16d52377a45c36711159402bdb472222c29cb9637bbe9c53b006352dc7f26b46

Analysis

max time kernel
149s
max time network
154s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/07/2026, 12:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
end-launcher.exe
Size 5.3MB
Sample260714-pmwrdafs2w
SHA256 16d52377a45c36711159402bdb472222c29cb9637bbe9c53b006352dc7f26b46
MD5 bc87291918e8ccb6c0f452aa0b44328a
SHA1 d882ac0e9811ffa0495fa65cb1333e8386262cbd
SHA512 793c8612366974396b2dd29072e44efdd57de83b8c7f9b94706edbae0a2abd6ee23e85d9fed4bd4a7eb5c10c0b8f16f9a9357f52d62c27cf89d53658ea7636ed
SSDEEP 49152:eGhBTCr3tgbFzJB2tHaTsT2OSbS2yQF2WuGfZA96v3L5BT144BrwSM1eW8cB5nVx:1TsJaTXoWM6mp1B8+nVQAvfwbnbkwk
TLSH
T185466C03F6A281ECC06EC179C35AA633EB36B88D093076AF5B941B212F56F506F5D359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	end-launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 22 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1666020928\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\female_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\us_tv_and_film.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1079368527\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_580837298\crs.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_580837298\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1666020928\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\model.markov	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1079368527\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\ranked_dicts	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\surnames.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\test.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1079368527\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1666020928\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\english_wikipedia.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\male_names.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_1684492928\passwords.txt	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_580837298\ct_config.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_580837298\kp_pinslist.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3896_580837298\manifest.json	msedgewebview2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2116	msedgewebview2.exe
2116	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3896	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
5704	end-launcher.exe

Suspicious use of WriteProcessMemory 28 IoCs

description	pid	Process	procid_target
PID 5704 wrote to memory of 3896	5704	end-launcher.exe	87
PID 3896 wrote to memory of 1416	3896	msedgewebview2.exe	88
PID 3896 wrote to memory of 4296	3896	msedgewebview2.exe	89
PID 3896 wrote to memory of 4296	3896	msedgewebview2.exe	89
PID 3896 wrote to memory of 4296	3896	msedgewebview2.exe	89
PID 3896 wrote to memory of 4296	3896	msedgewebview2.exe	89
PID 3896 wrote to memory of 2596	3896	msedgewebview2.exe	90
PID 3896 wrote to memory of 4744	3896	msedgewebview2.exe	91
PID 3896 wrote to memory of 4744	3896	msedgewebview2.exe	91
PID 3896 wrote to memory of 4744	3896	msedgewebview2.exe	91
PID 3896 wrote to memory of 3424	3896	msedgewebview2.exe	92
PID 3896 wrote to memory of 3424	3896	msedgewebview2.exe	92
PID 3896 wrote to memory of 3424	3896	msedgewebview2.exe	92
PID 3896 wrote to memory of 3424	3896	msedgewebview2.exe	92
PID 3896 wrote to memory of 3424	3896	msedgewebview2.exe	92
PID 3896 wrote to memory of 4396	3896	msedgewebview2.exe	96
PID 3896 wrote to memory of 4396	3896	msedgewebview2.exe	96
PID 3896 wrote to memory of 4396	3896	msedgewebview2.exe	96
PID 3896 wrote to memory of 3720	3896	msedgewebview2.exe	97
PID 3896 wrote to memory of 3720	3896	msedgewebview2.exe	97
PID 3896 wrote to memory of 3720	3896	msedgewebview2.exe	97
PID 3896 wrote to memory of 2504	3896	msedgewebview2.exe	98
PID 3896 wrote to memory of 2504	3896	msedgewebview2.exe	98
PID 3896 wrote to memory of 2504	3896	msedgewebview2.exe	98
PID 3896 wrote to memory of 2116	3896	msedgewebview2.exe	99
PID 3896 wrote to memory of 832	3896	msedgewebview2.exe	100
PID 3896 wrote to memory of 832	3896	msedgewebview2.exe	100
PID 3896 wrote to memory of 832	3896	msedgewebview2.exe	100

