2390c5e752a7e507258cb8377b0c81c45113428e80a04a5f7769b23496f3d961

Analysis

user interaction
yes
max time kernel
149s
max time network
160s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/08/2026, 19:55

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Kawaii Animes.msi
Size 173.8MB
Sample260807-ynjymssfjd
SHA256 2390c5e752a7e507258cb8377b0c81c45113428e80a04a5f7769b23496f3d961
MD5 b4d9c11a98d2f03f3f344e75cfad0bd6
SHA1 7f40ab2d96bd6e0a3f1ec3a7e23743d40e0fc19a
SHA512 a083bee190e0d60c2dc6fdb91542a66789f9b6484c1a4a3b6e8dd4661c1fff60031a5aacd79e2993a1ae725a68a7b452b7e7156853c344eff2e7db2d526a67f7
SSDEEP 3145728:snzlaBDbG4fPpY/5eMzhMMPtwFYdzaUOxZp+cg1RXTw0qPc9SkgWyGzo9gnWpNBO:soRbG4fB6lMMoYdzW+njOPggWyko9imw
TLSH
T1A0983357FC661272C4BB7D3E81374B15D2747C268151E936E3A0210EEEF21D12ABA6E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery ransomware spyware

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4684	Kawaii Animes.exe
2388	Kawaii Animes.exe

Loads dropped DLL 23 IoCs

pid	Process
1016	MsiExec.exe
1832	MsiExec.exe
1016	MsiExec.exe
5392	MsiExec.exe
3360	MsiExec.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe

Drops file in Windows directory 14 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e5a63dc.msi	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\SystemTemp\~DF7196BED251E75DEA.TMP	msiexec.exe
File created	C:\Windows\Installer\SourceHash{C0B754B6-AE63-34BE-801A-B5ED074188F2}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI7ED8.tmp	msiexec.exe
File created	C:\Windows\Installer\e5a63de.msi	msiexec.exe
File created	C:\Windows\SystemTemp\~DFDE77F4A842B968CF.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\~DF4652EA19D0F08670.TMP	msiexec.exe
File opened for modification	C:\Windows\Installer\e5a63dc.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI7783.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI783F.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\SystemTemp\~DF8AD028219701CCA4.TMP	msiexec.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsiExec.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe

Checks SCSI registry key(s) 3 TTPs 8 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	Kawaii Animes.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Kawaii Animes.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe

Modifies registry class 35 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\HotKey = "0"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\MRUListEx = ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\MRUListEx = 00000000ffffffff	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\NodeSlot = "2"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Rev = "0"	explorer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\Vid = "{65F125E5-7BE1-4810-BA9D-D271C8432CE3}"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1 = 0c0001008421de39050000000000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0 = 1e00718000000000000000000000e1a40ed25739d211a40b0c50205241530000	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}\FFlags = "287309825"	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 0100000000000000ffffffff	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\ShowCmd = "1"	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel\WFlags = "0"	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings	control.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\NotificationData	explorer.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5680	explorer.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
548	msiexec.exe
548	msiexec.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4664	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4664	msiexec.exe
Token: SeSecurityPrivilege	548	msiexec.exe
Token: SeCreateTokenPrivilege	4664	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4664	msiexec.exe
Token: SeLockMemoryPrivilege	4664	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4664	msiexec.exe
Token: SeMachineAccountPrivilege	4664	msiexec.exe
Token: SeTcbPrivilege	4664	msiexec.exe
Token: SeSecurityPrivilege	4664	msiexec.exe
Token: SeTakeOwnershipPrivilege	4664	msiexec.exe
Token: SeLoadDriverPrivilege	4664	msiexec.exe
Token: SeSystemProfilePrivilege	4664	msiexec.exe
Token: SeSystemtimePrivilege	4664	msiexec.exe
Token: SeProfSingleProcessPrivilege	4664	msiexec.exe
Token: SeIncBasePriorityPrivilege	4664	msiexec.exe
Token: SeCreatePagefilePrivilege	4664	msiexec.exe
Token: SeCreatePermanentPrivilege	4664	msiexec.exe
Token: SeBackupPrivilege	4664	msiexec.exe
Token: SeRestorePrivilege	4664	msiexec.exe
Token: SeShutdownPrivilege	4664	msiexec.exe
Token: SeDebugPrivilege	4664	msiexec.exe
Token: SeAuditPrivilege	4664	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4664	msiexec.exe
Token: SeChangeNotifyPrivilege	4664	msiexec.exe
Token: SeRemoteShutdownPrivilege	4664	msiexec.exe
Token: SeUndockPrivilege	4664	msiexec.exe
Token: SeSyncAgentPrivilege	4664	msiexec.exe
Token: SeEnableDelegationPrivilege	4664	msiexec.exe
Token: SeManageVolumePrivilege	4664	msiexec.exe
Token: SeImpersonatePrivilege	4664	msiexec.exe
Token: SeCreateGlobalPrivilege	4664	msiexec.exe
Token: SeCreateTokenPrivilege	4664	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4664	msiexec.exe
Token: SeLockMemoryPrivilege	4664	msiexec.exe
Token: SeIncreaseQuotaPrivilege	4664	msiexec.exe
Token: SeMachineAccountPrivilege	4664	msiexec.exe
Token: SeTcbPrivilege	4664	msiexec.exe
Token: SeSecurityPrivilege	4664	msiexec.exe
Token: SeTakeOwnershipPrivilege	4664	msiexec.exe
Token: SeLoadDriverPrivilege	4664	msiexec.exe
Token: SeSystemProfilePrivilege	4664	msiexec.exe
Token: SeSystemtimePrivilege	4664	msiexec.exe
Token: SeProfSingleProcessPrivilege	4664	msiexec.exe
Token: SeIncBasePriorityPrivilege	4664	msiexec.exe
Token: SeCreatePagefilePrivilege	4664	msiexec.exe
Token: SeCreatePermanentPrivilege	4664	msiexec.exe
Token: SeBackupPrivilege	4664	msiexec.exe
Token: SeRestorePrivilege	4664	msiexec.exe
Token: SeShutdownPrivilege	4664	msiexec.exe
Token: SeDebugPrivilege	4664	msiexec.exe
Token: SeAuditPrivilege	4664	msiexec.exe
Token: SeSystemEnvironmentPrivilege	4664	msiexec.exe
Token: SeChangeNotifyPrivilege	4664	msiexec.exe
Token: SeRemoteShutdownPrivilege	4664	msiexec.exe
Token: SeUndockPrivilege	4664	msiexec.exe
Token: SeSyncAgentPrivilege	4664	msiexec.exe
Token: SeEnableDelegationPrivilege	4664	msiexec.exe
Token: SeManageVolumePrivilege	4664	msiexec.exe
Token: SeImpersonatePrivilege	4664	msiexec.exe
Token: SeCreateGlobalPrivilege	4664	msiexec.exe
Token: SeCreateTokenPrivilege	4664	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	4664	msiexec.exe
Token: SeLockMemoryPrivilege	4664	msiexec.exe

