHA512 559884c084f6cec63f24381c0c8c6d95865fcd2175df1d30ff41c024b3759eb0687ab7597a216c4d742e31805c51fd3f17e7efc98f3d6f7309792404dd293177
SSDEEP 384:n9iFMtNn/s3n9SR8Nd8TUNTUlIR20z0sQePOfoFGB4Po34TeM/Lax2zl19im0uXO:0FMj+9A4wg2VmGWDTj/LCuH9im0nl
TLSH
T156C2393ADC54CE3FDCEA9BC5A70A3616DEE4423796D85DD8D7D81E0C00A71AC9306D26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 cb051632cf3b1eb957c50996b20d9e123aa80d930af37acd30bc191e442b95bf
MD5 94a2cedda68118bc5ad67a244c27c034
SHA1 3e14bcae9b9cc1a43bb15189014c3928a17b99a3
SHA512 497242f1c98ac26414f600447e37880c16a3df2ce84705b647b02d36cbaec68711e54b12515f8292e6e0ac6727aa2da9d9200a553476e7f5db65ab368b8a28b0
SSDEEP 768:5FMj+9AKwgPJmGWDTj/LYr+VKE4UEk0nz:z9AaETjTVKDUERz
TLSH
T142D21A3DDC65CA7F98EE6F89A70D36269DE40237C5A85988D7D90F0D80B319DF306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 e7b0459f1273adf5a2d973e5455eff6164d8bf43ac5843ab8c8f67fd2e7bdd72
MD5 72517f205dad60392ae7ee994d9ef19e
SHA1 afe2daf4e6e020c3fdb8bb8b6f8eb00d3e7db41d
SHA512 4d71e9a937f2a4cae896357a270dd6bce05065744039d10789d90f0c57f693deaf8eae5d99fa24d962326a84060584921f08eda6e414a871b01b5332d9e7ba99
SSDEEP 384:nNiFMtNn/s3n9SR8Nd8TUNTUlIR20z0sQePOfoFGB4Po34TeM/LaHXlAk0uXsR95:EFMj+9A4wg2VmGWDTj/LYlAk0nl
TLSH
T11EB24B36E895CE67ECE68BC9B7563656DEF4126389C85EC4EAD85D0C00C72DD030BC2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 1c098d52c78246336096f3a2057688668dbb74ee9ce20050564c16c186776eb6
MD5 1602a31faf23f2d81ff3f67df5c79e4b
SHA1 1903c1002421b80fba07c22d4820d7f7e01d153a
SHA512 e0dfab66d90234b4db679636769f6fd6f3d98e160c4b247e1cdd2e73ef6b9aa5e69e6064e495fc6373f967b00104698d52f32a0caf73762cdf224f2b5a2e032f
TLSH
T1583141E19D3D1AD1D0BE0EBFB48B39FC84ECD612F49434392888EDA8862D61E254047F
MD5 SHA1 SHA512 TLSH

Submit Download

VoidWare.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\VoidWare.jar
Size 9.1MB
SHA256 d10abb47fe111919d9cc10a6a8b9ca60f39f4d7a1aeb9a61f70450c03b752c74
MD5 f2cc651b1b3d9d729e4f12354d291618
SHA1 9b52368af31f54bf668981514b4d52807c4261b3
SHA512 71116e3a50e5af4fea9be9d07582f2ae4b6b36b0911eb805513ef924c578d315f1219a2ca7683c8df8c755b29cfd60c86827cd32ff2b6bcc0c5e0d3bbdad8da5
SSDEEP 196608:qoFtTT4DasBuv6Q+GeKl6EWgbAxIRwnCCxWObv8F+P5H21PeWJzePqbY8+:qojTkDaszQ4KsgeI+CXgv2W5H2tLJzO3
TLSH
T1B8A61263AEDBC939ED7764B361C38356602F1164AC0F947E06F16E894A70C4B0762FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VoidWare.jar.sig

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\VoidWare.jar.sig
Size 526B
SHA256 4a289c9ab7b6821b97435b71fc01c24f69b59876d620a6665fd2806fdc522ad7
MD5 6c22f6ba0e65758a53bd2defc8155f96
SHA1 8494fa0f10aaae0fb7487c08e9179d4ae05c1717
SHA512 7806b5c4d14ffdc0fb4d1f3c26130ccaebb7e783151c3dc91516711d71108e4250f1f139ec003ac81e36532403c59cd1d11fe7deb236d166bea52a54821a6b06
TLSH
T196F0C0B727E864D68EA8127B12164DC5E2243617E9198572AB30910D7499B3301006DA
MD5 SHA1 SHA512 TLSH

Submit Download

launcher.log

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\launcher.log
Size 4KB
SHA256 722596413a0fd0900c3c21af5ce80094b34d7912ae335bfcc0dea013216cacc5
MD5 40499bf27bef36df170de10c79cd85fe
SHA1 27c47d2b940ebdaf288201d573cd5e70b2a06471
SHA512 a2da8d6f4736fa8d17a2368152e9a8c7b16a04fa73613a207e9817ac92269fd853dbf843fe243e3eecc5d10cbb46b8177a85729bf43906fe46104db5d2a15856
SSDEEP 96:oSPobrWlEGwFFjjjjjjZZZZHEHEHaHaHaHaHaHUHUHUHUHUHUHuHuHuHuHuHuHMm:JPC6+GwFFjjjjjjZZZZHEHEHaHaHaHas
TLSH
T12DA1C99E742FD0BE40690564D44D1EE282C4A5261A09ADFDF3744DC1BA6CC239EBF8B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

