1df74f76538cf90351259185c6e631e26b163f3a360ffc7842e538dd16be3c21

Analysis

user interaction
yes
max time kernel
320s
max time network
322s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/05/2026, 04:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Project Kitty Launcher/ProjectKittyLauncher.exe
Size 153KB
Sample260528-e9vsgsgz8w
SHA256 1df74f76538cf90351259185c6e631e26b163f3a360ffc7842e538dd16be3c21
MD5 4cdaf22e3d678df924227978bafd89f3
SHA1 82f1a907ffe9b0a5d1dfa5d9020a24c32c073692
SHA512 fab239517efdf9408e92c4460884c28501a782cdd321ba6444c32dc3370d22de73ba0531c0fbdd4f219aaee5bebdb0a10eb1b3157cf8e5270bd4fd76351f8305
SSDEEP 3072:gqeXA/4yIg9vkNPNu6H6xCYOihUE265eJA:gvgvkNFNaxmpE+J
TLSH
T17FE34B07E6A850BDE1B7D679CDA24941FB7378594B71A6CF03504AB60E73BD0AE39302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000\Control Panel\International\Geo\Nation	ProjectKittyLauncher.exe

Executes dropped EXE 2 IoCs

pid	Process
3460	Gorilla Tag.exe
2392	UnityCrashHandler64.exe

Loads dropped DLL 8 IoCs

pid	Process
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe
3460	Gorilla Tag.exe

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
18	raw.githubusercontent.com
19	raw.githubusercontent.com
29	raw.githubusercontent.com
30	raw.githubusercontent.com

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\dll\sechost.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\shell32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\oleaut32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\hid.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\DLL\hid.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\dwmapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\winhttp.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\shcore.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\advapi32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\imm32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\winmm.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\DLL\hid.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\sspicli.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\user32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\msvcrt.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\msvcp140.amd64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\gdi32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\advapi32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\oleaut32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\WINHTTP.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\shcore.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\bcrypt.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\sechost.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\DLL\kernel32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\msvcp_win.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\shlwapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\cfgmgr32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\imm32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\iphlpapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\exe\WindowsPlayer_player_Master_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\ntdll.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\ntdll.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\cfgmgr32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\vcruntime140_1.amd64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\kernelbase.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\winmm.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\opengl32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\glu32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\sspicli.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\UnityPlayer_Win64_player_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\ntdll.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\user32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\winhttp.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\crashpad_handler.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\exe\WindowsPlayer_player_Master_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\kernelbase.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\user32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\win32u.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\rpcrt4.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\rpcrt4.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\shlwapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\version.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\UnityPlayer_Win64_player_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\shlwapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\cfgmgr32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\ws2_32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dll\BacktraceCrashpadWindows.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\DLL\kernel32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\win32u.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\ucrtbase.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\rpcrt4.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\sechost.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\symbols\dll\oleaut32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\system32\dwmapi.pdb	Gorilla Tag.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\symbols\dll\crypt32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\version.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\bcrypt.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\ntdll.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\gdi32full.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\ole32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\setupapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\cfgmgr32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\crypt32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\version.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\advapi32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\advapi32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\ntdll.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\user32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\rpcrt4.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\msvcrt.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\msvcrt.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\sechost.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\UnityPlayer_Win64_player_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\msvcp_win.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\setupapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\imm32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\winmm.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\dwmapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\Kernel.Appcore.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\gdi32full.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\rpcrt4.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\oleaut32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\ws2_32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\WINHTTP.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\dwmapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\opengl32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\glu32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\UnityPlayer_Win64_player_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\DLL\kernel32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\oleaut32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\imm32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\winmm.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\opengl32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\winhttp.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\winhttp.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\gdi32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\hid.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\shcore.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\AudioPluginOculusSpatializer.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\sspicli.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\kernel32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\win32u.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\shlwapi.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\shell32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\shell32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\WINHTTP.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\opengl32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\winhttp.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\cfgmgr32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\cfgmgr32.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\bcrypt.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\UnityPlayer_Win64_player_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\WindowsPlayer_player_Master_mono_x64.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\dll\win32u.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\ucrtbase.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\sechost.pdb	Gorilla Tag.exe
File opened for modification	C:\Windows\symbols\dll\ntdll.pdb	Gorilla Tag.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 7 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	Gorilla Tag.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	Gorilla Tag.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	Gorilla Tag.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	Gorilla Tag.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\Local Settings	taskmgr.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1580	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	4448	ProjectKittyLauncher.exe
Token: SeDebugPrivilege	1580	taskmgr.exe
Token: SeSystemProfilePrivilege	1580	taskmgr.exe
Token: SeCreateGlobalPrivilege	1580	taskmgr.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4448	ProjectKittyLauncher.exe
4448	ProjectKittyLauncher.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe
1580	taskmgr.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3460	Gorilla Tag.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4448 wrote to memory of 3460	4448	ProjectKittyLauncher.exe	122
PID 3460 wrote to memory of 2392	3460	Gorilla Tag.exe	123

C:\Users\Admin\AppData\Local\Temp\Project Kitty Launcher\ProjectKittyLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\Project Kitty Launcher\ProjectKittyLauncher.exe"
1⤵
- Checks computer location settings
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4448
- C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag.exe
  "C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3460
- - C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\UnityCrashHandler64.exe
    "C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\UnityCrashHandler64.exe" --attach 3460 1813733576704
    3⤵
    - Executes dropped EXE
    PID:2392

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /7
1⤵
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1580

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4880

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2cc 0x158
1⤵
PID:4660

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

harmony_interop_cache.dat

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\cache\harmony_interop_cache.dat
Size 36KB
SHA256 b0d347040449c3170ad2e0131bc8fc2412c1ac06040be8a62be252c112bb9af8
MD5 71799b04f82cea52af7bc791b607ec6d
SHA1 7e20c4598717092ec462e422f0bdfc70c5970e30
SHA512 ec6d7f6ffb814e065347ee7133a67eceffa59403546e47b975a73e45974051157d83b2bb83279dbe9ba1faaca3caa28da551748d10657a84279023ffd9ca8f35
SSDEEP 384:nf/gWVhFa3eXG0A5DdX6QMkrwr10eCAvKZktk2TUREW7bHu9hUtqCfB1Whqc:n8pX6Mrwr10eCO9EB1Zc
TLSH
T10AF219F48B87A6D72282B98A7365EC4629D09C07F2D2DD5823F20F7F90E9E9235E4154
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BepInEx.cfg