Suspicious use of FindShellTrayWindow 40 IoCs

pid	Process
4664	msiexec.exe
4664	msiexec.exe
5680	explorer.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe

Suspicious use of SendNotifyMessage 37 IoCs

pid	Process
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe
4696	taskmgr.exe

Suspicious use of SetWindowsHookEx 11 IoCs

pid	Process
4664	msiexec.exe
548	msiexec.exe
1016	MsiExec.exe
1832	MsiExec.exe
5392	MsiExec.exe
3360	MsiExec.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
2388	Kawaii Animes.exe
5680	explorer.exe
4696	taskmgr.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 548 wrote to memory of 1016	548	msiexec.exe	89
PID 548 wrote to memory of 1832	548	msiexec.exe	90
PID 548 wrote to memory of 4732	548	msiexec.exe	96
PID 548 wrote to memory of 5392	548	msiexec.exe	98
PID 548 wrote to memory of 3360	548	msiexec.exe	99
PID 4684 wrote to memory of 2388	4684	Kawaii Animes.exe	102

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Windows\system32\msiexec.exe
msiexec.exe /I "C:\Users\Admin\AppData\Local\Temp\Kawaii Animes.msi"
1⤵
- Enumerates connected drives
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:4664

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:548
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 2F9436CBEC94CCF978496593E13F4D22 C
  2⤵
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:1016
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 35839E2004A91CA64F2B0CD7509C817D C
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:1832
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  PID:4732
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 8548B41F8A21BF14FC08B25924E52242
  2⤵
  - Loads dropped DLL
  - Suspicious use of SetWindowsHookEx
  PID:5392
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding AD839F05641FE2C31488ED7BC09A8B59
  2⤵
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3360

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
PID:3240

C:\Users\Admin\AppData\Local\Kawaii Animes\Kawaii Animes.exe
"C:\Users\Admin\AppData\Local\Kawaii Animes\Kawaii Animes.exe"
1⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4684
- C:\Users\Admin\AppData\Local\Kawaii Animes\Kawaii Animes.exe
  "C:\Users\Admin\AppData\Local\Kawaii Animes\Kawaii Animes.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious use of SetWindowsHookEx
  PID:2388

C:\Windows\system32\control.exe
"C:\Windows\system32\control.exe" /name Microsoft.AdministrativeTools
1⤵
- Modifies registry class
PID:2488

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
- System Location Discovery: System Language Discovery
PID:1376

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:5680

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:4696

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5960

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5a63dd.rbs

Path C:\Config.Msi\e5a63dd.rbs
Size 130KB
SHA256 510b8617b9a90b9aa45ca6eaba493d4d6db34b8ed87c4759dc8dfa141c14e638
MD5 266496a25444fb1a97e406182e865926
SHA1 47a1add55299de036451e8473420a0e2a76e45e2
SHA512 5d270d93a6672090eef840229ebd2ee8a0e3eeca64135a326b09a4dfb1953e677e46d27767a442b6b56808b4b8f3f61a2099ce9a4c75af73b1e4f2c6d5f6c33f
SSDEEP 1536:XMHVwhxIEEOPL4dR2OVoH9no2o30UYviV0O2tN6t0y5zzmNMlFsD04EfN48W1tpi:uz02lqEk0
TLSH
T124D3CD63616ACF69F509B53FA331529EE2F90C0AB500720C411578AE47FE97EAD6F234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Kawaii Animes.exe

Path C:\Users\Admin\AppData\Local\Kawaii Animes\Kawaii Animes.exe
Size 551KB
SHA256 e8e2f0c010017577a1509423ab9c5441788180e5f964bad6d91d706c98a5d0aa
MD5 4b515f25f876f3506594459648e6e232
SHA1 2593d90b67d926f82b41af04901d456438177228
SHA512 b998695625202869a7088cda007b267c0c038e8a775195e4d33d4c618b6d4197e0b2663d6cd18ff2610bee6ca4aa8a11fec83e06020cdb3cfc3c234e9572d0a5
SSDEEP 6144:aaYRP2h+Dm7mtBZ9Xe8OBP3VPHH8WIjESqgvVohG77xpbGy0JPFiPO4IEWwdMM0M:64hAZBeFdPHHsNdo4pM5zWX7dM7hI4Y
TLSH
T10BC4AD5AFA6800F4E0B7D278C9635902EB75785A0271D76F03E842672F276A09E7FB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

.package

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\.package
Size 13B
SHA256 7ea195054ba150b5b635dd511e47a24f5c9a74ae2c7aa1c814094c0c04cc76af
MD5 cf882d1c0b0fb0a1fce7dc552c12eafb
SHA1 ab3fd2de22633e85834b88821c2c4b184f1128a9
SHA512 36ef5040ea0c29bf3890966c42ba34249bc9317b4371f6716e0b1f6ece8703eec53ae2d41149528e21099cbc0ec0b4bd69fa6a71e044db5b7293d1de29932f8d
MD5 SHA1 SHA512

Submit Download

CMPConnectivityMonitor-jvm-38bff93ed0180adb4b0d0c4aba57c9b.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\CMPConnectivityMonitor-jvm-38bff93ed0180adb4b0d0c4aba57c9b.jar
Size 426B
SHA256 d6c574894aecc5eff0e7488d08494c4cf715ebf5e46e29423e92ace0c5dbf7b1
MD5 0950f0ccd69edc0186ab1a6a194f089d
SHA1 06efc03909c6fbea85f1942ce6fc274d383f9d74
SHA512 5f158bed7581ab51aa9d404b9930b5b7383bf0734c30d4922812bb40e5614584549e1e1ad2b0b63fb8bb185793ff5f944ce68ba021e555f610a4e4371da4824a
TLSH
T109E02234062DE109F10D34B0A6E6720F2A6222D6473C06031A5075A0B92AB616D5A08A
MD5 SHA1 SHA512 TLSH

