URL:

https://gamefabrique.com/games/nora-to-oujo-to-noraneko-heart/

Full analysis: https://app.any.run/tasks/70ea6cc7-4dc6-492e-89a7-5ccbe8bc4660
Verdict: Malicious activity
Analysis date: March 27, 2021, 17:09:39
OS: Windows 7 Professional Service Pack 1 (build: 7601, 32 bit)
Indicators:
MD5:

2E1A59598768AD062F042A2F9717A425

SHA1:

13C7834E9439A983CE07AB28792D51CEC7EA8335

SHA256:

B8488D1C1D464C35C0702EC5FB895127145E0C0C4C86C29644BE218DCEC32A75

SSDEEP:

3:N8l0XMUhGGCEIzK2RK3adHKU0MXRK:22XMPVFK3nzN

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

  • MALICIOUS

    • Application was dropped or rewritten from another process

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.exe (PID: 3964)
      • nora-to-oujo-to-noraneko-heart_0rIx-c1.exe (PID: 2920)
      • saBSI.exe (PID: 3656)
      • Vidoc-Downloader-px.exe (PID: 324)

    • Drops executable file immediately after starts

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.exe (PID: 2920)

    • Changes settings of System certificates

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)
      • saBSI.exe (PID: 3656)
      • Vidoc-Downloader-px.tmp (PID: 2788)

  • SUSPICIOUS

    • Executable content was dropped or overwritten

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.exe (PID: 2920)
      • nora-to-oujo-to-noraneko-heart_0rIx-c1.exe (PID: 3964)
      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)
      • chrome.exe (PID: 2188)
      • Vidoc-Downloader-px.exe (PID: 324)

    • Reads Windows owner or organization settings

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)
      • Vidoc-Downloader-px.tmp (PID: 2788)

    • Drops a file that was compiled in debug mode

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)

    • Drops a file with too old compile date

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)

    • Reads the Windows organization settings

      • Vidoc-Downloader-px.tmp (PID: 2788)
      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)

    • Adds / modifies Windows certificates

      • saBSI.exe (PID: 3656)
      • Vidoc-Downloader-px.tmp (PID: 2788)
      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)

    • Creates files in the program directory

      • saBSI.exe (PID: 3656)

  • INFO

    • Application launched itself

      • chrome.exe (PID: 2188)

    • Reads the hosts file

      • chrome.exe (PID: 2188)
      • chrome.exe (PID: 2204)

    • Reads settings of System Certificates

      • chrome.exe (PID: 2188)

    • Application was dropped or rewritten from another process

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 4060)
      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)
      • Vidoc-Downloader-px.tmp (PID: 2788)

    • Loads dropped or rewritten executable

      • nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp (PID: 956)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
No Malware configuration.
No data.
screenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshotscreenshot
All screenshots are available in the full report
All screenshots are available in the full report
Total processes
62
Monitored processes
22
Malicious processes
4
Suspicious processes
4

Behavior graph

Click at the process to see the details
drop and start start drop and start drop and start drop and start drop and start drop and start chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs chrome.exe no specs nora-to-oujo-to-noraneko-heart_0rix-c1.exe nora-to-oujo-to-noraneko-heart_0rix-c1.tmp no specs nora-to-oujo-to-noraneko-heart_0rix-c1.exe nora-to-oujo-to-noraneko-heart_0rix-c1.tmp chrome.exe no specs sabsi.exe vidoc-downloader-px.exe vidoc-downloader-px.tmp chrome.exe no specs chrome.exe no specs

Process information

PID
CMD
Path
Indicators
Parent process
324"C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod1_extract\Vidoc-Downloader-px.exe" /px=2bJ1kfr6wJ7mQ4aMh7T8NfhBpx54zToeNLtlGaxKbmWqVpuu70Kjrd6JlmPVDam2F6Oor24horOS2 /verysilentC:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod1_extract\Vidoc-Downloader-px.exe
nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp
User:
admin
Company:
Integrity Level:
HIGH
Description:
VidocDownloader Setup
Exit code:
0
Version:
Modules
Images
c:\users\admin\appdata\local\temp\is-fdo2j.tmp\prod1_extract\vidoc-downloader-px.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\msvcrt.dll
c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
c:\windows\system32\lpk.dll
c:\windows\system32\usp10.dll
348"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --disable-gpu-compositing --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=10243692380417502986 --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1180 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
956"C:\Users\admin\AppData\Local\Temp\is-D78IQ.tmp\nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp" /SL5="$30176,1599450,780800,C:\Users\admin\Downloads\nora-to-oujo-to-noraneko-heart_0rIx-c1.exe" /SPAWNWND=$20178 /NOTIFYWND=$20162 C:\Users\admin\AppData\Local\Temp\is-D78IQ.tmp\nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp
nora-to-oujo-to-noraneko-heart_0rIx-c1.exe
User:
admin
Company:
Integrity Level:
HIGH
Description:
Setup/Uninstall
Exit code:
2
Version:
51.1052.0.0
Modules
Images
c:\users\admin\appdata\local\temp\is-d78iq.tmp\nora-to-oujo-to-noraneko-heart_0rix-c1.tmp
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\windows\system32\mpr.dll
c:\windows\system32\comdlg32.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
c:\windows\system32\user32.dll
960"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --disable-gpu-sandbox --use-gl=disabled --gpu-preferences=KAAAAAAAAADgACAgAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=11202872365829899610 --mojo-platform-channel-handle=4664 /prefetch:2C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
1472"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --gpu-preferences=KAAAAAAAAADgACAgAQAAAAAAAAAAAGAAAAAAAAAAAAAIAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --service-request-channel-token=11871201306235952696 --mojo-platform-channel-handle=1052 --ignored=" --type=renderer " /prefetch:2C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
1740"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --disable-gpu-compositing --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17631381886731658860 --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3760 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2104"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --lang=en-US --extension-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=17631731662413505103 --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2348 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2136"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --disable-gpu-compositing --lang=en-US --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --service-request-channel-token=2135949911942817015 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1C:\Program Files\Google\Chrome\Application\chrome.exe—chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
LOW
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2188"C:\Program Files\Google\Chrome\Application\chrome.exe" --disk-cache-dir=null --disk-cache-size=1 --media-cache-size=1 --disable-gpu-shader-disk-cache --disable-background-networking "https://gamefabrique.com/games/nora-to-oujo-to-noraneko-heart/"C:\Program Files\Google\Chrome\Application\chrome.exe
explorer.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\version.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
2204"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --field-trial-handle=1028,5571193069399920746,7942754445851064152,131072 --enable-features=PasswordImport --lang=en-US --service-sandbox-type=network --service-request-channel-token=4317020752372030957 --mojo-platform-channel-handle=1456 /prefetch:8C:\Program Files\Google\Chrome\Application\chrome.exe
chrome.exe
User:
admin
Company:
Google LLC
Integrity Level:
MEDIUM
Description:
Google Chrome
Exit code:
0
Version:
75.0.3770.100
Modules
Images
c:\program files\google\chrome\application\chrome.exe
c:\systemroot\system32\ntdll.dll
c:\windows\system32\kernel32.dll
c:\windows\system32\kernelbase.dll
c:\program files\google\chrome\application\75.0.3770.100\chrome_elf.dll
c:\windows\system32\msvcrt.dll
c:\windows\system32\version.dll
c:\windows\system32\shell32.dll
c:\windows\system32\shlwapi.dll
c:\windows\system32\gdi32.dll
Total events
1 853
Read events
1 722
Write events
124
Delete events
7

Modification events

(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:failed_count
Value:
0
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:state
Value:
2
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
Operation:writeName:StatusCodes
Value:
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\ThirdParty
Operation:writeName:StatusCodes
Value:
01000000
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon
Operation:writeName:state
Value:
1
(PID) Process:(2572) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BrowserExitCodes
Operation:writeName:2188-13261338599994000
Value:
259
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
Operation:writeName:dr
Value:
1
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome
Operation:writeName:UsageStatsInSample
Value:
0
(PID) Process:(2188) chrome.exeKey:HKEY_CURRENT_USER\Software\Google\Chrome\BrowserExitCodes
Operation:delete valueName:3252-13245750958665039
Value:
0
(PID) Process:(2188) chrome.exeKey:HKEY_LOCAL_MACHINE\SOFTWARE\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}
Operation:writeName:usagestats
Value:
0
Executable files
14
Suspicious files
35
Text files
75
Unknown types
1