javaw.exe

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\bin\javaw.exe
Size 297KB
SHA256 23ddf81a3c5aad0774404730ceadd34b2ed8415cdba1cc4c4e441ccf3d8e3aee
MD5 b432ee0dd28683a8e1eac7634c17953b
SHA1 41854d68f8d31b953ec7bfd49ff47a0b4c073b11
SHA512 d4292c7a5530ab6640276036a5639a47ed2f90c87b4b581f227cd2421a88982abe6a5738fe075caf5ab6877d118f4f5890900608f291b2e48f3593a2a1065673
SSDEEP 6144:Lq5Jk88AVxRVO21j9jzwyiy+E/6uHJlALlEeMEgkXKYwF7k/8i:LEdiyb/xHJlAWePKsk
TLSH
T19B548C5977A01CF1FCA7813DC851A606D7B2BC120B60D68F0BE416671F337619D3ABAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

awt.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\awt.dll
Size 1.3MB
SHA256 bd533aa87fe433a3da8c14a7dc01d5c4eed10aa799f56681cf11cd80e6dc22ee
MD5 1113d7e21045a50ca7c04211c1e561c5
SHA1 394c7e038d72332925695461284c7f2227af1609
SHA512 6257b75f15266fafe5ab0b6334266cc5d4522629d01bbbe8230a312035a220d4b594850924fc0c1216883dee0973440d3c3254ec200cab7344c9dd30dcb80013
SSDEEP 24576:VIDkeb/55lANwSzKi8cBQPI9YpQn8BHlyjyCgpekpgoH4sE/:VIoeb/5oNzKif1v8BAjHgpLp1Q
TLSH
T1A3558D06E3A44195EA7FE0B4C29B531ED7B278190300D7DB76A1CB6E6F67BD0623A305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontmanager.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\fontmanager.dll
Size 307KB
SHA256 6af71063bf855dabec77809c7f19e24b2da4a36adc7808c132cff904619c71ea
MD5 2fc94e7836ab54e885d62cc423f9108e
SHA1 f9675c83d6517820ceb815ce11d0aaa9509b5fa5
SHA512 fc1863b445793b860c78e107a948e677338b5ae3e4efdd9c7f886d3b6eb6253fa8a91cf87a2cfb238f579238d6c388f172442e05ff0639bdab6740257963c700
SSDEEP 6144:c9tKfQSDgQZBF3FtaH28vBE1TSf+qY8rlgOzXzDYpKgFGMReiDm9U9bWEPMWx:It8QSrZBF3FtaH28vBE1TSf+qY8rxXpt
TLSH
T163646C52B68712A0F96F803845774A1EE776784C8316D7CB53A05BC93F7BBD42AFA240
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

