0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa

Analysis

max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 03:19

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Battly-Launcher-Windows.exe
Size 17.2MB
Sample261024-dvm9eseb55
SHA256 0864ae13fd45bd7cea4a522f4c6e224eef11093cb7da05a81ca962c07a4879aa
MD5 dc1c0cf4c0e8d8fd4b9119d9b3fc0796
SHA1 cb5f25073002b224bb62039dab668f14e4aca8ea
SHA512 5ae5bb6b7150edb190d866a46bee97deb99c0ccaf1a58939d15c5ad643a2efbdecf3610f0b800f1d9775bc64061d337af9697c06950f0521c3634e9b93d4f3e7
SSDEEP 196608:8irZn74T6LTwKcKngnckbRjVCPEEKnCMu6eawO80Qv5jC0J:887DLTwKcKnRe9QKna6uTT5jC+
TLSH
T17B077C227B9A99ADC05AC47083864B725E3174CB0B35BAFF448496782F6DAF41F3C758
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery trojan

Malware Config

Signatures

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 20 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Filtering Rules-CA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-FR	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-IT	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1802329236\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\adblock_snippet.js	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1429203026\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Filtering Rules	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-DE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-ES	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-NL	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-RU	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1802329236\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1802329236\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Filtering Rules-AA	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\Part-ZH	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1429203026\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1802329236\metadata.pb	msedgewebview2.exe

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Battly-Launcher-Windows.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Battly-Launcher-Windows.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Battly-Launcher-Windows.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2676	msedgewebview2.exe
2676	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
1980	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4500	Battly-Launcher-Windows.exe

Suspicious use of WriteProcessMemory 25 IoCs

description	pid	Process	procid_target
PID 4500 wrote to memory of 1980	4500	Battly-Launcher-Windows.exe	89
PID 1980 wrote to memory of 5020	1980	msedgewebview2.exe	90
PID 1980 wrote to memory of 3556	1980	msedgewebview2.exe	91
PID 1980 wrote to memory of 3556	1980	msedgewebview2.exe	91
PID 1980 wrote to memory of 3556	1980	msedgewebview2.exe	91
PID 1980 wrote to memory of 3556	1980	msedgewebview2.exe	91
PID 1980 wrote to memory of 5944	1980	msedgewebview2.exe	92
PID 1980 wrote to memory of 3444	1980	msedgewebview2.exe	93
PID 1980 wrote to memory of 3444	1980	msedgewebview2.exe	93
PID 1980 wrote to memory of 3444	1980	msedgewebview2.exe	93
PID 1980 wrote to memory of 2220	1980	msedgewebview2.exe	94
PID 1980 wrote to memory of 2220	1980	msedgewebview2.exe	94
PID 1980 wrote to memory of 2220	1980	msedgewebview2.exe	94
PID 1980 wrote to memory of 2220	1980	msedgewebview2.exe	94
PID 1980 wrote to memory of 2220	1980	msedgewebview2.exe	94
PID 1980 wrote to memory of 2900	1980	msedgewebview2.exe	98
PID 1980 wrote to memory of 2900	1980	msedgewebview2.exe	98
PID 1980 wrote to memory of 2900	1980	msedgewebview2.exe	98
PID 1980 wrote to memory of 5116	1980	msedgewebview2.exe	99
PID 1980 wrote to memory of 5116	1980	msedgewebview2.exe	99
PID 1980 wrote to memory of 5116	1980	msedgewebview2.exe	99
PID 1980 wrote to memory of 2676	1980	msedgewebview2.exe	100
PID 1980 wrote to memory of 4112	1980	msedgewebview2.exe	101
PID 1980 wrote to memory of 4112	1980	msedgewebview2.exe	101
PID 1980 wrote to memory of 4112	1980	msedgewebview2.exe	101

C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-Windows.exe
"C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-Windows.exe"
1⤵
- Checks whether UAC is enabled
- Reads the TCP/IP host and domain name from the registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4500
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=MojoIpcz --lang=en-US --accept-lang=en-US --mojo-named-platform-channel-pipe=4500.4060.10199551601672078260 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:1980
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView /prefetch:4 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffa8c725fd8,0x7ffa8c725fe4,0x7ffa8c725ff0
    3⤵
    PID:5020
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1748 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:2 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:3556
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2204 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:3 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:5944
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=2428 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:3444
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3212 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06 /prefetch:1
    3⤵
    PID:2220
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4516 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:2900
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4420 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:5116
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4736 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView" --webview-exe-name=Battly-Launcher-Windows.exe --webview-exe-version=2.0.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --no-appcompat-clear --mojo-platform-channel-handle=4156 --field-trial-handle=1756,i,16994628849557603905,10652168126238822051,262144 --enable-features=MojoIpcz --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version /prefetch:8 /pfhostedapp:807bf01f42ada85a8458105e33d787329cf63d06
    3⤵
    PID:4112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

01e60660-d646-4f1d-adfe-92b49fcea799.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\01e60660-d646-4f1d-adfe-92b49fcea799.tmp
Size 15KB
SHA256 213c19404e30bf6486f712f90803cc63cf1189fefe9caaeea1cd416fb0feaa87
MD5 23ef4edc1a2ff809fed3dbaeda55e062
SHA1 cffbc89f4e6c772b9d85185a02c1b110396e0161
SHA512 84beea87588fb963e3823bed64609b35317e4479089329aaddf20337962289f9c2f8b00e83bae12b639643450d63e23744b0ab70d545e5004151af2c912d795f
SSDEEP 384:w+OBqImmJvGBLx3NaFMJFFNBStjY1SK6zg6rG:pcvGtlNSk4KYK
TLSH
T1E472AF762D716E2B2DB7C50AB98E1797CB652193C1D17FE6CDEC4F0E41AB0842342905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6333dac8-14a4-4e70-8afd-8a2a5cfb3aaf.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\6333dac8-14a4-4e70-8afd-8a2a5cfb3aaf.tmp
Size 2KB
SHA256 af224426c3b5cf4a9e78c13c6203a958a7ebd9bce8cb971dc5cb8dfe6697988e
MD5 03a30598eb3a133d6cda0f36cacb3bf5
SHA1 66e5903ec4fe316ffc172ec2c6f05567b0fef2ac
SHA512 8db65801f7c3477e4d8accdb020271f040315c0f4f33af8b72c9f8f7edf51dc5ed27b331c111b790a0ddbc4541a86f695ab39fb3aec24b5a34c5f217a7354f12
TLSH
T14C517773B824AB3F96E39604794B2B63CA755062DA911F509ADC0B1801DB59C2302C3B
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 35aa209c0bd9fb1bb19a9deed68d42d69fad61dcd46b771a4c1ac44372a7f2e6
MD5 c49cc1907360ceb631c75162a3efb3bf
SHA1 ce1a90302c1f16ab805bb652ee869a41561480be
SHA512 363db4c742ebcd006778c434a864dd0a112532d658d9f1cbaaaadaaeea7cf442d5d9d1c9cdba78c5579638d11edc5772b3ba80b80427983fc6dd484cc6fcbc5c
TLSH
T117D01232760201B4C561207300A2660D5800C65BC009C0046428851E1B440A829064C1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d62d817836949f4ba30d992746f7e617725044616840a4f6a7fd4c9e606a26d9
MD5 88460ba9f2d082e9841717b41bf206fc
SHA1 ff8722e68bb738093d789a141172ca8b93d15918
SHA512 8d02fca195e0658a4ad458e145f284c005adee0bca381f710f16b35877a9bff54eb1abdb1f88ef9e98e857f2188911be471de907610730e782809341121fc2bf
MD5 SHA1 SHA512

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Code Cache\js\index-dir\temp-index
Size 96B
SHA256 faf6d06da1b1a9a32171eca40d67dd2b730249dd1b5ab4f3751263cd80827944
MD5 68842dffbba4dcc8e6d2dad1f74bc6bd
SHA1 0a9c76a900a2acca94b8a7e13e86a9f600c2c0cf
SHA512 79f4ffe71cd0abb7fea019fee3b68705acc4a6d61f23ba75eb7d09ebcd13b743d715456de82a3eedddadf6a8e74d4462e1428a09f8defce3d0719327975e2aa1
TLSH
T191B0021192100CE2E39C6370E1DF8C90F53C1D1946A3AD4AB1E5007496AD3C19957F05
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 712acf3adde2235468a9b3d13e08573b35337a737d22faaffa7b7ca72b98c58d
MD5 db2f3f84e20f33648b6a5aac2a286612
SHA1 0095a2862259c06219db8d00e8169599a3a54bca
SHA512 6a9c58bd4f48243a1ea9435c2caba9cb7b6ad59a13806f7b6bbeb8a88adfe4c535334186067b055c937ed699cc5cb983e45fce7712bdf484aa78d467836bcca0
MD5 SHA1 SHA512

Submit Download

22a27e4a-1250-4d77-a4b5-23747f9f0f25.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Network\22a27e4a-1250-4d77-a4b5-23747f9f0f25.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

30d1492d-0cd2-40d0-8191-ac99cfb47ce5.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Network\30d1492d-0cd2-40d0-8191-ac99cfb47ce5.tmp
Size 821B
SHA256 7c0c74ec3a1b7d60f0db9793edc2971659f4d59cbd15b6a46b871983d1e4b594
MD5 62eda7e20d10376ed79019de992379c6
SHA1 a30326df0ad16b25018c469085c11eb0d65f6dae
SHA512 3a61a4ba0bfc8b29df5c30c3d56f2ffcb7cfa4ae6a2d4ef7a414e414ed2374f319874a91f2ba6087a356de69048720e1233e90cef861c327b9e5e01b3b0d8d25
TLSH
T15E0166BAC7E4C5BD895152F92A243C1BCE1E081946B83D6AC9E4EFCB87E1170D20464F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\Sync Data\LevelDB\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

e5c97940-7a90-43d2-9297-856967b9fd8e.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\e5c97940-7a90-43d2-9297-856967b9fd8e.tmp
Size 6KB
SHA256 4f2b771b677e03b748b1204e473f3b95e81b91e28bc64d0db13f5f9621ccdac6
MD5 f5d449108ad8ae6096837205f93a4812
SHA1 146a0a71ee8dac263822de8a7106d61eef654a03
SHA512 25a469e17863790f8c505b44f7144911e7db6365bcc0a1f348aac1dafc5530edbdf0f00085a0d84ad7e3154ed4bcdc3a4d5611e8cafcc72cf96a0e4af10d13f9
SSDEEP 96:stT/dobc+BFb9Fkco5h16ZPds7/x+6Mhmuecpxf1ejeEyK+g1nJ+28XM1C7K:stLYH9o+dsV+FNxfQjHVzJ+G6K
TLSH
T1EAD1B6029E64B97F4CC7E109BA29BB17E2F9603264E51E58E7FC462C04D66DD330790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5d95034-e16f-4a1e-b231-ef54f9124d51.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Default\e5d95034-e16f-4a1e-b231-ef54f9124d51.tmp
Size 6KB
SHA256 280ec2aec26df9d9b4e09952ba13399a0ad7cbfc69aaabe710ae0f5c32aa3dc5
MD5 52a83c9a40218ca4054e9e50aef20692
SHA1 a41a49c52ef596574a22b8f920efe65d69b80add
SHA512 02ab9bec5a60b508f773c6d6c861da7ad43a536448cf903dec69e0dddf19832b4758b2dd6bfde2840f8bf64a5d33ec96c8fe95a7fe317734150644ab09b9d300
SSDEEP 96:stT/dobclGBFb9Fkco5h16ZPds7/x+6Mhmuecpxf1ejeEyK+g1ny+28XM1C7K:stLY19o+dsV+FNxfQjHVzy+G6K
TLSH
T195D1A5025E64797F8CCBE109BA29BB13E2F9603265E11E58E7FC461C04DA6DD330390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GrShaderCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GrShaderCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GrShaderCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\GrShaderCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\Local State
Size 1KB
SHA256 2d8702f9ccc754ec747c000c70af950a27486e846baaf9e210031ae9e632bf46
MD5 a9f736208631ae8f2ae28a0c7d5ab82c
SHA1 4ff6f04f629df34aa0a499ac07c07fc9eb6c5a96
SHA512 027b5926c8649afbf97a837d41b6ac6eaa7742d9972ce5fb0db42eaaa43abfa092bac439ae36eae250107341ebcbe9cd9e1dfff415761a03fbcec3fa73af83dd
TLSH
T1C42142B3F960AB3AAD92A609258766979E30106BC7408F40A5DD4B2803DF19DE51A836
MD5 SHA1 SHA512 TLSH

Submit Download

b31e78cf-f2a7-4983-9567-0441a9d7de35.tmp

Path C:\Users\Admin\AppData\Local\com.tecnobros.battlyinstaller\EBWebView\b31e78cf-f2a7-4983-9567-0441a9d7de35.tmp
Size 3KB
SHA256 52e81696343cda8e45e257596e65c923002db2fb3070903e6e3bbef8dc622f0d
MD5 bf14e1be0fc680b627c010b57c095da4
SHA1 4d70f9c5f5a7e6db97baf50561b6bdcc8ac87c79
SHA512 51179456dd8ea60e693524d93c6d80ac6378183c9bb97d7bd1157f7f8fb61666a185f3454cb1a8f4cb0da0676c0be5a5d07c97277434b3fda7f20df9f1d8a391
TLSH
T18E618637B974AA3F5EE3DA05798A2716A7A55023D9D13F91D6EC0F0C02DB2D82342C17
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1429203026\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_1802329236\manifest.json
Size 108B
SHA256 8d58f4f4ef20dff6cd1c27243ddbe12d50713f2cf8bb22ba73696bbb04b36f4c
MD5 8e9357dbfee2ec0378af047a76d0b453
SHA1 794f8cce8fbea87b2b62162769bee35c319ebfa0
SHA512 85b5f52013803198e6af0ba37c9c3c66ce4bed4df5a7ee86ca1fc7c3658e2c973e92eed88fd36864d4743db44ad81fda7b24e70ef7530212e85b12c13d5db29d
TLSH
T1E2B012A13C007DBB1DCD03760060E3D783B63E0A1659190006DB6D422A4C9FB137253F
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1980_850975238\manifest.json
Size 116B
SHA256 181a1631374b5ac1fff89559f7e23498ad9ee4796885d7b956d5e7d5f9c3f8c7
MD5 daf93729356a67ea1f849554827fdab1
SHA1 17dad0cbc82d5e04fb068896a5832f983e124c01
SHA512 473d9d608f2f3324d5db6eddeb4554a7271df4a6b62377820d935c001a8a2376479aa4d3e3b80ffbfdd3ba80f56fe72f1bc9dd020bcb396182b753353b883a30
TLSH
T1FBB09262A8084633249523F4A2639363CBA86D4A91346606091B9480659E73B22A5219
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2220-50-0x00007FFAAA0B0000-0x00007FFAAA0B1000-memory.dmp

Download

memory/2676-327-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-319-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-321-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-328-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-330-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-329-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-326-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2676-325-0x0000024187620000-0x0000024187621000-memory.dmp

Download

memory/2900-242-0x00007FFAA9750000-0x00007FFAA9751000-memory.dmp

Download

memory/2900-243-0x00007FFAA9F50000-0x00007FFAA9F51000-memory.dmp

Download

memory/3556-25-0x00007FFAAA0B0000-0x00007FFAAA0B1000-memory.dmp

Download