fce731759e9254b4b5d206117f24adeeef23d917c2ecad6f19befee0566ffc0b

Analysis

user interaction
yes
max time kernel
78s
max time network
81s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
22/08/2026, 23:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
Size 9.3MB
Sample260822-3artjsvxew
SHA256 fce731759e9254b4b5d206117f24adeeef23d917c2ecad6f19befee0566ffc0b
MD5 1ca38e47e78d7ebfe8427c1c8f2389b2
SHA1 5de94266b503281c84071de7ed0cf6213856dbf4
SHA512 420134026b3fa0452e4b9230f1cea7cb3e6b3a2cd4759e5673b8913134d0798e2df80513bb3c4a28bf1462e9f1f3d0dd753f20e9d11646c0084ff47153564187
SSDEEP 196608:9qU7qE0R3e97hrxeq+6Z79Tc3zEUScXqBwdjmqA7ZrKajoxAZnv4P:9+TRi7hlXNxTmzEnLwt7iZfk6wP
TLSH
T19FA6334A28FAFF98EA23CB7427DBAE9559341892A0E385DF43D364F04717E010D1A6DD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5916	volt-mcp-manager.exe
4044	volt-mcp.exe

Loads dropped DLL 7 IoCs

pid	Process
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	volt-mcp-manager.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134319143834651541"	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
4612	powershell.exe
4612	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
1900	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeImpersonatePrivilege	4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
Token: SeImpersonatePrivilege	4492	Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
Token: SeDebugPrivilege	4612	powershell.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5916	volt-mcp-manager.exe

Suspicious use of WriteProcessMemory 14 IoCs

description	pid	Process	procid_target
PID 5916 wrote to memory of 1900	5916	volt-mcp-manager.exe	81
PID 1900 wrote to memory of 5488	1900	msedgewebview2.exe	82
PID 1900 wrote to memory of 3168	1900	msedgewebview2.exe	84
PID 1900 wrote to memory of 3168	1900	msedgewebview2.exe	84
PID 1900 wrote to memory of 3168	1900	msedgewebview2.exe	84
PID 1900 wrote to memory of 2476	1900	msedgewebview2.exe	85
PID 1900 wrote to memory of 928	1900	msedgewebview2.exe	86
PID 1900 wrote to memory of 928	1900	msedgewebview2.exe	86
PID 1900 wrote to memory of 1216	1900	msedgewebview2.exe	87
PID 1900 wrote to memory of 1216	1900	msedgewebview2.exe	87
PID 1900 wrote to memory of 1216	1900	msedgewebview2.exe	87
PID 5916 wrote to memory of 4044	5916	volt-mcp-manager.exe	88
PID 5916 wrote to memory of 3992	5916	volt-mcp-manager.exe	90
PID 5916 wrote to memory of 4612	5916	volt-mcp-manager.exe	91

C:\Users\Admin\AppData\Local\Temp\Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe
"C:\Users\Admin\AppData\Local\Temp\Volt-MCP-Manager-v0.1.0-windows-x64-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4492
- C:\Users\Admin\AppData\Local\Volt MCP Manager\volt-mcp-manager.exe
  "C:\Users\Admin\AppData\Local\Volt MCP Manager\volt-mcp-manager.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5916
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=volt-mcp-manager.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=5916.5216.15653278475132308769
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:1900
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffb5d98b078,0x7ffb5d98b084,0x7ffb5d98b090
      4⤵
      PID:5488
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView" --webview-exe-name=volt-mcp-manager.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1824,i,8861261839178948337,17056817105608019339,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:2
      4⤵
      PID:3168
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView" --webview-exe-name=volt-mcp-manager.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2136,i,8861261839178948337,17056817105608019339,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:11
      4⤵
      PID:2476
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView" --webview-exe-name=volt-mcp-manager.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1828,i,8861261839178948337,17056817105608019339,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2368 /prefetch:13
      4⤵
      PID:928
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView" --webview-exe-name=volt-mcp-manager.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3636,i,8861261839178948337,17056817105608019339,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
      4⤵
      PID:1216
- - C:\Users\Admin\AppData\Local\Volt MCP Manager\binaries\volt-mcp.exe
    "\\?\C:\Users\Admin\AppData\Local\Volt MCP Manager\binaries\volt-mcp.exe" --stdio
    3⤵
    - Executes dropped EXE
    PID:4044
- - C:\Windows\system32\conhost.exe
    \\?\C:\Windows\system32\conhost.exe --headless --inheritcursor --width 103 --height 34 --signal 0x57c --server 0x578
    3⤵
    PID:3992
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4612

