cc9b65c23ce86cc970a49987eed68e2be57044b74dbb60253502fd0deb5b0939

Analysis

user interaction
yes
max time kernel
30s
max time network
38s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/11/2026, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
OpenAnime-2.2.0.Setup.exe
Size 134.5MB
Sample261107-nbj3rsxt2p
SHA256 cc9b65c23ce86cc970a49987eed68e2be57044b74dbb60253502fd0deb5b0939
MD5 6104900688be3afbd3bd0a4316bdfb1c
SHA1 c123efc5ab69d0ee656e413cafa8cfb2a85a53de
SHA512 4e505f208f51aea01bd17741d34e4c731720925c21145fec8e5e8c0280a5510b1ea40be7be465ec090e6a6bce0bc456309af9286dd2d37b03e2fc73794c2c056
SSDEEP 3145728:mbx7oLNYGWJvgdWQxOzlwyoBzugY0Cupfwei3k92tuEbFjyPPQPd:mbx8LNVWzQxigBqP0bpfweQk920Ul
TLSH
T11A6833E7E6C59C2AC0373D76DB4AD540A11D5A3B20027DD545F023E8B79A2ECAF706CA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Executes dropped EXE 13 IoCs

pid	Process
3284	Update.exe
5056	Squirrel.exe
3424	openanime.exe
2204	Update.exe
5088	openanime.exe
1360	openanime.exe
4428	Update.exe
3836	openanime.exe
240	openanime.exe
2236	openanime.exe
1272	openanime.exe
2400	openanime.exe
2536	Update.exe

Loads dropped DLL 12 IoCs

pid	Process
5088	openanime.exe
5088	openanime.exe
5088	openanime.exe
5088	openanime.exe
5088	openanime.exe
3836	openanime.exe
2400	openanime.exe
1272	openanime.exe
1272	openanime.exe
1272	openanime.exe
1272	openanime.exe
1272	openanime.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
2	raw.githubusercontent.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 12 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Update.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Update.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Update.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Update.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	openanime.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	openanime.exe

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OpenAnime-2.2.0.Setup.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	openanime.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	openanime.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	openanime.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	openanime.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
3284	Update.exe
3284	Update.exe

Suspicious use of AdjustPrivilegeToken 36 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3424	openanime.exe
Token: SeCreatePagefilePrivilege	3424	openanime.exe
Token: SeDebugPrivilege	3284	Update.exe
Token: SeDebugPrivilege	2536	Update.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe
Token: SeShutdownPrivilege	240	openanime.exe
Token: SeCreatePagefilePrivilege	240	openanime.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3284	Update.exe

Suspicious use of WriteProcessMemory 13 IoCs

description	pid	Process	procid_target
PID 404 wrote to memory of 3284	404	OpenAnime-2.2.0.Setup.exe	80
PID 3284 wrote to memory of 5056	3284	Update.exe	81
PID 3284 wrote to memory of 3424	3284	Update.exe	82
PID 3424 wrote to memory of 2204	3424	openanime.exe	83
PID 3424 wrote to memory of 5088	3424	openanime.exe	85
PID 3424 wrote to memory of 1360	3424	openanime.exe	84
PID 3424 wrote to memory of 3836	3424	openanime.exe	86
PID 3424 wrote to memory of 4428	3424	openanime.exe	87
PID 3284 wrote to memory of 240	3284	Update.exe	90
PID 240 wrote to memory of 2236	240	openanime.exe	91
PID 240 wrote to memory of 1272	240	openanime.exe	92
PID 240 wrote to memory of 2400	240	openanime.exe	93
PID 240 wrote to memory of 2536	240	openanime.exe	94

