Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 02:50

General

  • Target
    Capys-AA-Macro-v4.1/AnimeAdventuresMacro.exe
  • Size 2.4MB
  • Sample261113-dbvt6afv5m
  • SHA256 490a022b7cdf09515688dbdd991a20fcc7a00476b23843e174b0ae008877f9a7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 1 IoCs
  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Drops file in Program Files directory 38 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 19 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\AnimeAdventuresMacro.exe
    "C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\AnimeAdventuresMacro.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3224
    • C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51\AutoHotkey.exe
      "C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51\AutoHotkey.exe" /ErrorStdOut /CP65001 *
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4380
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --mojo-named-platform-channel-pipe=4380.3492.7139909709207639314
        3⤵
        • Drops file in Program Files directory
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:4796
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x164,0x168,0x16c,0x140,0x11c,0x7ffc5e70b078,0x7ffc5e70b084,0x7ffc5e70b090
          4⤵
            PID:1856
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1708,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=1720 /prefetch:2
            4⤵
              PID:3284
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2032,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=2044 /prefetch:3
              4⤵
                PID:3800
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2376,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=2384 /prefetch:8
                4⤵
                  PID:1328
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3712,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
                  4⤵
                    PID:4216
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1016,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
                    4⤵
                      PID:7356
                    • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4524,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
                      4⤵
                        PID:3204
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4648,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:8
                        4⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:3968
                      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView" --webview-exe-name=AutoHotkey.exe --webview-exe-version=2.0.30 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4448,i,15228687190592484286,18013330208745567663,262144 --variations-seed-version --mojo-platform-channel-handle=4624 /prefetch:8
                        4⤵
                          PID:6136

                  Network

                        MITRE ATT&CK Enterprise v16

                        Replay Monitor

                        Loading Replay Monitor...

                        Downloads

                        protocols.json

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1166549946\protocols.json
                        • Size 3KB
                        • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                        • MD5 SHA1 SHA512 TLSH

                        Advertising

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Advertising
                        • Size 19KB
                        • SHA256 231be4e0be45f588b161634c816b9a5a49f530c0dcb55461d37715a94482dca1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Analytics

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Analytics
                        • Size 3KB
                        • SHA256 bba2063d20d70f4ab06dc2ae04c2564cc2b8c631b6dab68248957dbdf107fdd2
                        • MD5 SHA1 SHA512 TLSH

                        CompatExceptions

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\CompatExceptions
                        • Size 689B
                        • SHA256 5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53
                        • MD5 SHA1 SHA512 TLSH

                        Content

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Content
                        • Size 4KB
                        • SHA256 9a63f38e22b8573cbd47a4ef7b67ccb0934b87239e075c5cfafc7a1014e340c6
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Cryptomining

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Cryptomining
                        • Size 552B
                        • SHA256 bdee796bf07922c152d770cd5928955f1b12c12515c4db6fc0ab8d2ad0c44c4e
                        • MD5 SHA1 SHA512 TLSH

                        Entities

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Entities
                        • Size 68KB
                        • SHA256 f6e93c83d9e3cfdff064535647cee76fc85aa1c86fd22a93dcf3d2c377346d94
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Fingerprinting

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Fingerprinting
                        • Size 1KB
                        • SHA256 05b29240a28bb75b4535d558edc510eb92df0ac27e9502498b99cdbc576b8298
                        • MD5 SHA1 SHA512 TLSH

                        LICENSE

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\LICENSE
                        • Size 34KB
                        • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Social

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Social
                        • Size 754B
                        • SHA256 4955c3e7f56641a4ae0ce9c79b4ceee4b21733b0f6dedc980bf8d822a792eba2
                        • MD5 SHA1 SHA512 TLSH

                        Staging

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\Staging
                        • Size 36B
                        • SHA256 411a706def2e70f96a507208bf80bceb93e950c4c2d671cd1ddb4134ce54b2a9
                        • MD5 SHA1 SHA512

                        TransparentAdvertisers

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Mu\TransparentAdvertisers
                        • Size 105B
                        • SHA256 d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c
                        • MD5 SHA1 SHA512 TLSH

                        Advertising

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Advertising
                        • Size 21KB
                        • SHA256 5c62ee354070033dba1bad40dcde115a81db45943b2274fae7059a5aa5c61d33
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Analytics

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Analytics
                        • Size 3KB
                        • SHA256 d303be86132f8d7131941d41736694c2e29647ebaeccb38c0976fe66616ec8af
                        • MD5 SHA1 SHA512 TLSH