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

__PSScriptPolicyTest_wmlf0htk.2av.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_wmlf0htk.2av.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsfEB3D.tmp\System.dll
Size 12KB
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsfEB3D.tmp\modern-wizard.bmp
Size 25KB
SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
TLSH
T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsfEB3D.tmp\nsDialogs.dll
Size 9KB
SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
MD5 8f0e7415f33843431df308bb8e06af81
SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
TLSH
T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis_tauri_utils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsfEB3D.tmp\nsis_tauri_utils.dll
Size 33KB
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

volt-mcp.exe

Path C:\Users\Admin\AppData\Local\Volt MCP Manager\binaries\volt-mcp.exe
Size 13.5MB
SHA256 b1cfc39cbca8a8a31aaaaea5ae1408f80bbe57c3fb62ef0ffb990cd684195f29
MD5 1e265a64d26077b4896b4106ce318a6a
SHA1 0e1ceed7bd885f29a105bfc52a57a9d56a394059
SHA512 bacfa877d346529b34375b2b61e3b65ff5596d30c1530359da14a1402c6695fab8ca23582ad91291ced5ee28763ebd163687a057136bf426a24020822eb847b8
SSDEEP 98304:7s+nA1GaWnplSN+p1tcvJkeRyuRLR0vljkc1a2EdmEUlXM8T/l5lD+0/g+ZeBaAM:g+A1ApEJG36mh1ImEUPC3wA
TLSH
T113E639217B9A94ADC1AAC47483468A735A7130DB0B35B9FF44C492793F69AF51F3C328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

volt-mcp-manager.exe

Path C:\Users\Admin\AppData\Local\Volt MCP Manager\volt-mcp-manager.exe
Size 18.6MB
SHA256 b7664fa4767988aa0bfcd9a68a7ed12275451450f78a56c3835a318b399269e3
MD5 b0bf0abcc46ed221afdfde65b42f47d0
SHA1 39251456525560e5bdf90b00c5927325710a03a4
SHA512 978947cc317eaf1bf740cd1e71b1fad6b8e8855d545fd7370ce802bc89811de641f04867409687c2b82b2f9d0d345aa188e3f03f192ff0417fb8ce0d8d081055
SSDEEP 393216:v9CljF3ihj1zums5OwM2GrqKOk4Jlp9rl5:v9CljF3ihj1zums5OwVGdOkOdn
TLSH
T1FB1717217B5A99A8D09BC47483478A734A7130DB0B35B9FF449596383F7ABF46F38218
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 44415fc07afe6102dbb30e840066f7f3429053929b33f39ea46e176efc884ba5
MD5 5deeb74318708013213c8f096773f999
SHA1 3fec5ac7e241937ae4d9a70c6065451c6d3b11ca
SHA512 03332c669bf43718c9f57cb3c6bcaf4ed24a89076fbfc48b84d2d6254d2a2b29ce6a6c91bc4507e2eb21e1a34532ec78b7e82dea7fac62fb07c8ae6a680cac01
TLSH
T15AD0121636024674C01021730013B3892400C20B424551405429856F1A540500926451
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 053998d3d71ee7a0795733a2b3814b0ecc73899a0e9fe321c9988ff383bb4884
MD5 f0918d82172d4cc850790957e65d3a5c
SHA1 f975f0bec664ff7dc04e39d94d8b4e5f7a6a6cb8
SHA512 d54181f2a5572e17ffa53c24240ef7e829875dccfb56696e8b5595e655ac491286591336c970d70c174e7498dd9c05cb057c1ce735a6a813b451cacd3d43c5e2
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 366cf555efed2ffb9edf8ce1ceb0deba6a3ec637f8e8ce033d1951c8c24b1e00
MD5 cf92fb4d48c68f94928ae5ea4e0aae82
SHA1 326586941f5b6edc97968e0ce85a201bf15bc636
SHA512 96b4c8d4aafe1713394e19b661a81db19ff05d9543bc72c9b01c19d6665f9b5d9bd52bc70e983af53fe929734eacfe4a5936303368b3fd28d7411a3500515ac6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 e12b351b21827e62e29a7fa78212635f32fb926ddcf18b2934205b300f2d504d
MD5 34bf58726e8311959a965016313171a2
SHA1 16e12e1e1441911c117fa84b04e899711f7b51be
SHA512 be10a5831967e892e6be99a72734f65bfaa94d18d04c441aece946a75cfe0e0e4741ed4648f797a1842421013df676760eabb34e8767d651d3963181b94cb712
TLSH
T1D0B0923471384529E7412A7006C200A0313008D063230F07C09299718EA23888302084
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\DawnGraphiteCache\index
Size 256KB
SHA256 a0bbd29f4ffb83055cbbb50f4bb2f47fa2eb401f9093a3bb2f07ab574f878d4c
MD5 01a8a9c7d48e6df0426ed61d245be60f
SHA1 53bbacb760274899b91a9b90095ac11cd762023a
SHA512 77ad4ce48199ed17718e57d17aaf2ba9ed4a9e0aa038c6477e883c451fc24e99c41a00e29ce1df003e6cf50cd710bd835b7e35fd6bcef2aa7111d13b83c3c185
SSDEEP 3:LstlNllkll/lQkdul:LsX3lEtQU
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\DawnWebGPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\DawnWebGPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Preferences
Size 6KB
SHA256 b29bcae432f002fc4d638ba8aa297e39235701d4559fc2e4ce52af0a5636cfc9
MD5 3f02ff9542a859184657b813f2dc51ba
SHA1 432be9a6f364485246b2fa4ebc62a1abed3ca455
SHA512 77d2144706a187dfc665b9c92e7ef4121dc9a1b4e57eb399e5a18c209f2d252b3ef2f311f531053a665d37757b71d479c8497fdb43bbfe5cf2b603a3060b82d5
SSDEEP 192:stWr0dt8OfU3Z8pa1QWX6/S+WiTtLWdMRe8QnMC:stJdnVZ/V5WsC
TLSH
T1BAD1B9425E2869B74CC7F6197A35BB12E2F6906221C50E58EFFD862C05E76CD230BD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe58bbc9.TMP