Submit Download

Kawaii Animes.cfg

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\Kawaii Animes.cfg
Size 12KB
SHA256 6a6f7d6f7cc3918938461aa756c41d2c84ae6a7b918736aeaf0ff5177ca8571c
MD5 c968fc2dcdce9b4d1a686278a330b9fb
SHA1 cb69fe58732222b1bda6b1a9fa251f7c4c3e8a18
SHA512 b2020e42a6275f6354d7cd21a796c6947add93791d8818ef6401994dc201d8199f250811c7f527fe549c9adfaea6a5b6e6d6de428b7e16eba47bb3c0a045f518
SSDEEP 192:z/AuXVzpTcX3RNjuMv7cyAty/vxfRH3H4w5tEcbDFtM5F:zVvy3nuMv71uy/vJRXJkcbDFy
TLSH
T1E24264BA3AD0296005BF423DDF9B6424FA0979EDECF12A6743F0919C0D629297D0D70A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adaptive-desktop-1.3.0-beta02-b632c7ba64d3b6f9d123a1d87040a2.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\adaptive-desktop-1.3.0-beta02-b632c7ba64d3b6f9d123a1d87040a2.jar
Size 20KB
SHA256 66254a6fffcf8d154c8e09d15eda71b396a59c6aca7416c8e60e6a168fc5fd01
MD5 38d73ee6e6a80fd63adcff13ac8d95d9
SHA1 25f981103ea7e97f90c4a47405eeefc49b43ecbe
SHA512 bfe8f24ac200741238554c6671166fd24c75cfd53404cba399eed83b783a131151e79786e7ca22b05f50617cf71ea7d411d5ff25e09094745c841e26332f5da0
SSDEEP 384:IAD31nFp52NwOfX4AFj9sTTNCSemWIvtihM+ruG1zJIFCyTrg:H3L0FFj+Ym0hprf
TLSH
T1C8A28D35DFA9423DD4997730229E50F3BD3432E72B0B80846610287BBA9B1065FFD29B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adaptive-layout-desktop-1.3.0-beta02-b6c6b7f8c793058bc283884bd2828f.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\adaptive-layout-desktop-1.3.0-beta02-b6c6b7f8c793058bc283884bd2828f.jar
Size 514KB
SHA256 a0ce458a8be97fed82ca95548fc59a06b24ac6141b5e83a155680c04e9868527
MD5 1280b629d4feba88274a28c3b02d8da3
SHA1 50c70b7d2bde96860546e883c14ab3340991d8e7
SHA512 f4548e88ad08fd0a75919bf98165cb9022a833fc98caa5ff657e5c237cb2cee3d70c9921b05e6650607c6d321925986862c2c8cb3f5c415e4cce5999659ae167
SSDEEP 12288:1cALI4cp8ZELALlAu5nAEqRWfEWlNutJO8HITZ85k0pPYwri:m476ALy6AOfEMutJOuITa5rpQwO
TLSH
T1B5B4CF30EA94822ADACA7330B69750B17C2435F7725B415671A1107F76EB40ABFB87CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

adaptive-navigation-desktop-1.3.0-beta02-7c56393dda846ca167b03d6d1188f41e.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\adaptive-navigation-desktop-1.3.0-beta02-7c56393dda846ca167b03d6d1188f41e.jar
Size 22KB
SHA256 1d3f98d1b1c581a7de550f4ccc300c1e2b1342c3b2bba6d5be5f6e62dc48a1e1
MD5 05c2f86f3dda218f3304baa8897ac3f9
SHA1 dd9e5984af230fb27f0200b3e0221bb35dbb2ddc
SHA512 1b803d3990381214ca7e70dacebb3c1f8c7bb110a6f0765dcd4f62cfbfdc9452df7d997969e6e0356707b91fa2424bf7b13038a8d88e57289b833dadd327931b
SSDEEP 384:sqRh4n7iw8Z/K6+eJG0Ku7iLB5OasF+noquzJIFCyTiCy:sQinMZS0JiaasFgoqCCy
TLSH
T1E7A2D0A16694C020C92F7731826706F57DB3F8D7362B91D13A8328B1B1DA4815FEAFD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

animation-core-desktop-1.11.1-3ec8687bba1c875f4630e7c99d49defc.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\animation-core-desktop-1.11.1-3ec8687bba1c875f4630e7c99d49defc.jar
Size 349KB
SHA256 fa6a65b78a8cd1b4c330bc237dd2bd05a864bf379e95a174a6d45b6cb06036ec
MD5 4b8638b1dfd9d469487d1f4ef6185129
SHA1 848273ed865f4bbe9f478a393feb073e1a11f099
SHA512 878f5cb3284fd7c336533d1663d1d3285d327cf707fef8cc7b2f027edafcd6a52a2368741a3b3e9b27a3aa152905e48307409e82dc6aa28aa94ce4d2ebe8f6aa
SSDEEP 6144:AaRGvi1D9tLk00R45g5wOhKykDDGD8QkI+ZhHUAbVsw/K6PKAB7nlbUygAlwIji:A0ei1D9Rkgg5wOgDDGD8HzHUAbz7VlbG
TLSH
T1D374D0B096C45100CB6BA332729D00517C3426A1DB66453E35B465BAF7CBA062FAFFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

animation-desktop-1.11.1-3b1636eba8fac16d053e567d9b91df8.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\animation-desktop-1.11.1-3b1636eba8fac16d053e567d9b91df8.jar
Size 357KB
SHA256 969d9643630489ab54a905c40b708cc7e13b67620db5e17b208a4278864cbae9
MD5 3fc547dce1aa7804ee1ccc7d952cf00c
SHA1 1b66dcda67af04b180818bb897f0b275a822132f
SHA512 dc0e118119f944c35a0d414f163832704c0fcc08a38da3687d7d90579d0e96e3e792eb6fac22816dc8af5d838f2e07f91a1bee3b0b460d045b1699a380ed3dde
SSDEEP 6144:iHQISI4QYLE+JWAqjTquJyhuCUWJHtKnynC/QFAb8wPA1Fr6HN8tBVkTSBLJ5uxk:25TYLEe6hshqyN7C/QF5n2t8rVkct0lw
TLSH
T1C474F1B069C04120CB5BA33233DE00657E341BB16656466D36B416FA77CBD0B3F7ABA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

annotation-jvm-1.10.0-115b24fa6dc2fbca9edd40aadbce03e.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\annotation-jvm-1.10.0-115b24fa6dc2fbca9edd40aadbce03e.jar
Size 4KB
SHA256 5628c1862cd9f789b7ae65c7754a45b7c76667aefcfea00a6d8d56aaa6f10ab5
MD5 1c567c046e724c66b2eced519a9722a7
SHA1 4e669ae34401036421095c40bf6650e5e6208914
SHA512 82c550b6342eb65947dcb854947c0ac671b0681e71c20028b0b388854a07223ff81544184753f2a076cfd2cf2f918c3a9f2bc82cf7cb3f7d4f1121ab09dd947f
SSDEEP 96:btMX3eYyypTGoE31mzgI0+qBC2XoBYm0fHD:btMnzJqNFm3yE2+YTD
TLSH
T16B914BD49B09C318DA4E21F6A5EB3CE5FE31BAC50E2DC553065578517B226006FC9C8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\annotations-23.0.0-8484cd17d040d837983323f760b2c660.jar
Size 186B
SHA256 1609324d70dc2a54ff6e810ee7a6f111fff0eca58ef33f11843f8f01005cc5aa
MD5 4c046c666cc7ea1cc7b2ee90fc9aeec3
SHA1 c96dd8c8dd65d0a6505687e5f329891b71c4cd89
SHA512 6da9e7399264adf3fd8394e56ef0c87f5f79ece1a9e677eb4f4540f7912e9d0539338767583878476fd56c1e1f825857a27a2e2cd409493a8411f6933db2ff58
TLSH
T191C02B01175CED02E94C32FD67D30B0BFE1AD0C4938D83C3832034003A06C000E4409C
MD5 SHA1 SHA512 TLSH

