Overview

overview

7

Static

static

3

EvoVisLauncher.exe

windows10-2004-x64

7

EvoVisLauncher.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    150s
  • max time network
    133s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    29/09/2026, 17:55

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    EvoVisLauncher.exe
  • Size 67.7MB
  • Sample260929-whe2dsty4r
  • SHA256 d14fbebd7ded3c2bb933567ddcbdf4636ba00e5058042512d3a2d3b2b34e24e6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 46 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\EvoVisLauncher.exe
    "C:\Users\Admin\AppData\Local\Temp\EvoVisLauncher.exe"
    1⤵
    • Loads dropped DLL
    • Enumerates connected drives
    • Suspicious use of AdjustPrivilegeToken
    PID:4332

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        D3DCompiler_47_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        DirectWriteForwarder.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\DirectWriteForwarder.dll
        • Size 501KB
        • SHA256 691250dac9a44ffd9dac9354b636ee748dcb6c50036b895dbcfcc934323f28eb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        EvoVisLauncher.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\EvoVisLauncher.dll
        • Size 2.0MB
        • SHA256 43f5c5a82e522be2d43a4c81b27aed4bb66ee1c61e5c30c5986a61d3190a9206
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Microsoft.Win32.Registry.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\Microsoft.Win32.Registry.dll
        • Size 117KB
        • SHA256 077a2d629819b3d86d6c81e0647fbf30fb6273974cef51023719f2a0f1fab410
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationCore.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\PresentationCore.dll
        • Size 8.2MB
        • SHA256 4fe00893cfca54ab0b0bce95caa1f8ddc87f383c7553cc17c81da65bc54e4e3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework-SystemXml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\PresentationFramework-SystemXml.dll
        • Size 33KB
        • SHA256 592ec192e9f8590cbf2da06d30a30086c1a88d890819110aeb4db09107d633f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.Aero2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\PresentationFramework.Aero2.dll
        • Size 441KB
        • SHA256 68c67d27c2b3e3cd9b9122b450b3008ba91ee83387ee34cf89015106513b4b9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationFramework.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\PresentationFramework.dll
        • Size 15.4MB
        • SHA256 2c349aeb8c48dbf98aa19ff3beda2f86681390039d21bbb8e9828bde4e62992a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        PresentationNative_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 6c588208852d8663d81872e0eafdecec4f2ca5cc2cede2e74e167427932e70f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Concurrent.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Collections.Concurrent.dll
        • Size 285KB
        • SHA256 bd6f2cdfd5ec6fc487c5757728d4330334b2a89a813ba291234e2c2efb60720a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.NonGeneric.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Collections.NonGeneric.dll
        • Size 105KB
        • SHA256 bf98e26d1f68e44df462019400ddd54d77b7355c1005502121e653d94cc80f8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.Specialized.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Collections.Specialized.dll
        • Size 101KB
        • SHA256 ad848ee601e2a864f482c06a0763486c98558cdf95de66cc08c7c6020c558941
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Collections.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Collections.dll
        • Size 325KB
        • SHA256 752ace8c7eddeb911c8eb4f5a71aea72be767719d2270fb39fffb2e329014103
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.ComponentModel.Primitives.dll
        • Size 77KB
        • SHA256 bfced6c24bfaea7f2872c051b4d72da87bacca7d03cfe76ce7bd9e3d2f53fd0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.TypeConverter.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.ComponentModel.TypeConverter.dll
        • Size 753KB
        • SHA256 3244001ba95c4799a79773c984ff70276a03b46460b2883fbae8cd72609f2b16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ComponentModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.ComponentModel.dll
        • Size 29KB
        • SHA256 c505e75a98e5e9c05fa56ed39b919eca19adbb361e79a0b4099855f1cfdfa369
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Configuration.ConfigurationManager.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Configuration.ConfigurationManager.dll
        • Size 1.0MB
        • SHA256 033164658b573748af3be245a169fdc9673fbd59af3ece8fb1d6b7cae4c12571
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.Process.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Diagnostics.Process.dll
        • Size 329KB
        • SHA256 30573352f23b110f0d229f84ccd4a748a5c781e0f611bd205eeb28d86b00c22f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.StackTrace.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Diagnostics.StackTrace.dll
        • Size 45KB
        • SHA256 55b81899b6377e5d00e53d7a186994ac9755cee2ec583cd906e37249461f699e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Diagnostics.TraceSource.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Diagnostics.TraceSource.dll
        • Size 141KB
        • SHA256 ea4ed234a1dded79c49037220948a7b47a7ccc115e86bd5ab4520ac44374ab59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Drawing.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Drawing.Primitives.dll
        • Size 133KB
        • SHA256 4688ba89e7941b2863311b8baa62d17ef9fad4ba984dc50296b39c56f19c7b0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.IO.Packaging.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.IO.Packaging.dll
