Overview
overview
7Static
static
3BongoCat_1...up.exe
windows10-2004-x64
7BongoCat_1...up.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-21h2-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-21h2-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3bongo-cat.exe
windows10-2004-x64
bongo-cat.exe
windows11-21h2-x64
uninstall.exe
windows10-2004-x64
7uninstall.exe
windows11-21h2-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-21h2-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-21h2-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-21h2-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-21h2-x64
3Analysis
- max time kernel
149s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/04/2026, 04:30
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BongoCat_1.0.0_arm64-setup.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
BongoCat_1.0.0_arm64-setup.exe
Resource
win11-20260130-en
windows11-21h2-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
bongo-cat.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
bongo-cat.exe
Resource
win11-20260130-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
uninstall.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral20
Sample
uninstall.exe
Resource
win11-20260130-en
windows11-21h2-x64
7 signatures
150 seconds
Behavioral task
behavioral21
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral22
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral25
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral26
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11-20260130-en
windows11-21h2-x64
3 signatures
150 seconds
Behavioral task
behavioral27
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral28
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target BongoCat_1.0.0_arm64-setup.exe
- Size 4.8MB
- Sample260417-e4zjgsft3p
- SHA256 7d46179510826004301bd9e729fe3637c53b22f2e5be5926ce9b805df6104687
- MD5 31cc33619c92e1d9ec5d7e4d43ebc77e
- SHA1 906d808bdfd18f783992377039ba19a3e27c6e3c
- SHA512 85bc639b5151faff7264a58fa80126ca09ac3d7305afc43358b9045a95c68642daf7dbfd9fa7469692155e101abb4e454a383fe2b982292b9aa9370f40422682
- SSDEEP 98304:5AMtfaWpbpvmlbF2DQs10bCQA5PFUiSDWZ7oE1Gm84PDUHnf:5xtSUcbgla+QA5PF+DWZ7oVm8AUHnf
- TLSH T10C3633201688A81FC1650E371E7087A347156D49B9A68317EF91B36DB2F18E73E07E7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 5 IoCs
pid Process 4832 BongoCat_1.0.0_arm64-setup.exe 4832 BongoCat_1.0.0_arm64-setup.exe 4832 BongoCat_1.0.0_arm64-setup.exe 4832 BongoCat_1.0.0_arm64-setup.exe 4832 BongoCat_1.0.0_arm64-setup.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\BongoCat\assets\models\keyboard\demomodel2.moc3 BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyO.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Meta.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num2.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\live2d_motion1.motion3.json BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Meta.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num8.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\left-keys\DPadDown.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyW.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num5.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\right-keys\DownArrow.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\ControlLeft.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyH.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num0.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\RightTrigger.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\demomodel3.1024\texture_02.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\live2d_expression0.exp3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\cover.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyE.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\live2d_motion1.motion3.json BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\AltGr.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\live2d_motion1.flac BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\demomodel2.cdi3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\live2d_expression1.exp3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num4.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\live2d_motion2.motion3.json BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\background.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num0.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\live2d_expression1.exp3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Backspace.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num7.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\bongo-cat.exe BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\exp_1.exp3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\West.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\exp_2.exp3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyA.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\left-keys\DPadLeft.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\North.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num8.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyB.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyE.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyV.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\demomodel3.moc3 BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\South.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\West.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\AltGr.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\right-keys\UpArrow.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\demomodel.moc3 BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Delete.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyF.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Delete.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\live2d_expression2.exp3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\live2d_motion2.motion3.json BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyP.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num5.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyM.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num0.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\resources\left-keys\LeftTrigger2.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\live2d_expression0.exp3.json BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\background.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\live2d_expression0.exp3.json BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyQ.png BongoCat_1.0.0_arm64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num0.png BongoCat_1.0.0_arm64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\demomodel.cdi3.json BongoCat_1.0.0_arm64-setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BongoCat_1.0.0_arm64-setup.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4832 BongoCat_1.0.0_arm64-setup.exe 4832 BongoCat_1.0.0_arm64-setup.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\BongoCat\assets\models\standard\demomodel.1024\texture_01.png
- Size 188KB
- SHA256 3332efb5349cdf54ea70f1ba491791d3690d48876d8abea19cb7c3f3ef383d93
- MD5 c578945fcca92a9667d3d4d914f54222
- SHA1 af598559b9af7b9fc14bb58fda3e267d3cc3693b
- SHA512 cac2c8dbd0413a02f687d0c550d9e160a99dd4f4dc1c70df2639353cbced3750334258414c14705832a12496ad7b09bb7b16097e8470ea3b80e3f2a2bcc156ec
- SSDEEP 3072:7BxEkC0IUKD83Sb4cWBaLfrQkvWGbP3FTvJv6VCHbEzar0DKaUSwftY/fxyHr6Hn:NxEkvIDD8c5QkvWG7F1vmCH4zE0DKaqm
- TLSH T1F014125283090479C8EE8F30C9AF4FB8EE0E1CFA9CB95C0A5BE355A43456B53CD9661C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\demomodel.1024\texture_02.png
- Size 96KB
- SHA256 681fcc7634d723cb10cfe4efa4eccb16c2b90d51647fff2f9904aaa298f030c5
- MD5 c2934f7c33492ee97fa3436a3d632b9b
- SHA1 74ba51b67606cc033c73af28e4c56b5df2c50e3a
- SHA512 e3afacb42544181b3c701a3660a3a4bb4d7fe9ccecb53d8194bf523749e1029019e7480565b36c13e480f09262d9aa9a23c4496f2d901367114cb5b474259795
- SSDEEP 3072:nVBRGlHHIWnRgdLkhSxZpPE2goeWD1YPl:VLGHD+5YSx82wWD0
- TLSH T1BFA3126DD196C412EE6F403516900A42436E673E0E86BB31FB356FBE58918B18B2BF47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\exp_1.exp3.json
- Size 251B
- SHA256 541a5ede50e9e171304f695e63cac38e874063b6ee6e85983f222d552db79b5a
- MD5 687193e23f80453121f5e8087373ee16
- SHA1 5466c2627274c8b2050a58ad7888da777fb69ee7
- SHA512 05e4a629a02623e32de4e05564354a044516424dd9b9809e17bce1577eef3c239c8a959431b49a1429da554059cb7602832fee3ab69b6fc0e1e1de2215642590
- TLSH T1B6D0C73B9B50985300F55620A53E5031E52807CB21A048477A7E69985F36C531B52A0C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\exp_2.exp3.json
- Size 148B
- SHA256 0063307aca198054191994f8879f0bdff802dbf0b4256a9c6eecd0a23284f764
- MD5 ce8e005a87ebc1db0d6772cd3c2cea4f
- SHA1 4573953ed666a3bad5e5afc0af7a5088ef9bc4d5
- SHA512 a921d50bdb37946f86f1b0e0c3c8ce589f0994eca6c558e123bf273c4e3b03a43718e08fc5539a46b3917d84e4debf66f7e61387a3bc6849c9d55323f32368b8
- TLSH T1EFC09B369D5084D341F5D73171761021E52406C771744D4B717E649C5F7AD211D56B08
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_expression0.exp3.json
- Size 58B
- SHA256 83a3ec66159eaeb2037d7a9afa6f11fe2066674102b5c33d9ca4f80b460d6896
- MD5 94a2f42398e9d23b7dea71886e3d9961
- SHA1 5178d7d10038ebb295a86fc91fdb9567799e0037
- SHA512 2375ddfd108ada1e533fd0632a73ca2b7c09f42d998bfeef81657b6a3a5b34817e540c844258cddcfc11536855befd61fa2001a7cbbc217ed78965432a11877d
- TLSH T14AA0022169358591A5E2E51172A51051D66809C6B478080F32A62054868AC745D59718
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_expression1.exp3.json
- Size 162B