Submit Download

atomicfu-jvm-0.28.0-70921245a0aed3c3e3d17c34ca3dbd87.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\atomicfu-jvm-0.28.0-70921245a0aed3c3e3d17c34ca3dbd87.jar
Size 10KB
SHA256 8c69c2d9f08f1e524c1699e9027d17443c02c0356a2dea784b08b29b2dbd689a
MD5 331b03bb866ca375a744d79ebc9e7a0a
SHA1 fb5bbd72890b666e3140b6daec18bddad4c1fb36
SHA512 c7fcf7f77a554d19d666494d14341da921446bded7af2e99c87d7e5c35afcd90bbb922363d182d8c817d1e632f89303f2711cc1973df2ce25e2d1c6434ec080b
SSDEEP 192:KNvc8ht3Jkok3zpc8gA/W2htHzO6tbmMXMbwfxOXhnVi:Y3GoiFj/WMztDXM2x8Vi
TLSH
T181227E146356C881DE07B2F65DC7443A36922ADB87C88213C97630F37B0F90E7A9634E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

charset-jvm-0.0.8-ab1cc0e5b475702f69679eda02df0a3.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\charset-jvm-0.0.8-ab1cc0e5b475702f69679eda02df0a3.jar
Size 17KB
SHA256 12db44afa790b048905ceb1a01f6364ad3d662898a3fb7fcd94eb7f47690f3f2
MD5 cee695ae7ab71e4def33617c57cf9eb0
SHA1 ee8de5bf8a2b26c5519d63b097cd5dfa85878f50
SHA512 4f313812e3142953570415ab6fc31c40b319c54e7c994bfb25f29de05c900ffea6582db25ea6924d596c52bdd7ba8036c0a8bfce9f965783d57c8faf73ec93e0
SSDEEP 384:mIQ92cvzle/UJUST0fHKZ+iMEtpvqS8MTklTfajCSrvUCiwy:m8cvc/UJUOF+iMELvxZOTfqCSrvGH
TLSH
T13082DF96B0036BB8CB2870B0DDC7439A7B3D56E39B91C42270B223B035839C4AE7A355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coil-compose-core-jvm-3.5.0-9565c4af0fad861b0bc16b7bffc53.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\coil-compose-core-jvm-3.5.0-9565c4af0fad861b0bc16b7bffc53.jar
Size 124KB
SHA256 d78805fa52e8233377b57fe662f35668dd4664ac58c6f1334d76fd1543a229c5
MD5 0f83d766ec2921f2b396aad33c145f77
SHA1 397b9c77e41d77d117bd05ce772a9fd606128235
SHA512 a579851d2333740ec6016340c802c24a2ac2a75cd15b95ce3d54e21d7273ac23c4e5604902c0982d0bfd3b43dfd0d2cf8c1127ca0082c1b04c2fab96b06d2d30
SSDEEP 3072:u3fP7MexDIUPbiRnVRcPvaQWfgNpjpSuI2frMeoLUhtly:ufzKUe1bcrWoN/S/2DMbUE
TLSH
T1A2C3E0364320C1E0C223B233B7A785123D36ABF59B4742214DA577F23BDB95D695C3A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coil-compose-jvm-3.5.0-c0c057f9ba1311897cfbada05f910fb.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\coil-compose-jvm-3.5.0-c0c057f9ba1311897cfbada05f910fb.jar
Size 11KB
SHA256 eb5b8e083a65d5f050c4f882fac177a9de0f37cc2e477146d984bbd61a3fa9c6
MD5 2389ff8cc4937b8f6ececdcb277335e3
SHA1 04a315b319780614cac0637968057607cabe9777
SHA512 58d2cdbb3a721970137c0ef394996ccbeff30673fa54b12473a962e97a21935d55e8142a5d026a2f24e4990aed75f39c8b72f5186b56874f3d68e3adf2609cdf
SSDEEP 192:WiQY6Wsy1YtqujlpJgL0h9SwGUK//nFX/p8Ak4kFA9Wpniropt0wc5oAegRuLkuP:Wi6Wotnjfio9yFX6Avks+niMpVxgRuLF
TLSH
T1CD328FB8BF1100B0C86BF4796BF3172A3C2BA1A29AB746535D9473B037D360D127D566
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coil-core-jvm-3.5.0-73da9d924cacaf672c3cc0d09340dfa.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\coil-core-jvm-3.5.0-73da9d924cacaf672c3cc0d09340dfa.jar
Size 315KB
SHA256 f4002d4679c99b66f0273bea943cfca2c08516efe8c0194e353d9694e2181996
MD5 ab9d5b810c68172c656c69c71692164d
SHA1 d756ce687034a0e361ee4e133f9b9e2d3ff6ad26
SHA512 cfb1f9d4712424937355dd65287463605d4040b60b81880cd78cd5b740a7bfb2cd13bd4b73060ff050345ef299cb6929ae90419500389fb1e68e378055ff766a
SSDEEP 6144:b8HaYtiB38ZIzkbwbDXIMFJ7pcuOMkb4zdpBvMSmKkzIQG3gCu:Y6KiBMCzJbcMTtc/8zdbVkzIl/u
TLSH
T13D64E076955889E4E4067131BAD282773D27F2F6E349803308F07BB97A86E0A7F5835D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coil-jvm-3.5.0-4cd0fba134e919a7ce9b2982d8d52685.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\coil-jvm-3.5.0-4cd0fba134e919a7ce9b2982d8d52685.jar
Size 5KB
SHA256 ee00406646aa1a6776c751a3e115b14eb3254a2870178ac7c8cbb85749dc1b22
MD5 5d78907559ee0140372a1b541c4417b2
SHA1 38702473e34bc20999311dfa84e471a2b779ba06
SHA512 976e473d25650c8111c35bf42386e0107be9d309ffcdea7a7555aa991d184cf3873b2541e8e8d62755df07da7bcfb8489d6e7a30308ce934c1d7b3089f74ab00
SSDEEP 96:MSj2/lHr8cu8aVELP/DTKkeLVDU4+/614zc0zArpjXVnlNPTsxsHN:2H1u8aVQzbeL1U4raAFXVHbsWHN
TLSH
T138B15A29E32645AADA4CB7B432C19437BC1673B30F8D2823D5547FB1B31BE009B49A35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coil-network-core-jvm-3.5.0-ae9139c71aff8fac3760d889bf422572.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\coil-network-core-jvm-3.5.0-ae9139c71aff8fac3760d889bf422572.jar
Size 66KB
SHA256 8536a2d78b24496695057126b23b0519e91b741b417f105dd95033326b9c6e22
MD5 30a8856ee59a0aedd16a11077c3cff4d
SHA1 b8987f787406c9cb3ee9b2313f1018c45551b585
SHA512 aaa0092914fba9e2c13d8bdb0b4816eb65de3591ae5113c5fff307b582d2fc64597e5b9013d2eb9a19d780c3a6b0015589d3576e2d538c48713b19623ebe0089
SSDEEP 768:fnMiAhCzrBX68Jyke76rraz9fOe1Jgm93Mq6qkXCTqXMHimiKaoU1bybDsTJ266L:L6G9e2rWJDAm9cq0PmAg826vYD3u05vv
TLSH
T14863C037603855A5F00731342789A7B23C56A27AA71A94FF01B8B7F1B5D6E0A7B2C3D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coil-network-ktor3-jvm-3.5.0-af8ff3d46f38f9240b7978a83b5aeb.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\coil-network-ktor3-jvm-3.5.0-af8ff3d46f38f9240b7978a83b5aeb.jar
Size 24KB
SHA256 7a9684e54750675e7d09639d0d8f49a5593a92f28ac11ccd1051f35e3a975c18
MD5 c3126de080dc2a5747d150b3ba02a8d8
SHA1 49e77f15b2afe0ccff710fb1b7db6ebe59a60024
SHA512 ad81613a5966ae763821419397b335bc136ba702d34cc946e24eb45e6a4b3a4c3087caf2980b468cc60e095254d0eab2e3f4b9c50bc3bd17085e1b7ad4a85046
SSDEEP 384:TPjui4gL1xeXy1dycGHgJ/20xZr9gAIK0es1xRIfMLBnNDFZnlJ2yUw:bju2L7ei1sV42nAk1xRIkLthFFZh
TLSH
T142B2AF77703A06E8E007377176812364B64223A34617D9FE15E4F3E6B193D45AF9C39A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