freetype.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\freetype.dll
Size 532KB
SHA256 2ef0709d9cbb4969e0ca92debebeaad87c6b30e5a1b0fc668f2b90c4d9213858
MD5 d981357db03892a8271fb325f9a4a2e1
SHA1 aeaeaee93a3daea8d5466b06fa928ae7767dd4f9
SHA512 41fe196061864572e46b2052b43e41a5048ae6eb855c3c718d0abad81a99198587242a26f2efac752cba6266ae2886318e94e0f82640f6d5676b3e45d70b1676
SSDEEP 12288:Jq7ioprSJo48HL+L065UA9429r9zkXrF+FEJ8W3xz/6fEWmFK2IrL18:Jq7iKrbr+Ll5UA999zkXrYFEDx3Zs26
TLSH
T14BC48E82E3A41BA8C667D23C8657870BE775704913109BDF27E04B6A7F13FE26A39315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\java.dll
Size 163KB
SHA256 56e240d4a4e586d5c88c1d8970742b93a3e6fb3e70c0356dc84ff0f4d98ee60c
MD5 96b93e4e9eea8ae915157d46f92b32f3
SHA1 c0f1331490236410125c7ab41d4c0acf1439928c
SHA512 6e1e07fa3b383c6978d257aee95acf7a29e0a3b1eb86c400381453db24fb84267a2857047b45b607bfc117bf2d576c889cca234b83109ca0ae82fa709ac61971
SSDEEP 3072:8BsyqyIX5RtiXdbHBITnvdddOfxLVZVxTsJrHT550s+v:jyGgmvW4ltA
TLSH
T16CF33A0BA3424092F447B6B8B01A500BF37A7465132D92EB43E58BAE5FAF7317D47B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\msvcp140.dll
Size 561KB
SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
MD5 72f3d84384e888bf0d38852eb863026b
SHA1 8e6a0257591eb913ae7d0e975c56306b3f680b3f
SHA512 6d53634bc51bd383358e0d55988d70aee6ed3897bc6ae5e0d2413bed27ecff4c8092020682cd089859023b02d9a1858ac42e64d59c38ba90fbaf89b656c539a6
SSDEEP 12288:rSTTigI46Bb3SUPvRgrKtzL4oaQEKZm+jWodEEVPLwtQB:rUStZaQEKZm+jWodEE9CQB
TLSH
T1B9C41A23B74905A0E195E3B8A1878316D7F1BC4A8312A3C792FBD66D2F673D1673B250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\net.dll
Size 105KB
SHA256 3546097356bc8283a1f33e1a25e661dbb00ef02934003a2d1d1349063da9063b
MD5 64361eaeae5aaeca6aac77fa21df2fca
SHA1 d5e2060f18460e1714c3f99bb30d8fee0f18c84b
SHA512 997aebcf957c4af2dad132698b0aff7cc05021c3531f179897f21a3c1735e554437503ca11e72da3fd20c70901cfb710e3e3255b285cda0b8baaa548cc21be6c
SSDEEP 3072:/lFrveGoTevTmR9AHmEICFGx948G+PpM+v:bOTP0GEIC7+N
TLSH
T1FDB34A01636824C5FC77E2BC85468617D7B370706260939F13A6CA5EAFDB7723E19B81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\nio.dll
Size 66KB
SHA256 7848632a0d6d6b9e59050426cb95d69096f297760273ef5edbca340b78b5aa33
MD5 84d76f1aa291afdd91243e2638477ca9
SHA1 6de1ee0926a87c8cd7d87dea26ea24cdd931bf9d
SHA512 3670db2decc7c8bac1e699fa439e0900dc44d97e236f021ae258ead9556a138ce4a48107297d6a33f6a93cbdd515ddfab893880dd443ea2e1e2358fa1869639e
SSDEEP 768:92qQ+PnajKVVYILfG8DyOTQ+eDZXYKua8UHFARepA/xbwuZWm3wXLCRxVgnqW6R3:9DaPOTQ+YRFAsRCJ3YLCnVyqrRy7VIv
TLSH
T129631BB253A4488BE86AB13C525B035BF433FC514510A35F53298B169B6F3B33A7E792
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\server\jvm.dll
Size 8.4MB
SHA256 31515f4645fa5162c607baca50c5d6191522bdb06d987f8b0d2aae7ac73a420f
MD5 a5c5ce0bc89863d672ffc2e6e61741f8
SHA1 749dc7e9ee8b2860deab5bfbfc197b81625317c4
SHA512 1be91b3ac8b638d57b5266f7c1f5f23428fb46737955bbdb61561c92d69fcad5c629303cc59e44d4e658cfb8a7e5b507871f19e0495c78ff284eafc62be8c3ff
SSDEEP 98304:BRw7qh0RqbDMX7nZqhgU0xFdVKT41OPwb:BC7qh0RqbDMr4hR0xvVKjPw
TLSH
T18E966C96A2B40098D53BC2B88E5EC607C7F67C9407709FCF76A047590B63BE5967EB80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunec.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\sunec.dll
Size 142KB
SHA256 c7afcd2cde5488a6936fc8c8945427b3100e713dba53583ff5911634d37e98af
MD5 958ec7a17f217118d59d28366bbe965b
SHA1 045a800974e7d0398bfca97bba224cd1287ae356
SHA512 09717b318a3d459020848ee487d31cb574298221f338f3fe44e74c1b29ac479dd8fed791b4e94286d190e42cc2de9cae7322756d4dcb0c4fd0138ef2e252fb08
SSDEEP 3072:vg+yFOk3ldXjWwfIabheI14/QIvDm2r8HC+vi:4+yFOk3ld9flhp14Hm2e
TLSH
T196E36C0732E09297C9638A31C953F55AEFB0B82576E0C37B13574A45EF23395AE2B325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunmscapi.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\sunmscapi.dll
Size 46KB
SHA256 033918aa353b2d36667f6f34dc48a1edb71811975edc4d483d9464b6af94c2d2
MD5 b519eec740098ce09ef938bca1679715
SHA1 5ab89ecea1ced2f36ab2a62c324f8df112c86786
SHA512 6b9cbcd5aef4f37d21752769a3461382cda9521b9513ddf157a9383a110407d2739e9569734fbbb882e46af08f6e0a2336636d7ff1f27ca69209dd075efc3d31
SSDEEP 768:H93f6WDAeUBEHsIiWyTCQEQhDrfq4qks0m8Cnf4rlyPtjYiDLk5kIvH:H93f7dUmsRfCQEQhMks0m8CnAlyPtj7w
TLSH
T1BB235B07C7A004D6FC73D9B8C46A961BE672B88A5021C78F1751CA1E9B63F62B73C754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\vcruntime140.dll
Size 117KB
SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
MD5 caf9edded91c1f6c0022b278c16679aa
SHA1 4812da5eb86a93fb0adc5bb60a4980ee8b0ad33a
SHA512 32ac84642a9656609c45a6b649b222829be572b5fdeb6d5d93acea203e02816cf6c06063334470e8106871bdc9f2f3c7f0d1d3e554da1832ba1490f644e18362
SSDEEP 1536:dI2v39UXigCBs29DdxfggO6vMMKZsY2ofRjoecbdhUwdJTzmZhTzC:diwskD8B6vMMEs5oGecbd2wHT0Te
TLSH
T1FBC38C4672A042FBD16AC274C1E35E17FB75B84487A0A7CF03A58A690F53BE09E3D385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\vcruntime140_1.dll
Size 48KB
SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
MD5 2bd576cbc5cb712935eb1b10e4d312f5
SHA1 dfa7a46012483837f47d8c870973a2dea786d9ff
SHA512 abbd3eb628d5b7809f49ae08e2436af3d1b69f8a38de71ede3d0cb6e771c7758e35986a0dc0743b763ad91fd8190084ee5a5fbe1ac6159eb03690ccc14c64542
SSDEEP 768:IzzO6ujT3MbR3vXCz6S5Mq83yJ9d3+DuO9zUgElq9z6m:Fq/XuA3o9dgzUZWz5
TLSH
T17C235C9457784086D59F95B0C1D6EE537E7CFA964B00928F0BA1E1882F637D0EB3D22B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verify.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\verify.dll
Size 55KB
SHA256 cd36dd24eff2807a696c9ad009e92fd3aa94084d03ef302f5d59e44bda25ddfe
MD5 31d920d7998cdd43edb38b32368d1fe2
SHA1 39e906c50afa79cae8888c18d7e76640d62eb4ad
SHA512 4eb92dd63c299560bbfecb320a46f7035a622760394cc37e751a58aaf6d26ca7cb36a3b58cafeb48ddd4296baae0af6ee30e9916f63c2deaacfadd04d9244d37
SSDEEP 768:Xdhp6ymrAOE0kiADB8ZYwsYa31rMYYECwX2e59GV1sPYiDLk5kIv:XdhYfJ8iA+xalrMYWBSU1sP7VIv
TLSH
T1E2435A6792A00476E087C538C5636EDBDBF1F9C61A0083CB5250C9CDBF63B61EA2577A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\bin\zip.dll
Size 87KB
SHA256 21fd5f0bdc4935c29a6ab5fd3032afc4964a4811bd9275ed45f9bbaab36f29e7
MD5 d1744e8ca7d12f5159cd9def4c12f010
SHA1 18c9dcefbc1e6092fdd65911a9a1edc18a7fb941
SHA512 a78382b8c6bc62effa17c5d58d29e3fd288bbe9405d3b616e60f1e4d66325a7d10e7ce0e2e12561a1f668b5cf51aba258811971fb0462e03dc2343b4242d5da1
SSDEEP 1536:1Tc7TjcYnuTxIIEBIZJ3VhSrmIOQIOhnfrIV83SA7VIv8:1TczcYnOlVhSAGhnf0VpA+v
TLSH
T14F938D9149A06151EEBB9AB0C9F64A3FD3B6B02113C057CB934C97962F536613F483EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