                        Content

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Content
                        • Size 5KB
                        • SHA256 70c295600066e9d3feeacd6bfc735bbcac6243694e4259477822d3db252729e1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Cryptomining

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Cryptomining
                        • Size 32B
                        • SHA256 696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5
                        • MD5 SHA1 SHA512

                        Entities

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Entities
                        • Size 128KB
                        • SHA256 a5409d2c6a8cbd9339a95a5e09fcaedd4546a49d47fc4ebeda2d8749cfc66987
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Fingerprinting

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Fingerprinting
                        • Size 2KB
                        • SHA256 5306139881e81eebffd97de016130fdbb04e3ae976d94ad7a74e5dee63fbafcd
                        • MD5 SHA1 SHA512 TLSH

                        LICENSE

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\LICENSE
                        • Size 66B
                        • SHA256 44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51
                        • MD5 SHA1 SHA512 TLSH

                        Social

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Social
                        • Size 3KB
                        • SHA256 28ac79097cf67587a228fdfe4746a1a9b31dae94d5a63bb3fcaa82443d69e7af
                        • MD5 SHA1 SHA512 TLSH

                        Staging

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\Sigma\Staging
                        • Size 1KB
                        • SHA256 f90f4cb0976a046e93978971b58fba24bc93b0129e8612fdd0e5646a1bebed22
                        • MD5 SHA1 SHA512 TLSH

                        manifest.fingerprint

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1348554089\manifest.fingerprint
                        • Size 66B
                        • SHA256 403e6e5965571238c03bb289a9e533261775fe381e5a91300788cd37e465b4a2
                        • MD5 SHA1 SHA512 TLSH

                        english_wikipedia.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\english_wikipedia.txt
                        • Size 269KB
                        • SHA256 ff105c5b6e65386cd0af95272607eca296c5b8b786c2f0bb4a9ffef20b4cd4f1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        female_names.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\female_names.txt
                        • Size 26KB
                        • SHA256 a15bb2c5f362b00b74eb4a25c538f3862cf76ba235e6ab84c32722e0d06235f8
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        male_names.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\male_names.txt
                        • Size 6KB
                        • SHA256 95b2b51e4d30946e0e3873663a9e191503f4b7926eac98639c65ae06c383be0f
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        manifest.fingerprint

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\manifest.fingerprint
                        • Size 66B
                        • SHA256 6a5e20bbc41a5ac347d7b85b0e3709431710357526e4661387597225d49dbfd7
                        • MD5 SHA1 SHA512 TLSH

                        model.markov

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\model.markov
                        • Size 44KB
                        • SHA256 8882d44cf3dff2e2ca5ec1af749460040e41b8d1f20b3da2308c4f976d321754
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        passwords.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\passwords.txt
                        • Size 233KB
                        • SHA256 8b58407da38fc0edac67ad09487ee195cc171960f4a72ab756c912f46a052468
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        ranked_dicts

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\ranked_dicts
                        • Size 865KB
                        • SHA256 5820d0bf9cfc363ff929492b1eb6df430039f4ac0e212a5b5411f7c2614f79d0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        surnames.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\surnames.txt
                        • Size 74KB
                        • SHA256 9c57664a651bed87b046ed8bceebd0aad634538a917a75de0a8ecffef06ac641
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        test.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\test.txt
                        • Size 15B
                        • SHA256 92b772380a3f8e27a93e57e6deeca6c01da07f5aadce78bb2fbb20de10a66925
                        • MD5 SHA1 SHA512

                        us_tv_and_film.txt

                        • Path C:\Program Files\chrome_Unpacker_BeginUnzipping4796_1929328980\us_tv_and_film.txt
                        • Size 159KB
                        • SHA256 49185c0fb29f08237602dadd236d919e4372fb1f0f5baad2936ec6f51586bb24
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        runtime.js

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\12b972438be4935ac06429be351bd42039f489cac6c98222dd8aa71529b467e8\runtime.js
                        • Size 224KB
                        • SHA256 12b972438be4935ac06429be351bd42039f489cac6c98222dd8aa71529b467e8
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        aa.css

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\18f85e0c3ccfb8d8cabeaa0cd29854c0b9e4edefb59224fce6b8cb1045926ada\aa.css
                        • Size 87KB
                        • SHA256 18f85e0c3ccfb8d8cabeaa0cd29854c0b9e4edefb59224fce6b8cb1045926ada
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        updater.js

