Overview

overview

7

Static

static

3

Anime-Best...11.exe

windows7-x64

7

Anime-Best...11.exe

windows10-2004-x64

7

$PLUGINSDI...er.dll

windows7-x64

3

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

Anime-Best.exe

windows7-x64

7

Anime-Best.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows7-x64

3

LICENSES.c...m.html

windows10-2004-x64

3

d3dcompiler_47.dll

windows10-2004-x64

3

ffmpeg.dll

windows7-x64

3

ffmpeg.dll

windows10-2004-x64

3

libEGL.dll

windows7-x64

3

libEGL.dll

windows10-2004-x64

3

libGLESv2.dll

windows7-x64

3

libGLESv2.dll

windows10-2004-x64

3

resources/elevate.exe

windows7-x64

3

resources/elevate.exe

windows10-2004-x64

3

swiftshade...GL.dll

windows7-x64

3

swiftshade...GL.dll

windows10-2004-x64

3

swiftshade...v2.dll

windows7-x64

3

swiftshade...v2.dll

windows10-2004-x64

3

vk_swiftshader.dll

windows7-x64

3

vk_swiftshader.dll

windows10-2004-x64

3

vulkan-1.dll

windows7-x64

3

vulkan-1.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows7-x64

3

Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09-08-2024 15:42

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Anime-Best Setup 1.0.11.exe

  • Size

    54.7MB

  • MD5

    0df068979f57f6813eeb67521b4914bb

  • SHA1

    339a17a7a68bb74aa4b04db590c0452b533d041e

  • SHA256

    4ab520bd8bab609a94e8dadf25ce40ed998b1fdfd7609bc1c4de72958a5d5cf2

  • SHA512

    568498fdddae77306be6ab882695cd4d4b1207d22af7fc46eae4ad4c6568f6b90480aeae352fc2445fd4c0415fe03a307c5497374788bd65ef3c391bdfd693e3

  • SSDEEP

    1572864:cgF1s9gTrfbj4OnXRqgHIOmMnHlu24vT6qFpu:cgF1s6j4O4cpo2s7pu

Score
7/10
discoverypersistence

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 5 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 21 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry key 1 TTPs 2 IoCs
  • Modifies system certificate store 2 TTPs 31 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Anime-Best Setup 1.0.11.exe
    "C:\Users\Admin\AppData\Local\Temp\Anime-Best Setup 1.0.11.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1156
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=3000,i,2727319350781907497,7925939240893079607,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
    1⤵
      PID:2212
    • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
      "C:\Program Files (x86)\Anime-Best\Anime-Best.exe"
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:312
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=gpu-process --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1652 /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:1460
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --ignore-certificate-errors --ignore-certificate-errors --mojo-platform-channel-handle=2188 /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:2756
      • C:\Windows\SysWOW64\reg.exe
        C:\Windows\system32\reg.exe QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Anime-Best
        2⤵
        • System Location Discovery: System Language Discovery
        • Modifies registry key
        PID:4248
      • C:\Windows\SysWOW64\reg.exe
        C:\Windows\system32\reg.exe ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Anime-Best /t REG_SZ /d "\"C:\Program Files (x86)\Anime-Best\Anime-Best.exe\"" /f
        2⤵
        • Adds Run key to start application
        • System Location Discovery: System Language Discovery
        • Modifies registry key
        PID:3308
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=renderer --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --app-path="C:\Program Files (x86)\Anime-Best\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:2712
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=renderer --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --app-path="C:\Program Files (x86)\Anime-Best\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features --disable-blink-features --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3612 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:4520
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=renderer --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --app-path="C:\Program Files (x86)\Anime-Best\resources\app.asar" --no-sandbox --no-zygote --enable-blink-features --disable-blink-features --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:4556
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=renderer --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --app-path="C:\Program Files (x86)\Anime-Best\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3824 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:2100
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=audio --ignore-certificate-errors --ignore-certificate-errors --mojo-platform-channel-handle=4284 /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:4936
      • C:\Program Files (x86)\Anime-Best\Anime-Best.exe
        "C:\Program Files (x86)\Anime-Best\Anime-Best.exe" --type=gpu-process --field-trial-handle=1640,3995630591919327166,15098361427543817039,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3920 /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:2064
    • C:\Windows\System32\CompPkgSrv.exe
      C:\Windows\System32\CompPkgSrv.exe -Embedding
      1⤵
        PID:4224
      • C:\Windows\system32\AUDIODG.EXE
        C:\Windows\system32\AUDIODG.EXE 0x30c 0x318
        1⤵
          PID:400

        Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files (x86)\Anime-Best\D3DCompiler_47.dll
          Filesize

          3.5MB

          MD5

          2f2e363c9a9baa0a9626db374cc4e8a4

          SHA1

          17f405e81e5fce4c5a02ca049f7bd48b31674c8f

          SHA256

          2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

          SHA512

          e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

          Download Submit

        • C:\Program Files (x86)\Anime-Best\chrome_100_percent.pak
          Filesize

          138KB

          MD5

          03aaa4f8525ba4b3e30d2a02cb40ab7a

          SHA1

          dd9ae5f8b56d317c71d0a0a738f5d4a320a02085

          SHA256

          c3f131faeefab4f506bf61c4b7752a6481f320429731d758ef5413a2f71441f7

          SHA512

          c89a1b89b669602ba7c8bf2c004755cac7320189603fecb4f4c5cf7a36db72da651c7b613607146f0c6da9eec5df412c7fba75475352192351c02aebdaa7d9a9

          Download Submit

        • C:\Program Files (x86)\Anime-Best\chrome_200_percent.pak
          Filesize

          202KB

          MD5

          7d4f330a5443eadf32e041c63e7e70ad

          SHA1

          26ce6fb98c0f28f508d7b88cf94a442b81e80c88

          SHA256

          b8704be578e7396ee3f2188d0c87d0ede5c5702e9bb8c841b5f8d458abf1356d

          SHA512

          f1b9b0dd7396863aa0feca06175b7f9ea0be4122351ecf0a0549ee4c34f85ac8c63cc927d7409a40b6e19fa91d2cb00a145616ba19f47045b2345bfbc2d4802d

          Download Submit

        • C:\Program Files (x86)\Anime-Best\ffmpeg.dll
          Filesize

          2.5MB

          MD5

          d2cc6fc3a7b6c5bcca5fae428fe799e0

          SHA1

          89cba6e9195cf95a7aa993d7aaadb331392b3bda

          SHA256

          0d4ebdd32f016c6eb203aef4c70ad2f93fa68e5b9e92087a862b21f8133c7319

          SHA512

          34f7e6c49ff2a230abc7c5aeeebc5ec628f07170c4638b3bfc5897a645fa5f167c54230373a39021548e0aceba50c35ef730e4ecb454bb4d882df2d699c86736

          Download Submit

        • C:\Program Files (x86)\Anime-Best\icudtl.dat
          Filesize

          9.9MB

          MD5

          80a7528515595d8b0bf99a477a7eff0d

          SHA1

          fde9a195fc5a6a23ec82b8594f958cfcf3159437

          SHA256

          6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b

          SHA512

          c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

          Download Submit

        • C:\Program Files (x86)\Anime-Best\libEGL.dll
          Filesize

          346KB

          MD5

          dccd99cb80c5022d4ed21c068d4e4ae5

          SHA1

          4fcdc6be313d0e3baa5168a7556df992e3364da4

          SHA256

          2166f8830bfbf3d574d7654bd927fe6e05fb74fb05d8e57af59c93090f6bc2a6

          SHA512

          02f18a691d85545a0452631b1c1e218aa5853d71937f7ae1d4f3639142399017139c1d9cb81f769754303635ce689605a7fd65765a3d8b4873603ced57925faf

          Download Submit

        • C:\Program Files (x86)\Anime-Best\libGLESv2.dll
          Filesize

          6.6MB

          MD5

          d36a30ef5726be3e3b3ed3f886a781a8

          SHA1

          0a47ed6013866aef030683e0398937013ce7fdf0

          SHA256

          3672e62c20b1d253ad642e155ae32ba5c1ca1f2cce37565c71a7d8aad21515dd

          SHA512

          8ac4adc7879cc7b0661809394e118220a350c9b8063aadf44fcecd115411fcc040ea73cb1fb2896931c34ec04b6146e5b5f7cda531249698dceb09aa1f9b4078

          Download Submit

        • C:\Program Files (x86)\Anime-Best\locales\en-US.pak
          Filesize

          88KB

          MD5

          af5c77e1d94dc4f772cb641bd310bc87

          SHA1

          0ceeb456e2601e22d873250bcc713bab573f2247

          SHA256

          781ef5aa8dce072a3e7732f39a7e991c497c70bfaec2264369d0d790ab7660a4

          SHA512

          8c3217b7d9b529d00785c7a1b2417a3297c234dec8383709c89c7ff9296f8ed4e9e6184e4304838edc5b4da9c9c3fe329b792c462e48b7175250ea3ea3acc70c