accessibility.properties

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\accessibility.properties
Size 149B
SHA256 68ef2f3c6d7636e39c6626ed1bd700e3a6b796c25a9e5feca4533abfacd61cdf
MD5 2ed483df31645d3d00c625c00c1e5a14
SHA1 27c9b302d2d47aae04fc1f4ef9127a2835a77853
SHA512 4bf6d06f2ceaf070df4bd734370def74a6dd545fd40efd64a948e1422470ef39e37a4909feeb8f0731d5badb3dd9086e96dace6bdca7bbd3078e8383b16894da
TLSH
T174C02B03F08E17B95C0C18FB01DCD4C0B38049CFC029530F54E6213A6781C38008846F
MD5 SHA1 SHA512 TLSH

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\amd64\jvm.cfg
Size 1KB
SHA256 23f728cc2bf14e62d454190ea0139f159031b5bd9c3f141ca9237c4c5c96ec1d
MD5 c60e77ff5f3887c743971e73e6f0e0b1
SHA1 9b0cfd38ec5b7bd5bd1c364dee2e1b452a063c02
SHA512 07aca3de1a03a3b64b691fd41e35e6596760baf24c4f24e86fca87d2acf3a4814b17cd9751adc2dcd0689848f3d582fb3ee01d413e3a61d1d98397d72fe545e9
TLSH
T1DF31A85F9241F776065106D2394171DDE32AA3FC6219FDB8001CE79D35079B4827B4E9
MD5 SHA1 SHA512 TLSH

Submit Download

meta-index

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\ext\meta-index
Size 729B
SHA256 87e75d66805d429cdf4cdd24672b5528cd30c7b0509a3f07c6b78b30ca2a52b1
MD5 378bacf86424af40d102b109176bd37a
SHA1 a218a25f131cbb38f4f11e8eab0602b3aabb81f7
SHA512 f5ea5c89258934c4a12de0cca21c4df05371decf0e9644f218ec3aa3c2d2ad92207bc5119a91b84c3e9f77e9373502ac891154adbb50d6d7cce8dfd30580405e
TLSH
T1A6019C5F82479025A6BD89CEE837E341620CD11E101582BE41D738CA3D8DADA2A3CE78
MD5 SHA1 SHA512 TLSH

Submit Download

sunec.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\ext\sunec.jar
Size 38KB
SHA256 fa0e7ced7bf6b46b82f3cbda3ffcf102b8154fd3d281b77103f63329012f98bf
MD5 b1ae52ea654a451699679697be4d8a81
SHA1 5cfb3416ab49352b886568836d8c97ed6814b76a
SHA512 3d14d3a1f12e92b65cd098cf1fb34dc50f8e15e1de3a235d5a88328bf9547b47e465e5dee5db4b6278267631e0076a36edaa6e35fb2b2bdb6c3a7a57f1a65c3c
SSDEEP 768:MVsF4D00fru6i5lkv6Cuq/gd4SlKoy1SRWVqt/gggQavQEtd6NtWHsTxxhSozN3o:MnD00fq6oGv6CuLNTyEYqtgggQavRv0Y
TLSH
T11603BF1978D905BEE04786FB9029C5873A16488B8C9E93BB01D4493BF87C83743757EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunjce_provider.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\ext\sunjce_provider.jar
Size 270KB
SHA256 16d56819eda5f297b57c5b910f24483b8af1bf90f171983e47840fda94510a01
MD5 3f83f0f92349421cf9364d4155cfd7f6
SHA1 cc85a6fb30bf4f52f3235a135bde5d945056af54
SHA512 e0b681680a2059e69cccda8832079e5f932f5224cec893334d3844272215d4a461735b83fae9e48a499aa63481bb99ca0ee7d89111a227e21938b3c118d41241
SSDEEP 6144:9XXe9kweqiZiEMmWWTJw9mIU1VTvdv2Dxkmbzv6r0:9+9jniZip3WTJ6ZUZv2DeBr0
TLSH
T13544AF27ADEEE978CA8BD4F53471C512FA0958F6A00AB3AA07D10DA174B7C434B117ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sunmscapi.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\ext\sunmscapi.jar
Size 42KB
SHA256 32f2d62ed645cd2b59015abb99fe0fa5348d0780f331e19dff2e29536f23da0e
MD5 d30b68f23cdb7402b107263773fb2d6b
SHA1 fb8f036aabf120723f121e1ae8f68381aca27f09
SHA512 47f505a5b9cb4d20144ebf779da8ccb5742190a7f704e36895bf5a18b4a2e0d9095ecfd1a04eec589e95e855460512a182b8348a1fca437c99dd80d65dbd39fc
SSDEEP 768:fzS/46ZpDv/fdylHAyw2EctYPSRPXkNRtLz8UTWbzPVvLhZ1GOc2gxtAlqFVBW9P:fzS/46bDv/fdy9hw2EX4kNRtLz8UojVv
TLSH
T13613BE27A99CD0A8F017CAB7C07281673F5C18D99CC653AE5B51CA49F62CDA387017BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontconfig.bfc

