0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa

Analysis

user interaction
yes
max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/07/2026, 05:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Battly-Launcher-Windows.exe
Size 17.2MB
Sample260731-gc9aqade96
SHA256 0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa
MD5 dc1c0cf4c0e8d8fd4b9119d9b3fc0796
SHA1 cb5f25073002b224bb62039dab668f14e4aca8ea
SHA512 5ae5bb6b7150edb190d866a46bee97deb99c0ccaf1a58939d15c5ad643a2efbdecf3610f0b800f1d9775bc64061d337af9697c06950f0521c3634e9b93d4f3e7
SSDEEP 196608:8irZn74T6LTwKcKngnckbRjVCPEEKnCMu6eawO80Qv5jC0J:887DLTwKcKnRe9QKna6uTT5jC+
TLSH
T17B077C227B9A99ADC05AC47083864B725E3174CB0B35BAFF448496782F6DAF41F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Battly-Launcher-Windows.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3252	msedgewebview2.exe
3252	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
4700	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4156	Battly-Launcher-Windows.exe

Suspicious use of WriteProcessMemory 16 IoCs

description	pid	Process	procid_target
PID 4156 wrote to memory of 4700	4156	Battly-Launcher-Windows.exe	89
PID 4700 wrote to memory of 4408	4700	msedgewebview2.exe	90
PID 4700 wrote to memory of 4932	4700	msedgewebview2.exe	91
PID 4700 wrote to memory of 4932	4700	msedgewebview2.exe	91
PID 4700 wrote to memory of 4932	4700	msedgewebview2.exe	91
PID 4700 wrote to memory of 4932	4700	msedgewebview2.exe	91
PID 4700 wrote to memory of 4172	4700	msedgewebview2.exe	92
PID 4700 wrote to memory of 6044	4700	msedgewebview2.exe	93
PID 4700 wrote to memory of 6044	4700	msedgewebview2.exe	93
PID 4700 wrote to memory of 6044	4700	msedgewebview2.exe	93
PID 4700 wrote to memory of 2360	4700	msedgewebview2.exe	94
PID 4700 wrote to memory of 2360	4700	msedgewebview2.exe	94
PID 4700 wrote to memory of 2360	4700	msedgewebview2.exe	94
PID 4700 wrote to memory of 2360	4700	msedgewebview2.exe	94
PID 4700 wrote to memory of 2360	4700	msedgewebview2.exe	94
PID 4700 wrote to memory of 3252	4700	msedgewebview2.exe	98

C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-Windows.exe
"C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-Windows.exe"
1⤵
- Checks whether UAC is enabled
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4156
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4156.3096.590398722686413942 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:4700
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView /prefetch:4 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffab2455fd8,0x7ffab2455fe4,0x7ffab2455ff0
    3⤵
    PID:4408
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1724 --field-trial-handle=1728,i,18125120732148066800,6837370292420564301,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:4932
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=1740 --field-trial-handle=1728,i,18125120732148066800,6837370292420564301,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:4172
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2288 --field-trial-handle=1728,i,18125120732148066800,6837370292420564301,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:6044
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3364 --field-trial-handle=1728,i,18125120732148066800,6837370292420564301,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06 /prefetch:1
    3⤵
    PID:2360
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2128 --field-trial-handle=1728,i,18125120732148066800,6837370292420564301,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3252

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 ddd8cf7de7be6f2ca044f64b0776a9edd7ec0f950f05408d525c020a7f2a3fb7
MD5 13471f1e106126113d5dd32bd96013ad
SHA1 444aea606636ec4693ba61ff12a850bb634681e3
SHA512 1c1827bed7ab0da4461465242fb877631c67e12650ffe0bcc74987caf25b7bedd9a4bf0027a8d305b143478ab965f11eef645fc2306937e1c64e753c10c3983a
TLSH
T1A1D0122336024238C4202033180272483800C30B404D45045438856D1B084F81902462
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 17134e9fe597b5bd72781bd14519728c287443f8259755f0b0bb9b194da62452
MD5 d3115c7fdc983b847fafe5f2df9bb131
SHA1 22f76f5ede5f377f6438cb3f5fb3e0834a3fa74b
SHA512 76dc8ba6b2e3f6ebf56218aef32404f9e76d8bb1ee7dd096e6801b73edec9749f53ae9601121d5720940694e3fcdc51038263a96b389a7e791c2cec5686e3ebf
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 4f18fda5abb809ebacdc1d4716770173b56f7126f87309c2dfd213d8bf339d13
MD5 d34b6a6a2fb19f8086ac28c25c3d7408
SHA1 62e80c797473eb80a9be5c73119dba7261696a44
SHA512 fb82ac91076ae0f6a3261ed1a47ea6deaff17459fc3e0ba5b9c572727574f8c01a39c931187c2d54064c88b7bd7da3ebe725ea7c0bd83a6a6bdd46d9dec7dcd7
TLSH
T1CFB0022276202022E3945BB85ACB4040393E3CDE0363EECA80E152B6A521F92CA215CA
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe598255.TMP

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe598255.TMP
Size 48B
SHA256 398dc90a84f2883b1f5203f6ca6b3270863f55440abdab0d08837bd40e439df9
MD5 c65358d7088ac2b9585a2741d9c4dd3d
SHA1 c10f436c3e16373c15eaa3a17e5821986f9cdd78
SHA512 abea0e98269178a4cdf22d11dfae5a79ce5c0fc540c9f96cf36ce067423c6f4e1bdde2beab4bb41047f90c4f74c528e6828aa6e212c4a02dca6dbd3b4cde5df7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Network\Network Persistent State
Size 821B
SHA256 372a2efd7b74efb47d998ee53517bdb7f6dd75069f059233ce77a3bfeb2f12fc
MD5 e08066a82ee4ab2c5343cda44fcc78cf
SHA1 a32e5e64ca4d3f051b9137ac027c39f45b7ce6a0
SHA512 855e3e2a039d7e675b15bab073ee42a488464c564b4f23aad46300667797892404f29e217dee0e7d6f2bef4563fc5af04cca5ccd5bf397762183a652945fe25c
TLSH
T195018EB6C3E8D5AD8A5112F866343C1BCE2D081906783D2AC8E4EFCF87E1070E20464F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a4538.TMP

