The Witch's Yarn

The Witch's Yarn

by Mousechief

What is The Witch's Yarn?

The Witch's Yarn is software application developed by Mousechief. It is most commonly found on computers running Windows 7 with nearly 50.00% of installations running this operating system.

The Witch's Yarn is most popular in the United States with 83% of installations residing in this country.

The Witch's Yarn adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, The Witch's Yarn is known to create 1 firewall exception to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{A14B6D8D-51FE-4C39-94B7-51FC1427939F}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task named 'Steam Overlaylol'.

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam_Reg_HKCURun_S-1-5-21-1646055978-2255025000-3107839011-1001.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.mousechief.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\Steam\steamapps\common\The Witch's Yarn
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/287740
Size:
0.00 B
Language:
English

The Witch's Yarn Executable Details

Primary executable:
video.dll
Name:
The Witch's Yarn
Path:
C:\Program Files\Steam\steamapps\common\The Witch's Yarn\video.dll
MD5:
98a9f5dc78eca03e7ce0ae6dd116d7e6
SHA-1:
SHA-256:
Files installed by The Witch's Yarn
File Type Filename MD5
EXE
e75c48f089e693aaacc7d4fad673a194
DLL
3cc424cfae49d4c1a88e9afc354615d8
DLL
3776437841c361b84850057370f691f9
EXE
4068bbfc2e4a28c39762326ea13626f7
DLL
0246c3acfe3ee406eed408ac186a4994
DLL
881a22e99da1db88e6474b489e038aa3
DLL
0e0840dc2f98d6106c5349a08ff02c43
DLL
e2f0c85af43fc9989d27afc7dac8ddea
DLL
86ced7690494a3b36e025b88879adbba
DLL
a98dc83f63f758e83079f99dd02ed92a