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\fontconfig.bfc
Size 3KB
SHA256 b2ab990df3c4c1c2ec4317aaf22c946df17f0796727dbda712402307c56558ac
MD5 ad8365719b70a2deade79683d8986a15
SHA1 88cbf37d05f28691b7f82e74fa891792e93b41b9
SHA512 287b19b6996a189baa3cf2894a57917b14b0615d551c5248ad55860678e5d6e58dd21247799bebe91b8236fc2f5300399fcfc1bb159edb9ae8d663805c6a30f1
TLSH
T19371AE03A5FB1309E1F7FB715AB60479CF22B881EE679E5C1011B80A4BD2950DD72F26
MD5 SHA1 SHA512 TLSH

Submit Download

win32_LinkNoDrop32x32.gif

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\images\cursors\win32_LinkNoDrop32x32.gif
Size 153B
SHA256 1a1d3079d49583837662b84e11d8c0870698511d9110e710eb8e7eb20df7ae3b
MD5 1e9d8f133a442da6b0c74d49bc84a341
SHA1 259edc45b4569427e8319895a444f4295d54348f
SHA512 63d6f70c8cab9735f0f857f5bf99e319f6ae98238dc7829dd706b7d6855c70be206e32e3e55df884402483cf8bebad00d139283af5c0b85dc1c5bf8f253acd37
TLSH
T100C08C88F34888828A4AD2384874138C68A4C4BB8A224B88144A2A94A2935A2C1D0302
MD5 SHA1 SHA512 TLSH

Submit Download

jce.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\jce.jar
Size 94KB
SHA256 79fa8171c35a650a1ba5830d75e74ddf383c650f6671a02460de154af8a87335
MD5 ca54c8f05ce9c565a6c32d4681916b53
SHA1 1f6ae813ed5bc94ae5e4c1d8a4868477fe06de23
SHA512 db57238acb6a3885c8313c8c505879efec05ba6ad565e42a8d4371b41aeded4091535ce4b028054e20a78a6c102cf82fc312364741d1103c7189a60926d0683e
SSDEEP 1536:M4OeNOC2BVcMCuyy8Du51Xt6se6sn/3U7T9gNJ/VKlU0w/m0P1zu3D0NJVLKdzFn:Pj2BVc9u51lGn/egHVKcbzuT1fQti
TLSH
T1E393D0287DC5EE74DF53D0BA5970C833B40E089AB507934347A588E6A4B6ED65F02BC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jfr.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\jfr.jar
Size 868KB
SHA256 40c30587bbd0a595d1a145b37c124a2b4a8fa071eb62ac7413d192a110406a41
MD5 8c329b56a9f7fa8b3a0591358725cdaf
SHA1 54a51c4f07e4e64d93101a0ce28131c7ccab1758
SHA512 5ff5e6b5e3321797e68410cf611766651ad1b68e8f95acdf3a74d3c68a2d8e2be6b9001fadb1242356b535226a37972fa3e5d3b53ceedaaefec50fd2ebc46a89
SSDEEP 6144:FtQKPgyd8bvkgz09b4NFQ1yVz7CO1FKpK2yLZ5XPNuazWDU0WJWfIvsZ2eqFuJ9N:vPdikWQUAO1MKVJhNJFI8e
TLSH
T1D815E51BF0461E53E181EBBA1961032422B0E0F25187E950AF7EDD566DE31CBCE59BEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jsse.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\jsse.jar
Size 1.8MB
SHA256 0313e17b3904171f0d0c6a15f49ca8a18a9f226158e237c1e95258ed7506d1dd
MD5 74d03f71ad17ab839f1604bece448fce
SHA1 c1f34cba1ff729c6a21f9ef30fca832905cf293b
SHA512 b764fd0d0704c8892ac2b66174843c9a946f5168ad1fc93b9e767dc8ee45f2c5e2d038a0419f79af5412e2ab1caafed080622bd758c9a06573efbd817fcb7468
SSDEEP 12288:dlHKE/l+uo+fqSmRmuTpM224x+iNS0q79bEsiik:LqE/pilR5KAjNS0qhEsi5
TLSH
T143959217E14C99BFF250DAFFEC70422833348C325D63B3384A49495AF5DA6B15A78AE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

meta-index

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\meta-index
Size 1KB
SHA256 daa262732f1f698294822c762d8e33db636ad67f21b402eac70f78f315403fbf
MD5 515d7a1fed569af7a4e65580d993b16c
SHA1 7aef4c3dc21f89132d15c5cca021b36717944f39
SHA512 16ffee33df2916d07cc08b9166fd898ae7c005208f680f97ee94ece1c97c78b33d56021cdaee6f73f07155a9ed807c30ec1025fceec7e771fd199d96c44362ec
TLSH
T17C41496F0287842F5E9849CBB577DB9647E8843618D8A3FD43E45C4175CDC4B0738A74
MD5 SHA1 SHA512 TLSH