collection-jvm-1.5.0-4421442c114a4f8c8fe587cf2d668237.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\collection-jvm-1.5.0-4421442c114a4f8c8fe587cf2d668237.jar
Size 276KB
SHA256 86048a78929f406dabbfb4721ecdb8e4c949d582cb82b6fc1fe827a9a17de0bf
MD5 a224468f84350517a8f8ba25c4cc0fa6
SHA1 999bf05db4b4bd670a8c3c7cb988d49c0d354b2e
SHA512 f0db1ee14a0c97706215acee68af7f594f784cd32e947f02457c591300fa02848fa7176cb4c86afbb74c5db16bd7930c33ffc11e1bc9088534a75a3f28e76dd6
SSDEEP 6144:gsJfWseJc9haNUoCxf5Z86C2Eqi1qUkf9SarFux/za7tNRmI:gsJusJTOCl8Fqi1qUE9trFu5I
TLSH
T1D2540160B7C072B4D48B75B834DB00F6BD3917D59329006134E56AF1FDAA41B1BFAB1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

composeApp-desktop.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\composeApp-desktop.jar
Size 12.0MB
SHA256 d524e9f36858516e7e57985b654683a01bc7a92c958d8fd229e3ac8851d06bda
MD5 53751fdb4ee2b9570de021276fe64e2a
SHA1 e2bd661941bb8a893f80ca29b75f2aaac77a93a4
SHA512 ad9fea16d06bac37ec74e44f6014222cde84cd03afc27f7503b147275b8ee77d433cf4dd4c9b3c870f3e322e839ed1d8c515771571a504278c55279a57f24923
SSDEEP 196608:fPGZi2/hBhWY88vTw9WMeIlp7QpF+Gx1A5ugb9YcUBvks54Kg2XJXvjB:f8ht8m1MtO+q1S7TAvkzWV
TLSH
T1ECC62323B00F5066CD12DA37B162C4DA39BE956BF64E227391F529B93607C1D772C22E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config-1.4.9-c62e4875399181f2a41573ee1fb0d00.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\config-1.4.9-c62e4875399181f2a41573ee1fb0d00.jar
Size 209KB
SHA256 1aa1afc3d47a9a953dec66347e6c9ae86d06f36a6125468949f0e114e6608551
MD5 1b5449a28c6e2f1462463585d2a56800
SHA1 879dfc0994e7990dc82cabdb5ee4ccc9acb33be1
SHA512 ddec2ec8c8bb09b7b04718b9d5e4193d1c23092375ac2591352a2af64eb00a91a22519c5630944f6e0a9ff68def0e6da27b7b01c566fc484aab6f51a2bce3181
SSDEEP 6144:a3PMC6Ve+Sw93o/zJxqmahYmEF9ESom0dRniB:A96R3o/bqnZEF9jYRiB
TLSH
T11824D04788ED595FD7275E30F1C940357E3627E2B66E981635E437B3B81A88A2F0831E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

core-common-2.2.0-2212d240dfe1e8a7598ee117ccc316d.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\core-common-2.2.0-2212d240dfe1e8a7598ee117ccc316d.jar
Size 165B
SHA256 1c8d86bf571b39400c0dad77288de3e3f18216d2e174a259bed4a51fe4fe8fcf
MD5 75826b363a5851022175b68ba36ea5a1
SHA1 b44ab88f6436fde11c00d3059016ccba995e5b70
SHA512 8527f20a16dbd6f0c130605ee9c105186cfdf6d1b6d1fb1d1d6da922ccea335d7706387964adedd3f8cb20970670d5e4b42692c1d1c7cb70a2595a882244ce4a
TLSH
T1A1C092952B6CDE09EA1D7EF863E37B0FFE2650C1471C1293429078507A0B5401D69099
MD5 SHA1 SHA512 TLSH

Submit Download

datastore-core-jvm-1.2.1-68bd30a82462b130b953a7a0ade6b318.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\datastore-core-jvm-1.2.1-68bd30a82462b130b953a7a0ade6b318.jar
Size 155KB
SHA256 ecde81e1113b8fcaf06baac66bdf90d18400a52c29c1ab34679fa04923d031b7
MD5 fdf950365420fb6a9e6601566914012f
SHA1 3c2d223fc625bfd179f534a7e11fe5310e1489fb
SHA512 4afcca1677a521b0d8f7594a71d397b73e489e21f2a89439ac7ae1d2b827b31ca764812d68915617b56b00b6f4a5a4af33b0ed0508abb87410ac731c992adefe
SSDEEP 3072:XnJtxb3jL0o4OaLocOoI/Glgy7/2C9iABhrZM:3t7RT8OlZG/H9RhrC
TLSH
T1DEF3BEB1BBD181B0ED6B9531318B402AF82032DAE6D1821378D576EEF447B067B6572F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

datastore-core-okio-jvm-1.2.1-38c87b659b5e43255f87474fab30457f.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\datastore-core-okio-jvm-1.2.1-38c87b659b5e43255f87474fab30457f.jar
Size 27KB
SHA256 2ca7170dabdd9e20dc23772afbb0d747bda4a237f3a2eeb4b3b45343130e4f97
MD5 20251953c22f1be97fbd563b80a5935a
SHA1 f428924d9c96ac2ad112a682ab3e4dadf6217843
SHA512 90c3f7cf1c7a699d673ae180fc33a56fe7510b83ec3b4321acb9e1302c8728ac606a36c6cc5ea8143a9f2fb81f91bcde5258e1b332a6741d8f08482e7914dd1f
SSDEEP 384:oh51Sw2oUTlQFC4m0wTKkmkW6JRYN1k13zMnVZQCsYC1u9vOI9a6oR41JvzJIFCk:45n2wm0GKkmmR/QnDQD1ukEdNKD
TLSH
T1BEC2B0E2B7469650CF8A593074CE0879BF6072C1D368A213A89525B7F89F74327B43DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