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\config\BepInEx.cfg
Size 5KB
SHA256 8443d78f427027c263511cf66eec454ddf96dee397d042b4f8e00673d3653719
MD5 6fbb79abb157e750f22ca08a527f5e43
SHA1 55334443c0634bfaedbe4d3b33c825a26245a3ba
SHA512 0d99c0603e99b90295a0ce521bbc0c08763689df6928d3ec11c1a8801fed33ee3cbac90f70053cffd7d6adb7c9bbf195e7f7a7a7cd8f88747b8a51471caabe21
SSDEEP 48:5XUersx5gHtjYjnnV7xdT9xD+KFNel2ieevnrUn3V7apmvY7rUn3V7apuenY2z09:5XjESNjYjnxTLDtnUdxU36pU366GCnOU
TLSH
T1BEB122653F8EF23F0F30409A990BF1D59618890CC36379B8FD69511D5650BEA8372BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0Harmony.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\0Harmony.dll
Size 200KB
SHA256 1a21cc03424fc82c3dd1346905d16494536b9595ae4162228d99fb7c285c1031
MD5 4705aa1c7a9795d2787722bc8c419ae8
SHA1 aa1552cf0311f27ca02d34df0558a718d16fb660
SHA512 2f2bb761d21d7288c2b373958a5eab228797d1a348147f8ff0ea603611c6d79e938a4ccf45f23ffc82500731a68bce8feafcd26a5264d79fd5d7435e6ba69b93
SSDEEP 3072:VQsxAaNWfZKtIZWTr7MDiIVXQ9PsMIuvq14e3Lvvv9L2yZKDVkNCuwMTfyQV:GBa+UWi2XCH7s3RqyZ5NCuTeQ
TLSH
T124145B6267FD0616D7BF6BB4F47050040671FC17E9AAEB9D6C8464FA0C12780EA513BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0Harmony20.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\0Harmony20.dll
Size 110KB
SHA256 c755a5ab2712915a32f9a850d580a8c1b70ff1653bc76600f2767aa8ffccc663
MD5 419d13905829c00d246afed23ef2dc8c
SHA1 4c42a69a0d91f4bfe13d7c2e3cd15224fd12485c
SHA512 94e1b7a8ffb476a1c0b60396749727295097e625f5e02729b12ffb79704e854d7bf9d5bea34ecb0d54fd4aca1dabad6b5384acbca50016474b4f17763186171b
SSDEEP 3072:nm7LZRRGrHnPLiVOvvFeKKtl2kI1S35ll0CF:kRRq2MFmOE3
TLSH
T1C8B34A1573EC4B52C6EF6BB8E474221107B1F853E02AFB899D88B5F91C42F9256113BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BepInEx.Preloader.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\BepInEx.Preloader.dll
Size 42KB
SHA256 55d3895351a9d16b63b6f35f1c01b44ac650979e853d0bd3a442b92a082af64f
MD5 e7071a7c35b02caa1e1408781e67c063
SHA1 5ef53c80c1649630ad148e20e6944b9f4efe6ed7
SHA512 90c6f3198aeef3f56c3f25df1d89dd26a678bb4d8d3ac584826781a879fbea6bc3be0d9e92674bfd7007bf62d82c672f08221f7b634c36b0c8e896851a96819e
SSDEEP 768:haXyGuv4d0dvWPle+CJl16aYQMMGZIb0PoDb86c70jXE:hqIpfnJLNt4IoZVV
TLSH
T16613295037E94715F5FE2F397CB6A15406B2BA475932D74E0DC924AF0D32B904A20BB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BepInEx.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\BepInEx.dll
Size 125KB
SHA256 8255b28902886085c578b9e427d3073c97002db85176d2090cdeda90ef14ce70
MD5 dffb58ce5e000134d3c8e34f075e9508
SHA1 351f5a98def807df816a359094d29ade067b7cc9
SHA512 55d2a6fe14d59e22e6fd36f5c70464f60c94aacba260878a4c56c8701cbdcf9fed074e6deb5b312acb226d2701d062a8af42c7afbb9302077b1a2dd50f0a13a9
SSDEEP 1536:vQ4G2XZrhaE8kV1Gggspns7T6gHuI/Ylmlm3dUtYNwBke5lm/SWtV5kk+e0+S68:vlLy81PpnsigOI/QLtUtbBke4tV52Tf
TLSH
T180C32A1523EC8B1EE6FF5A75BCB011150BB5FE07A423F79E4E4C64EE4922381A6117B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HarmonyXInterop.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\HarmonyXInterop.dll
Size 23KB
SHA256 7ce1342d3afa0334b59a3e38c0aed15e162b9abe9d46f95f34be44af47f3b493
MD5 9b287159019adea74fff818124c49a57
SHA1 a788c6199d1c7ccb6ce17f09996875911d26af46
SHA512 1b2b1975e6982fff3438d37efff51c9776795c21fd2cf64991524cea007ccf88f6f44047c2e4d6f635b53ad4e856d237026ab22ec86d815ef51af51000ea51e5
SSDEEP 384:UJpvQvdOrAh+fjh85KbSBohVj520KysQZ8DqY3DBqZU2CamZM2/DVejhUpGSIZTt:UDdrGwjmKbiohVlnsG8LuU2nEGSIZT8q
TLSH
T15CB22A46B7AC9F13C6FF477929E627020379EB63A406EB091DCC21E68C477A02B65357
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Cecil.Mdb.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\Mono.Cecil.Mdb.dll
Size 42KB
SHA256 5896d1898f616701fff18f3b2c71e6b844d2390ef9f41e1c5fccce8cb27c698e
MD5 5a8b48fcf5e445095799e2c9149ff932
SHA1 d4c514fbac7a30ddee7d0f597c3eae23a32ccedc
SHA512 b99b02f296e5c817b8f984317e67c885099a3cc1198ee1808a0033b48ef60d27866719f0986d7f9a1ad547939bf6dc1886e858b9db7ba4375013b96db31957b6
SSDEEP 768:XgjgMVEdS09ayuzjF/RwmanXdIiO1nqP+7y4CRIJZTMRTIzcRuYhpzt:XgUMn09ay6jF/WmcITIlITMRTtuYnt
TLSH
T12213F7112BFD8B1BC29D82FDA4E625061BB1912DA653E7878FC4F1E7BC13B8515021B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Cecil.Pdb.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\Mono.Cecil.Pdb.dll
Size 84KB
SHA256 174db44a067f58561510af746f3caeb032037762c57a31c8d9ee32db25174984
MD5 427e0464246b1e364c5a1a898db2ecf4
SHA1 dc968ab6e3f9202b5550efb04c0e17c1df04d7d7
SHA512 02ef1f9246e6117e6e958f019333720f07ff13feb5778b343e69d6e27e74e8ef1e6f122b486ce12b1e1eed546b17499ce906e8660babf281676bd8c6405f0dd6
SSDEEP 1536:qguHKU52yKfwZyrw03xFjeylsP+ndKFi94lNSex6SU:qguHKU52rwZyrw03uZ+Um4lZ0SU
TLSH
T1FF836C39B7FC8972C1AD67B728AB4D0507F2D32ED243A75D49896EF8091776608322D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Cecil.Rocks.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\Mono.Cecil.Rocks.dll
Size 27KB
SHA256 54ac539fb5ddc8b44c0e9acd0fcb7324f89d1a072edf8ebc1b06dd691e3d3927
MD5 36a8284f264bdb2cb3420f5d2b8b10e0
SHA1 b842aa70ac6ff9cc3922189e971a62659299ef64
SHA512 3979601ce74b72e1519d020832e57e21b5269bda955878ad52e2d162d6de47fde4793fee9a163551f52081bc2dff90e197f030f8cb83128d07b8571073451e0d
SSDEEP 384:ZNXMT7GsmR2jm13u4NcU11qvJCyIXcMeDz8PmR1uhLoXeuLMBG9UphJAprjE+J1H:v0I2jo3uobeCyV8uRsdeeum1pg1w7H
TLSH
T1D2C2291527598F37C9EF85BE78E1720807F1CA561213CB066CCCA4E9E9877D01B12BEA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Cecil.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\Mono.Cecil.dll
Size 331KB
SHA256 7ae470288fff4a402899c254d0a76cefef55877f5c54f96e83c797cc5bb6e2f6
MD5 50ae8a86b701c83fce3a814ae8d79321
SHA1 7c8b821367897baa1b78157d5cea0767f424bc40
SHA512 04b57207d4fd9fa9f1a71323ea803f023b4b0f2f7a7070bf431806c7a7f41277969c0f5979ecf134812001b47f5d36ec8e8541982473287323e783b3ffe93121
SSDEEP 6144:BTU5Xn0f1oUh8dK9S5K0UEece8plCTNgoF:9pJS5KEpWgo
TLSH
T128746B3537FC5A3BD68F83B6E066142A86F5D419628BEF4D5888F2FA4C437529D02273
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MonoMod.RuntimeDetour.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\MonoMod.RuntimeDetour.dll
Size 103KB
SHA256 40e49bb314391cd7bddc2644f8553eeba92c194b940836b103df16955c464e0c
MD5 04e1988b3ea65408d4c4c29e34bcdeb1
SHA1 9c599b3c60f92bd3663042dc0781be78e2ff0882
SHA512 93fd6df274132691a47e00c84e69c84620de7967434c2164deeb7b605038233be7d29d0acb2dc6dce5bbb4b13225094a61f12458be094ac9b2ec27edc6a524a0
SSDEEP 1536:IFSuZYhhgotA6e4GDSGVjkodWWD7Fjsgql8R6AvdbiwbeMvdo:IUuOhhgsAPDlV5agql8cAvd5do
TLSH
T132A36C2AA7EE4E15D6AD9778B477178043B4F8064897E3AA5CCC65FE0817BC11A203F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MonoMod.Utils.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\BepInEx\core\MonoMod.Utils.dll
Size 183KB
SHA256 9d1495f147ac93c4f81f84538c1a326e8f8a6aefc78d6289d798f3ce1162c5e9
MD5 96c7b1340105a3b86f3e8d19a844903a
SHA1 bc258633aab1a2a1839dcc44eed944d865fd6038
SHA512 36706eb655c995d81aa731c067912452a566ef5b752effdf212603aa0099e28de56588191acced82fb97aeae33df06f229d8cbed969c92cf9b8d439d04c223de
SSDEEP 3072:ojh9XBmF8HjDrQlDSKNcTD3dAC49Uock8dey4DAYxRDA8:oXUF8HjDrohO3KCllAAYD
TLSH
T1F9043C2D5799CE19C5AED6B1F46822604333DC03D2EBD70F7CB8A1F8499A388D6056E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Gorilla Tag.exe