        • Size 317KB
        • SHA256 f0fec5728921ff0836fdff56a798897b1974456e949d368aeab6a26b9571835e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Linq.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Linq.dll
        • Size 641KB
        • SHA256 675ed58c04594655b067a3e4f3d4f1c01a27057057166c33dc54b9916167f0da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Memory.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Memory.dll
        • Size 157KB
        • SHA256 da40a6f6af8a20e129874628910ade425a5854e0b7b31dba95332f8e8b48e59c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Primitives.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Net.Primitives.dll
        • Size 221KB
        • SHA256 46ead7b5c522317188d001f45bece7d865b394984a2373dce8e5ed0fb75222c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.Requests.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Net.Requests.dll
        • Size 373KB
        • SHA256 ce8349cffa646155a317caf87fb7cb57d51f3107ccdde871b4b08f1751c6e5b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebClient.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Net.WebClient.dll
        • Size 165KB
        • SHA256 4d26b50ad6e78254600592b2dbe0c1e677267aea654b04d68cb2e8caa0c77def
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Net.WebHeaderCollection.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Net.WebHeaderCollection.dll
        • Size 61KB
        • SHA256 907fe4d1a19dc0e07875e4d2bf33524b4d7a2bfec3594c4268010862d4f21144
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.ObjectModel.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.ObjectModel.dll
        • Size 81KB
        • SHA256 8785dde8d1d8d26c193b8aa1235cb73df878838843c480f22d22b281e992f608
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.CoreLib.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Private.CoreLib.dll
        • Size 14.6MB
        • SHA256 18dd52b72d7726914249749376c2e635103ab25d7f4c5d37bb3a033166f2df0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Uri.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Private.Uri.dll
        • Size 253KB
        • SHA256 2d661e583a48a7b84f1b5633f0879d432c2b24b8c566b034680f714796a21347
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Private.Xml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Private.Xml.dll
        • Size 7.6MB
        • SHA256 09da98e70dd4271f3b37ad00e93c055116988311ae605589c40669f8a7ca062f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.CompilerServices.VisualC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Runtime.CompilerServices.VisualC.dll
        • Size 29KB
        • SHA256 0c4ad019991df6557e370b482014c1547804b5afe2fd02990aa8d2c2b835498e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Runtime.InteropServices.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Runtime.InteropServices.dll
        • Size 109KB
        • SHA256 0377b3ec6ee4ea2a4c386d59171759dd1a2a5ea58a24fae2faca8d6f7f500eb4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.ProtectedData.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Security.Cryptography.ProtectedData.dll
        • Size 53KB
        • SHA256 49458451b5689498ea821f9ee505f2613f126911ab7c765e5f21a93c5403d719
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Security.Cryptography.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Security.Cryptography.dll
        • Size 2.0MB
        • SHA256 fec1abfdf414457b3d7d37900d7aff8f52cebe3dbadaf832f86d4270ce75c365
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Text.Json.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Text.Json.dll
        • Size 1.7MB
        • SHA256 0f6b5625311c1d98678cebe33a37f7e7ef3ff6ddc0c6653a0af17cd2e9e745f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Threading.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Threading.dll
        • Size 81KB
        • SHA256 3d4d5fd570ebde1da7d9e1fa15fe9de4af00d352ac9196ab1e1a93147d4cbd95
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Controls.Ribbon.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Windows.Controls.Ribbon.dll
        • Size 1.4MB
        • SHA256 4fb08f9d5311d071e6a76c75036136dc0289e1aafc2bdb4b6d78763eddb341e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Windows.Extensions.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Windows.Extensions.dll
        • Size 117KB
        • SHA256 a22d5275f486b1ac5b9c5aaab6b265133e138e4a875fb9e6bc9fc030b97e6af6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.Xaml.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\System.Xaml.dll
        • Size 1.4MB
        • SHA256 a94e47527b3992fad1897772a31e496c32bd695dba7043af915dcc6f5a1fceb7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationProvider.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\UIAutomationProvider.dll
        • Size 61KB
        • SHA256 8ddd9bec0c1ce431e9a1c06761fbf0d1cc38967cd24372017532e38ef36f6d94
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UIAutomationTypes.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\UIAutomationTypes.dll
        • Size 305KB
        • SHA256 e147124f1df63a677c98d12d4addedb993df754ab515603bff12d206f942e8b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WindowsBase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\WindowsBase.dll
        • Size 2.1MB
        • SHA256 5702274d0ee53d20d0847f1aa284b02679313cf743be25af9aea4372384134c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        wpfgfx_cor3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\.net\EvoVisLauncher\xXD90B1eWSl+RvFec1cB7xXUIIpH3aI=\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 699ed38f9decff822b64a76fff30519226cfb9886abdde223a0e42b88fadea0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download