datastore-jvm-1.2.1-64873d5cfe3f83e57d1a8ba9fd633d48.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\datastore-jvm-1.2.1-64873d5cfe3f83e57d1a8ba9fd633d48.jar
Size 4KB
SHA256 406397a7054ab0d3d35819dc1af748169c92838d77693bffe8459ce8e276442d
MD5 8d73a3c98e7c655822cea05fb53231ed
SHA1 fc9d3313ee1a0c61796fc1cb98c320c6109ed0dd
SHA512 cd6dc9acc7e9df61152c7aaf3827c5092597f834d61736fee00536a0cd3aac409017bdce5870d0d306d1ea36f7b68f2cbf2c8793b2ab20da64ab29e80aca531f
SSDEEP 96:fRFhmX3eYyypTGoE31mzgI0+qBC2XoBYm0fHY5:fRPmnzJqNFm3yE2+YTY5
TLSH
T144915CA0F705D328DA0D35B6A0DB2CF5FE317AC90F19845392547DA57A277007FC4A8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

datastore-preferences-core-jvm-1.2.1-a71e7c68fc6dd85f6237335722cd925.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\datastore-preferences-core-jvm-1.2.1-a71e7c68fc6dd85f6237335722cd925.jar
Size 35KB
SHA256 08adc65127688c645fa1ba557c6068338db5dbf1b81c6f63210e647c1150ee51
MD5 0cc8874067ce8ae7432aae263e5fcedf
SHA1 aa581265a5649f3fac6307b3614c3f59a7ed5bd4
SHA512 28d876f69fe2ef90d0349323fdfa8aad1eee6aac90051ea39a7e516dd81d680a73c83dac5e4df1c9639488d2f8b40753d97eb5c44ee440131bea7589a4f36124
SSDEEP 768:aAnHg7EUV26eNXDB+I+mmGn6xeAbHrQCpnVHk9h5b:dnHgQUYsjXsAbH/p18
TLSH
T148F2BE627B869520C735507034A32377A97576FBCA3D110994E024AEF053FA0BAD9B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

datastore-preferences-external-protobuf-1.2.1-80e72813e22e9695eaf82ff9ccb727e0.jar

Path C:\Users\Admin\AppData\Local\Kawaii Animes\app\datastore-preferences-external-protobuf-1.2.1-80e72813e22e9695eaf82ff9ccb727e0.jar
Size 1000KB
SHA256 135979fc4c4433f98dc6058dd1687baf5e2d551db4f0d2f67f620830f1097093
MD5 4ca04c6f8d0aaa853aeb3836764fcaec
SHA1 a476b209c324601581e6961d4559563b79e111a3
SHA512 18199bb7dbeedd265d50bf13f4c990c99e0832aa79be1ba452825db1361c7475acbbbd00fd7f3c183d970e1dd79d3887144e12d4080a2ab6bb1f61ed6623f991
SSDEEP 24576:yGYdkXxGJDt0wT6Ymn7Cbo66omaElyOyCO3LQiIojputzQ3ZJ:yxkXklbTxou07AOTGEiIojuzCZJ
TLSH
T10425D0B1BFD34478CA96A074354B022BBDAA77E6C538800110E06EADB492FD17F76767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\VCRUNTIME140.dll
Size 96KB
SHA256 c179d8914ba8e57b2f8f4d6c101c2c550c7c6712a7f0f9920a97db340f9d9574
MD5 a4cf5c1f71c540c69371c861abe57726
SHA1 f272b34182db8a78ffc71755b46a57a253fcd384
SHA512 f2b53f28a6369f76b22e99fddfb86730f3d33e87c68dae7aa3d05808223693bb86ade263cccb99d5462cf98eeeaa6a6f1cfe5ea3aa1739f8ad6eb624caff1045
SSDEEP 1536:y/XLjIqMoYdgwdpollAvhkCrlgnpdD+9H9YOecbKVCt/mz4:y/7mylIhkoQpdK9H9YOecbKV6mc
TLSH
T1CBA36A4A766442BBD06BD278C1E34A5AF771B840873093CF03B6866A5F63BE05E3D352
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

java.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\java.dll
Size 109KB
SHA256 085aaf0936dab15573bc109df9e14b45397d597fc378772c0017d08127c51591
MD5 09aa6df4e8de2157fee78c033b97f761
SHA1 3bbb26686e784b9588b1d38d6db436369814b15a
SHA512 6f57266177ab15903b3ace7518e605285bc77eb0b5f8ff55cc26268efab0299261c799f87ab39f0d90db4f814808d8475803a3d936bbe528c8dc06fa3c5d5f6a
SSDEEP 3072:m2/SLuH69p9CwYAu4co+C1myX+G+waXrJraW:K6a97nY5m1am
TLSH
T101B3295FB7254097F47AF1BC842A854BD3B2B4B41241A30E43A5CA5E9F8FB713D09B92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jimage.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\jimage.dll
Size 22KB
SHA256 0561e25176b5f41512997dd2b36e64d86d3298a2016a480c14828bbf6c045938
MD5 fcd39668c27856fe96a85391f1a91b85
SHA1 a79f8c72179bf1e91f4efaf9d97c528730cef96d
SHA512 f730e81c1c7474aa8e5d292911d4ea5eb4488244ec72560c9b38174cf595230106adcf4ff0affb1910af0ba89aa64dc03b9f8e59193782f6f359dd6e20afe373
SSDEEP 384:OsNvLl4SPXrRti68pdKCR/GzDNg0FVdfMwKv7dT:VNvpjRtidKCR/uNg0FVNMTv7h
TLSH
T136A22C56F7A45969E566E17CC8AB9F1EC3B1F8519B21834F0B61035F0F333A06A2D742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jli.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\jli.dll
Size 77KB
SHA256 fbad23e683e02cb29bb39f26ee73f2fb2d00c11589268e57d7fa3c25e200902d
MD5 038563c1f843a345ba283acde04e215e
SHA1 0c6e9d4ec101e5a3afebf5349856ee5b9bed6edc
SHA512 c9b85fdcfac90d3bdbd4764a583de4a123d3cfbeb8af3f504ea2b6930d1985dd593a3de124e527f73993d1a0e38e0c950aaab342e2a624da9a3ca6e830f22186
SSDEEP 1536:uDk3UH7igfCEIk0EHIQeL8Q3gLIO9Tw1tHm:ClFtJHIjIKg99Tw1Nm
TLSH
T14A737C9B17E011E1DDB6C1B9C6B1A60BC3F1B0462711935F036889EA0F63A617E19BD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\msvcp140.dll
Size 554KB
SHA256 e0a22a594e148fa55ceef3e49969bfa77011a801267a0bd7805b681b593c9d0b
MD5 0d89995cc45c7eb40e5a7e287506c1e9
SHA1 096c27b06ee7fff2bcd290af0264cdafd04cded9
SHA512 3497c2957d10fcddeec8f312fb15c53f82d770dcc3e771a94daf4f4435c3ddf323ecd33310baaf1ad56673bac7c6268a9ef921d5f32cf7e4a7c9dcb0d8aafa63
SSDEEP 12288:Q7dqZ1EqSGQEwkcz6sm7UtgZ/29z7mnuMG7NaekWdgJMKZ+h7rUh0wvaQEKZm+jl:QZNg+h7r6iQEKZm+jWodEERAW
TLSH
T197C40923B74D05A0E195A3B8A1C38315D7F17C8A4312A3C792FB96AD2F573D5AB3B190
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