Submit Download

net.properties

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\net.properties
Size 6KB
SHA256 f4567500fd182e9912c7ed58633eba1737619ebefc79c52a583df54a0226127a
MD5 40ecda055b0667a3cc0b272cf4fe415e
SHA1 9aa14cc3fe10b8d097555e273026b5507ab7d09d
SHA512 7dc981cb41848a66484c2a3e85a3dcff76a10a23cf9f800f1933d985b380ef77a8e2145a03ca430eac0c5e2895a323c500fdf7d38e9675f2c971da143ff54e03
SSDEEP 192:YEVGG4f4z34m04Pet5m27SRgTe93hf7k9Ss:5GGGYCSgY3hzk9v
TLSH
T197D141C2FE466635436DC291D22EA7E9E72C907D4C33A5A871AC850D261AC7A422F4E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\resources.jar
Size 3.4MB
SHA256 2e20a9f52adcfe94525afc3afea4e19dbd95227de514ba1b78e3e964d1e3cb35
MD5 1ccf6cef0d7b68d183532fa5568c5fd3
SHA1 22884e01b67fc1477a050b5911638b03af844118
SHA512 a102a4edc1b8d5600e7a006904a9dd002a97bf370b0e65a2558c19fe2f020b1a3e6f2b560ae9da161042af0fe3afc684a88cca303c6be681511ad7dbdcfe07ec
SSDEEP 49152:NM87Bw6eUJZ8biAh0YVEw2hIWaRALW59Jfrn43yRcc3SoSdFDMl3GpZwDDa9fLfB:6KlOM
TLSH
T15AF54B6FB902113BCAB340B6EC3326C7E96019B183A2D627F1EC9F663F8485D5667354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blacklisted.certs

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\security\blacklisted.certs
Size 2KB
SHA256 96572f243f31c2ef81a6e627542e596f6a9295cff3c7ae095c1b595cb1457ded
MD5 19e78890d61c0dfc65b291341c08beba
SHA1 ee0288462fc32992a0f9dfab5aeb3385412f0c4f
SHA512 c6d8d4ee0eb7eeb14532512ff4310dff9dd4f31d112716fc67a1052d37eef18d4bd6eb58301c76167ad35d31e73f5b28993f4da8c5de2dbe3836a5ef7e9c8b7e
TLSH
T154512CC6D19E42C6AD4027D604FC42A777A38171AB3814283EEA0F830573C5DD22F8CA
MD5 SHA1 SHA512 TLSH

Submit Download

cacerts

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\security\cacerts
Size 163KB
SHA256 d2acf116684c8b31ff99a83cb16673e179209820ee434a498b59f14db1d73cd6
MD5 6859f2cd01d20ca5b3aa82890928d13e
SHA1 b25b32dc5ee9babe163ec865216099ebf8adf598
SHA512 8aa1179d55e6e95a63f396a350530727160dfbcdbce1b00c9d435b2d0e252d46953bced0303116e9f91c77e0f5f0a41710898eef0f9c8650cc27467ff1a7c1b8
SSDEEP 3072:GGlFNWaBTo2keVKmpxvm2jgJ2TpaNfeAN6Y4twpY5BnkzVZGFFl:TTFTo7eVhpxvgJ2TpW2AN6Yt25BnYL8
TLSH
T1B7F39E9A4F383956BFE2AEA466C8D5373DB973D0676B28172110C0F169927E17DCC02E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.security

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\security\java.security
Size 56KB
SHA256 c4b272b888ec0bffe38cdca8671f90f7a38fe4d7a2ba8af1af728b59e9aed5c3
MD5 9d00853f45a2617e9aa8abd8d3311d68
SHA1 afb19d389035ab9433bc6b168b9eacaeed9c59e7
SHA512 686b4002d331ff888ade120dac6bec88e5cc600484434343d0a306bf6455f1716f09217b47ca16b7df9996c542da9ef987774d5859e55a79d80e70af52c2cdf5
SSDEEP 768:Y8obod6U3O5O9Wgw2+JuN2gQ01pdYRE0G+fqRWHo69QZW93jfGgqcNhXLJ4TP1zD:Y2pD2RG+fqRWI1Ze6hczKTP1KqJwF6
TLSH
T1AB431923FB4A3B7005C21193651E93DDAB2CA17A2272559876DD8A1CB707C71C33B7EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

US_export_policy.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\security\policy\unlimited\US_export_policy.jar
Size 620B
SHA256 c89138b0d7ae514966d14e1d14dd936f74cc93ad2d5a3150c719efb9c0d9de5c
MD5 ba6d61a16ef69fb02a296cf723e7a89f
SHA1 7e04a9e653b9131fae388c70dd2e75323d70e8b9
SHA512 6b421c9a97ea1ce3da0a2038911f264e69f321979feb29745bef36d3adaeda2f1ae225c1084275fe57819057d55ee3cb8a8b1da520060afd7e245c1739aa28d4
TLSH
T16EF0243A6FD5CC85E59F517046E68B07B716381C361C9B8B9911AB290934B801A47EEE
MD5 SHA1 SHA512 TLSH