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag.exe
Size 651KB
SHA256 27fb5aa684dda1deaef7735d18d9df92c616cd9216d47f7a050293194c97176f
MD5 96f469bc1ad1ffe1a66fd2f0339a57a3
SHA1 6e0559a8ce322a795c1cd8787967c0f6dd09e804
SHA512 b36bca90a78c9d18c9fa944c844e8992f02b353750b1f63760b44d9eae036dde507ed492f6f798f3870ba5692461b9f5a5da9e439eb903b8fb15344e7fe554ab
SSDEEP 3072:zQJ/VdFgIW9mYucJ/OD8JlsI9mTIOgSnk:4/7FG9mpcJ/OD8//
TLSH
T1C4E440462016F48DD97405F9AFC5C2FD62207FA83956A3F617E82E3B360630DC95BA93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assembly-CSharp-firstpass.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Assembly-CSharp-firstpass.dll
Size 388KB
SHA256 a792a1a3be9e7b02d9902177f7fcb13697ed869843b801d83e0d948d22275d08
MD5 63c1e23e5f80bd15b2522c37c5c1f0fc
SHA1 672618570e1b4fd531d53e9574012265aaac710e
SHA512 851d67b26218f7f7f3efbff3a2a46365d07bd63a56cd9d53a9935dff172a2b02fa7e73db8acdc073f189eb151be36dedb4102edf7524717d9679c195c799b219
SSDEEP 6144:SGNbn2+d2bWuAiujGg5QpbLcCCdYjeC8qWyk5oKa9xi1:SGN72+tiuKqH6jeCzO/a9o
TLSH
T165840876B3D1963BD27D873391825E0B5BD0E09723271E6F7599452E2CD7A880E223CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Assembly-CSharp.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Assembly-CSharp.dll
Size 1.6MB
SHA256 d213aa5d4145d8f39c9275a8602888df3f16eed9f0255ed7700ece726fe7c141
MD5 005e274a6a584f31377e7deea6baf76f
SHA1 5e12efbae1d0c6517835847b8018ca82b8eaeaa5
SHA512 8d7f8df1498511a131363f91a7aaf6145788d1e797a4a1285a11b08567a67f909158fc7e97fd60a6f0dc8c5b377544b1e7ba54fc7df4a872acbd111466c9dec1
SSDEEP 24576:z/XzRPYXt5D0/iIMGxSaKwPM6WRVNDlD5R/6:LzRPYTDRfw9WFDl1
TLSH
T1DA754B16B7E49F37C8AF17BF906409256370E406A7A3E78B9AC0E5BD1C837541E063A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AssistantCoreSDKRuntime.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\AssistantCoreSDKRuntime.dll
Size 13KB
SHA256 4fdafd990c9dd9a775a7e215087e4e70b858cc8a01385b708b3af8b8faf1a8a0
MD5 0007190fdf6a1b20494e86f9fd9871fe
SHA1 d99e211995ab60e0d6c359c45205d8ff4ec9ce8c
SHA512 6a41ce265677f289b79fbdf46c3b0c09d863a30c78fba03f94a53a9bc95a7950a4f7e8c880c5ca71ad906e8c104631ca2cffc1faa1cb854ca29de7119a2a51ef
SSDEEP 192:P87L4Tahv7a2xEnSSn/yyP444zW4cMyrDxj6E+PmOQBpUrsRHsnzuGUWoMsnq:tuQEOn/y41nlM0ZOQB9His
TLSH
T16852A6006BE4463AEABF077768B683401B30FD1A1D62F74E5589545F6D72F803BA0BB2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AstarPathfindingProject.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\AstarPathfindingProject.dll
Size 586KB
SHA256 8f68552d4e1999a8add7f81a2b3477f93b91d1f48b953f288ca11fe0d65ad7c1
MD5 fd32ff5fb212da6981ec7e060cffd7eb
SHA1 155f4612bc43c4eb3d5ab2328e64d109b4e27b37
SHA512 36a56059c345ad1577f2ddfbb354f346238d74b5268e54715a25bfaaf8e39b5ac1f5eb4d1b009740bb22a6e76210c247f794fb2e193f02298f6515a1762194d0
SSDEEP 12288:lOHp77ufB9VELIcVVyXG0/kk86+2z9vvST/dq7foFhqIUZQcAQ7xHn:idI5kbZMfoFhqIUZbHn
TLSH
T1F7D45C1163E84526F6BF6B76E0750948D3B1F826E6BEFB9E0C8964FC1852B509C113B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Autodesk.Fbx.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Autodesk.Fbx.dll
Size 4KB
SHA256 1932ac996cfbe9aadb29d4efb4fa25d842fbad2f9ac768b858323df3564a3be3
MD5 a963b0bff7d47c22972e5e3cc7312cf2
SHA1 dae5a68697440003fe2584a5e351d9f2b8e2f921
SHA512 9565d557370ba45b0852331f2dd807d1b52bef68ef5f0e122f9de59bc29799675e198b9619caa761c4b7b3a0b3305230fccf6532c557a2bfa59c048b9aafc456
TLSH
T12C81546B4BE44B66E5B243B04EF3872222B0E810DE23C77F19841539AC126548E3BF74
MD5 SHA1 SHA512 TLSH