C:\Users\Admin\AppData\Local\Temp\OpenAnime-2.2.0.Setup.exe
"C:\Users\Admin\AppData\Local\Temp\OpenAnime-2.2.0.Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:404
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3284
- - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\Squirrel.exe
    "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    3⤵
    - Executes dropped EXE
    PID:5056
- - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
    "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --squirrel-install 2.2.0
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:3424
  - - C:\Users\Admin\AppData\Local\openanime\Update.exe
      C:\Users\Admin\AppData\Local\openanime\Update.exe --createShortcut=openanime.exe
      4⤵
      Executes dropped EXE
      PID:2204
  - - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
      "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\OpenAnime" --field-trial-handle=1828,i,15675539072873852072,15256802936012578280,262144 --enable-features=D3D12,Metal,PdfUseShowSaveFilePicker,Vulkan,WebGPU --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1832,i,16786790425805752371,13729137735922604929,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2036 /prefetch:11
      4⤵
      Executes dropped EXE
      Reads the TCP/IP host and domain name from the registry
      PID:1360
  - - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
      "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --type=gpu-process --force_high_performance_gpu=1 --user-data-dir="C:\Users\Admin\AppData\Roaming\OpenAnime" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1828,i,15675539072873852072,15256802936012578280,262144 --enable-features=D3D12,Metal,PdfUseShowSaveFilePicker,Vulkan,WebGPU --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1832,i,16786790425805752371,13729137735922604929,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1824 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5088
  - - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
      "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\OpenAnime" --app-user-model-id=com.squirrel.openanime.openanime --app-path="C:\Users\Admin\AppData\Local\openanime\app-2.2.0\resources\app.asar" --enable-sandbox --enable-unsafe-webgpu=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1828,i,15675539072873852072,15256802936012578280,262144 --enable-features=D3D12,Metal,PdfUseShowSaveFilePicker,Vulkan,WebGPU --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1832,i,16786790425805752371,13729137735922604929,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2764 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3836
  - - C:\Users\Admin\AppData\Local\openanime\Update.exe
      C:\Users\Admin\AppData\Local\openanime\Update.exe --checkForUpdate https://ors.openani.me/update/win32/2.2.0
      4⤵
      Executes dropped EXE
      PID:4428
- - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
    "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --squirrel-firstrun
    3⤵
    - Executes dropped EXE
    - Reads the TCP/IP host and domain name from the registry
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:240
  - - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
      "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\OpenAnime" --field-trial-handle=1860,i,8807478371863165909,5381084265227894775,262144 --enable-features=D3D12,Metal,PdfUseShowSaveFilePicker,Vulkan,WebGPU --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1864,i,17694298753469122588,12166823574714430563,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1892 /prefetch:11
      4⤵
      Executes dropped EXE
      Reads the TCP/IP host and domain name from the registry
      PID:2236
  - - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
      "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --type=gpu-process --force_high_performance_gpu=1 --user-data-dir="C:\Users\Admin\AppData\Roaming\OpenAnime" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1860,i,8807478371863165909,5381084265227894775,262144 --enable-features=D3D12,Metal,PdfUseShowSaveFilePicker,Vulkan,WebGPU --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1864,i,17694298753469122588,12166823574714430563,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1856 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:1272
  - - C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe
      "C:\Users\Admin\AppData\Local\openanime\app-2.2.0\openanime.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\OpenAnime" --app-user-model-id=com.squirrel.openanime.openanime --app-path="C:\Users\Admin\AppData\Local\openanime\app-2.2.0\resources\app.asar" --enable-sandbox --enable-unsafe-webgpu=1 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1794049526801844 --launch-time-ticks=555803405 --field-trial-handle=1860,i,8807478371863165909,5381084265227894775,262144 --enable-features=D3D12,Metal,PdfUseShowSaveFilePicker,Vulkan,WebGPU --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1864,i,17694298753469122588,12166823574714430563,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2680 /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2400
  - - C:\Users\Admin\AppData\Local\openanime\Update.exe
      C:\Users\Admin\AppData\Local\openanime\Update.exe --checkForUpdate https://ors.openani.me/update/win32/2.2.0
      4⤵
      Executes dropped EXE
      Reads the TCP/IP host and domain name from the registry
      Suspicious use of AdjustPrivilegeToken
      PID:2536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Update.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Update.exe.log
Size 1KB
SHA256 a2575cf61e66d6b0032cc832c80698cc53879e70fd9ebc9e0693947609443e2b
MD5 6884f06e5e48278e875c48434c7e7d69
SHA1 e95d5626f455f989a37e62dbb71fd1147a6a18dd
SHA512 a115434399f781f760fb4288c9b9cb0efc111f12ce4b17fde32439fa8fbfd61929c827f415856150e15501767d194c67cbbdac093a72d122e960a8fa75d8177a
TLSH
T19731C1722671B0C48D533F53197D268573EF4368BA005E18B568625EDA2E01B6F222F7
MD5 SHA1 SHA512 TLSH