net.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\net.dll
Size 47KB
SHA256 a798655cb181543810df4896042dea705a8630b1bb13183640ae809172901036
MD5 a630a04819d82a71dd821f2f60683bba
SHA1 331e64970abf2dfa4886c54d03fe4a16ee4843fe
SHA512 934d1071dfa38606873c6447c3996f96bdf3104143315fd8c2ef2495a1b00ecc15443abc14bb60433c3063f743307c814ffd4935b36665de769da1c602d314bf
SSDEEP 768:RWPY+y/WM1dJ/TCEFg+V2tl889cv5kAnTYufVuScMITty9KO0OqJZnaa0tNVlEBi:kQ3hg+V2tl8sC5k0sSyTtzqwWms
TLSH
T114234C45A79954D0F427C77C86630A07D7B2B860721087DF03B9C6AEAFEB7B13A25781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nio.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\nio.dll
Size 68KB
SHA256 354677f7fb2d9312ead788608f2766a21b0bcebab51d355b9ced7e13ec2cc46a
MD5 a1c972f29304ec53e6d62329908edcc6
SHA1 24a6b70b5dab41599e5db661b4805c46e601ce4b
SHA512 9c424cbd3015f8eabff2621c13bf2089a4751dcde87110e0b71e912e206495f7d85f1e79f4bfb45ac4c4deae1fba77d3103107cd176781138e103b25841584c8
SSDEEP 768:J3jh9YdJnOiBsJgTiwhrJpr+jXUx7/2mkdZJJO9CMdPbW/rSMO6mT/p6ZBkKLRE8:JtliJTiwR8CLqji6/rSo4ORESfhkh0
TLSH
T1C36308A65374459BE479B138425B178AE233FC104510A75F4368CB6A9F2F6B23D3EB82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

jvm.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\server\jvm.dll
Size 13.4MB
SHA256 75772abfa60fabb40fc74f03e158dc42eb5235cf0178e82302e9d4460ac14126
MD5 98a4e104a1b60ab694819cb22229ddd4
SHA1 892617e9c9f699717c03ddc020c19e0f26bca16f
SHA512 5981b7cf0f2e91cf291529db66b8b0a516b2758e837a54dc47b666def66a4cb165acf8beb481aecbe68fa266b8e65632424093b2961a3a25b640e2eeabe6c2b9
SSDEEP 393216:PhtLaURYwftQ0dmriSMD315OFlqrNQi0E/NBfkZAjNgpmbfVfVshuPPpH8Xf5M2E:17SRrh
TLSH
T188E66B1B776901D5C027C6798A9B8E1BD7F2B8D4833197CF61A01A6D2FA7BE1193E310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\vcruntime140_1.dll
Size 37KB
SHA256 7cf38d20d00b6640d510eab70171e1c6f8fa2e42040832e17c7433ab61d94a8e
MD5 9f4eac207cb58e8d110477e7fd19d565
SHA1 687051b863f7a7178cabf9c06ab3b534b1e23dd3
SHA512 9c5c4499adfc7b61751510f52a1288ff386dd1c1aaf8e8a9660990194813394329f8123f38e026ea10c6e30b4a5506625b9060329d524db68e48f36ab2691a05
SSDEEP 384:5LnvMCmWEyhUcSLt5a9k6KrOE5fY/ntz5txWE6Wc+XfpYuncS74GlWrhKWXvsHRp:uCm5yhUcwrHY/ntTxT6ovF7IbwEll9z2
TLSH
T15403498463788086E06F85B4C4E36F27FE39F9615750968F0BA4865D2F637D0E63D31A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zip.dll

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\bin\zip.dll
Size 77KB
SHA256 36c261aa32b2026b23f59eaba1bfe66e79ce3b2860a197a4b1832d0591db1d84
MD5 42ccea0583f426f5991fd172188e3b0e
SHA1 3bca7de280b496dec4dd1f9573b3e38f574aaae7
SHA512 a9686327f0da10ff1462ef07a15497b83ee99b6f8b8cdcbac6c8560209ceb709d55802a1565ef8778b488e125c0cf46ce2a013be76eb1c6aa9375e1d9d252493
SSDEEP 1536:4zOSFarKGKo0D6PBMEmaVYlWKta9IOQIOhmJe7:4zOSFarKTfobYlW+a3GhmJK
TLSH
T12C738D969A7052A6DAFA41B0C9F34A1FD379B00152D4278B534CDBDA2F036A12F493FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\legal\java.desktop\LICENSE
Size 33B
SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
MD5 16989bab922811e28b64ac30449a5d05
SHA1 51ab20e8c19ee570bf6c496ec7346b7cf17bd04a
SHA512 86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608
MD5 SHA1 SHA512

Submit Download

ADDITIONAL_LICENSE_INFO

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\legal\java.naming\ADDITIONAL_LICENSE_INFO
Size 49B
SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
MD5 19c9d1d2aad61ce9cb8fb7f20ef1ca98
SHA1 2db86ab706d9b73feeb51a904be03b63bee92baf
SHA512 7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b
MD5 SHA1 SHA512

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\legal\java.prefs\ASSEMBLY_EXCEPTION
Size 44B
SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
MD5 7caf4cdbb99569deb047c20f1aad47c4
SHA1 24e7497426d27fe3c17774242883ccbed8f54b4d
SHA512 a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619
MD5 SHA1 SHA512

Submit Download

jvm.cfg

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\lib\jvm.cfg
Size 29B
SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
MD5 7ce21bdcfa333c231d74a77394206302
SHA1 c5a940d2dee8e7bfc01a87d585ddca420d37e226
SHA512 8b37a1a5600e0a4e5832021c4db50569e33f1ddc8ac4fc2f38d5439272b955b0e3028ea10dec0743b197aa0def32d9e185066d2bac451f81b99539d34006074b
MD5 SHA1 SHA512