Submit Download

Backtrace.Unity.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Backtrace.Unity.dll
Size 147KB
SHA256 6f08a70c4e29341505aff62fef6ce6201646139e72783440cfc57a48003b4b7a
MD5 710ef802e5c7d39c6d74304087a4626e
SHA1 cc4340f5610b70bcaa586ec0aad104ba0f407c46
SHA512 8970a5ecff31097a417135a268f449b19ab0423fb657da05d662d9fa71d5a8434836471d1b783b6853dfbf61224212f646f63f2a814b9a654deef1640d6216c7
SSDEEP 3072:rd/A35cGWWuudkWUY9AK2L+lSoTchepZy9A:rqJcGWWuuWHLSSoTchF
TLSH
T11CE34A2123EC1B3BEDFF0FB9E4B402A15BBAB50B6053FB9D4E44A5DD246638059113A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BakeryRuntimeAssembly.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\BakeryRuntimeAssembly.dll
Size 21KB
SHA256 c4769aa1c5bd9d1d57f31817c5315a68c6ea030abe9d53d803be31c9d67ffd5a
MD5 dbd4c5e970869dc74553e070451f34cd
SHA1 e8d7da80d5040bbf698c91be7a3abb9583086266
SHA512 a30bdd381d88d7174026c5890c52a0ef011299e0281e8769079b2a048e247438bb398e309b03b186c1e221ee1ad9a4193fdabdbaa549561ee23d65f66c215834
SSDEEP 384:GRJfiwG/u5hluquCbIl1slDkJnBWQSTutk5x/bQwubQ/3:GRGquCslqWJexqM/3
TLSH
T1CCA2F9642CDDEE16DCDF0F3EB8A15E004134B3A59846E27A9C8D74BE2D633D01B452AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cinemachine.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Cinemachine.dll
Size 302KB
SHA256 9153456a933987ae46674bf839d56a1d70129749e6facce59b671836dc0afd34
MD5 4850046c19bd9547d012898a71d61f9e
SHA1 ba0b2e97b293561da736e94b9c536232c96bc834
SHA512 7b3bbd530fff991888677364d1d5340a3e88b28db9b2d0179f835aed85a23904fbee4164032f862af4f72cd716dfbc72fad2f11cd76874adc3048268c08d1d01
SSDEEP 6144:0015ORP2QaxUwnFyHeRk4kGxFZerrzI42mx1exVZMad:35OF2TUVb4bpe/zI42mx1exVZj
TLSH
T113645B3133909677F58F07BAE0590950E378A52BB7AFEBC9598CE4EC1E4379054826E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Facebook.Wit.Conduit.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Facebook.Wit.Conduit.dll
Size 22KB
SHA256 c5442f8854cd43cb9ad099fac2277512d42e414e02568dc9099ee426f79869a9
MD5 fa6108636b2f5a45c83c22c4d6957172
SHA1 c331d6647a82712dc351aed180fcd11762c175b8
SHA512 ed32f17adf43b2c5ae92e3e24567e8c4a8de8711c0b4148625a21a63b3aca59942703330b796fe32fb96ce69d771f4eef75637b5d3325af247155631b3b66994
SSDEEP 384:FsxBwl4wf4RFg4c7O62sAabHLO1DTzmzLQUeAeJ8i:FsMWwf4RFoSnsdyvMFeA2
TLSH
T19FA20A11279C93BAC9AA977A68B502F20776E6113213E7364F4578DE2D0FBB01531773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Facebook.Wit.Dictation.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Facebook.Wit.Dictation.dll
Size 15KB
SHA256 7d8f5b0ff8f41911609d1bcebbb5181db6bfcead7af03c88634233814cbede99
MD5 a1f3cda1b95e45ab400f25d89818ecd4
SHA1 52dcee704f70d9c5ffcf2582856b6fc435976965
SHA512 cf0668a67b367d89f02a26b6376d7ce253a8b1a5e35572e93df5ef603a2cf221bcb15dee8d652075eac8e11e07c06137f2e9d1685e9e3d12c95c23fdba9277d8
SSDEEP 192:8+Nd4Q9T7UgNsQbZXbKHCLu3JlGnZI1j8FNMEzyhG7Xpx1TjovG4WzxBdr7H9zQY:Jb4qUKbh+HkSK+E5x1mMuaHC2t9
TLSH
T10762E66A8F949137CDBB17732DF2834485708D836612E3245A9AC47D095FBE84F1B37A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Facebook.Wit.TTS.Samples.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Facebook.Wit.TTS.Samples.dll
Size 7KB
SHA256 4c909b0a006ef8b6b48246a2ce345016e676cbfdf8691ca0130991be2a479f1a
MD5 d8e25af055963c7a9870a482c4660ac9
SHA1 ce6fe13ea57f3fe97548d5a75e6dd1bbd749a564
SHA512 ea472488efeae15652f9e7a737c48de5136ebdb6d40951187c0e25d6b3c24def04168b771609e8f327e93ac48dc2cefbbf0abe189b8127a49f2420a398f58bde
SSDEEP 96:LTEmSf7aCWwgH7hGyFDFF2vH3ZrWeu2wF5/jkxkeXeVwowYwXt2ZA4:EmaWNlj0vH33u2+5/4useSfPy
TLSH
T11FE1095DA7B84933D8FF4B3914A343066FB2A503D9A3E39D0AC4846FAC223D15E52775
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Facebook.Wit.TTS.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Facebook.Wit.TTS.dll
Size 45KB
SHA256 f96a6a174d075db1a35fe21c9f1353edc05ce22d19b50e7be1518987b8be5a26
MD5 a29549a88db0f1c84360b894002ac627
SHA1 c3062219215c0c228eb800b461326ee116123041
SHA512 943f1d07afc197f305b497a654153568cc6266a9801e4e988883e7415e6618e8d1de2c2e210f52dfef3b49b659442832d0e17de6044e5c8df930333c160e8863
SSDEEP 768:7KUZzjz8CJXulIqf9KARL8DEPRka7Q7liDs+Pe7M71B/:7PZQCJXuiu8Dw6liDsuiM7v
TLSH
T17F233C4A2BACC663C2FF4B79942647950BF0ED277712D3B92E46E0F94A173D129403A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Facebook.WitAI.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Facebook.WitAI.dll
Size 128KB
SHA256 8f32ef4755af066d4c28bd88813a433609e9049a5aec9472cd79f9de8ea79e25
MD5 a0cb108f3ae814b6d859576df6add5b7
SHA1 a3fedaf500e99d2c78d3f06cff4b8746e62c6f66
SHA512 3bd5216f88d855a84dc08551aeb00bcbf5c1b87d519829412a89350c592dcb69ee70c35062524a9ec97823025c042eb97a1c50e7ba174842514cc9f39d51ce2e
SSDEEP 3072:nTF7yoGEWprnRvdfsKbhiJTl7S0sA7ON+p6:hQrHsRJ0S7
TLSH
T11CD35B2917E84A27C2EF07BBF87947164B74DB1376A6E34E4A4198FD1442BD129323B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FbxBuildTestAssets.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\FbxBuildTestAssets.dll
Size 4KB
SHA256 0d7deb8cfb7348eccf9301425143efd757cd65e0eec199d49b026f71b758b351
MD5 1b666b90f4ce35124a935a97bafb4be2
SHA1 a2f2168560176ac9508a8ebf2eba33d6834381d8
SHA512 0f4e115f048a2bd3a81ce04d25b4b07a0ecbd653c19b6249fa151d34a75ee290c5d9fefbc34fcc2cdc873bc2cffa7714ae3a8bc77c6a0313345a0f691bef1713
SSDEEP 48:6c+l597exYV1t40A11KH2bHYZ+IM81qYJQlMtNky/UKhkxkEQLrfp3itlully3xq:6vvVeo2bHFeI4NJU0kxk1Xx3iGXi
TLSH
T1EC917567A7D80627F8BF07B15EB3436A2774E400DE52C76E298506596D223500E31FB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LitJson.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\LitJson.dll
Size 52KB
SHA256 e7e824fff61627a3862355ed46c3b1863d117ffee25a0016db451e3a4bed2b5c
MD5 2d041efb3d1f700eaf00ff67ee077e8f
SHA1 dfdf44c2c8fc011afd89801700456915d0822e78
SHA512 fcc12e12f80aa08efed1546f805e8415e525d7be38f585e86891f0935f88bfd7ad0d3e18ab1628693bae4c66a2c8de7a27a771cb6e5a1fd154b65bdef823a6d4
SSDEEP 768:N/uk5AkdHy7+GHfth7VhRki/uYz5c/uYGqqCEld84C/ld84CYeu1qCRld8AmeuNw:Zuk/S6gftrZ+rPh+P3Nid0ClI01
TLSH