Submit Download

RELEASES

Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
Size 80B
SHA256 86383d7e07a5cc3cf225061b6b896ccefc7f1a083d2c6a3c5f913b7848278af7
MD5 3a9ad62f9cce7d739f70035c6220c66b
SHA1 34b39fb5a4aa9fa4fabd90a0c640e56802e2bf04
SHA512 fa3210b71f3be79f242071d72851de0d2ddd4480585e95092d34d9118a8a713dcaf1bceb350e14904007f7f86310b0f0f9cb736013ccdd992596ea957f68775e
TLSH
T148A0129D8441E15484D001120026C33A5714052502C6B2E9294D869850651847880916
MD5 SHA1 SHA512 TLSH

Submit Download

Update.exe

Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Size 1.8MB
SHA256 76359cd4b0349a83337b941332ad042c90351c2bb0a4628307740324c97984cc
MD5 a560bad9e373ea5223792d60bede2b13
SHA1 82a0da9b52741d8994f28ad9ed6cbd3e6d3538fa
SHA512 58a1b4e1580273e1e5021dd2309b1841767d2a4be76ab4a7d4ff11b53fa9de068f6da67bf0dccfb19b4c91351387c0e6e200a2a864ec3fa737a1cb0970c8242c
SSDEEP 24576:pWltPuAnUCiag6CKM2zCy9sQuOjj1VgZej6GeS4lNrCze5qhYp4t9m2:0t3UCiag6CKM2zCyZuOjJaxSS5qh
TLSH
T15A956C01E7E89F2BE56F6B76E030055813F3E9867376F78B2A4871792A937504E053A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.gif

Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
Size 82KB
SHA256 ff23a1b98eb8e158ba83017ebba60ee2b6dc4d9f567b9a68e2335dc5a2e6a34d
MD5 d3801b5ecffbbe0188b8de5498a03006
SHA1 5aa10d149a7ae574c9b09c38b05482228ad4573b
SHA512 a61073e6d361349b414b4128f4fd6432d2221b9efd88394e2fb762facf2d732213f090a77545a1be9249c0c6e54f38d342913e2afb66daaebc30218ebc1095b5
SSDEEP 1536:g3Gl7H4UcwWjIfgI6DGSl8sx9zlSR6b1Bfg94pzhLo+I8bk2uSizh7T:QspZO0gIEzjIgxSg5oJmk2uBh3
TLSH
T1C683020D5CD8E2AE2741ECBE0DE95702E5F9A0B5205FBA05D09CCEA72754AC3D3A1DA1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\chrome_100_percent.pak
Size 117KB
SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
MD5 37c48e66c39832d32fa2e926ac503c4a
SHA1 2400135b49193c9786f1faa8d00169ce3d38ca98
SHA512 e1b631c3834fb84e96ab9fe44b12a8fa6c6b3c767e00a17ed8c3d8f8fbe7bc2dfe83fe33e7aca4f32439bdbad21d25af6b9e263d412922e40d09d4e421f12941
SSDEEP 3072:Kw4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:UYWFUbGz8LI1TdjQBQCrC
TLSH
T19AC3E0E773B0AD7DCA464BB743560070FCB30B2D06C2170A4A9AE479652AF98D9D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\chrome_200_percent.pak
Size 192KB
SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
MD5 e6a75313c720a6ebe3182b4e1db48328
SHA1 d60a503cf4604c816d9146d7fe4041018d445888
SHA512 3c8699b998c53c0414933ba18e0cf561488b9e209523a9b4093b68d38393e9a6bc683cdffc32a8050be25b473153b71743acf9c33f070166f1e15f2a453e8eb4
SSDEEP 3072:+FJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:+IGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1D01401D723B4AD3DDA530BB3A26710E0FD7A20291EB3514A569FD8397925E88C9CD343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\d3dcompiler_47.dll
Size 4.5MB
SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
MD5 19e527a35241c171d37dc1e6c530053c
SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
TLSH
T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\dxcompiler.dll
Size 24.4MB
SHA256 36c6f0af0cd7ff8585cea0a6090f1c2ce5db044d16b366074b2e9f85ef2e2629
MD5 c44c3c69c4353949711acc151c43ccde
SHA1 e838b8b9b555a71a91bb74338aeff331fd71ea8a
SHA512 82bfb704772fd7193c7b766a021b4a74039c85999e6a73ea783a43dc2acc47418b9bead2a5c616face4afab17d95b3d750a2c21ac99a9fcf8b96bf15f8d32418
SSDEEP 393216:K2Kz8w0D063Lp8Fj6XHMy+A4joAPKxVbQ6nKOwx0u:g63ZMOAsbQAwxr
TLSH
T140473A122646D49DC099C879C7678B268A2C30E73FA7B9EFC0F451212B79DBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\ffmpeg.dll
Size 2.9MB
SHA256 e3b958ec29f381d9872f1f19e5c29661693f6aeaf382f969f97d5c6a9da53cca
MD5 041989f8e67ad4ea5e9c0c3f58d23b0d
SHA1 dddee0ebe876857c56afef42b8d169f5f0aca8a3
SHA512 02c687b609639688f482ab922857aaf83a8f9a2c039122f19f30573e30dc8e6711609a7fae2e5835ed56da147e558966f9b94d167a945ba64a039f52933ca0ab
SSDEEP 49152:0/QNVdw4YesUuZLJPbdzKKtBr4ZjB+WRBxtqYaLueWUekYi:0EibUuZd2BDaLueWe
TLSH
T14AE5AE02F6D251EDD019C034979FA223F271780A4F206AEF17A05A253F66FD86D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\icudtl.dat
Size 10.4MB
SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
MD5 0a7cbe8e902379fc03c5c6c7c08c7d3b
SHA1 18ff020331534d21f24d922d4da3c253668e44d8
SHA512 88b94c5d350c2022aa27481e3a5c6bc74dd13ed1f2157dec4219d9b847469f7191f6fdc7305f3d27533c69f146324da8fdefbd8acbd2081965e74e8926d1e9c9
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89o:1/cBhORok2HiXUxO/RJk3IWhlYntjdOo