- SHA256 6e03aeb21de3fadad14a0bdda92aacc7b1f780d71d71dd01e4f7e09ca0a55585
- MD5 87c983d21efcb45ec25a1f38ec5a9775
- SHA1 2fd91f6964445f85e82b42aab90737bcb4d1920f
- SHA512 d29c7fdc5d7b98521dd9728e5d4a10e775d8fd7f5800a76c5c73f873844792aefda35afb383fe45f5aef487fa1f7e4d28cd8fb7fc27116277b1aa58433f15e12
- TLSH T17CC08C329800849300B09730313A1021E52007C761300E0B317F24EC4F6ACA20D02B0A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_expression2.exp3.json
- Size 162B
- SHA256 304ecf6855627cfd5833a971fab3e01c9a5edd2446637ef1c7b47fe07124eacd
- MD5 4f1e68f37d6a81c43017e538c7ecce85
- SHA1 b4370a32bffc820ebf90144020febd061c5408df
- SHA512 3267ee27df01a02ffebfdcfa6597af9ccd92c4650ca5792abef18174e556dd45ae2225fda908c7f904eff1e8cf30bb32f4360a4a1ff309fb09f62b91a5fca148
- TLSH T126C08C329400849340B09630213A2011E6200BC771300E0F717F20E84FAAC320D05B09
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_motion1.flac
- Size 463KB
- SHA256 308a2f866ac4bcb853f34bf4e4a97dd4276217b4ef18522f5eb2a92abdf7acfd
- MD5 71d87ac505261c600053c53e84a43a20
- SHA1 3e36b9c916eef9bbfddc880ff636d6daafddd054
- SHA512 3b11b60feabe1d195c4b93a729e86d17ac8a158b62b64e7b98a9564c62d568625c79f359a8d377e343f0ef3684d8f5d5089dbcddbada8222e9ecd71da1679960
- SSDEEP 12288:b5ufJ7FpG+UHMC7puVCTTO3bcvznO4Po2w/s:b5ufDpG+PXCTTO3gvzVR
- TLSH T1B2A423E1E2DD3E0CF8A97D7E04929DF6CCB8929514B023D2545A258D7EA38FA97CC305
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_motion1.motion3.json
- Size 1KB
- SHA256 5da95705b1fdc82e99a080ddd98b4e0ae9530787dbb3c5643e6abe816a2903f8
- MD5 844bb8e374ee09921fe27fea3de8fee4
- SHA1 5c9edc782ef11a85e83bf9f3cae4c74fd8c3a87b
- SHA512 a478c947991256f17302bf62465f5f8255f7915abc4e44608ac0a954118c2591313de3e4ff2edd384d3f893bd0ffece47a7e4a9f713a801beb12131def4f0b1b
- TLSH T187217C23DA00087E74BDD3B0A0E4491EE66403A759A44D473AFD64CD4F377262BEDA0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_motion2.motion3.json
- Size 1KB
- SHA256 d3dd86574fbfdaa8afce162e9cacefe4e38f3311f7db2857fe29fb8772db291a
- MD5 b68151b6f6350ab4dd8c2b43c02733f5
- SHA1 cffcd5f3828405843b78b65a5ba366b5dc5aa873
- SHA512 56323d3c428866b73be477a30cc599c2b15944a05268d4b94a9af40b3b4f28bf417792a92800d52337b3db4c3a966164c9e829daa1a35a2f3ccb80c78e40ae62
- TLSH T1EB217C2FD901197F74BDD67070E4091AE56413A714A80D033BFD28CC0F3772A1A9956D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsb2DF3.tmp\LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
- MD5 68b287f4067ba013e34a1339afdb1ea8
- SHA1 45ad585b3cc8e5a6af7b68f5d8269c97992130b3
- SHA512 06c38bbb07fb55256f3cdc24e77b3c8f3214f25bfd140b521a39d167113bf307a7e8d24e445d510bc5e4e41d33c9173bb14e3f2a38bc29a0e3d08c1f0dca4bdb
- SSDEEP 48:S46+/nTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mFofjLl:zFuPbOBtWZBV8jAWiAJCdv2Cm0L
- TLSH T16BC19474B3C248B9C491513768AB33D36612EE746784500F9F6711AA38209F7AD3EBC3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsb2DF3.tmp\System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
- MD5 cff85c549d536f651d4fb8387f1976f2
- SHA1 d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e
- SHA512 531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88
- SSDEEP 192:Zjvco0qWTlt70m5Aj/lQ0sEWD/wtYbBHFNaDybC7y+XBz0QPi:FHQlt70mij/lQRv/9VMjzr
- TLSH T126426B129BB089F2F591583814667F2A6FBE9C5D27F50563CFE304D63D212CB983A283
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsb2DF3.tmp\UserInfo.dll
- Size 4KB
- SHA256 e54989d2b83e7282d0bec56b098635146aab5d5a283f1f89486816851ef885a0
- MD5 2f69afa9d17a5245ec9b5bb03d56f63c
- SHA1 e0a133222136b3d4783e965513a690c23826aec9
- SHA512 bfd4af50e41ebc56e30355c722c2a55540a5bbddb68f1522ef7aabfe4f5f2a20e87fa9677ee3cdb3c0bf5bd3988b89d1224d32c9f23342a16e46c542d8dc0926
- TLSH T1818162BB93B00CF3D0A44B7B44A71CE762B6DD301762001F4A478AA92591B67EE7EB15
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsb2DF3.tmp\modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsb2DF3.tmp\nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
- MD5 6c3f8c94d0727894d706940a8a980543
- SHA1 0d1bcad901be377f38d579aafc0c41c0ef8dcefd
- SHA512 2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355
- SSDEEP 96:o0svUu3Uy+sytcS8176b+XR8pCHFcMcxSgB5PKtAtgt+Nt+rnt3DVEB3YcNqkzfS:o0svWyNO81b8pCHFcM0PuAgkOyuIFc
- TLSH T17012F992E6A450B3C5D6533B35AA2F2DCBBD5325B0926C00C7738E4D39395B66E38353
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsb2DF3.tmp\nsis_tauri_utils.dll
- Size 30KB
- SHA256 7317e5508923f425bced2698bb89f79b00fcddcd1028f44b598732b2e3711464
- MD5 fc4691e51cdfac476b2fc63bbe951e82
- SHA1 6532da4545864c6ec95f62f27f2199bfd668560b
- SHA512 5b544832f1b1b8f2e1c6f8d61a839bea22c2c3d7e2a03671a12bab936e46a6f3fa3dd8aa53ec91157c1de08f0b349d6d2c1aec29385ad38cc0b2ab4c033c58ed
- SSDEEP 768:IMSeZbzz284uMJSmuGrAFKpnp0jdhK7R+qV0Z:IjKfAuXiMtXIV
- TLSH T16FD23918FCC56FB6E2DF1575240C596E429FC8180B14CE9BD7A25E22E9E63722EE500F
- MD5 SHA1 SHA512 SSDEEP TLSH