T1AF332B34A35CD736CAFF17BD14E2535007B1CBB6BB32FB562A8061D80A2B3895A16357
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MeshBakerCore.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\MeshBakerCore.dll
Size 360KB
SHA256 bc7d16ead1f4dbca5571e40570ba131dcf778d7c1a6074d37f917a7cf1e2eeaf
MD5 0d8fe17c2f7fa16cf9684daddc4b0134
SHA1 e52c555b0b49c5100c4681898e56c83e43bc99a8
SHA512 ad6687e30d7c45fc3175a05dc21becb04ac492591879d86ac27bbf6f75259f158dbdd7f0f7863245b3d22b4dee4da9fc63e515e8fc5278cf3238210bae50fdfb
SSDEEP 6144:OLIHnreMHsttcibTdz4glO8Osj1HjbGDdCKd0W2b/5CyZcN:FCMHsttVdks2CZ
TLSH
T12B74182057ED8624F6FF7B75A87206044BB5B857EC7EE35E8E4064ED0E62B80D824763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mono.Security.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Mono.Security.dll
Size 235KB
SHA256 bc7c801fd932c73fa57e73fa4af6e86a7fbbd1ca86bc93d897d2a44fd12356ed
MD5 e79fd1895bbe3cd21d7d464a516e17b5
SHA1 6c35253823b44b2f54522b83475dce22340f7bd9
SHA512 f01291cf47fc4fa6890c1822ca4d9548dde93fe3957b04bc99f76ac8b190b6337ab9644a8ed80f409313901b6cc19502d61b703e3162e3285a7f55fddce19549
SSDEEP 6144:dUjTQ70cnf8MoVRxS9iJdBF119RJXG2yB+Q:cEiH119RJXm3
TLSH
T14A344A1863F9531AF6EE8779D4B15019C3F4F50BB9AAEB4E5C8282AD1C027918C41BF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NavMeshComponents.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\NavMeshComponents.dll
Size 17KB
SHA256 a9b760a43a1b8b4fb8d0a749466cce4e4d5b59875a4d4fe911d99cfa226827d2
MD5 9e11a11e769ba09bf1827a9985476ab6
SHA1 0c531535528334685cbc3a8e8fcde9e59401c7b9
SHA512 f6a229c28eb2f890629719049a37fb4c33818dad3da99a89500f9548e9f1b9490c27997bc74d27cd78d11832ed8c435c831b1a3e3a84bf81020461d26fca32e9
SSDEEP 384:Sne0Jt7vIralthkJcCtJhAddPrdA6Q+m:Snrr6IhCaddBgl
TLSH
T1C082D87A5278C27FCACD0F7AE5A2C21557B082123682F358EA84F59C7D133591A221FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.UnityConverters.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Newtonsoft.Json.UnityConverters.dll
Size 52KB
SHA256 627580bfb9651936fa29c1256837876e9d4cd506f3e10b7b25e715b2efa3fd7b
MD5 334e341a5bbcb57ecf40943ac5f006b5
SHA1 1199e07f4795683f7eb22a4904bb0fde9fd45189
SHA512 52a1d814b5d8633a1159c664611f5a7e49bcb06a89fa4702486a68f9401557fa769e956623ec95d846beef324beb80b866d760ad674efbb7a6e488e93fd09084
SSDEEP 1536:yJAwkPbmVNRhQERwQM0sEsUSErYkc0cx8kc0zP0f:FbmH3QERwQM0sEsUSErYkc0cx8kc0zPg
TLSH
T17F33C90037944F2ECFAF9B359879A21477B8A8C614D2E75A0BCD81EA2493FD40D79BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Newtonsoft.Json.dll
Size 670KB
SHA256 87fa9a30e8406b0ccee1ac7f44b529228b4d76f7a3549b1a3817fdda0f5b5b2a
MD5 95fabcecebe498f780caaaa33483bb2f
SHA1 c994bc5f781df8fcc8aed36f7858c9e647942000
SHA512 9b4ada10114c8c5c6d99aab1832682ec8bb9c9f95c0310648b1defba2873e732af70cc6f0a2c1abc23f2170073408120020feaf2b08441f137d4f590572d340d
SSDEEP 12288:judT4rkEdatCiMGYBsq85XrWIhf8vbTB8jx6nws:j84rddkCTGN7H0vXB8jxGws
TLSH
T1C9E4492523F88B26D29F6370F874491847F2F416AAF6EB4F4908A8F91C53B94CD447A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.AudioManager.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.AudioManager.dll
Size 39KB
SHA256 bb5cb0af8e79f3a8f570e481ced1ea1c70f1fd2dca308aee36cafa036db04a7b
MD5 25ae6d32ee8ab577ce5ef613fe65d680
SHA1 1ab18fc94eaf6474daf24121de370fda90afcd69
SHA512 78f969538b431af4b2602cd4ca4b784d7417937f043b63ca1a0fcc89630bb902aeb95c9550d22238f8725638b1ee5a6311ee46021a88f3a25cdb107dd3cbb991
SSDEEP 768:xzXNL70XZ9ZQ2WfSHKYSuO4RavFPFcNN+rXpGYs3DtZyQ:f70XZXQHY+vFmsI35MQ
TLSH
T17903196263DC453BEBEF2BFFA46225565372D6716A32E74A0C94A0EC1D537D00600B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.Interaction.Samples.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.Interaction.Samples.dll
Size 44KB
SHA256 be77fca20cf1a76ac8b285f9e4f49c7179d04314788d71a65f2666d998401fca
MD5 674eef39ddc08ad3840893a636be54b2
SHA1 4020c742caf56ef164a75888041d8adaf67eb976
SHA512 d4a06e67c57f2c9f4c6ca20b78150f351529c9f979f2c14215bf1dbd3c1207c9c1540d8000be74cf2d7fb9f444a26a06baa90ee19b6c7c57de5bae5acccc35e1
SSDEEP 768:MpyofdcG1/UAwlvt9Nl/PGj26EjhtzzDA7BpiEOwvze+hrqffvkCHnw7lSL19Nh0:AyoBGHRuj0PDCXooqXvk6w48
TLSH
T175134A0132AD4337CAAF0AFAA4A986804730C6963196F3EAADC4F0DC4DD77D506557EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.Interaction.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.Interaction.dll
Size 549KB
SHA256 1515b6771e86e24d209a17b40da412753cd3d390ab8b9d6db0b8e889103d6108
MD5 acae024cbf7c9e7c945e76b791f70c1b
SHA1 2ecd4eb1aa3bae0777ff97059f96a68cd5d18f20
SHA512 3ced2795db5a23d4c29124e3280d062e62404d69e13999d6d1df2188aa7c535a31ad41ede7034659be58705414091334a6b7a30340ca2f2bf5dafb9a25407bc9
SSDEEP 6144:voZPL2VpdSitCu/PiETdW22W7jXIcDWE/38dyM3K7Hx9aaThGddAyc8bGvGVpXsr:voZPL2XNIUjXIcEdxKDxlKmU0T
TLSH
T19BC46C23339DA33EE08F477AA0958969DB70C415108EB3DF9E49D0A46ECB7D26D42367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.LipSync.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.LipSync.dll
Size 31KB
SHA256 92db0d248c330478414d4cce0c885f3cfd308664c6f3ff08518528aca3165aba
MD5 1783800e24c8924b7b3d0b10a1a9367d
SHA1 ffc325d3df926d650d68cc7236e04511a54e886b
SHA512 30a5b322248df779b1c63f2b136ad4c49dc03de86706e149f9b03691db3220ef116210176bbf5359e8af42ccd3d2051003a15b2fa1df1cd92e26cf8c17a95275
SSDEEP 768:hlSx2qWacFIqEyAzZxwsV9NZU1rEeZoBRJliZxDk500I:VqZc0XzkK9fU1rEeZwiZtki
TLSH
T1C2E23A127BE80223DEDF6FFA75B241110776B8153923FB9EC154A06D0993BD04A277AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.Platform.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.Platform.dll
Size 309KB
SHA256 e87354c3be362814957d357b03e784d1b324dfa01851a9ee1d2f711b38e62ee7
MD5 22c12e7d890dc93b11a8a53854bb77b8
SHA1 07ada10d354aacdcb6c57208c52d14e6c3061f5e
SHA512 38b754fe9a300b4afade2bc9952f6bd921d73ef9dad332adf14cfced5fa1c84057afe1da563cc05e50f0d658312be5f27424f1f57402dad02dc755b3bf5e7497
SSDEEP 6144:x/hv0qz+EcwADbilDDeymTTjNXK6qTsON0cA+OLH2aPUcJgP5Jc:x/8E+DbilDDeymTTjNXKD4O
TLSH