TLSH
T180B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\libEGL.dll
Size 463KB
SHA256 700bde9f10d03c37bec6fef9471f5016650c2b8a3c7229060e996c232fa19bdc
MD5 ef7ec96ef22bfabb866ba6e3a517c4f6
SHA1 9e8666868e892bef1e80acabe7209975715b8022
SHA512 e9e452f6805e026cc71b5adc638291c4c20ee4315428e46e81232303e958f008dc14d537ee52d0844aaef9771ec94f3ff6162f304e2249b2b2ec7d9319f60a5a
SSDEEP 12288:hr6jqPQTSyEiM/bacC7g3pOvMVr5HsMQF:hr6uPU/P0Ow1a
TLSH
T1E0A47C15B3E549B9E07BD1388A538643EB71B4560B61FADF03A0D2392F77BE45A3A310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\libGLESv2.dll
Size 7.7MB
SHA256 1811383343e2c4efd7f5275787188ae12ab9d059067032bc57d511fd25e03d70
MD5 c34f3b42af269c84d2a978c9eadb6fc3
SHA1 1b5af23d0994889cdd28bdbf925106c7535b94bf
SHA512 98ef576f93c15fa0184e97627f2a7796dd52ab1a609ecf257e077aef1b51262bab00f51f3586c10769efeebc68c75c3217ea6b7d2aabc9f8e2c1fcfe44acd68c
SSDEEP 49152:NubBr5jcjehig/1s5lA8QORsZrfrkTq2Cus78Ogr7JjcTR0BjfuvHzoN12yN9UNa:4DjHAlAnM5B6v0N4lXgHCCGZXO
TLSH
T16B866C03F69681D9C05DD2788767A223FA34B4450724F6CF2AA497152F6AFF0AB3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\locales\en-US.pak
Size 552KB
SHA256 74404352908184e834397df60b238f23462e77d69ac4136b4f20af2db6191436
MD5 9ee099df7e2df2080b3525217eb4fff3
SHA1 b040c8d76ac420afc85bbd04979a6f15119e5f3f
SHA512 9c89be421dff94da03bb56662c87a6e8f0b89fade83283c54d8aab4f9556b1e7befccc8c4bb533580362db73bf428bb4304ee0e98b85025d678425cf8a26b2cf
SSDEEP 6144:/4tBJu73IiH33HfJTO6fU3h4QMP9hhbRrfaY+F38SEqjangts/3hwj:wnU73IiHHHfJMMnhbRW3j0wj
TLSH
T1E4C43D1FF744112A05A352A2BF0995A2FF32D06CA35112663CBD812C3377B66D2B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\resources.pak
Size 6.9MB
SHA256 7b0b402a23db7660a01a14f8db3a08efeab4076b3cf1bbee86e9cb46248ee2b7
MD5 aa5a171832a6338ac38b052f7b70ddb2
SHA1 ff3edcaa7a5b524fb5cfd41cd52ac2032d921d74
SHA512 be6a10a4937fd3b9f9296b7a66535f88127a6e0d76d832720278dae4b66c022ba41ef22d2de8118fcf5d606972aec227505c766160e77a50b8e327cdeb3d7c12
SSDEEP 196608:8qtJkCXvfT1dT9x3GBkrR9NK+EHB3wBi3cGiklILmzuLz:J+Cfj9x2BkrCpcGlCqSH
TLSH
T1ED7633D7729A4C0BCD44137A051C4736C29EEF6935D6B09282CC629DECACB6D5F82C7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\resources\app.asar
Size 3.3MB
SHA256 5c3e9de4ea11c6fd77cbb9d4d91d5c16bca1052212eb2c5bedb96408874f2f51
MD5 8d27bb51728b02c846bb718967dbad5e
SHA1 b12ef378df778c3ed144ec7afa86e3ff318b0fc0
SHA512 433c068642118714909532782349044ff97ebe1c28ef7f93f261e9e91271037f2bfd2130b4d4068e7dea4ede5d0ab9d429cf84fb877ce887a6caca0db816ffd9
SSDEEP 49152:8XnUKVBLI+zrBIia7w89WUwTZ0O2Fuk1FiGYrWECTU:8XLBLI+Z
TLSH
T166F55B553DE161A253A7A1794A8F8484E2F484179054EC8AF09CD6EC0F68E3C53BFEBD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\openanime\app-2.2.0\v8_context_snapshot.bin
Size 722KB
SHA256 1692cefb5b02afb917fdbd53e99a9b8309cead8e91e3590a9f4608832df86c39
MD5 3633fcf861ee86e70650f61391facb18
SHA1 27d9f8ddac827495c197cf5fd566bf1f5b03c9e5
SHA512 a15ed7cea5ba571a843f89a21536a9579a9775c0db9f04418c395285f12c48ecfb7f33fe448d4bb08d83526ba62ec3969526a772bf24f4a7231eeafb011d0b71
SSDEEP 6144:tt+HxVkuEz5SYKf2N6mXJp575pxLGTAz7Vqe9lCY15fFA0KMuuJe:vumjKf2N6mzLp3ge904ARvN
TLSH
T133F4B7B5F70B8E36C8B526BDCDE6DB463A34B18D8E86E507304257BC74B87744E26248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

openanime.exe

Path C:\Users\Admin\AppData\Local\openanime\openanime.exe
Size 266KB
SHA256 3395e497d2cfb54d63fd880faaeb937a40e0662b2719ff29cabdae62282b7add
MD5 2b736ba6f78e86c539134db012701a47
SHA1 9a0e2d9d7b6ae42befe0929a89889bcad7069a00
SHA512 9df19e26aaf42b9996bcf483c526cb1697c4cd9193ba1a856de652e4f9fd6c70437f8d9d8dadcfee99555101facb2b67d059ded64ef0534983882889c26aa968
SSDEEP 3072:xZzaqLh5m21b4n86fZHi8c62bdq32BsWtEGwF4JOAg0FuDTT6Ed3QA6IzMU:xZzvhs2Z4n1E7g34XtVYAOfTdHoU
TLSH
T120445B21B5C2C4B2D5B2163409F9E7B1562DFD600F629E7B73D4372E2E341C29632AA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Code Cache\js\index-dir\temp-index
Size 72B
SHA256 028ac83a656f920471241d8f08a09412eadbe3ba1c53dc205dd3658053b09579
MD5 4af47946506547948b665bcaf213e2c8
SHA1 211815630407d4e9ebe42f6887b1f87fe4273817
SHA512 4a529ecfd97e468fc71d54dd132d916d9ee83f54900ad7007ded569c21d17f043bd2c73452ba8f7becf770eada3f5afd6f7a211ee3b549dd9b7eeebdbf9e8124
TLSH
T155A0027545C45401FB8012F158531AFB1B40DCA00515672384D000898C530C1452241D
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 f289b4cfc43d3a997d1a52ff69fd56c657d0fffc4011aee6fa9e2872d823b4c4
MD5 19a97b0af6c00246f01a0f8274be0ab9
SHA1 7adda3d4aa58e19cbb5025f9538432e38933353b
SHA512 7449ba7304d05d65f7f09d0608d4a85ca69aacc13bcd3acb60b4b1c86d5cc67342ef4e6360b3f95b853b630811d7d2d2ec5b5734c9b7c3da561ef62a9fefe169
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 32fcfd41fba489eb988f30fad7904885a98e20ed5f4946730bee909ffa6a3ece
MD5 eff9ed53242221acdd45f4c4f1272593
SHA1 830a31009d70e49289d73fc95b7b6c1e72d0ff63
SHA512 a10b3c621ce85f8cdb014c243e7b304760f2c3a3d83a29104afd8d85f3ee4e1ae9e6cb09f49644d9289fc17311ce844d82ed8f7d04a4e6b588d081cc1ed4c120
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\OpenAnime\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\DawnGraphiteCache\index
Size 256KB
SHA256 29eeff540ba6b2a1023ae2678caeb9cd745edd3aa35578b848971b793d950c3e
MD5 e798d992f4a17a15ae701c66911f7e55
SHA1 74800a084baf4d6c85bee174cd26aaccde606934
SHA512 f29b26ab876fd68b00d3852373b35d57e5631b1cdc22ec3c32442ade39f9082ebd399ceeb7d15774e67231887ad3006bdec117a592f0b3b1384fcc719882493f
SSDEEP 3:LsOllllklkXlE/X:LsUlPE/X
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\DawnWebGPUCache\index
Size 256KB
SHA256 cb7f75784f3cfd8957afee93eb102b7a8b34bc03f2381aaf06f418ca1ee8b42f
MD5 131ad997d1b48072b9527ab436d8a70a
SHA1 1dbd5a4dbf3748d4032c6d334947c68922e9df83
SHA512 0ca304e010c54c66ee969723c1512825072a368e59ff61bf9b834f5d8a4be8c1680f343589b44467a5bcc13b509667c62df3fadc3ff04b384a2054c9694cf8c7
SSDEEP 3:LsOllllklkXlNOK1:LsUlPMK1
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\OpenAnime\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\OpenAnime\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\OpenAnime\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\OpenAnime\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\OpenAnime\GPUCache\index
Size 256KB
SHA256 b6b05366a3dbaf18f60ae6f36029b50077edd59bd947a42189b50bafa6dd7963
MD5 5107428043aa1c24df9b2d82b097e199
SHA1 a2f30ea35aaa410838a112031f5b5b93ab29e422
SHA512 49226e0a6ac109ccb41e3f7f0eb48522fb0461413f40e0d809425cab3641226c7eb4095db753a416273584f0d459a02ebaf3b861fd88dd36b7110fbbaa32c713
SSDEEP 3:LsOllllklkXl+Ne:LsUlPEe
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Local State
Size 490B
SHA256 2547557c844b47526a67ce52c854dee22e64d820366e5829aecbdb03c20837f6
MD5 e9eb2078d874d5e1328b55d663118bd9
SHA1 092a59a2de9cf9508d3c7ea91a92cd6bf1c19ba7
SHA512 b1479065d3668540fea1d390a3ec72f91261fa68c5365b717779aff163a18d7a068befda1980e495b9388bdcb31c0f046d4864515b89e519cf63920204d3b977
TLSH
T1CCF09E766C536768B9255AF65122A5760D2122671A0117E8BAB823131663B9BC60BC31
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Local Storage\leveldb\000003.log
Size 30B
SHA256 8bd2ea70a0b70c91de138a5b87c7936c6a6fa7c4275c54b97f4ef0ccc5b79bb4
MD5 7e957d693bbab6ad7dec1d3aa28bd69b
SHA1 50369f74c280d83046d6b779ecbde129b8ac3b98
SHA512 0228357b6c4b73f3ef20a333b7afe71fb589efe438bc28a3e04df3fb64f367b7b463dc9c9792921c531124b7bde600524827b40f2cc5aeddbc1df8b3ed822cbf
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Local Storage\leveldb\LOG
Size 249B
SHA256 f0ba43c54f4bcc8687e21873d360fd6f6e78acfbb486910ea2b6216c901b8faf
MD5 1b9a03768666dbf483964d7c2f777ce2
SHA1 3cc9415925d1df6018f5499477f07264e19fec6a
SHA512 8a6119cf28270bf43be2e2a73879108e30596d3148c7f262ba677a926eaabf9ea7c52bc6743a499200c7a68d7eccdb4165f05e81c6be2d50cf059b4954e2fb51
TLSH
T18FD02B6584DDCF1C034880D7C571B309C7746581FB98330D4F84F58C30CB4485615093
MD5 SHA1 SHA512 TLSH