Submit Download

release

Path C:\Users\Admin\AppData\Local\Kawaii Animes\runtime\release
Size 199B
SHA256 b21cc9a14b06bb8d6d0b3f309f1d7f4f3b1f93beb0da683b6232e1f77fd5d9ee
MD5 c806241f1fcc2f23cbfeefa26389199a
SHA1 9a574681af8ea553a8ca89e191128cd56da129af
SHA512 d5f66e46303ab8a3acc899f4f90a63c515b6b2ca0a95fa2b70d17d372dee70136f03a789386617cebc77c37935e54a4e5ed1a5ebd695be2f07a8b3cb3d3d6d9b
TLSH
T15AD0223F042861D0246010C22078882FF8D8DC304790A084ABCB69407131AC861B1226
MD5 SHA1 SHA512 TLSH

Submit Download

MSIBF20.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIBF20.tmp
Size 391KB
SHA256 92b22c880ada232c643fb864db2103d607a8bd15d5b6b41e6205497d73fb9855
MD5 de1f693388cea2467a3d0e82ec082462
SHA1 f7f84681e958f13924e6f8319246f8d2f6d08b14
SHA512 3a76af34cd9825b69df6dc84b7808a3611176cfbd6eb331a18357faa2e564300e6cff0bee933593936205956e77756cef94821a96efdbd4f0baab66278d2448b
SSDEEP 6144:l5t3AfpZwLTaEnkIA1s3nJ978CChAMmZCohSyR4ZURbFp:6poTaE2IJ94HASoP
TLSH
T1AA847B1AF7A800B8E0B3D278C9635906E7B17C8E4271D76F13A4465A2F737609E3B761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSIEF39.tmp

Path C:\Users\Admin\AppData\Local\Temp\MSIEF39.tmp
Size 113KB
SHA256 aecd2d2fe766f6d439acc2bbf1346930ecc535012cf5ad7b3273d2875237b7e7
MD5 4fdd16752561cf585fed1506914d73e0
SHA1 f00023b9ae3c8ce5b7bb92f25011eaebe6f9d424
SHA512 3695e7eb1e35ec959243a91ab5b4454eb59aeef0f2699aa5de8e03de8fbb89f756a89130526da5c08815408cb700284a17936522ad2cad594c3e6e9d18a3f600
SSDEEP 1536:YImZwomOndvrhsgz56GoiFmntw1ebC0fsWk0FlcdOJKJpPpxyNokVbY4:jewOdvregz5L/mxb7FUOsrPpxyN7/
TLSH
T19EB37C1275D0C072E8BE0E3D45748A715F7E7930EF648AEB635812694FB42C0AE39E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kawaii.db

Path C:\Users\Admin\AppData\Roaming\KawaiiAnimes\kawaii.db
Size 15.1MB
SHA256 f8a763cc9e5b32abc84d3f2d666a901456d9ea2a4bf232b0a8c02069997be240
MD5 3f128f6a54e5d94b15a5f47f13c1c8dd
SHA1 9fef505ffccb337ba743a07c0fb34eff9e60a43c
SHA512 a9a69ef8ac7b311542cb296f160751dfe42d2240a22f45a16bf8bade833fcce60a62650268e4e67c7825f9b4c51d455fa779f85797d5b74a2bc644d39b67f699
SSDEEP 49152:KVAyFJV790TnE4x9AeSXTMWWCGpdV3LZM8GKFghyISx7VpMc80bkek/QL4ldaQBP:x5fQbDGlbwMAB6yaLIh1kNAm3pGQXkGQ
TLSH
T158F6A63B82BA9897F08E45B5CAEE3747C934734F92A34CA839D8D2C5954187D4EB0B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MSI783F.tmp

Path C:\Windows\Installer\MSI783F.tmp
Size 211KB
SHA256 c8d190d5be1efd2d52f72a72ae9dfa3940ab3faceb626405959349654fe18b74
MD5 a3ae5d86ecf38db9427359ea37a5f646
SHA1 eb4cb5ff520717038adadcc5e1ef8f7c24b27a90
SHA512 96ecb3bc00848eeb2836e289ef7b7b2607d30790ffd1ae0e0acfc2e14f26a991c6e728b8dc67280426e478c70231f9e13f514e52c8ce7d956c1fad0e322d98e0
SSDEEP 3072:/Jz/kyKA1X1dxbOZU32KndB4GLvyui2lhQtEaY4IDflQn0xHuudQ+cxEHSiZxaQ:/t/kE1jOZy2KL4GBiwQtEa4L2sV
TLSH
T1ED249D316094943EE7FA0936997ED671AE3DF2341760C9AEC3848C0E6D644C16BB7B27
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 26.1MB
SHA256 36868f92048b6d962042adac30fbea0d2a515d4a579a6a4d89408c8820fb9936
MD5 bdeef3e9bb60c372d6db3c4a8c8718ec
SHA1 c2c12e8639ff21f6946a059ade6a25a699274b10
SHA512 739af6c2d6c40c880fe4ddf55f6198458a131e0318d99ba88c58e3fb5c49bee9f8fe830bb957c92995ad2a5172303d34cc6c69646494f8e629f789178abd7959
SSDEEP 24576:tFo3DMP0doO/vvTL/yAjDilQP7eJY7Eg0+1xNudb1WtqJESTsIRmD6pin+n:cHk
TLSH
T17757B31436F92200E7B79E3DB8F06A234D397D5BAC15DE8D45511B8E0822F71E872F6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{3293cce2-1bd4-47b2-b159-a801aae7b0bb}_OnDiskSnapshotProp

Path \??\Volume{c61fa831-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{3293cce2-1bd4-47b2-b159-a801aae7b0bb}_OnDiskSnapshotProp
Size 6KB
SHA256 021575f89c1d1cc1fa071f39e60a89a2d1edd95426b313f7d41aecdb6d045b3e
MD5 424dd1a5338749c56ece6cde01a5ddcb
SHA1 2dfdb8230ba6946b342bc98860a6105172eac098
SHA512 6eceaad6e92b777be2811fcc347ec934543534a32bd0b15cc655239f968a2052f1f3965ef63f62a2256b659dcd453a2acad04324552e60bc7cf4aaa4ceea85f0
SSDEEP 96:FQIMbu8vc6DD84LTHzbOHXOHBlBRQn8Sc9XE56tOSVQpuN:uIhwb++uVmN
TLSH
T184D179085AF54711E2B3AB3228F18557A877B911EF33CB8E0198238E6671910F935F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2388-504-0x000001CC64910000-0x000001CC64911000-memory.dmp

Download

memory/2388-502-0x000001CC64910000-0x000001CC64911000-memory.dmp

Download

memory/4696-581-0x000001E2E43F0000-0x000001E2E43F1000-memory.dmp

Download

memory/4696-583-0x000001E2E43F0000-0x000001E2E43F1000-memory.dmp

Download

memory/4696-586-0x000001E2E43F0000-0x000001E2E43F1000-memory.dmp

Download

memory/4696-582-0x000001E2E43F0000-0x000001E2E43F1000-memory.dmp

Download

memory/4696-585-0x000001E2E43F0000-0x000001E2E43F1000-memory.dmp

Download

memory/4696-584-0x000001E2E43F0000-0x000001E2E43F1000-memory.dmp

Download