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\21db4c5fcd2e5a6546a07f59ad94ac859320d5615e4deaec312b061784e61fcd\updater.js
                        • Size 3KB
                        • SHA256 21db4c5fcd2e5a6546a07f59ad94ac859320d5615e4deaec312b061784e61fcd
                        • MD5 SHA1 SHA512 TLSH

                        style.css

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\420de44046fc2fa334577e1c227b03f62b95294297474f4ced71ba059add2615\style.css
                        • Size 13KB
                        • SHA256 420de44046fc2fa334577e1c227b03f62b95294297474f4ced71ba059add2615
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        index.html

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\555522673dededeeee09cb9dab1bea2ddcf50a7b47d1844f9d4681506ee766c9\index.html
                        • Size 14KB
                        • SHA256 555522673dededeeee09cb9dab1bea2ddcf50a7b47d1844f9d4681506ee766c9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        runtime.css

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\5c57bc872d89143f50d1b3daee1a37dfcfdd2faf66229d6f3a69bc0e4766f69a\runtime.css
                        • Size 71KB
                        • SHA256 5c57bc872d89143f50d1b3daee1a37dfcfdd2faf66229d6f3a69bc0e4766f69a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        sortable.js

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\6d0a831fc19b4bae851797ad3393157e861afb7862459c11226359b27e2c4337\sortable.js
                        • Size 44KB
                        • SHA256 6d0a831fc19b4bae851797ad3393157e861afb7862459c11226359b27e2c4337
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        updater.css

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\74ef74bc266cac52d8824d570a4019e1a26e54d2c893fb63c7bb575f60f37f5e\updater.css
                        • Size 2KB
                        • SHA256 74ef74bc266cac52d8824d570a4019e1a26e54d2c893fb63c7bb575f60f37f5e
                        • MD5 SHA1 SHA512 TLSH

                        compact.css

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\944eb5c2b039060b63a0048cde0f7caef61e303c10cef17b1c35c92f8dcc0f5a\compact.css
                        • Size 4KB
                        • SHA256 944eb5c2b039060b63a0048cde0f7caef61e303c10cef17b1c35c92f8dcc0f5a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        guides.css

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\a41b8883a95d42ebd26b6f245932cdbfd8b53c52386fdf25cec41325a66626f7\guides.css
                        • Size 15KB
                        • SHA256 a41b8883a95d42ebd26b6f245932cdbfd8b53c52386fdf25cec41325a66626f7
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        guides.js

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\ab379840f4048a32df466d81c06605cb8d48b228d58afd82df4b8bc9eea19724\guides.js
                        • Size 23KB
                        • SHA256 ab379840f4048a32df466d81c06605cb8d48b228d58afd82df4b8bc9eea19724
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        lucide.js

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedAssets\f828bf34002c03a37da4acecfd0cf214935c4c6c26d4bc48903457ba6c44e606\lucide.js
                        • Size 435KB
                        • SHA256 f828bf34002c03a37da4acecfd0cf214935c4c6c26d4bc48903457ba6c44e606
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        AutoHotkey.exe

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51\AutoHotkey.exe
                        • Size 1.2MB
                        • SHA256 2eab99848ebc07f8ab0cc448bf69af8c700b2fc7fcd1ff8794df743dcc58da51
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        PolicyCore.dll

                        • Path C:\Users\Admin\AppData\Local\CapysAA-EmbeddedRuntime\7b99cd06ab33ff84d5425718ff2d2494842aba5eab49dd39d43157ea53ca5d0e\PolicyCore.dll
                        • Size 56KB
                        • SHA256 7b99cd06ab33ff84d5425718ff2d2494842aba5eab49dd39d43157ea53ca5d0e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Anime-Adventures-Settings.png

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\UI\490a022b7cdf09515688dbdd991a20fcc7a00476b23843e174b0ae008877f9a7\GuideImages\Anime-Adventures-Settings.png
                        • Size 1.4MB
                        • SHA256 91f14a419dcb482d3826c5a1c0077630071f5a7f41f70e18f56dd3f17b78fed9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        assets.json

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\UI\490a022b7cdf09515688dbdd991a20fcc7a00476b23843e174b0ae008877f9a7\assets.json
                        • Size 2KB
                        • SHA256 c159c4e8e41be22e6b8f1d2608606a62bebfb882db09c54bb94550ce95599895
                        • MD5 SHA1 SHA512 TLSH