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Preferences~RFe58bbc9.TMP
Size 6KB
SHA256 e5376df31db07dcff07320cb4054e02942436ce2b1176f8e6e4b78bd103c0e08
MD5 fce7e4a802ccfecf5d74493d5d0db9e8
SHA1 83f7f84740a7d59ad902285e561ab3b158ff9aac
SHA512 43050a9740664822430c102a65fb7498263d41e95b5eaa4934c10b462bae9e1165ad6e1f27faaf3b04fb09d884b910892310a227b4f37a82df0bd18cdbb2defc
SSDEEP 192:stWr0dt8FfU3Z8pa1QWX6/S+WiTWXbyXbZwdMR2XX8QnM8:stJd8VZ/VFwG8
TLSH
T1E4D1B7425F28A9774CC7F2197B35BB06D2FA506122D40E98EBFD852C08E66CC230BD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Local State
Size 1KB
SHA256 bec9b757cf3f526c60c24cea287f384e8526ce1c5b78ae99c7b5557481fa9702
MD5 210aa642459b01390e42367412913d99
SHA1 dd586d1ca7496d69349333c14ebb46137344d320
SHA512 2a749e078d56ffacb6ac456503eff79cac54c5f3734205b5912c7f35c80eeab1bd386edb249b287402bcf08df2e21cc3696783e2aebeae5dcaaf4529a4a3dc79
TLSH
T11C314573D0E02AB3AC42A245B24A7A573E51D06BC1215E0865DF5A2C02F768C973FD37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Local State
Size 2KB
SHA256 856b2a84d3776ecf23aae0270fc7292a7753013fd2033e2965c4ebbac11e305b
MD5 fed189ee42fb89509a6c9c79c805c137
SHA1 156775b78707d658beb8f34556c470f4385fb6be
SHA512 128ebd7bc06477aee063d18393f96ffd09c2c0db13ecc471386421bfe3ba0814d9e1ab80460446e6ac6deb0a85ee1a4b9cda2f2d1f0eeb0efc3310bd78e06b77
TLSH
T15451EA3368546AB798D39604B64A3F13AA31D09AD7622F145DDF1F2C02E725C2717C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Local State
Size 3KB
SHA256 83c6ec0c56a69fcb1231267d99d64237e6bfb65bc1a6bad1ec368b3b6b3f8f78
MD5 22e99bb05751396940bbedea923c950a
SHA1 58b1ab1b8b5aa2ef4d2c9f25f343a13e54901975
SHA512 69b5f98c1de5bd9fff0c33b273088b57f28d70cd2a85149a3245e5ebfa5a9b5d022665266c41c8e96ba609e6cca7a986e3ba470434c15391951be97de7b20322
TLSH
T11D71C93354B4A9774DE3EA04B9893B12B7A1D02BD5913F69D9EE0F1C02E73981352C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Local State
Size 16KB
SHA256 58843265748012685ac58b403008ddb52d910727272bf68f9dc452f9f41d69ae
MD5 8a177aa3b8abfbff6e64db0bc70af9c7
SHA1 b269e46cbf90392636f6bbe6582a99761adc355f
SHA512 04315ebec234c407d6192469419d1d37adf62a84186a3052fbe4030e95840f15fce503b9589b91f7c11663df85c611cfa67af91c0cfadd4fe8cdbc85b3d7f86c
SSDEEP 384:zL+aQikB+z/xvxjg/qhEwNbQXJo+XN9z4:W/UxvxjgC+vT9F4
TLSH
T1A3728D2B55783E23A5F3F6057A5C078BDBB5D4B290C26AB84DEE6F0A06973D80307D16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe581cf9.TMP