          Download Submit

        • C:\Program Files (x86)\Anime-Best\resources.pak
          Filesize

          4.9MB

          MD5

          91f8a4b158df6967163ccbbe765e095a

          SHA1

          95db67f0a2352fd898f4a4cfdfc860f6a9c58c87

          SHA256

          a30b8269e588c6cc2cea5fd4685da3012fd10451edb59a283005116f8e033182

          SHA512

          6450d75d53f24d11e1c1e7e3cacfc57ee9dd09c00ca0dc2ff30f580b59a6b17e7ad7d96682195bd7d806b49068653538c77ca4200491560cecff128a0b012d92

          Download Submit

        • C:\Program Files (x86)\Anime-Best\resources\app.asar
          Filesize

          7.0MB

          MD5

          584f6776cba4ac164931aabe772ca384

          SHA1

          f7347d75c73e3ef3898b59ca8f9e48413fd36501

          SHA256

          5b2a0f94faa16c8c82c0aa13b1fc79505d7d5d14f1b9d391461f85fb25598d57

          SHA512

          5a1c02a446e4295e3c48a4f630720d933c1ace2e88a46ace59221aaf451c1144b9bdf42cc374a9c371c71b7ae3d5ed23128f3d5c779dbbad2c20bf13a406ea49

          Download Submit

        • C:\Program Files (x86)\Anime-Best\v8_context_snapshot.bin
          Filesize

          161KB

          MD5

          d88d23551a4d7230f98fe0cbd363695b

          SHA1

          8e28eb4153e00aa5345bdb539b925a777588a26b

          SHA256

          72c3c123f10eb6e24c83ee40727a3a632cf7a8b062a3b7c7b41db4bfeda52ce4

          SHA512

          ea757e91c7cfc766b35da226263e82646f5b1153b8800c5cd69321d98b6d424413dcd7a02413a6a0e2f34905daf84bd21302b7ad58f2ebd814a7ac0a92b9d284

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\nsn58DA.tmp\SpiderBanner.dll
          Filesize

          9KB

          MD5

          17309e33b596ba3a5693b4d3e85cf8d7

          SHA1

          7d361836cf53df42021c7f2b148aec9458818c01

          SHA256

          996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

          SHA512

          1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\nsn58DA.tmp\StdUtils.dll
          Filesize

          100KB

          MD5

          c6a6e03f77c313b267498515488c5740

          SHA1

          3d49fc2784b9450962ed6b82b46e9c3c957d7c15

          SHA256

          b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

          SHA512

          9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\nsn58DA.tmp\System.dll
          Filesize

          12KB

          MD5

          0d7ad4f45dc6f5aa87f606d0331c6901

          SHA1

          48df0911f0484cbe2a8cdd5362140b63c41ee457

          SHA256

          3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

          SHA512

          c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\nsn58DA.tmp\WinShell.dll
          Filesize

          3KB

          MD5

          1cc7c37b7e0c8cd8bf04b6cc283e1e56

          SHA1

          0b9519763be6625bd5abce175dcc59c96d100d4c

          SHA256

          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

          SHA512

          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\nsn58DA.tmp\nsProcess.dll
          Filesize

          4KB

          MD5

          f0438a894f3a7e01a4aae8d1b5dd0289

          SHA1

          b058e3fcfb7b550041da16bf10d8837024c38bf6

          SHA256

          30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

          SHA512

          f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

          Download Submit

        • C:\Users\Admin\AppData\Local\Temp\nsn58DA.tmp\nsis7z.dll
          Filesize

          424KB

          MD5

          80e44ce4895304c6a3a831310fbf8cd0

          SHA1

          36bd49ae21c460be5753a904b4501f1abca53508

          SHA256

          b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

          SHA512

          c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

          Download Submit

        • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
          Filesize

          2B

          MD5

          f3b25701fe362ec84616a93a45ce9998

          SHA1

          d62636d8caec13f04e28442a0a6fa1afeb024bbb

          SHA256

          b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

          SHA512

          98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\Code Cache\js\index-dir\the-real-index
          Filesize

          456B

          MD5

          414eff8f80f380fe0190f0da425afc60

          SHA1

          f89d1d7c0f4c4d91bd2397075f145ced8ed53019

          SHA256

          8faaa638991044a01609abf77b044eaff1dbdfb8cb3ef66378b98ecd716c3558

          SHA512

          233abcc57b6c1b05b39b5f7f383ca19c9bf3b270bc1d76820b0a5fccc4c9a4633ba60695b0867929cd84bec347d4876517cfd1020d57ad0768ec91b081435c77

