Overview

overview

7

Static

static

3

Vozolomis ....0.exe

windows11-21h2-x64

7

Vozolomis.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    299s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    03/08/2026, 12:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Vozolomis.exe
  • Size 168.6MB
  • Sample260803-ptwpysbj5v
  • SHA256 1e0062f6151d5d253c67e3dc80c8d46ab388943fc33cca989933b163e346f679
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 13 IoCs
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Vozolomis.exe
    "C:\Users\Admin\AppData\Local\Temp\Vozolomis.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3988
    • C:\Users\Admin\AppData\Local\Temp\Vozolomis.exe
      "C:\Users\Admin\AppData\Local\Temp\Vozolomis.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\osmiko" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1680 --field-trial-handle=1684,i,17992546773463028054,1146874162819965417,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
      2⤵
        PID:564
      • C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\javaw.exe
        C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\javaw.exe -jar C:\Users\Admin\AppData\Local\Google\Update\GUManager\update.jar
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks processor information in registry
        PID:3300
      • C:\Users\Admin\AppData\Local\Temp\Vozolomis.exe
        "C:\Users\Admin\AppData\Local\Temp\Vozolomis.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\osmiko" --mojo-platform-channel-handle=1860 --field-trial-handle=1684,i,17992546773463028054,1146874162819965417,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
        2⤵
          PID:3668

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            VCRUNTIME140.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\VCRUNTIME140.dll
            • Size 117KB
            • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            java.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\java.dll
            • Size 144KB
            • SHA256 67da6582a0f84242e05d0ed4b8fb4ff81ca96e45e3ade6573b7e3a23c1fa148b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            javaw.exe
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\javaw.exe
            • Size 49KB
            • SHA256 c51301a62f6f1973b6a49fc870a1b10bc56d8d2e59eb50570baf920d9df2afb6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jimage.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\jimage.dll
            • Size 33KB
            • SHA256 825f26dc5f32773722fc68565ecba76abd7928487a08c3403fdd2e0689f0bb51
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jli.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\jli.dll
            • Size 87KB
            • SHA256 8a838a176148e7651aa041c1f1f704176030de3f7dfd3cfbcc8fe0e6f148ce4c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jsvml.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\jsvml.dll
            • Size 849KB
            • SHA256 3b99eb724cbbc35da1c158cc68d94b65095eaa4c772d9a1ce86678c9f07cfb72
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            msvcp140.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\msvcp140.dll
            • Size 561KB
            • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            net.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\net.dll
            • Size 96KB
            • SHA256 80c85f578afa95e52ad502b05c669030a8f4245e3c289534f1d81ef6bdf97127
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nio.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\nio.dll
            • Size 78KB
            • SHA256 aef35f2aa1817fa845f2eddc678e671424fea538fff5bde207789ad9ec8c5faa
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            classes.jsa
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\server\classes.jsa
            • Size 10.6MB
            • SHA256 b1a653c410f6cba64fa236613714b6d487407ae19b1816ecfa39056da72811cd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            jvm.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\server\jvm.dll
            • Size 12.1MB
            • SHA256 89c64a12328b82bbacdeafd0cbcabf175aeed0581f99fe0f737ddbd962c25fd4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vcruntime140_1.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\vcruntime140_1.dll
            • Size 48KB
            • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            zip.dll
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\bin\zip.dll
            • Size 85KB
            • SHA256 d4b544165c60f20dd092155c43d36dacb1f84364cb8c9da2d784b99f56127a71
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ADDITIONAL_LICENSE_INFO
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\legal\java.logging\ADDITIONAL_LICENSE_INFO
            • Size 49B
            • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
            • MD5 SHA1 SHA512
            Submit Download

            ASSEMBLY_EXCEPTION
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\legal\java.logging\ASSEMBLY_EXCEPTION
            • Size 44B
            • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
            • MD5 SHA1 SHA512
            Submit Download

            LICENSE
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\legal\java.logging\LICENSE
            • Size 33B
            • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
            • MD5 SHA1 SHA512
            Submit Download

            jvm.cfg
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\runtime\lib\jvm.cfg
            • Size 29B
            • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
            • MD5 SHA1 SHA512
            Submit Download

            update.jar
            • Path C:\Users\Admin\AppData\Local\Google\Update\GUManager\update.jar
            • Size 14.7MB
            • SHA256 61eb318e13524cff272e61026f909902c688e5976ae9fc7adda5ae64bbec4f5e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            memory/3300-367-0x000002D407A00000-0x000002D40866C000-memory.dmp
            Download