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Network\Network Persistent State~RFe5a4538.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Preferences
Size 6KB
SHA256 b55493f17b742e0422c03485ff33152d24b33cd85608bf7b418d1f9ad6661732
MD5 83e5cc6bbcc8f81132783e895ad6b8e7
SHA1 c5195ddb03892f0340706c12b937ec3275fcbb33
SHA512 d85c9aa7b9c26a795d20a892649d7fdfcbaac454063561fb5fba0a6242f00e0e876cc2057333c3cf979492d27256fd86b010d879fd5c532c13fce3109ef42427
SSDEEP 96:stC/dobKeGVb9tkdo5h16ZP3s7/x+6MhmuecpJ21ejeoK+gw7Y28XM1C7K:staYg0o+3sV+FNJ2QjEO7YG6K
TLSH
T193D1B8025E2468BB4CC7E109BA39BB27E2F56032B5951E48E7FC8A1C04DA6DC2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

c43025d4-1c27-4c58-b30c-a8c2845a885d.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\c43025d4-1c27-4c58-b30c-a8c2845a885d.tmp
Size 6KB
SHA256 8669dc1c1ec95ea22a2d81ba5e1e4f4b6579c9b01208877a2846a47cf6c6b44a
MD5 ce9eb085b9d3c8dae39b8c9a3198cadd
SHA1 c658b8a03d2176e0e24d597281425bf1e363a3b0
SHA512 57d622e8a8955a41bff0a443b8b5721b81a4c77142214e247d77212558f3a348111c4a0d814087441da32b322cf2b5c6c93540736c44616063f7c9ec36c8f222
SSDEEP 96:stC/dobKfVb9tkdo5h16ZP3s7/x+6MhmuecpJ21ejeoK+gwT28XM1C7K:staYO0o+3sV+FNJ2QjEOTG6K
TLSH
T1DAD1B8025E2469BB4DC7E109BA39BB17E2F55032B5D51D58EBFC8A1C04D66DC2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Local State
Size 15KB
SHA256 2b525cc32bc1877f55623bd8be8a025f5c7cba7e769b5d7e49e094cab8178605
MD5 313fd3521e9dab9849f72ee74451db7e
SHA1 95910c8683f54ce0c36da39e2f95641dd1dcb059
SHA512 e4c11926171379a664b2414fcb45a08662fda7145b0699cd7e2d0da865e60826b5332158b9b21901fb0bf39c246405239d81a6f8e586bdbe1ab671f291bc3126
SSDEEP 384:k+aQikB+z/xvxjg/qhENNBSAnLwJu8Okb49zL:D/UxvxjgC+DLhUb4FL
TLSH
T11872AE3B55787D2396F3E6047A5E175BDAF988B2D0C22EB44AAD5F0E0AD72D80302D17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Local State
Size 2KB
SHA256 fe8c73a8c82cb4f41db9b816cce619ed7a3e1aa9ff0a5d05f796714559a483d2
MD5 beb57095f99cf0e9a55a92de9bc0bae4
SHA1 617b3647e5df4fca10905b6429998247f67c0be4
SHA512 44f8c879d257d3771405f52f5f4937fed25f0cee6691e4e27a03db7f4e2565fab1e0d91c099b1d574b644d7353fbc4daf1c04250b997a14cb47090645600293b
TLSH
T1BC519533BA649B778AF34A09B96A3B339B7650A2EA512F5096DD0F0C00D759C1702C2B
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Local State
Size 3KB
SHA256 b5d20ad27f89870a4d4a2fe65e40ac00b3b1a87af438713b10903010f42ee11e
MD5 462e52f85b7b325daf77cd4b9b909275
SHA1 de9b4a510498d31c071559a65caf96b1c77d1b67
SHA512 8e6d73efe2cdf306e6466cc2609dc5c5236893e0ec71351dc8bcdc7853f4a6f80fb7692f227d8562a1f95ef67c91c6b885154b6577359b1e8abf5666bcfd484b
TLSH
T19A61843BAA74993B8EF39A05B9963B23A7A65073E5913F95D6EC0F0D00D72D81342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe592fc1.TMP

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Local State~RFe592fc1.TMP
Size 1KB
SHA256 fe82d0ac644e4be6d60e88ddc2c3cf9e3b9e13fa0606153c9a71f24c5e7cc42f
MD5 ee9cfeee8440abaae1bf44eea713bfd8
SHA1 a050e5e365402b7e803f89629bf7733dc6624e30
SHA512 b4cb1e85ed05e613891017f715b8fe9d57d7582d8925f8b3a39b4d21a556d1c72da6233c6bcbd845c21ea50a4e712a4003e702971fe74d0e9ae2cae330956107
TLSH
T1552112B6E6A48B73ADD2560A71A6B6335EA240B7D2104F4061DE4F1D01E31DCAB2AD33
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2360-101-0x00007FFAD22E0000-0x00007FFAD22E1000-memory.dmp

Download

memory/3252-265-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-263-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-269-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-272-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-274-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-273-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-270-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/3252-271-0x0000029DE38E0000-0x0000029DE38E1000-memory.dmp

Download

memory/4932-19-0x00007FFAD22E0000-0x00007FFAD22E1000-memory.dmp

Download