83ebdaa639d790df6c2c828b574d623b6ec35fe021c208870bbe6cb4e63dd89e

Analysis

user interaction
yes
max time kernel
137s
max time network
138s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
15/07/2026, 15:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
MincedLauncher-1.2.exe
Size 1.8MB
Sample260715-s41nfaa151
SHA256 83ebdaa639d790df6c2c828b574d623b6ec35fe021c208870bbe6cb4e63dd89e
MD5 ea3e9d349b2503949824b9f6c7ef5d0a
SHA1 480755b75e6cdb1ed6d8076da1a4d7b109a866bb
SHA512 331fd7dea0660f21290fb7a99b3eb0433109b6b0f1a5b4235ca2e9d5479ee24fe0e86bf71ae1124597d6f2c571c03e140e404ebcc0fbdd264c736fee0e24a727
SSDEEP 24576:oXfbtt8BdHmthdbD6mlfjFUHs6Uan/JomxPOxl2niLySFW3mzk7KjI6k2Qtc:ktt8BdGndbumlfJahDomclHYSk/p2QG
TLSH
T10C855C1AAF20949BCE91F77C445EB2B2F4D4D7917A724A0CED5432D2D4B21082AD3FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery trojan

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
5	5848	MincedLauncher-1.2.exe

Executes dropped EXE 1 IoCs

pid	Process
4896	launcher_base.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	launcher_base.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 9 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_582507581\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_582507581\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_695991422\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_695991422\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_695991422\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_695991422\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_582507581\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_695991422\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1924_695991422\_metadata\verified_contents.json	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4896	launcher_base.exe
4896	launcher_base.exe
2632	msedgewebview2.exe
2632	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
1924	msedgewebview2.exe

Suspicious use of WriteProcessMemory 23 IoCs

description	pid	Process	procid_target
PID 5848 wrote to memory of 4896	5848	MincedLauncher-1.2.exe	88
PID 4896 wrote to memory of 1924	4896	launcher_base.exe	89
PID 1924 wrote to memory of 1732	1924	msedgewebview2.exe	90
PID 1924 wrote to memory of 2064	1924	msedgewebview2.exe	91
PID 1924 wrote to memory of 2064	1924	msedgewebview2.exe	91
PID 1924 wrote to memory of 2064	1924	msedgewebview2.exe	91
PID 1924 wrote to memory of 2064	1924	msedgewebview2.exe	91
PID 1924 wrote to memory of 2676	1924	msedgewebview2.exe	92
PID 1924 wrote to memory of 6900	1924	msedgewebview2.exe	93
PID 1924 wrote to memory of 6900	1924	msedgewebview2.exe	93
PID 1924 wrote to memory of 6900	1924	msedgewebview2.exe	93
PID 1924 wrote to memory of 2776	1924	msedgewebview2.exe	94
PID 1924 wrote to memory of 2776	1924	msedgewebview2.exe	94
PID 1924 wrote to memory of 2776	1924	msedgewebview2.exe	94
PID 1924 wrote to memory of 2776	1924	msedgewebview2.exe	94
PID 1924 wrote to memory of 2776	1924	msedgewebview2.exe	94
PID 1924 wrote to memory of 4292	1924	msedgewebview2.exe	97
PID 1924 wrote to memory of 4292	1924	msedgewebview2.exe	97
PID 1924 wrote to memory of 4292	1924	msedgewebview2.exe	97
PID 1924 wrote to memory of 4588	1924	msedgewebview2.exe	98
PID 1924 wrote to memory of 4588	1924	msedgewebview2.exe	98
PID 1924 wrote to memory of 4588	1924	msedgewebview2.exe	98
PID 1924 wrote to memory of 2632	1924	msedgewebview2.exe	99

C:\Users\Admin\AppData\Local\Temp\MincedLauncher-1.2.exe
"C:\Users\Admin\AppData\Local\Temp\MincedLauncher-1.2.exe"
1⤵
- Downloads MZ/PE file
- Suspicious use of WriteProcessMemory
PID:5848
- C:\Sk3dGuardNew\launcher_base.exe
  "C:\Sk3dGuardNew\launcher_base.exe" DpBob73jazoUFGNz;ZXdBJlOqEUddBmbXIgUXFipwKhoZ0D1vB4tW5znYti2UGxgoPr9zNNVDvyocvL08xBpEeGO380Wc//TdF2UGQWlnqglB3PYH86nb;
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:4896
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=launcher_base.exe --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4896.4620.11286884224160696231 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:1924
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView /prefetch:4 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee --monitor-self-annotation=ptype=crashpad-handler --database=C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x198,0x7ffe22455fd8,0x7ffe22455fe4,0x7ffe22455ff0
      4⤵
      PID:1732
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1888 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
      4⤵
      PID:2064
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2208 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
      4⤵
      PID:2676
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2396 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
      4⤵
      PID:6900
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3420 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee /prefetch:1
      4⤵
      PID:2776
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=1236 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
      4⤵
      PID:4292
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4616 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
      4⤵
      PID:4588
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView" --webview-exe-name=launcher_base.exe --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4704 --field-trial-handle=1892,i,5597679580975545964,16743895151107137587,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:0dada269b43f9795da0ba01ff48f9261a5b22fee
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:2632