Submit Download

local_policy.jar

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\runtime\jre\lib\security\policy\unlimited\local_policy.jar
Size 638B
SHA256 e1dc73e2cd9fc9be79329fadf3e11426cbde76f186ac93db59fc9e8544a9f393
MD5 fb9be39f592803eded57209a949d3707
SHA1 d0f4976bec7916e5dda92aad5f8bc0904a8df49a
SHA512 e28a6b1f9e72641e0feba775de718e0c5e0b55b992d47b0a9912dee6ade5b9979a2dc2606e0146ccc8e76f48d5ee3ea0d431f61e2215716ff2e7c5e01ea4c074
TLSH
T117F02B6D3FCFDC99E64BA0B596D16E06F6251428120CD747E510294A4D70F841B87FDF
MD5 SHA1 SHA512 TLSH

Submit Download

version.txt

Path C:\Users\Admin\AppData\Local\Temp\VoidWare\version.txt
Size 11B
SHA256 185045f1c498e627fa1aedbd1f22e6d91a4a09780cc68e7666b22ec6d9e3cab5
MD5 f3bd0e78ca6f8e30e6086aadd4be10cc
SHA1 89d05393f489067a33ca23136630e8071a17a6ca
SHA512 388e35f15ac5b4c8af088e4ea40e2947355c736ccf0630c2493f5c7bc3e36cd50ed41af1dd5b9d512e3bef37e45552d4438115fe5ad0484468dde125a3dd302e
MD5 SHA1 SHA512