C:\Users\Admin\AppData\Local\Temp\end-launcher.exe
"C:\Users\Admin\AppData\Local\Temp\end-launcher.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:5704
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=5704.3052.8392288184094358630 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3896
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView /prefetch:4 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x18c,0x190,0x194,0x168,0x120,0x7ffbb08e5fd8,0x7ffbb08e5fe4,0x7ffbb08e5ff0
    3⤵
    PID:1416
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1772 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:4296
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2084 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:2596
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2288 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:4744
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --autoplay-policy=no-user-gesture-required --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3444 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f /prefetch:1
    3⤵
    PID:3424
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4440 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:4396
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4532 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:3720
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4348 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:2504
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4636 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2116
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView" --webview-exe-name=end-launcher.exe --webview-exe-version=1.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4444 --field-trial-handle=1776,i,16214428998877326957,5957449743333881211,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:09a140d738df602b296b0df0cb2a5028bb0a353f
    3⤵
    PID:832

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c857796cc38eb37dcd37067cad9def6119197ee3e0ae853de1414e2392a4aca2
MD5 2cd03c7133ef410366db06d4a18b65d0
SHA1 7d238aeb0853e5777c9ef01c585e0ea0df0396e7
SHA512 396aa9ed851281da3437fae9ea73abd5184737c2317a14f6ed48e5f7798f27c82149b01707e1f3b53a53561289b2b89e9e25df9a4e054b69e73ba62fa2e82f70
TLSH
T167D0123A77020174D43030330403770C0D00C60B804E8005D43C871D1E046501D02851
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 2ef32808a2a97fd271e2c2b9aba5e7ad48aff723ae123b8f158c70c1f4e02a18
MD5 917947925b5db0f6e3129510e19d9cb2
SHA1 2ab023770638221f64072a4f368ae825d821e78a
SHA512 a20362b37bc3d676ea71e6780429a30c4f317fed2c0d95ec908ddd8ca8d5c7fbcb9840af11df5a66b9f847820c44bf2790e01efdabc716fc4a740a7500261735
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 6ec55aae292f7a0eb6b492c92fed54d09920850d857366c42a85f38c84fd52eb
MD5 b011f3e73bc5a1b2d05050976ad57b43
SHA1 fccd10f5802b1d1f645c3b71705a77f7ec0ebbfa
SHA512 dc0bf90a986779c0e4a2acb326832e4b9bc046f62f733dad0957b85e2b1203e1df0d2feca2fba1beb17b35fe16521d59fe44cfb9faa212cd4b1237cbde0a2c85
TLSH
T1EBA0027401D0821BC500837B20C1C98233744838B243361591F001E9CD94795D3D6901
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59a7ee.TMP

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59a7ee.TMP
Size 48B
SHA256 ad4bf6f8e935ebe67aa4003ae2d114f37bd4b80d45615dfc0bda6beb7d2dd09a
MD5 ebbddd53e6d9c90b0ff589a124fcef3c
SHA1 e580faed3c0508f87f421145a8fd68842de21773
SHA512 c887d5d322c37dc17dccf09e8a81e6ec5b130be90de58304f535784b0f3c08cc75ac349cfdb02da086dd4284506cedb3935b12b4022bf8ae18d2264e1d829dd6
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Extension Scripts\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Network\Network Persistent State
Size 821B
SHA256 c43ae6d9905c7624603c7f488b5209b789c2767b05593c25e4c620fc08d41690
MD5 924c3782dfd88f4c37d9175e1207f5df
SHA1 00e7cfa110441b5f6c53e2242bec4041630a6006
SHA512 a7f69eeba6602574272a543684e9423fce61d8b73160e08964d25cc32af0de58610ef77289879b078e4c0f7908d7092323209b34e2802aeada19d2db69179cac
TLSH
T1DC018EA2C3E4C67D8A4127E02B347823CD2E042A92283D27CDFAEBDA67E1471D11054F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a6af0.TMP