Submit Download

c83b2218-21c8-4ff8-81fe-d24c6aea4bf6.tmp

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Network\c83b2218-21c8-4ff8-81fe-d24c6aea4bf6.tmp
Size 634B
SHA256 38d8e21d45a35457c47c3df03b89128faea9282365d72e7282c681fa4b898b65
MD5 3d0b61495e64a41a89acc51d40c5107a
SHA1 3b2e5b66a9569ddfd1477dbcae1b46b1ca15c835
SHA512 1c12e8513ffa35c606cac34b7110114a5260a71c5dd9accba4c8ec06bfe3739b6844208706c781728e8b7d14374fbe26bf75fedba9b44f2e5ecaefad2afc80d5
TLSH
T195F049A6D6F846BE465253F01E603E37C1FD0418135C6D5789D6EF4F53F1475910164E
MD5 SHA1 SHA512 TLSH

Submit Download

f2a0c7f1-7616-4165-a7b9-65b453c1534a.tmp

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Network\f2a0c7f1-7616-4165-a7b9-65b453c1534a.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Preferences
Size 57B
SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
MD5 58127c59cb9e1da127904c341d15372b
SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
TLSH
T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\OpenAnime\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

main.log

Path C:\Users\Admin\AppData\Roaming\OpenAnime\logs\main.log
Size 150B
SHA256 0e64f08f53c0ba3890f9277ed6c0ad9255c56f37dd73c99f85d98b334e1a78b2
MD5 5dbd194d63cb0f72f16f757a50ef92bc
SHA1 94609c3b29be4b959321786577d8c76bb57d82fd
SHA512 b15b923ca07e14a8698873a323000c0eb9613a558d7923be76fba5963aa1767ccc9b7d01be645bf3a5d5417eb1dfd338393ddcb5279b6253a2f4c8fceda9c4d3
TLSH
T1A2C04CC00D4AE4F70B210341F8FD0E4D7C4411FB4E80866D5235FA915913E728EB7021
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2204-178-0x0000000001040000-0x0000000001060000-memory.dmp

Download

memory/2536-314-0x000000001DFE0000-0x000000001E508000-memory.dmp

Download

memory/3284-115-0x0000000022710000-0x0000000022748000-memory.dmp

Download

memory/3284-116-0x0000000021990000-0x000000002199E000-memory.dmp

Download

memory/3284-7-0x00000000005F0000-0x00000000007C6000-memory.dmp

Download

memory/3836-203-0x00007FFC23B20000-0x00007FFC23B21000-memory.dmp

Download

memory/3836-202-0x00007FFC23E20000-0x00007FFC23E21000-memory.dmp

Download