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 a9cb9b0bd899f01cef497fcc2f1ba01a0475c3d762c7df39ce31cdd0e4c21a87
MD5 0395f8025d4974a67799575d6cf7d484
SHA1 6a99eeccd6344f312c81c534a43daf7e8872a41c
SHA512 dd9fa44d1ae81d8bd8697cae7a3d31610d35ba174372a55fa4a4e91dfde8d18dd075a772c366cbf21e02365949fa0d7601aa380510fd765fcb93f2294c556bdb
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 c5e60040e1bf6c234a0f272f41edce048ffee979762e219dc8e72db5d8533593
MD5 b939e964b7e04ddc53882ece5bd6738f
SHA1 0bec0a124773654c03265b1bbe48214cebe18090
SHA512 fe543ce9d4413f57e2aab804719b3412edec3c6bdd3b61be87ead275cb61bb2c34f51dff467c0e48a34772146b6dbe02b667e8fd36720e4e41e2b85d481f3dd0
TLSH
T18ED01292BB028178C81030335402630D1400C31F41054100E828CD1D5A044E40F02482
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5ac9f8.TMP

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Network\Network Persistent State~RFe5ac9f8.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Preferences
Size 6KB
SHA256 1f439539effac72a8cce4492086c9832e4fb2d783b40015f29477aab6c52e011
MD5 1c814ae0c1f124fb749c4dd6eda393b5
SHA1 5b434fcffde6044e7edd9b92db918fe98dc54921
SHA512 1e4548d3ab193cbdffcf3efcdf75b2620df9eeb8e5b4702dbe701fffbcf6b2cb4c8da0d2f0312bcdfaf3852a2741dcdba40da44fa171fb94e172c058f2c97094
SSDEEP 96:stA/dmabKt/b98kpo5h16ZJps7/x+6Mhmuech+11ejeKK+gZw28XM1C7K:st0sahqompsV+FF+1Qj2MG6K
TLSH
T156D1C7135E64687B4CC6E209BB39B647E2F6603166D55E58E7F8461C04EB6DC6307C0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe59dd95.TMP

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Preferences~RFe59dd95.TMP
Size 5KB
SHA256 37a78ea98fa52169bf621a6dfc1c762483385a4fce7af1bf0b7a601df287d0bc
MD5 6ca70c05a7cffa7512a8550deafa5c89
SHA1 28a4b5e91ab91ab1402de18ae37f9d1b7f1e643a
SHA512 555dc6277e249fe3a8247bbf5c369fa857e91f4e1fbde2099c67d471c268721b4ba6edb84f4cfef5a78968c31d3909449589b0c29dd382e0dd4cbe7b922d80a6
SSDEEP 96:rA/dmabKt/b98kQsdo616ZZs7/x+6MhmuecmjeKK+g1w28XM1C7K:r0sah7CojsV+Fij2cG6K
TLSH
T114C182125E28A87B4CC6F10DBA397A43D2FA603276D52D58E7F8461C08EA5CC231B80F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Local State
Size 3KB
SHA256 625515485548a6ed71ce8ea2e6feeadf93cd770e3a8dabcf2e226f600d33502c
MD5 dce168f6c17a248d9c83b2e99d636525
SHA1 94877e4cb5a875dd763d7745b10edb11c22e839a
SHA512 555d101a9b77da296814efd38d6a9d587a31778098d745944fa00d7805f080f2975bb7e67e797ba8350efba694f1cf506d850138c22eaa2faae8ead4e071cf91
TLSH
T19D717577A4A4A93B8DB3D50979863B07E7654067AA827F95DAFC0F0C11CB2981353C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Local State
Size 2KB
SHA256 cf24acb1a33d26ee4fa437c5b47066492b4e55524826c0db4b57f4b6e290ac39
MD5 77e60b4678bb4c7b6acdd0587b2e5f37
SHA1 264c841578ec8dd59e5ef0175bd575e92c4ae16c
SHA512 ad354dc2fe5020beb1b1e1f8d90c40eb0992b14e1c92dae9d1ef1f263f252e5b1cf47f973bafbb4dd3a20d07271654ed3aa832df27dd036fee5689c2949ac68d
TLSH
T1BB518433A8406A3AC9B3860976467F57DE3640A5AF526F51AAEC0B0801CB45C1757C3A
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Local State
Size 3KB
SHA256 37e57de6012b652c63414f1c431cd6bcf5071806088aa430fdb2a0061d03d331
MD5 817575ef940d3c366e4d5d3412aebb36
SHA1 6a8fde912cb5ea43ecebb1be34f1015925560591
SHA512 7e1b6bb8e20d75715d9b509c57e7308eb4e2461724455e614b7f8163e383ec279b933183e5ab4c9b0371585fdc82cd1bd2b925cd9a8607175a4a2f1e2fa2cb32
TLSH
T17E719737A9A0A93B89B3960979863B16E7A64076EA827F55D6FC0F0C01C72981353C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Local State
Size 15KB
SHA256 9c1cc170106b486c102ef68c72ee3113c355806090d69895743e3d0052bb94ad
MD5 9b38f29b5d08056de0cb3186d038d774
SHA1 35076b2f442efcf6d2b8159d2b6914dcf26b829c
SHA512 860efc9d4bb7b6b970d8ef53c13020e7a3a573b0fc24d7ab2e7a49d349e51db20c475967bd1af93534b30d552e254f25ac76149cfcfe3a48884848591b854015
SSDEEP 384:asrv+89zHqlDNP9oid6NBSb8A8KwHHdc7P:lrv+4UNbdCnKkdK
TLSH
T1B072AF33A578AA379DB38409B4873A0B3F7850A656D24BA4DAE81F8D42DF0D92317D13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State~RFe598469.TMP

Path C:\Sk3dGuardNew\clients\Minced\.webview2_cache\EBWebView\Local State~RFe598469.TMP
Size 1KB
SHA256 0b25cdcefce475704e01a447c92c0b438da80ec7eabd36c17a8f7b17370a2454
MD5 3f10261120802a6a2c23037f4a533c3c
SHA1 ae4e9c7ea5c0c4c58bf40a90b70125353c51e616
SHA512 b20bf46e7b5743fa033c50fecfc291d9178b8b4d555acafade7096368e63bb40a58802b7d7bad4d159deef524c6cac7868614fd151866fc61fbab757390c7960
TLSH
T11B315773D4915A36D862910A3241BF9B9F2200BE9B418F4476ED4B0C12D649C977BC36
MD5 SHA1 SHA512 TLSH

Submit Download

launcher-log.txt

Path C:\Sk3dGuardNew\launcher-log.txt
Size 292B
SHA256 2abff93cdf4241636f8b8d269c779f03d9c5f32ec35f2cfbce36cb1083f14936
MD5 2cd3ff7f38371ac91485df82cc993a86
SHA1 b7d99e8e25696905f52c754adb2cb44d6e9ce7c4
SHA512 c7b24011bc41ac15e1ed1b27b2acf2628ff9acf56b7cb443b09c81987a93b1edcc9f6d700f7c7b63a45df8c686a348773cf329a3230804bdced6f0051e25c2d2
TLSH
T154E0EC52166820A66492C118F08D2F908FFC79AF9D521C6623C7890C2724C537B1FC20
MD5 SHA1 SHA512 TLSH

Submit Download

launcher_base.exe

Path C:\Sk3dGuardNew\launcher_base.exe
Size 18.2MB
SHA256 cafa62fa75017b60e0994e530510c5180d8bb86301ff36215a4a87b5b8c5fe97
MD5 c9833151d4607b751ab1903bfe2cc4bf
SHA1 32e168ccbc44b59f0d35cc6a68f61e7d9181ef0f
SHA512 2858257c2402212cef1f9227f6a41e5f0302619e8edc3b209d860603aba9140e1e14e2f25efdbb0a3f44b60b976d257b7e99c2e4e8020f18c43c88bf342d7a0c
SSDEEP 393216:rshSa1a+99dDLdZ2oBMq/7iQUK8KPBV2NTASewOJ2OYAO2YnQCkpKMqN8YTP+:IhST+99dDL3JBMAOK8KJV2NMSewOJ2Of
TLSH
T1F117333F3F8750B2F859DF345C24E11ED574BFE5ACA292A40619B39E157012E1AEEB80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/2064-121-0x00007FFE42C20000-0x00007FFE42C21000-memory.dmp

Download

memory/2064-209-0x00000197025A0000-0x00000197026F9000-memory.dmp

Download

memory/2632-366-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-368-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-377-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-372-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-376-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-375-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-374-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2632-373-0x0000010B8BE50000-0x0000010B8BE51000-memory.dmp

Download

memory/2776-146-0x00007FFE42C20000-0x00007FFE42C21000-memory.dmp

Download

memory/4292-294-0x00007FFE43350000-0x00007FFE43351000-memory.dmp

Download

memory/4292-295-0x00007FFE43B80000-0x00007FFE43B81000-memory.dmp

Download

memory/4896-30-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-29-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-28-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-32-0x00007FF72108F000-0x00007FF721D0E000-memory.dmp

Download

memory/4896-34-0x000001BA48730000-0x000001BA48731000-memory.dmp

Download

memory/4896-33-0x000001BA48720000-0x000001BA48721000-memory.dmp

Download

memory/4896-42-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-35-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-36-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-37-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-40-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-41-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/4896-39-0x00007FF720450000-0x00007FF722246000-memory.dmp

Download

memory/5848-10-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-4-0x00007FF677185000-0x00007FF67728B000-memory.dmp

Download

memory/5848-1-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-2-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-6-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-11-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-12-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-7-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-9-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download

memory/5848-5-0x00000281F9D60000-0x00000281F9D61000-memory.dmp

Download

memory/5848-0-0x00007FF676FD0000-0x00007FF6772F6000-memory.dmp

Download