T1E4643A800BE9472BE1EF233E7076166047B1F5907B22EB4F5A91951D09A338B7E62773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.Spatializer.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.Spatializer.dll
Size 53KB
SHA256 914181f73ca07313b0d036b3bb1cdcdd8addb0fba66ab9cd6d66402f87008f70
MD5 c2e41d6e1605d88ab0c3ee5f0ecb2696
SHA1 3bc2b51a46cc1ad8218eaca34a7d1a697e57fe88
SHA512 f336a9bb1555ce92d4020c45b4983bdadcdd38b3ee9e331b4c84b9b3317c0a27b9e8e2f3fec88ba8ad3caae00ed6b397c29d97fc97b037e1afe42506c23083a7
SSDEEP 768:ZcYc7xSB0WCZ35gG/jC94VfW/0KvO+iSRKsAcbmPgh7ZLt/:ylYzZmjCeVfiPv8SRyW77
TLSH
T15533A479129875B6D16A2A3751FD0C708730A534D592EBDCBFFD40E308646C8BA78B2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.VR.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.VR.dll
Size 707KB
SHA256 35851e4235b8d3a2c8ca9f96dfd487d1b9bfe6d10b7352a65365ae7519d5d52a
MD5 7ddedef1aecec6177145136831d2bb0d
SHA1 93941ed68e75d71184552c110402af3996816726
SHA512 f4c5b651637acf02c5b0a75491a2410f3405bf4440dd7529e531914edf8d48aae476f13d29fbd1f62b2b0e8fc83c27d595b5220a88be384030984319ecc58ac5
SSDEEP 12288:xgOch3LNZGpT+vGRvBls7w3JeQXIveeebveeeh9NcSBza8g6kLZ:lkLNZM8GRPbJlIveeebveeeh9NfBza8O
TLSH
T1DFF44A5573E84F67EABF233AA4B50819A7B9F551A726D38F0688C4BE1C837904E013D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Oculus.Voice.Demo.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Oculus.Voice.Demo.dll
Size 19KB
SHA256 43470d7c0ff94255cdc4d20577a56591870fc74910ebd4010635482c51148dd2
MD5 f539ec532603617cf2147d52123f9e49
SHA1 6a780142a2dae3fdf830b2964e38aeb26aa36889
SHA512 1e710458c7cb9187d7140c99d4f82f12dead4f74b384bfdfa8f0ddf2b4396c77abfd6ad6b92db3ee570beabb99951bc719490110d138133673482320458bfe3c
SSDEEP 384:Y07bGwnVjaUWJcSoapQS3/isspbktkoRLZ:lCCVjoW1sQktkoRLZ
TLSH
T16D92D80D67E8461BE6FB2BBB98F653910A37BD12A935E35C2A81549E0873F804D31733
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Pathfinding.ClipperLib.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Pathfinding.ClipperLib.dll
Size 57KB
SHA256 4651eba68167202db81c212f445e23a2742560d70b605c0b367ad26a4d8dc1b3
MD5 e82386bde402a5a775495a0835809330
SHA1 0db566966943f1639e4f78888fa42d86ea264985
SHA512 d91ba121818424d7836299a43c30dd98e6f3d2c63e8447d120f8e798da39dc77396f0d3bb477897637a5e8aa81bc3a4a4e23cc18b67ee315591d6ffcade3073b
SSDEEP 768:MQJOM4nl+NEkkPDUaRaewvtYq+b3rrF4979qXfthmCZWSQP1SpTY6oBRrmiXc3aX:MMmlWpMaSQPApk6o71YOI4
TLSH
T18143D6885A6DD637CA6B07FE80D1245767318226E281EBE35D9864F02C9B7D1DC072EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Pathfinding.Ionic.Zip.Reduced.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\Pathfinding.Ionic.Zip.Reduced.dll
Size 235KB
SHA256 481cc0f9a53a9ba94f8ea3fc0fb2a520b41812c2fdc6ab10581751eada743d34
MD5 1bebc6f68d83ae67251378ac7bfd0e56
SHA1 7650b24feee9be0d5227b59c7f2735df6e05f15a
SHA512 7ca948290df3d9f4f58d3bba2f5c2f111d74f6859b0ae145b94b08e288da8d24e863887decd5507e30b3da764f21912862b8536c828e13d5ed191ec8ae070b7c
SSDEEP 3072:cWWdICvUvLYPPC1hLBy6YmkLqY6+xbrzEw/GAJkGnpA4Pel9GS5axw7Bx6W6EKXv:m2Oa1ohEwCspMl9kx8V6y/Q
TLSH
T185344A5427E8DE5BF1BD27B4D4E28061C3B6B061F57EEB8F9D4424EA1913340AA053AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Configuration.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\System.Configuration.dll
Size 122KB
SHA256 e743fb3d8764b580344f4725037fd7a57c7ecc7e613ea5757f30cbc797c65ce2
MD5 58a4740f36150857e4a1f469603fe412
SHA1 1adc3fb4692fc12b3e2f51f0910ffdaeb4fcf79f
SHA512 88772e589f76c0a648b7b158143507975c65432f8a654b53622e472f406bf6a9342ceb60706793a78b8501ad54ef83bdf8fbd3c2a17047c1bb8483e767a3e364
SSDEEP 3072:+GHTFkizuGCOE/htnREcacWown5WJGL0MIe6gNe:+GHT5+H/33vJM
TLSH
T1A2C3F92563EC872BE2EE577EF8B515100FF1FA0AA436D74C5D89B0ED1827B804662367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Core.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\System.Core.dll
Size 1.1MB
SHA256 5250334c8af57a92690da69acb662e665ab8001d02ceb38c5010b28eca93c9f0
MD5 2f1eab1e7beef8c37fd508f7216dc14f
SHA1 77c907ce5147ca065bfe9f78e1a06bcb81cb03e1
SHA512 48f982e696fb02275283f7c6c7cc034ab91375c884085577f7b32d4ac65db79eda9942cacea0bc48f19e964b6ce14be983dc8947492be89951d041b8a9bf98f0
SSDEEP 12288:mWK8Xi19FV57751umv0RX15PgLdfJ18VjjvM44hvetIX6e+ZxHzR:Ml/umv0Z15PyC9vMNV1+ZF
TLSH
T111354C01B3EC9B27D5FF7776A4B442A007B6FC46AB3BD78F104891A95D56B008D887A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Xml.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\System.Xml.dll
Size 3.0MB
SHA256 a4a4819f960b4988bd12239a711c8d5efc3f4aceb3b106eb3f50f5c861fb7624
MD5 4ff4259287cfa6cb88bf0e1273b1bf4b
SHA1 5ca1e645efc89ae43bad495aa255850f61c9aa38
SHA512 704c135ae57acb2d3431aa8d7f36e8c32abe0759bde2927cc2b740fed45d61016daf47b414d7322464ad2018f979c6c1dcb73e2498bff69f37ad1fa97b593f10
SSDEEP 49152:4U6/ei/cFcxTHmBotf2Tb+nUrII6EEem03fSx7EjN+:xumBof2X+Ur
TLSH
T13BE53841A7EC9E26F5BF3B75A475662607F2FC09FB72D78E1540A6AC1C22B808D10763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\System.dll
Size 2.5MB
SHA256 1c1c0adb5ac52e6e54f80dd9129ed2c336009413c88df3aa605f10a08b65d147
MD5 483e06fdc7185f11a853072de70bfcb1
SHA1 4b8811663413db7512694e4ec260c8ba93623f6d
SHA512 9ca38a0787ea970fd72085e44c70cbf972e24515cff6b345c68d5015cbcfd1a49b90c2795187fa9e98622517231e3480b54a81abd656c95f07e7ca4191c30c3a
SSDEEP 49152:TKgXudVHrLywqmNWrtlBD6FIGbcZueSLe192t7vGBIjQx/gK:TRedtrpqmNWrtD6MNSyOo
TLSH
T12FC56A0137F89F2AD6BF1776A57204518BF9F91AA7A3D70E1644A26E2C637008D523F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mscorlib.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\mscorlib.dll
Size 4.4MB
SHA256 7533eaf81e6442f0b61c338070e639cf36590d2e1fc27bf038cdee30320bdd46
MD5 87f93aecf04f9e65205ade77353afb68
SHA1 1ae268e275d60d08a9a5bc61305654c35eacefb0
SHA512 2e704762eeb8c08af814b7f839d91bf38aef5560f40edf43f2f56069012481bc8a58fc5baaa4663352872df1f670f2e993655563a200c3eaefc56dc87f1fd624
SSDEEP 98304:/vIAbMst0AH/NNAzzg/IwACSekWvYAlmwUndZBlKj4Xl59xWIKWBCFzXjg1WUqSv:/5Yst0AH/NNAzzg/IwACSSAP
TLSH
T1E6263B40EBFC9F16E1FB7B35A8B211115BF6FC99AB36D30E2145A56C2863B008E11767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