Dropped files

PID
Process
Filename
Type
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\BrowserMetrics\BrowserMetrics-605F66E8-88C.pma —
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\042445a6-58a0-4f0c-b547-4e77276e9dcd.tmp —
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000048.dbtmp —
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old~RF13450b.TMPtext
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.oldtext
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.oldtext
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old~RF134569.TMPtext
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old~RF1345c6.TMPtext
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old —
MD5:—
SHA256:—
2188chrome.exeC:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG.old~RF13473d.TMP —
MD5:—
SHA256:—
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
0
TCP/UDP connections
32
DNS requests
23
Threats
0

HTTP requests

No HTTP requests
Download PCAP, analyze network streams, HTTP content and a lot more at the full report

Connections

PID
Process
IP
Domain
ASN
CN
Reputation
2204
chrome.exe
89.248.171.137:443
gamefabrique.com
Quasi Networks LTD.
SC
suspicious
2204
chrome.exe
142.250.185.173:443
accounts.google.com
Google Inc.
US
suspicious
2204
chrome.exe
104.18.10.207:443
stackpath.bootstrapcdn.com
Cloudflare Inc
US
suspicious
2204
chrome.exe
2.18.235.40:443
z.moatads.com
Akamai International B.V.
—
whitelisted
2204
chrome.exe
142.250.185.202:443
safebrowsing.googleapis.com
Google Inc.
US
whitelisted
2204
chrome.exe
64.233.184.154:443
stats.g.doubleclick.net
Google Inc.
US
whitelisted
2204
chrome.exe
143.204.214.230:443
dducwntaafhzf.cloudfront.net
—
US
unknown
2204
chrome.exe
172.217.18.110:443
sb-ssl.google.com
Google Inc.
US
whitelisted
956
nora-to-oujo-to-noraneko-heart_0rIx-c1.tmp
143.204.214.32:443
d2yt3cv5wvb9w9.cloudfront.net
—
US
suspicious
2204
chrome.exe
185.60.216.35:443
www.facebook.com
Facebook, Inc.
IE
whitelisted

DNS requests

Domain
IP
Reputation
gamefabrique.com
  • 89.248.171.137
whitelisted
accounts.google.com
  • 142.250.185.173
shared
stackpath.bootstrapcdn.com
  • 104.18.10.207
  • 104.18.11.207
whitelisted
ajax.googleapis.com
  • 172.217.23.234
whitelisted
connect.facebook.net
  • 185.60.216.19
whitelisted
s7.addthis.com
  • 23.210.248.44
whitelisted
www.google-analytics.com
  • 142.250.185.238
whitelisted
z.moatads.com
  • 2.18.235.40
whitelisted
v1.addthisedge.com
  • 23.210.248.44
shared
m.addthis.com
  • 23.210.248.44
shared

Threats

No threats detected
Process
Message
saBSI.exe
NotComDllGetInterface: DLL not found in install location, looking in current directory
saBSI.exe
NotComDllGetInterface: C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod0_extract\saBSI.exe loading C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod0_extract\mfeaaca.dll, WinVerifyTrust failed with 80092003
saBSI.exe
NotComDllGetInterface: DLL not found in install location, looking in current directory
saBSI.exe
NotComDllGetInterface: C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod0_extract\saBSI.exe loading C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod0_extract\mfeaaca.dll, WinVerifyTrust failed with 80092003
saBSI.exe
NotComDllGetInterface: DLL not found in install location, looking in current directory
saBSI.exe
NotComDllGetInterface: C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod0_extract\saBSI.exe loading C:\Users\admin\AppData\Local\Temp\is-FDO2J.tmp\prod0_extract\mfeaaca.dll, WinVerifyTrust failed with 80092003
Interactive malware hunting service ANY.RUN
© 2017-2025 ANY.RUN ALL RIGHTS RESERVED
ANY.RUN
Reports
https://gamefabrique.com/games/nora-to-oujo-to-noraneko-heart/