cff6f74c2e185936d5e53f28512f99989810e9798447cce5e1c0fd9f3d8baf50

Analysis

user interaction
yes
max time kernel
15s
max time network
16s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
02/11/2026, 22:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
HiroLauncher-0.4.24-Setup-test2.exe
Size 3.3MB
Sample261102-166apsgd86
SHA256 cff6f74c2e185936d5e53f28512f99989810e9798447cce5e1c0fd9f3d8baf50
MD5 c2637b6f5b377ce5713b52ee64dd318d
SHA1 bd053f517d0cd8bc57a9225abea14f91318a7d52
SHA512 560f2c33334ee24dbbe2e523963141b2e122c1ce353d436e21a1b3bcaabfff2991168df76347297a308c78b9142dee911cb7836a1a0361e6b9ff7a8b2bff1d86
SSDEEP 98304:b8kJ1n4NEnzpn+MCl+YGj3OL8JhLxYA16NmIJV:b8Y54gzbCsYy+LqhLx91omIJV
TLSH
T188F5333E9D6B6E78E49410760F7965897EF3643036704EAE7F3226B81B74E70815E2B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
1208	Hiro Launcher.exe

Loads dropped DLL 3 IoCs

pid	Process
4808	HiroLauncher-0.4.24-Setup-test2.exe
4808	HiroLauncher-0.4.24-Setup-test2.exe
4808	HiroLauncher-0.4.24-Setup-test2.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Hiro Launcher.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Hiro Launcher.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Hiro Launcher.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HiroLauncher-0.4.24-Setup-test2.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
2592	msedgewebview2.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1208	Hiro Launcher.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 1208	4808	HiroLauncher-0.4.24-Setup-test2.exe	81
PID 1208 wrote to memory of 2592	1208	Hiro Launcher.exe	82
PID 2592 wrote to memory of 4620	2592	msedgewebview2.exe	83
PID 2592 wrote to memory of 844	2592	msedgewebview2.exe	85
PID 2592 wrote to memory of 844	2592	msedgewebview2.exe	85
PID 2592 wrote to memory of 844	2592	msedgewebview2.exe	85
PID 2592 wrote to memory of 1456	2592	msedgewebview2.exe	86
PID 2592 wrote to memory of 4076	2592	msedgewebview2.exe	87
PID 2592 wrote to memory of 4076	2592	msedgewebview2.exe	87
PID 2592 wrote to memory of 5536	2592	msedgewebview2.exe	88
PID 2592 wrote to memory of 5536	2592	msedgewebview2.exe	88
PID 2592 wrote to memory of 5536	2592	msedgewebview2.exe	88

C:\Users\Admin\AppData\Local\Temp\HiroLauncher-0.4.24-Setup-test2.exe
"C:\Users\Admin\AppData\Local\Temp\HiroLauncher-0.4.24-Setup-test2.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Users\Admin\AppData\Local\Hiro Launcher\Hiro Launcher.exe
  "C:\Users\Admin\AppData\Local\Hiro Launcher\Hiro Launcher.exe"
  2⤵
  - Executes dropped EXE
  - Checks whether UAC is enabled
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1208
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name="Hiro Launcher.exe" --webview-exe-version=0.4.24 --user-data-dir="C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --lang=en-US --mojo-named-platform-channel-pipe=1208.492.9341787068033761499
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:2592
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffd1ac0b078,0x7ffd1ac0b084,0x7ffd1ac0b090
      4⤵
      PID:4620
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView" --webview-exe-name="Hiro Launcher.exe" --webview-exe-version=0.4.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1688,i,7843353287429700410,13549558826635552324,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1684 /prefetch:2
      4⤵
      PID:844
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView" --webview-exe-name="Hiro Launcher.exe" --webview-exe-version=0.4.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1368,i,7843353287429700410,13549558826635552324,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2012 /prefetch:11
      4⤵
      PID:1456
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView" --webview-exe-name="Hiro Launcher.exe" --webview-exe-version=0.4.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2284,i,7843353287429700410,13549558826635552324,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:13
      4⤵
      PID:4076
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView" --webview-exe-name="Hiro Launcher.exe" --webview-exe-version=0.4.24 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3536,i,7843353287429700410,13549558826635552324,262144 --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
      4⤵
      PID:5536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Hiro Launcher.exe