netstandard.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\Managed\netstandard.dll
Size 88KB
SHA256 6ae62e082dc494a2433984177f60ca4db5fae69b1f360a8b33754172b310b8c5
MD5 c61967ebe7f07f6a5a1b3f91842bbc3c
SHA1 c2db6e7376977c5c7f17d816406ca70f95d8e1ef
SHA512 5e63289f67a2b5d436d192a6354444327c4939e854cdae82614950885265fcc76739219138f22c55171362b735169ed77e0699958b4960a909f6ec919ce3aa49
SSDEEP 1536:zsYKt7WAMU9UYk5f4bJUHGPdghpuSX5qUE7cLh9z+:3K4AMaUYm4bJUiIBh1+
TLSH
T18E93C422FD84DB33DECE9779C973545207FA33CD10761EB6444AB5AB84D6A44223236E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.info

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\app.info
Size 25B
SHA256 1517749f589e05549598043cdf04a90f9d0fe42ee99353f8ec660711303f8c15
MD5 6be3ac14897729b8f4c837b3a18694ca
SHA1 c407ba7a2439819035ac8fc34756f7942f9d2f5a
SHA512 d4b1a7a259c38a6e741a49a0767a0cf4f2dd416ddad2ef695156597296fb1a1069a2aed05223df0dcc0849c7d1380b594e1c55ed3debaa90e73bf35bc19e7606
MD5 SHA1 SHA512

Submit Download

boot.config

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\Gorilla Tag_Data\boot.config
Size 145B
SHA256 1e3ed54e214d0a7ce1f174fdb66a89470454ed1c80598bc4da2310d45e3b4943
MD5 b50a6a20fd17161adf66e4f21db2f4d4
SHA1 d4cba6a52bc2e63a21b0fa878a783f05c6f54902
SHA512 841a08621bd2ac537b55053d9790d1942e67041e479fde9f55dee6dc8e022de10e74ca6cb895d6cc6e13b4f73002f889390173be3c534b9884ddb23733b2aefb
TLSH
T107C080147755595675CE142954E8055393C206454556547365D42512162764F61C6087
MD5 SHA1 SHA512 TLSH

Submit Download

mono-2.0-bdwgc.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\MonoBleedingEdge\EmbedRuntime\mono-2.0-bdwgc.dll
Size 7.4MB
SHA256 aa9359eedfdca730d07fbeab66172347d8f9938e3f9f4604d505043855b9c80d
MD5 40636d9373d6cb506302e1b824131a4d
SHA1 391bf63091480917d2eeb2121d918db4847ab9b2
SHA512 b9e91f1bed484b5c9957af5e982e17504a81678bf7af137108a0c463f42fca7fc968ea49a1f8f12d9bdee1b99c0fbe1219c9559016738396efd556a30758a9a0
SSDEEP 49152:U9L7wC5mcc4ebXLrk0VcEybb9Zm5+3tpVEq3SRi6e5seimChetcytgm7dast+YcG:94QXI95EoOTh0A2l+wK6e1GrlV/S3OE8
TLSH
T1D6766D5A926A0069CCABC23DCB676B33C775740443306EEB56905F6A6F23AD5533E3C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Compat.browser