Path C:\Users\Admin\AppData\Local\com.voltmcp.manager\EBWebView\Local State~RFe581cf9.TMP
Size 1KB
SHA256 f0b2eadc3f62cfa2b0283dd08a4f5e791c604f471b66e5521c2d920d2d98569b
MD5 860a2a4652d370d775fbe17a0f684997
SHA1 e139511c9d4766995dcdf2a8a64a7c8783b529bd
SHA512 852ccdfd7f8e37044fef67184e8f186a6e3713774d2e3dced389bd7a79740d633d0405fdaf128f5122b7f5f5d8a7a1d8948cda3a8398812abb7cfca21bb588f6
TLSH
T1FC214273C0E42AB3AC469155A24A7A863E50D06BC2205F0CA5DF562D03E769C973BD33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1216-191-0x00007FFB7BA80000-0x00007FFB7BA81000-memory.dmp

Download

memory/1900-261-0x000001F380000000-0x000001F381000000-memory.dmp

Download

memory/3168-286-0x0000027D4AA10000-0x0000027D4AA15000-memory.dmp

Download

memory/3168-309-0x0000027D4B690000-0x0000027D4B696000-memory.dmp

Download

memory/3168-285-0x0000027D4AD90000-0x0000027D4AD93000-memory.dmp

Download

memory/3168-284-0x0000027D4AA10000-0x0000027D4AA11000-memory.dmp

Download

memory/3168-262-0x0000027D452C0000-0x0000027D452E9000-memory.dmp

Download

memory/3168-80-0x00007FFB7BA80000-0x00007FFB7BA81000-memory.dmp

Download

memory/3168-288-0x0000027D4B680000-0x0000027D4B682000-memory.dmp

Download

memory/3168-290-0x0000027D4B690000-0x0000027D4B692000-memory.dmp

Download

memory/3168-311-0x0000027D4B6B0000-0x0000027D4B6B2000-memory.dmp

Download

memory/3168-283-0x0000027D4A650000-0x0000027D4A651000-memory.dmp

Download

memory/3168-308-0x0000027D4B6A0000-0x0000027D4B6A3000-memory.dmp

Download

memory/3168-316-0x0000027D4B6D0000-0x0000027D4B6D2000-memory.dmp

Download

memory/3168-314-0x0000027D4B6A0000-0x0000027D4B6B0000-memory.dmp

Download

memory/3168-313-0x0000027D4B6C0000-0x0000027D4B6C8000-memory.dmp

Download

memory/3168-291-0x0000027D4AD90000-0x0000027D4AD94000-memory.dmp

Download

memory/3168-319-0x0000027D47BB0000-0x0000027D47BB3000-memory.dmp

Download

memory/3168-320-0x0000027D47BA0000-0x0000027D47BA5000-memory.dmp

Download

memory/4612-317-0x0000021FBB500000-0x0000021FBB546000-memory.dmp

Download

memory/4612-294-0x0000021FA2B30000-0x0000021FA2B52000-memory.dmp

Download