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Network\Network Persistent State~RFe5a6af0.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Preferences
Size 6KB
SHA256 e8744bae70e3f63d34fe8934ec4950a38690f962484c3575dfa21e97a86c57c4
MD5 8a82aa6f5eeb426c4235a79cd13111c8
SHA1 0e29a23d95cca0fc93f68c0c88b47083583592e9
SHA512 561508c2e113264cb2f569512b842d3549003ebf99f10845f9ea8ed7c54f18e4d4b53fcd5868c4a0c7fed26d5a3b1a4b364defd2964a9e67b7fc3c3a637053e1
SSDEEP 96:st9/dBVEA+b94k6o5h16Z0ps7/x+6MhmuecJYjS1ejepK+g9oN28XM1C7K:stBpNNonpsV+FdYmQjXjoNG6K
TLSH
T1E7D1A4029E28697F4CC7E509BA39BB56E2F6507271D51E58E7FC861C08DA6CC2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\Preferences
Size 6KB
SHA256 0b40ae763f77e16d68157f5f6a5a33c0fe531d487ce39a2d2b7abd2b773fdee4
MD5 61a9406d47010dab0f0c7a1d9e16a5de
SHA1 9393b67b2fbaee5068d544ed852d5fdbf694f185
SHA512 affca8791db0efe41681239edb49d2216a71b7c857fdef7f452b8d84b75e3ea71f69c74d4d88b8e3eb7dd35236bee6418e21ff4e9869ce61fcda1d63b18bd6b3
SSDEEP 96:st9/dBVEHG+b94k6o5h16Z0ps7/x+6MhmuecJYjS1ejepK+g9U28XM1C7K:stBpHNonpsV+FdYmQjXjUG6K
TLSH
T1C2D1A4025E28697F4CC7E518BA39BB53E2F5607261D51E58E7FC561C08DAACC2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Local State
Size 2KB
SHA256 3079caea970168e4c166c028a1cb122bf73315f644750f6786f3e4e2363208ff
MD5 3e1e2023422522ad0875c9170b596ba7
SHA1 daa3c113bdb426f6fc5fd35a0d68865316479e42
SHA512 409bb16429bafa6c9df2ad5e474e6f4eb458f021aa67e58b4ad36f39d057ba2b9cd7e9722da493fbeb2a05cde77a616e697f8e22683793cb93f8fe7e7a6bc1ea
TLSH
T1F951A833AC209A3A95E75A1479467FB3DB7550A6AFA22F54E7DC170801C750C2753C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Local State
Size 3KB
SHA256 6287d44d8f36d56bbc9c760efe99cd4854cb0e8e39c0d3158f157d12265e989e
MD5 161d9d575d4e40e5bc281dae225212de
SHA1 1acdb228359efc5edae73b64c97dc64ad6b63409
SHA512 092829e504047c04b3a2dc5b2ee15bc0032328f3932648f23685e850ebf3d5505b597c8ca77e99f08fae1627e34e7f7e929720168ee007fe6631a30a841cb62c
TLSH
T11A71957BAC70993B59E79A14B8863F66A7A51077EAD53F99E6EC0F0C01C32481353C27
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Local State
Size 15KB
SHA256 3dd75145e35d0aa0c3738b5615e29a8bdd5a5bfe62cae9b8e5133e5a534d36e2
MD5 fe0a26ceea80886dec67645373f8d2b8
SHA1 827e122aaad1c2672a6f10beb5ac5422aea2a1f3
SHA512 1512f53b590ea42616130219ad4ad5d4a90d1c773017dc2f38ed853770fd72f99d75d9678233c0a20772cb9b6bf906d3c95c0e68791625658c1f751b9a4fae63
SSDEEP 384:Isrv+89zHqlDNP9oidkNBSYoRPxisdyN8:zrv+4UNbdbtxiswN8
TLSH
T1A072BF33EC38A6375EF39D05B48ABB173B7860A756C24AB4E5D81B8C418B0C92357D43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe5953a4.TMP

Path C:\Users\Admin\AppData\Local\com.endlauncher.app\EBWebView\Local State~RFe5953a4.TMP
Size 1KB
SHA256 1e8ff77e1142d8433b69885e10f135513c13dcbcfb25d2ff867c89508de3fcd6
MD5 352ca0ac940abe61c8f2e4798406b0bd
SHA1 c9bb4eb7b37c1761c4fe353caba35df51b79fe46
SHA512 9b2f11fe0a757d875e4d63acbc838da1d1738d79166e61ede30ac979e127532e26bed0967f158e2041c88faac4f95b6206f8d346aff2b3e6e83ce521afd67a25
TLSH
T1C3317476DC604B32A4DA69167182FEEB6F7010BA57A10F44B6DC071901D300C6A3BC31
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2116-338-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-339-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-341-0x000002AB3CFE0000-0x000002AB3D26B000-memory.dmp

Download

memory/2116-334-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-328-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-330-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-335-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-336-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/2116-337-0x000002AB39F10000-0x000002AB39F11000-memory.dmp

Download

memory/3424-102-0x00007FFBCF850000-0x00007FFBCF851000-memory.dmp

Download

memory/4296-203-0x0000013E15550000-0x0000013E157DB000-memory.dmp

Download

memory/4296-26-0x00007FFBCF850000-0x00007FFBCF851000-memory.dmp

Download

memory/4396-229-0x00007FFBD01F0000-0x00007FFBD01F1000-memory.dmp

Download

memory/4396-228-0x00007FFBD07B0000-0x00007FFBD07B1000-memory.dmp

Download