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\Code Cache\js\index-dir\the-real-index~RFe59066f.TMP
          Filesize

          48B

          MD5

          eb14400ea56cc6c444dd8188fa5592b8

          SHA1

          90b7eaed2493c838ab3482e9ed131bbbaf8d9053

          SHA256

          bd5dfb8ec07d3d1acdb2115c5826a1f8852afe03287a4c9a2c88609b3ce8c79f

          SHA512

          efb19f9bccf1a30a5cc728e90a109ad4bcaaac222ff1353dd6cf941df3221eeae17ba7cbdfdfc79c8f4fc8bf56db492c470683208c9470c01894a40fb4d11369

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\File System\Origins\MANIFEST-000001
          Filesize

          41B

          MD5

          5af87dfd673ba2115e2fcf5cfdb727ab

          SHA1

          d5b5bbf396dc291274584ef71f444f420b6056f1

          SHA256

          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

          SHA512

          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\Network Persistent State
          Filesize

          4KB

          MD5

          ca3677147842a0e2bf32be57b195cc46

          SHA1

          d155bc9201232031d496e4d7c814ef63f017cd10

          SHA256

          2f8ea65c4fc8ab79936e94c11a42326db57fb9e2af0bdc563d6c62cf91c1428b

          SHA512

          f130216148539ab1f25906937b8e7b4eba0585d90c609784e756558f3f6495e84f1a453d4efc6ba079d775c7141661fefaee29e0df214cceb709f0ff7b1ff488

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\Network Persistent State~RFe59b339.TMP
          Filesize

          59B

          MD5

          2800881c775077e1c4b6e06bf4676de4

          SHA1

          2873631068c8b3b9495638c865915be822442c8b

          SHA256

          226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

          SHA512

          e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\Preferences
          Filesize

          57B

          MD5

          58127c59cb9e1da127904c341d15372b

          SHA1

          62445484661d8036ce9788baeaba31d204e9a5fc

          SHA256

          be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

          SHA512

          8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\Session Storage\CURRENT
          Filesize

          16B

          MD5

          46295cac801e5d4857d09837238a6394

          SHA1

          44e0fa1b517dbf802b18faf0785eeea6ac51594b

          SHA256

          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

          SHA512

          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\TransportSecurity
          Filesize

          2KB

          MD5

          2e2fe1edb9f61d5cd52f05edc08d5a2a

          SHA1

          5ff3550a37b2656629ecd8f3b40a509e83c4c2cc

          SHA256

          be15965dd50c4bcd993be988be1d4f907002ddd488cfd4d252ea8cf2a84b9bee

          SHA512

          efd9b60fcd2aaca294f764dbf5383a4bc1b8d2402f8fd5d1098c2252b37450a2af59b52c7fe4e12b4affe03c6bcebb5dd0a4e62ec750e71b51f2577000a745bc

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\TransportSecurity~RFe58f400.TMP
          Filesize

          2KB

          MD5

          8afc7842ad4a7cd8b190cc4d86bc36b2

          SHA1

          9ccfbe9729d52612b47aad842720432813f981d4

          SHA256

          f42572ff4317192464bdd6aea169acd89f41062c5cc42d7000f65cda38181c4d

          SHA512

          6ad179aee1e78b02d3c3d0fb698b78560b1882686a31dbe26397a83d6b1d7bb3f08f7668fc9ee1f4f27fc29864eb7ab468a9885a1d4916816c5c5db5add45ffa

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\logs\main.log
          Filesize

          1KB

          MD5

          b6c4ed300f148a4d89247e17e245ef7d

          SHA1

          9554b8f8df7166b3ce288cd8dd1aca05e0e6074a

          SHA256

          5bd614befc719f57c1ab5118607e89367732acc077afc03fef646a78617cb53b

          SHA512

          4f12729094d492646dda371463a44845b99746b113c17e85d6fe6eb415b197f8e2f50bf3568bf931f8ee32bd24def028a6baecd688f9e51bc1ad80caec6da67b

          Download Submit

        • C:\Users\Admin\AppData\Roaming\anime-best-app\logs\main.log
          Filesize

          4KB

          MD5

          db326902adb23594a245a1de82686ada

          SHA1

          a50f728c528e191e1814220c2c6b213d3bc92255

          SHA256

          f5d28fed910533385666493182aedfe9cee1c354b17b280be88df02d52d220c0

          SHA512

          ab10c8fef02b054cb67f4a132dc584f25e4eff6527519c215f1f6d41caab4326360a34f24e2ee5328290e211868ecedcf3742665198b02da69e828d71e891639

          Download Submit