The Witch's Yarn

The Witch's Yarn

by Mousechief

What is The Witch's Yarn?

The Witch's Yarn is software application developed by Mousechief. It is most commonly found on computers running Windows 7 with nearly 50.00% of installations running this operating system.

The Witch's Yarn is most popular in the United States with 83% of installations residing in this country.

The Witch's Yarn adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, The Witch's Yarn is known to create 1 firewall exception to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{A14B6D8D-51FE-4C39-94B7-51FC1427939F}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task named 'Steam Overlaylol'.

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam_Reg_HKCURun_S-1-5-21-1646055978-2255025000-3107839011-1001.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.mousechief.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\Steam\steamapps\common\The Witch's Yarn
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/287740
Size:
0.00 B
Language:
English

The Witch's Yarn Executable Details

Primary executable:
video.dll
Name:
The Witch's Yarn
Path:
C:\Program Files\Steam\steamapps\common\The Witch's Yarn\video.dll
MD5:
98a9f5dc78eca03e7ce0ae6dd116d7e6
SHA-1:
SHA-256:
Files installed by The Witch's Yarn
File Type Filename MD5
DLL
98a9f5dc78eca03e7ce0ae6dd116d7e6
DLL
5ab93bd180be228a35743c5375a21e46
EXE
bfc7aa5911a784738c08724ee8aa4379
DLL
decf6c75afb99e9d86204630db3bc690
DLL
289219e5ab46336716b944124a887f08
DLL
48bdb0a75df5638dbd470a4df6b70148
DLL
56bedeb80c2a2896fc784dfda579183a
DLL
18bbfe038a8d5df5dbf1fcc15bee6984
DLL
6e1b42697b1816bb3baea11103ffa319
EXE
fbe9752448320f52b6380f04bec73cc3