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
Size 1KB
SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

Submit Download

DefaultWsdlHelpGenerator.aspx

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
Size 59KB
SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

machine.config

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\MonoBleedingEdge\etc\mono\4.5\machine.config
Size 33KB
SHA256 ee950004b576fb28dc85f4b0435ed04bf96612de2e8b53be84d07afe85a0de6c
MD5 25ff1ec49e3ac9285bd943cf036bd813
SHA1 392e5ae6b3dad59418bda890952ee27a8b290e90
SHA512 e4659f07893c8e6c737eed5711acd32c84bf595a6953631d960305434d3e40c73867f4d84ad0b62b167e3bd9631150dcdefac03a23198135a44d3a2f011f9b3c
SSDEEP 384:PbtltttttSRtNRtcRtGrRtSRtTf5Rt70zDgRt2Rtuj4f1RDRty6ugyunHMSeuWuN:dk3
TLSH
T1BBE201703609BDEE08432B235C6499C447BF57096AA86C4CB5FF725CEE2688B97132D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\MonoBleedingEdge\etc\mono\config
Size 3KB
SHA256 5776169973a26a387b8b3e5c0f2301a7ab9a6dd7c7d3efa22a96abc47fbf8662
MD5 67611b783439b35abfe05a97413bba46
SHA1 52795ffda8b88701793acc05e87897bdba99a633
SHA512 046dc9fe5cb46bea23668eb0d9742d32ddad30a6ee85c20839b68cb022f9e2ae6a38b87b9e267edb152b29420e3d169348cd9d3bcd4a7c7d82b3d50ac24b4748
TLSH
T1A971FB97F26C89F8B1702A6592FFF7DC41B380A0CD2E2105AE51D6021926F97C943EC7
MD5 SHA1 SHA512 TLSH

Submit Download

UnityCrashHandler64.exe

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\UnityCrashHandler64.exe
Size 1.1MB
SHA256 598587247f628861d542143885749e3c139e91ed35563ed9eb278b2684039213
MD5 8d8b0c1ce7c59096c84938eb2127bc06
SHA1 b73017e6aa8f90916e5bc1f9d1477e33c10261e9
SHA512 5b7c27a6d9fcca72079fa12f392429386734fa7756b85103cc0b9940a0f5b2af5a1100b873a871436a08b0ad1622c12af76cf70efada1952cca42155060bec33
SSDEEP 12288:BLrzkew1ztlMKXkXepgKHBkd0eqZA6E2xg3neo/YofFIn06VJQfz2fzA0:BLvkx1BlXhhkd0W6ryekFD6V+z+zA0
TLSH
T1B7357B5AA6A800ECD5AB8039C956451FF3B27C1607608BDF1390B76B2F3B6D51E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UnityPlayer.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\UnityPlayer.dll
Size 29.3MB
SHA256 97f2e1d9d502feb07614d725c0a1efaaa36feaf69249d848bdf2495ef4658409
MD5 171856aac50f39a6f3805ab75f6222c4
SHA1 64b1218742e2bc1d02755abd2e435285b3307a65
SHA512 a398c96e8a6bfaa80c854eac819c63a6d55eb4ef750f6902f49e4b08dee4366d4569529d7e6870f19ac5a28a7b10e2a36bdbac2fe3a35842b50ae91d2df02e09
SSDEEP 393216:/bTOqf9DcpE8CfeM4O4Z1WlgsHgeeFkLeli9PM2HQHfO:/gDlYPMpW
TLSH
T1AF679DA2A2F800D4D47BD074D65BA90BFBB1348A033186EB52E149956F73BF11ABF750
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

doorstop_config.ini

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\doorstop_config.ini
Size 1KB
SHA256 4d5c6dfa0f771c6a5b1b0c559aca0bd0ece7d08b08fff894708dc3b73ce73cfc
MD5 387896b4ba25b5a00568e92165c1bd01
SHA1 7a21f8110f36dd3beed80393e584772be7a98918
SHA512 81461e8ad50b2fac073179d51181a26ce102cff227933abdc73808c10f66419a5f7d5be64366bd687c59da8eb5059781c6f7d7e2aa817e2d74f6e13ca92dc928
TLSH
T1A23154732A4EB3B07A768546D862B7FF130D85CD826A362075CBC13E33118654897EB9
MD5 SHA1 SHA512 TLSH

Submit Download

winhttp.dll

Path C:\Users\Admin\Documents\Project Kitty\Game\Project Kitty\winhttp.dll
Size 25KB
SHA256 8c6cdbc38836dee87e3368f5de1994d7c0ccebf29e4ce7aba3c0981f9375412c
MD5 e9cefd81b20f8ab4bd859b561e606214
SHA1 f4ec55af52c60765f7d98a343f52ead74c6a1927
SHA512 b93a54184458d154490fc0e6747129819b860090b183d53ac884d24aa61b751dce0f0701551aa073e5bbd77a621c705560e831bead56a371eeb5e2e24c030270
SSDEEP 768:SXPUkwMBdC0q+GwROOBz6sC1fxgKTb0fcmckVPxIiT7j:SXthnROOd6sC1fxgKTQfcmckVPxIiT
TLSH
T15DC28F9137A5516CED7AA63CC6B1A787D27370680DF1920F03749A84CF237426A2DE8A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1580-18-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-13-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-9-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-8-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-19-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-17-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-16-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-15-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-7-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/1580-14-0x00000169B86E0000-0x00000169B86E1000-memory.dmp

Download

memory/3460-610-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-595-0x000001A70CF50000-0x000001A70CF60000-memory.dmp

Download

memory/3460-621-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-609-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-606-0x000001A70BD80000-0x000001A70BD90000-memory.dmp

Download

memory/3460-605-0x000001A70BD80000-0x000001A70BD90000-memory.dmp

Download

memory/3460-602-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-617-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-618-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-622-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-594-0x000001A70CF50000-0x000001A70CF60000-memory.dmp

Download

memory/3460-601-0x000001A70D1D0000-0x000001A70D1E0000-memory.dmp

Download

memory/3460-588-0x000001A70BEF0000-0x000001A70BF00000-memory.dmp

Download

memory/3460-589-0x000001A70BEF0000-0x000001A70BF00000-memory.dmp

Download

memory/3460-587-0x000001A70D0E0000-0x000001A70D0F0000-memory.dmp

Download

memory/3460-586-0x000001A70D0E0000-0x000001A70D0F0000-memory.dmp

Download

memory/3460-582-0x000001A70D0E0000-0x000001A70D0F0000-memory.dmp

Download

memory/3460-583-0x000001A70D0E0000-0x000001A70D0F0000-memory.dmp

Download

memory/3460-577-0x000001A70D060000-0x000001A70D070000-memory.dmp

Download

memory/3460-578-0x000001A70D060000-0x000001A70D070000-memory.dmp

Download

memory/3460-579-0x000001A70D060000-0x000001A70D070000-memory.dmp

Download

memory/3460-576-0x000001A70D060000-0x000001A70D070000-memory.dmp

Download

memory/3460-575-0x000001A70D060000-0x000001A70D070000-memory.dmp

Download

memory/3460-574-0x000001A70D060000-0x000001A70D070000-memory.dmp

Download