                        05b4cb09-a6e6-4ecc-8461-3d2f2364b46d.tmp

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\05b4cb09-a6e6-4ecc-8461-3d2f2364b46d.tmp
                        • Size 16KB
                        • SHA256 08e72b0e1437c581aefee9ad840d87d40adc5db468ba43a09ad41c893220e13b
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        2fa1979c-0842-4201-8bf1-3769a47aae0c.tmp

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\2fa1979c-0842-4201-8bf1-3769a47aae0c.tmp
                        • Size 3KB
                        • SHA256 81b53d2b957387624ff5c56f65b928a8971704635ff18d089c5451c78cfe6cea
                        • MD5 SHA1 SHA512 TLSH

                        33b48e81-8b7c-42f8-b711-a0cc33502cfb.tmp

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\33b48e81-8b7c-42f8-b711-a0cc33502cfb.tmp
                        • Size 1KB
                        • SHA256 c388711a03e219762185a4b40b38f138b7b65c3814daca9728a0be57fbb30a40
                        • MD5 SHA1 SHA512 TLSH

                        manifest.fingerprint

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.fingerprint
                        • Size 66B
                        • SHA256 e84df839eb3dee2a10ba66de65c372c6e2bba0cbab46a39af041f4eeaab1ffe8
                        • MD5 SHA1 SHA512 TLSH

                        manifest.json

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\AutoLaunchProtocolsComponent\1.0.0.12\manifest.json
                        • Size 135B
                        • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                        • MD5 SHA1 SHA512 TLSH

                        settings.dat

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Crashpad\settings.dat
                        • Size 280B
                        • SHA256 eaeb1d4eb1de38256128f3c21bb84efa9cff34a059639fb5b574a81296d38f3f
                        • MD5 SHA1 SHA512

                        settings.dat

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Crashpad\settings.dat
                        • Size 280B
                        • SHA256 78a440197c1dcbb6cb440b4064d83fcc7cb812892e631da5411c5619d2503850
                        • MD5 SHA1 SHA512 TLSH

                        throttle_store.dat

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Crashpad\throttle_store.dat
                        • Size 20B
                        • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                        • MD5 SHA1 SHA512

                        temp-index

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                        • Size 168B
                        • SHA256 bd61b9f3e8bcafa80b91c2173012b2920494e8121a6c516c75a4c4a64822323f
                        • MD5 SHA1 SHA512 TLSH

                        temp-index

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                        • Size 48B
                        • SHA256 543c0f13d764a0a9984b07e0e8c68b2f67dfbe3ebb0ea4555330c44f7d3862ff
                        • MD5 SHA1 SHA512

                        index

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\DawnWebGPUCache\index
                        • Size 256KB
                        • SHA256 f267baba9e82f5c69602e99807dc3ce860063c8f6fd2b6b8a721adfc7fd61919
                        • MD5 SHA1 SHA512 SSDEEP

                        MANIFEST-000001

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
                        • Size 41B
                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                        • MD5 SHA1 SHA512

                        data_0

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\GPUCache\data_0
                        • Size 8KB
                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                        • MD5 SHA1 SHA512 SSDEEP

                        data_1

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\GPUCache\data_1
                        • Size 264KB
                        • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                        • MD5 SHA1 SHA512 SSDEEP

                        data_2

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\GPUCache\data_2
                        • Size 8KB
                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                        • MD5 SHA1 SHA512 SSDEEP

                        data_3

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\GPUCache\data_3
                        • Size 8KB
                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                        • MD5 SHA1 SHA512 SSDEEP

                        Network Persistent State

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Network\Network Persistent State
                        • Size 59B
                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                        • MD5 SHA1 SHA512 TLSH

                        SCT Auditing Pending Reports

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                        • Size 2B
                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                        • MD5 SHA1 SHA512

                        da8fed72-d0f5-4bab-ab5f-efc41f67c38f.tmp

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Network\da8fed72-d0f5-4bab-ab5f-efc41f67c38f.tmp
                        • Size 111B
                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                        • MD5 SHA1 SHA512 TLSH

                        Preferences

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Preferences
                        • Size 6KB
                        • SHA256 9acb386fdf32b091a18154d2d0b5083d4636b18cd10072dddf85649057fe4ce9
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        CURRENT

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
                        • Size 16B
                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                        • MD5 SHA1 SHA512

                        f848ab6a-1b74-4809-bad1-53bd85fb8645.tmp

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Default\f848ab6a-1b74-4809-bad1-53bd85fb8645.tmp
                        • Size 6KB
                        • SHA256 cb990ccad1090d2875ebdce027a8d33867bc164bb028c83600f468b5525c034e
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Local State

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Local State
                        • Size 1KB
                        • SHA256 46f4afb274c0427f35672c2aab84d24ceb663f9a751b2e94998bf38d3351e484
                        • MD5 SHA1 SHA512 TLSH

                        Other

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\Sigma\Other
                        • Size 34B
                        • SHA256 2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707
                        • MD5 SHA1 SHA512

                        manifest.json

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\Trust Protection Lists\1.0.0.38\manifest.json
                        • Size 132B
                        • SHA256 de864bf0ab8abacfba536d4e9764eca658f903bd2457f955e128c4ee181c7e58
                        • MD5 SHA1 SHA512 TLSH

                        manifest.json

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\ZxcvbnData\3.2.0.0\manifest.json
                        • Size 69B
                        • SHA256 c0622dadf4ec10ce5f4a64e3f24956b750345dcc194d0bd3ff73cfce1bf6081e
                        • MD5 SHA1 SHA512 TLSH

                        f7cad4d0-d171-483a-a11c-59ec08bc111f.tmp

                        • Path C:\Users\Admin\AppData\Local\CapysAnimeAdventuresMacro\WebView2\EBWebView\f7cad4d0-d171-483a-a11c-59ec08bc111f.tmp
                        • Size 2KB
                        • SHA256 061e259b3fe4e4253208c3f5227173e5d7cb7380ced3259941fbaf021ed07f69
                        • MD5 SHA1 SHA512 TLSH

                        Settings.ini

                        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\Settings.ini
                        • Size 10KB
                        • SHA256 508e432bbb1d1682e60b7b99119dd6656d98a9e9a00ffc299e07b09682d8ff8a
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Settings.ini

                        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\Settings.ini
                        • Size 10KB
                        • SHA256 434d6dc2ac012d393b95b0c56bac9a2d08a7496e162ab95e64375fcbdcb682b0
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        Settings.ini.{E066BA88-581F-4EAF-8CB0-CD8220AFE980}.tmp

                        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\Settings.ini.{E066BA88-581F-4EAF-8CB0-CD8220AFE980}.tmp
                        • Size 10KB
                        • SHA256 620273a4284f0b3562fd8eaf7ecb168cfc91b2564b24fe0ea496dc0f4a10ece1
                        • MD5 SHA1 SHA512 SSDEEP TLSH

                        PlanetGreenieStory.txt

                        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\Settings\Configs\Story\PlanetGreenieStory.txt
                        • Size 834B
                        • SHA256 a8157fd41350a75b9f1dfb0a06abc50fb294ec8c91a2e39e2d6f0f163b2d77fc
                        • MD5 SHA1 SHA512 TLSH

                        PlanetGreenieStory.txt

                        • Path C:\Users\Admin\AppData\Local\Temp\Capys-AA-Macro-v4.1\Settings\Configs\Story\PlanetGreenieStory.txt
                        • Size 830B
                        • SHA256 acf6aafca91fdda840d73c7a09552422cb7d881192007b0f6f92b776d314c26c
                        • MD5 SHA1 SHA512 TLSH

                        memory/1328-292-0x00007FFC7A090000-0x00007FFC7A091000-memory.dmp

                        memory/1328-293-0x00007FFC7AD30000-0x00007FFC7AD31000-memory.dmp

                        memory/3284-2140-0x000001832EB80000-0x000001832ED21000-memory.dmp

                        memory/3284-219-0x00007FFC79EE0000-0x00007FFC79EE1000-memory.dmp

                        memory/3968-14528-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14530-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14529-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14526-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14527-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14525-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14524-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14518-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14519-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/3968-14520-0x0000023F12740000-0x0000023F12741000-memory.dmp

                        memory/4216-337-0x00007FFC79EE0000-0x00007FFC79EE1000-memory.dmp

                        memory/4380-376-0x0000000003800000-0x00000000047D0000-memory.dmp

                        memory/4380-1589-0x0000000003800000-0x00000000047D0000-memory.dmp

                        memory/4380-1590-0x0000000003800000-0x00000000047D0000-memory.dmp

                        memory/4380-192-0x0000000003800000-0x00000000047D0000-memory.dmp

                        memory/4380-191-0x0000000003800000-0x00000000047D0000-memory.dmp

                        memory/4380-2168-0x0000000003800000-0x00000000047D0000-memory.dmp