The Witch's Yarn

The Witch's Yarn

by Mousechief

What is The Witch's Yarn?

The Witch's Yarn is software application developed by Mousechief. It is most commonly found on computers running Windows 7 with nearly 50.00% of installations running this operating system.

The Witch's Yarn is most popular in the United States with 83% of installations residing in this country.

The Witch's Yarn adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, The Witch's Yarn is known to create 1 firewall exception to allow inbound and outbound connectivity.

Software Behaviors

Firewall:
  • Steam.exe is added as a firewall exception for 'C:\Program Files\Steam\Steam.exe'.
Scheduled tasks:
  • Steam.exe is scheduled as a task with the class '{A14B6D8D-51FE-4C39-94B7-51FC1427939F}' (runs on registration).
  • GameOverlayUI.exe is scheduled as a task named 'Steam Overlaylol'.

Startup Entries

Startup tasks:
  • Steam.exe is automatically launched at startup through a scheduled task named Steam_Reg_HKCURun_S-1-5-21-1646055978-2255025000-3107839011-1001.
Registry entries:
  • Steam.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Steam' and executes as "C:\Program Files\Steam\Steam.exe" -silent.

Software Details

URL:
https://www.mousechief.com
Support:
https://support.steampowered.com
Installation path:
C:\Program Files\Steam\steamapps\common\The Witch's Yarn
Uninstaller:
"C:\Program Files\Steam\steam.exe" steaC://uninstall/287740
Size:
0.00 B
Language:
English

The Witch's Yarn Executable Details

Primary executable:
video.dll
Name:
The Witch's Yarn
Path:
C:\Program Files\Steam\steamapps\common\The Witch's Yarn\video.dll
MD5:
98a9f5dc78eca03e7ce0ae6dd116d7e6
SHA-1:
SHA-256:
Files installed by The Witch's Yarn
File Type Filename MD5
EXE
86bf17a265e1b4ba41325623ec132e66
DLL
173c217e677c4b0c4f8a6d54ba13bf9b
DLL
c18caa9ba4f06a5d226a892df6dc1d72
DLL
52a41f0e49b2208df75609699fc7254c
DLL
a7532e66ea2f168a0970e829d8986423
DLL
37d899543052126d48c5f5baaf5522c2
DLL
26ed47513966000fa9072750901bbf7e
DLL
2516b89d992e4febf659a54b07a5c996
DLL
b0ac27b119bd625c6633d4185fa4d00d
DLL
1677422259270c785a969fd5b342962a