Path C:\Users\Admin\AppData\Local\Hiro Launcher\Hiro Launcher.exe
Size 11.0MB
SHA256 561b4116cab78a5c180b9c8ebd1b2159a6da9ad35bbb9117d189ad072b063da7
MD5 2908223d9ffb8502fc8984cd046c3ae5
SHA1 f946d1103b07ca87fc53fc474ce6f71c734fcfa3
SHA512 913e09ce7afad53dd308e6092d25bc7be4b30b21684b6d5a91987a6a51629d48636d67a4a5cfc8cf6386ef767c2b5fa10ccce649fdd9f1d1e85b8b4e95f6c1d4
SSDEEP 98304:WMlhRfPyJlikEnnFv/kvNJyNpQAfVXXkV6oe7HJ:nhRfF7LtnBJ
TLSH
T1F5C618213AAA99ADC59AC474C3464AB35E2230DB0B35B9FF449496383F79AF41F3C354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartMenu.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa92E6.tmp\StartMenu.dll
Size 7KB
SHA256 42dd4dda3249a94e32e20f76eaffae784a5475ed00c60ef0197c8a2c1ccd2fb7
MD5 d070f3275df715bf3708beff2c6c307d
SHA1 93d3725801e07303e9727c4369e19fd139e69023
SHA512 fcaf625dac4684dad33d12e3a942b38489ecc90649eee885d823a932e70db63c1edb8614b9fa8904d1710e9b820e82c5a37aeb8403cf21cf1e3692f76438664d
SSDEEP 96:h8dPIKJhMuhik+CfoEwknt6io8zv+qy5/utta/H3lkCTcaqHCI:yZIKXgk+cx6QYFkAXlncviI
TLSH
T1CCF1C7B6F3D10673F9AB427428232F221B1AF5215765C1AB450316CE7661CE3FD34B21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa92E6.tmp\System.dll
Size 12KB
SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
MD5 cff85c549d536f651d4fb8387f1976f2
SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
TLSH
T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsa92E6.tmp\modern-wizard.bmp
Size 150KB
SHA256 4335832040beb3efa2c92e8915c32eacbb8810dc47907dd56a77ebf25adc08a6
MD5 aaf39709d943be561ead07198c5ef402
SHA1 f509689a4ccb7ca91f22b8b5c893a3493165a2ba
SHA512 1e1479b61bfd65aac97e410e429d93ecea171ae785ccc904ad75db9a69ccd83ab8ba7106bb87a6f4243582dfe5a466ba3498aba03df4b4516c5d19a236177353
SSDEEP 3072:izJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJs:p
TLSH
T1A3E306653E71048B059ABB5E9309FE7D2C995D1B0121B257BFE8341C237BBBB294AC1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsa92E6.tmp\nsDialogs.dll
Size 9KB
SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
MD5 6c3f8c94d0727894d706940a8a980543
SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
TLSH
T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

09e39cdc-7f80-409c-a68b-3e51d29f2569.tmp

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\09e39cdc-7f80-409c-a68b-3e51d29f2569.tmp
Size 1KB
SHA256 ea5475a5c6f15246f5b9f4bb4bae499dd7163f6d88759c78ee137c58cfdf29ec
MD5 05a965702d8df3f3c2d95ac7a42de26f
SHA1 7642f7c9295a2c8f3ea9e7ed97e3632a0045b42c
SHA512 21ce264d592b41165193bdccd5472161ca890f04ce182f690d2e3ec02ff11b698a65b219a4835c10877e152d785d75c28bdeb6d0368c926998331809ff222813
TLSH
T1FC31B5B2B0C8ABB26CD25A05B1126EC76E2210A982518F44D2CD471D01D77CCA67ED22
MD5 SHA1 SHA512 TLSH

Submit Download

886b16fb-028c-4b28-bb62-8e7c5654be02.tmp

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\886b16fb-028c-4b28-bb62-8e7c5654be02.tmp
Size 3KB
SHA256 9e923d721dec522f9af5161f2a4d632e6185733afb708fe789750c379ff479b5
MD5 aa6c775df2cd61dbb94c9447b65ed1dd
SHA1 773332e0be9189a15bdecf4de04289459e0f734b
SHA512 61fef72939776a258f8a18c606d47b1be804c2aa9ffda989c84faf08999de9dd67cad1614a53f36d3adbb10036a985ebac3462d132196b929f2cb7e302bc1a2d
TLSH
T1BD7195727898E9674EE39A04B8862F06BA665166E5917F94CAEC0F0C01DB7D81361C16
MD5 SHA1 SHA512 TLSH