Submit Download

memory/6372-7930-0x000001D039E40000-0x000001D039E50000-memory.dmp

Download

memory/6372-7986-0x000001D039FE0000-0x000001D039FF0000-memory.dmp

Download

memory/6372-7909-0x000001D039E90000-0x000001D039EA0000-memory.dmp

Download

memory/6372-7913-0x000001D039EA0000-0x000001D039EB0000-memory.dmp

Download

memory/6372-7912-0x000001D039E00000-0x000001D039E10000-memory.dmp

Download

memory/6372-7908-0x000001D039DF0000-0x000001D039E00000-memory.dmp

Download

memory/6372-7905-0x000001D039DE0000-0x000001D039DF0000-memory.dmp

Download

memory/6372-7922-0x000001D039EB0000-0x000001D039EC0000-memory.dmp

Download

memory/6372-7921-0x000001D039E10000-0x000001D039E20000-memory.dmp

Download

memory/6372-7924-0x000001D039E20000-0x000001D039E30000-memory.dmp

Download

memory/6372-7925-0x000001D039EC0000-0x000001D039ED0000-memory.dmp

Download

memory/6372-7927-0x000001D039E30000-0x000001D039E40000-memory.dmp

Download

memory/6372-7928-0x000001D039ED0000-0x000001D039EE0000-memory.dmp

Download

memory/6372-7932-0x000001D039EE0000-0x000001D039EF0000-memory.dmp

Download

memory/6372-7931-0x000001D039E50000-0x000001D039E60000-memory.dmp

Download

memory/6372-7902-0x000001D039DD0000-0x000001D039DE0000-memory.dmp

Download

memory/6372-7934-0x000001D039EF0000-0x000001D039F00000-memory.dmp

Download

memory/6372-7939-0x000001D039F00000-0x000001D039F10000-memory.dmp

Download

memory/6372-7938-0x000001D039E60000-0x000001D039E70000-memory.dmp

Download

memory/6372-7942-0x000001D039F10000-0x000001D039F20000-memory.dmp

Download

memory/6372-7941-0x000001D039E70000-0x000001D039E80000-memory.dmp

Download

memory/6372-7945-0x000001D039F20000-0x000001D039F30000-memory.dmp

Download

memory/6372-7944-0x000001D039E80000-0x000001D039E90000-memory.dmp

Download

memory/6372-7949-0x000001D039F30000-0x000001D039F40000-memory.dmp

Download

memory/6372-7948-0x000001D039E90000-0x000001D039EA0000-memory.dmp

Download

memory/6372-7951-0x000001D039EA0000-0x000001D039EB0000-memory.dmp

Download

memory/6372-7950-0x000001D039F40000-0x000001D039F50000-memory.dmp

Download

memory/6372-7954-0x000001D039F50000-0x000001D039F60000-memory.dmp

Download

memory/6372-7953-0x000001D039EB0000-0x000001D039EC0000-memory.dmp

Download

memory/6372-7903-0x000001D039E70000-0x000001D039E80000-memory.dmp

Download

memory/6372-7957-0x000001D039EC0000-0x000001D039ED0000-memory.dmp

Download

memory/6372-7958-0x000001D039F60000-0x000001D039F70000-memory.dmp

Download

memory/6372-7961-0x000001D039F70000-0x000001D039F80000-memory.dmp

Download

memory/6372-7960-0x000001D039ED0000-0x000001D039EE0000-memory.dmp

Download

memory/6372-7965-0x000001D039F80000-0x000001D039F90000-memory.dmp

Download

memory/6372-7964-0x000001D039EE0000-0x000001D039EF0000-memory.dmp

Download

memory/6372-7967-0x000001D039EF0000-0x000001D039F00000-memory.dmp

Download

memory/6372-7968-0x000001D039F90000-0x000001D039FA0000-memory.dmp

Download

memory/6372-7972-0x000001D039FA0000-0x000001D039FB0000-memory.dmp

Download

memory/6372-7971-0x000001D039F00000-0x000001D039F10000-memory.dmp

Download

memory/6372-7973-0x000001D039A50000-0x000001D039A51000-memory.dmp

Download

memory/6372-7977-0x000001D039FB0000-0x000001D039FC0000-memory.dmp

Download

memory/6372-7976-0x000001D039F10000-0x000001D039F20000-memory.dmp

Download

memory/6372-7980-0x000001D039FC0000-0x000001D039FD0000-memory.dmp

Download

memory/6372-7979-0x000001D039F20000-0x000001D039F30000-memory.dmp

Download

memory/6372-7982-0x000001D039F30000-0x000001D039F40000-memory.dmp

Download

memory/6372-7983-0x000001D039FD0000-0x000001D039FE0000-memory.dmp

Download

memory/6372-7906-0x000001D039E80000-0x000001D039E90000-memory.dmp

Download

memory/6372-7985-0x000001D039F40000-0x000001D039F50000-memory.dmp

Download

memory/6372-7989-0x000001D039FF0000-0x000001D03A000000-memory.dmp

Download

memory/6372-7988-0x000001D039F50000-0x000001D039F60000-memory.dmp

Download

memory/6372-7993-0x000001D03A000000-0x000001D03A010000-memory.dmp

Download

memory/6372-7992-0x000001D039F60000-0x000001D039F70000-memory.dmp

Download

memory/6372-7997-0x000001D03A010000-0x000001D03A020000-memory.dmp

Download

memory/6372-7996-0x000001D039F70000-0x000001D039F80000-memory.dmp

Download

memory/6372-8001-0x000001D03A020000-0x000001D03A030000-memory.dmp

Download

memory/6372-8000-0x000001D039F80000-0x000001D039F90000-memory.dmp

Download

memory/6372-8005-0x000001D03A030000-0x000001D03A040000-memory.dmp

Download

memory/6372-8004-0x000001D039F90000-0x000001D039FA0000-memory.dmp

Download

memory/6372-8040-0x000001D039FA0000-0x000001D039FB0000-memory.dmp

Download

memory/6372-8048-0x000001D039FB0000-0x000001D039FC0000-memory.dmp

Download

memory/6372-8057-0x000001D039FC0000-0x000001D039FD0000-memory.dmp

Download

memory/6372-8063-0x000001D039FD0000-0x000001D039FE0000-memory.dmp

Download

memory/6372-8070-0x000001D039FE0000-0x000001D039FF0000-memory.dmp

Download

memory/6372-8071-0x000001D039A50000-0x000001D039A51000-memory.dmp

Download

memory/6372-8073-0x000001D039FF0000-0x000001D03A000000-memory.dmp

Download

memory/6372-8076-0x000001D03A000000-0x000001D03A010000-memory.dmp

Download

memory/6372-8078-0x000001D03A010000-0x000001D03A020000-memory.dmp

Download

memory/6372-8082-0x000001D03A020000-0x000001D03A030000-memory.dmp

Download

memory/6372-8087-0x000001D03A030000-0x000001D03A040000-memory.dmp

Download

memory/6372-7893-0x000001D039DA0000-0x000001D039DB0000-memory.dmp

Download

memory/6372-7898-0x000001D039DC0000-0x000001D039DD0000-memory.dmp

Download

memory/6372-7899-0x000001D039E60000-0x000001D039E70000-memory.dmp

Download

memory/6372-7894-0x000001D039E40000-0x000001D039E50000-memory.dmp

Download

memory/6372-7895-0x000001D039E50000-0x000001D039E60000-memory.dmp

Download

memory/6372-7896-0x000001D039DB0000-0x000001D039DC0000-memory.dmp

Download

memory/6372-7888-0x000001D039D90000-0x000001D039DA0000-memory.dmp

Download

memory/6372-7889-0x000001D039E30000-0x000001D039E40000-memory.dmp

Download

memory/6372-7886-0x000001D039E20000-0x000001D039E30000-memory.dmp

Download

memory/6372-7884-0x000001D039E10000-0x000001D039E20000-memory.dmp

Download

memory/6372-7882-0x000001D039E00000-0x000001D039E10000-memory.dmp

Download

memory/6372-7879-0x000001D039DF0000-0x000001D039E00000-memory.dmp

Download

memory/6372-7878-0x000001D039B20000-0x000001D039D90000-memory.dmp

Download

memory/6372-7876-0x000001D039A50000-0x000001D039A51000-memory.dmp

Download

memory/6372-7875-0x000001D039DE0000-0x000001D039DF0000-memory.dmp

Download

memory/6372-7867-0x000001D039DD0000-0x000001D039DE0000-memory.dmp

Download

memory/6372-8283-0x000001D039A50000-0x000001D039A51000-memory.dmp

Download

memory/6372-7864-0x000001D039DC0000-0x000001D039DD0000-memory.dmp

Download

memory/6372-7863-0x000001D039DB0000-0x000001D039DC0000-memory.dmp

Download

memory/6372-7860-0x000001D039A50000-0x000001D039A51000-memory.dmp

Download

memory/6372-7859-0x000001D039DA0000-0x000001D039DB0000-memory.dmp

Download

memory/6372-7858-0x000001D039D90000-0x000001D039DA0000-memory.dmp

Download

memory/6372-7829-0x000001D039A50000-0x000001D039A51000-memory.dmp

Download

memory/6372-7815-0x000001D039B20000-0x000001D039D90000-memory.dmp

Download