Submit Download

93a022e3-ff18-4308-8100-07ac33cbe858.tmp

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\93a022e3-ff18-4308-8100-07ac33cbe858.tmp
Size 2KB
SHA256 e9e9c1f9c9fdcf84b780d0b3bbe8cbfbe1b7fcea263e9d7ca2fafbabf905355a
MD5 0b2599da4cb6557c6046b93b97f7b852
SHA1 084ddab0be9fba72cf572ee0d202d3a04d6f9cde
SHA512 20e7cbec66b0e51cae16cd65075b2379cb2f466b38ff17be53083cb5ca333b7e6743435a945cdabc68af98b1269fac6aa6b6ae4365443331cf0b8daa44533685
TLSH
T1EF51D8737848EAB74DE38A44B90A2F53EE3650A596526F50DADD0B0C00DB6DC2366C26
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 5694c611f335552a018e72b0fdf3b257e9ff019c4eaad1549a99596fa2e785ca
MD5 2b145e8fce230848ebc801e01eecc6aa
SHA1 2c7cd5938a0d1f86f2300080dfaa337c70699b7d
SHA512 3fad1f32b0e2c391b5e6515c1f3cc7a15667404586b0bc7446e74767c24457be10134bb84625f70d7d3cd74c93606c43c62777da1d340c5f0d00276ddd0b141e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 d31f6a18b904c8b9c3c554653bbcbc925ed19b6ee244989ef92952126b6df884
MD5 2e0dffa1365b0fabaf608ff43ff5cccf
SHA1 5b3a2503c2f553eee992131701b30c06a574fbdf
SHA512 f68df11bd925c3b80b3158ce859c2ffc5eb960d4742390851ab49c96ed642a1ac077fe9c2f7831ff059c2707a6338043679e2906f9be89ee9e01b82ae4c23dc7
TLSH
T1B2D0121632024174C21022730583774C0842C10B400981005428951D1F18050090B443
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\Code Cache\wasm\index-dir\temp-index
Size 48B
SHA256 5ea513fd8b148daea1f84fca31a6c30c0af979c4ab7c8e67a9ab04779dd27174
MD5 335f088080a6933e817ca26c296e85f1
SHA1 9dac58de0485f3302c2fba8e4e5ef77a05f38d3b
SHA512 0707528247dec38c750fedc4023e8a1ab9d666f11d3c02b7d6c35e61cfa091aa6ad735309093358d6e82b821bf4bb04b51020392f423c0d6c80a5031d324604c
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\DawnWebGPUCache\index
Size 256KB
SHA256 67e210d196b63e429b0ad87dcb8ebccea801b9f0b446db29e7c12bfd4a66d950
MD5 3a30e7b9a02cbd5297970c36faf90312
SHA1 0b6198ee67b6d046accdf434b5fea54058131aff
SHA512 cbb067004b9b135d51458f8bf34f77d91e037ad4338a9c5191b610c52b152f5ee6c2c76690e11cf729f375d17a681fe16e3d19b78d5a9be2d83e92ed49a87701
SSDEEP 3:LstlNllkll/lxn/:LsX3lEtd
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\GPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Default\Sync Data\LevelDB\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\com.hiro.launcher\EBWebView\Local State
Size 1KB
SHA256 78db651f4cb415b80a7725fae9dbe08ef5395ccaf5c02122934d5b4494888fe9
MD5 3eabfe332916fe5ac97bafa14102c461
SHA1 1b1eb5bc6f9f06fbb6259e6084f7407aa858ca0a
SHA512 95f4fe28ea4efc0f76ca16acb6842805ccf782ffc78b0b3264718098825c92fc4f46fcaf738f9bb1cf6f6fd88ae0e66de06cd9d9417700b6087b005e9bf14a37
TLSH
T1EA2162B3E0C8AAB67DD24A14F513AECB2E6050B99261DF08D1CD431D01D7ADC967ED32
MD5 SHA1 SHA512 TLSH

Submit Download

memory/844-68-0x00007FFD394E0000-0x00007FFD394E1000-memory.dmp

Download

memory/5536-181-0x00007FFD394E0000-0x00007FFD394E1000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads