Overview
overview
7Static
static
3BongoCat_1...up.exe
windows10-2004-x64
7BongoCat_1...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3bongo-cat.exe
windows10-2004-x64
6bongo-cat.exe
windows11-ltsc_2024-x64
6Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
12/07/2026, 22:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BongoCat_1.1.0_x64-setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
BongoCat_1.1.0_x64-setup.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral7
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral8
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral9
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral11
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral12
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
bongo-cat.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
11 signatures
150 seconds
Behavioral task
behavioral18
Sample
bongo-cat.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target BongoCat_1.1.0_x64-setup.exe
- Size 5.1MB
- Sample260712-2cv4babv6t
- SHA256 c83f2963cb38056273aa98731704c8da650a4bb5bebe4262b4887ba2db76a935
- MD5 e570f318a2fb8664c11a923df56773a7
- SHA1 719ab87a08384d8a34db33232608850f14ad5b36
- SHA512 ac88fcc86f067d64b4ab4973bb7656c8385a1530f32a68b1d6534feea05fee52fbbf3a6d17a80626a3627f1ea468f5d2d86ac6f201e2242a5189878d11c0b50a
- SSDEEP 98304:38pPt7qkQ0piAfbEe+3n8mgrD3fIVfooU2LmwLCh+Mp010Z4HBrQHt7P:38pF7qkpiAf9+38mgYtooU2/Fi0wOCP
- TLSH T1B0463323F7D05C6BCEF6D7F2383B97E6A7D51A21058204025E885F57BC6A0B098D47B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 8 IoCs
pid Process 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyL.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Shift.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\RightTrigger2.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Meta.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num0.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\live2d_expression1.exp3.json BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\AltGr.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Delete.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyZ.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\left-keys\LeftTrigger.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\live2d_motion1.flac BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\ShiftRight.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\background.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyF.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyK.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyM.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\bongo-cat.exe BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\West.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\demomodel2.moc3 BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\live2d_expression2.exp3.json BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\background.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\cover.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Meta.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\demomodel.1024\texture_00.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\right-keys\RightTrigger.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyR.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\AltGr.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\BackQuote.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyC.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\ShiftRight.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\resources\left-keys\DPadDown.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyQ.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num7.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\demomodel.moc3 BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Return.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Space.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\live2d_motion1.motion3.json BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\CapsLock.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\demomodel2.1024\texture_02.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\demomodel2.moc3 BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\live2d_expression1.exp3.json BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyM.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyY.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\background.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\live2d_motion1.flac BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Alt.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Fn.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num6.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Return.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Delete.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyA.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyP.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\KeyH.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyE.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyW.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num1.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Delete.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\live2d_expression2.exp3.json BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyS.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\gamepad\demomodel3.1024\texture_02.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\BackQuote.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\keyboard\resources\left-keys\Num2.png BongoCat_1.1.0_x64-setup.exe File opened for modification C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\KeyZ.png BongoCat_1.1.0_x64-setup.exe File created C:\Program Files\BongoCat\assets\models\standard\resources\left-keys\Num2.png BongoCat_1.1.0_x64-setup.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language BongoCat_1.1.0_x64-setup.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4656 BongoCat_1.1.0_x64-setup.exe 4656 BongoCat_1.1.0_x64-setup.exe
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\BongoCat\assets\models\standard\demomodel.1024\texture_01.png
- Size 188KB
- SHA256 3332efb5349cdf54ea70f1ba491791d3690d48876d8abea19cb7c3f3ef383d93
- MD5 c578945fcca92a9667d3d4d914f54222
- SHA1 af598559b9af7b9fc14bb58fda3e267d3cc3693b
- SHA512 cac2c8dbd0413a02f687d0c550d9e160a99dd4f4dc1c70df2639353cbced3750334258414c14705832a12496ad7b09bb7b16097e8470ea3b80e3f2a2bcc156ec
- SSDEEP 3072:7BxEkC0IUKD83Sb4cWBaLfrQkvWGbP3FTvJv6VCHbEzar0DKaUSwftY/fxyHr6Hn:NxEkvIDD8c5QkvWG7F1vmCH4zE0DKaqm
- TLSH T1F014125283090479C8EE8F30C9AF4FB8EE0E1CFA9CB95C0A5BE355A43456B53CD9661C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\demomodel.1024\texture_02.png
- Size 96KB
- SHA256 681fcc7634d723cb10cfe4efa4eccb16c2b90d51647fff2f9904aaa298f030c5
- MD5 c2934f7c33492ee97fa3436a3d632b9b
- SHA1 74ba51b67606cc033c73af28e4c56b5df2c50e3a
- SHA512 e3afacb42544181b3c701a3660a3a4bb4d7fe9ccecb53d8194bf523749e1029019e7480565b36c13e480f09262d9aa9a23c4496f2d901367114cb5b474259795
- SSDEEP 3072:nVBRGlHHIWnRgdLkhSxZpPE2goeWD1YPl:VLGHD+5YSx82wWD0
- TLSH T1BFA3126DD196C412EE6F403516900A42436E673E0E86BB31FB356FBE58918B18B2BF47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\exp_1.exp3.json
- Size 251B
- SHA256 541a5ede50e9e171304f695e63cac38e874063b6ee6e85983f222d552db79b5a
- MD5 687193e23f80453121f5e8087373ee16
- SHA1 5466c2627274c8b2050a58ad7888da777fb69ee7
- SHA512 05e4a629a02623e32de4e05564354a044516424dd9b9809e17bce1577eef3c239c8a959431b49a1429da554059cb7602832fee3ab69b6fc0e1e1de2215642590
- TLSH T1B6D0C73B9B50985300F55620A53E5031E52807CB21A048477A7E69985F36C531B52A0C
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\exp_2.exp3.json
- Size 148B
- SHA256 0063307aca198054191994f8879f0bdff802dbf0b4256a9c6eecd0a23284f764
- MD5 ce8e005a87ebc1db0d6772cd3c2cea4f
- SHA1 4573953ed666a3bad5e5afc0af7a5088ef9bc4d5
- SHA512 a921d50bdb37946f86f1b0e0c3c8ce589f0994eca6c558e123bf273c4e3b03a43718e08fc5539a46b3917d84e4debf66f7e61387a3bc6849c9d55323f32368b8
- TLSH T1EFC09B369D5084D341F5D73171761021E52406C771744D4B717E649C5F7AD211D56B08
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_expression0.exp3.json
- Size 58B
- SHA256 83a3ec66159eaeb2037d7a9afa6f11fe2066674102b5c33d9ca4f80b460d6896
- MD5 94a2f42398e9d23b7dea71886e3d9961
- SHA1 5178d7d10038ebb295a86fc91fdb9567799e0037
- SHA512 2375ddfd108ada1e533fd0632a73ca2b7c09f42d998bfeef81657b6a3a5b34817e540c844258cddcfc11536855befd61fa2001a7cbbc217ed78965432a11877d
- TLSH T14AA0022169358591A5E2E51172A51051D66809C6B478080F32A62054868AC745D59718
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_expression1.exp3.json
- Size 162B
- SHA256 6e03aeb21de3fadad14a0bdda92aacc7b1f780d71d71dd01e4f7e09ca0a55585
- MD5 87c983d21efcb45ec25a1f38ec5a9775
- SHA1 2fd91f6964445f85e82b42aab90737bcb4d1920f
- SHA512 d29c7fdc5d7b98521dd9728e5d4a10e775d8fd7f5800a76c5c73f873844792aefda35afb383fe45f5aef487fa1f7e4d28cd8fb7fc27116277b1aa58433f15e12
- TLSH T17CC08C329800849300B09730313A1021E52007C761300E0B317F24EC4F6ACA20D02B0A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_expression2.exp3.json
- Size 162B
- SHA256 304ecf6855627cfd5833a971fab3e01c9a5edd2446637ef1c7b47fe07124eacd
- MD5 4f1e68f37d6a81c43017e538c7ecce85
- SHA1 b4370a32bffc820ebf90144020febd061c5408df
- SHA512 3267ee27df01a02ffebfdcfa6597af9ccd92c4650ca5792abef18174e556dd45ae2225fda908c7f904eff1e8cf30bb32f4360a4a1ff309fb09f62b91a5fca148
- TLSH T126C08C329400849340B09630213A2011E6200BC771300E0F717F20E84FAAC320D05B09
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_motion1.flac
- Size 463KB
- SHA256 308a2f866ac4bcb853f34bf4e4a97dd4276217b4ef18522f5eb2a92abdf7acfd
- MD5 71d87ac505261c600053c53e84a43a20
- SHA1 3e36b9c916eef9bbfddc880ff636d6daafddd054
- SHA512 3b11b60feabe1d195c4b93a729e86d17ac8a158b62b64e7b98a9564c62d568625c79f359a8d377e343f0ef3684d8f5d5089dbcddbada8222e9ecd71da1679960
- SSDEEP 12288:b5ufJ7FpG+UHMC7puVCTTO3bcvznO4Po2w/s:b5ufDpG+PXCTTO3gvzVR
- TLSH T1B2A423E1E2DD3E0CF8A97D7E04929DF6CCB8929514B023D2545A258D7EA38FA97CC305
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_motion1.motion3.json
- Size 1KB
- SHA256 5da95705b1fdc82e99a080ddd98b4e0ae9530787dbb3c5643e6abe816a2903f8
- MD5 844bb8e374ee09921fe27fea3de8fee4
- SHA1 5c9edc782ef11a85e83bf9f3cae4c74fd8c3a87b
- SHA512 a478c947991256f17302bf62465f5f8255f7915abc4e44608ac0a954118c2591313de3e4ff2edd384d3f893bd0ffece47a7e4a9f713a801beb12131def4f0b1b
- TLSH T187217C23DA00087E74BDD3B0A0E4491EE66403A759A44D473AFD64CD4F377262BEDA0D
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\BongoCat\assets\models\standard\live2d_motion2.motion3.json
- Size 1KB
- SHA256 d3dd86574fbfdaa8afce162e9cacefe4e38f3311f7db2857fe29fb8772db291a
- MD5 b68151b6f6350ab4dd8c2b43c02733f5
- SHA1 cffcd5f3828405843b78b65a5ba366b5dc5aa873
- SHA512 56323d3c428866b73be477a30cc599c2b15944a05268d4b94a9af40b3b4f28bf417792a92800d52337b3db4c3a966164c9e829daa1a35a2f3ccb80c78e40ae62
- TLSH T1EB217C2FD901197F74BDD67070E4091AE56413A714A80D033BFD28CC0F3772A1A9956D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsgD36A.tmp\LangDLL.dll
- Size 5KB
- SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
- MD5 4b8a750993567ac9a350ba9768fabfa0
- SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
- SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
- SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
- TLSH T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsgD36A.tmp\System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsgD36A.tmp\UserInfo.dll
- Size 4KB
- SHA256 e0dc3112796dbaa37f25ab54b7fac2fbf791cbc6e36a84fc61c6423b84a3677b
- MD5 e6f30908abfc6f53b7c3c36daec4586d
- SHA1 a9ce4ceb9121c0f4375010438359f564f77506e3
- SHA512 0161f510d894d7a85c7cc160ef1cbb694cd30580ffe537f82096f4ce966cf3f6a9fec4929dd93ba2b133eb23a0230e53969792ad647c3b0f5f2e5517d9970a09
- TLSH T1A78173BB92E00CF3D0A44BB780A71CE362B5DD301752001F4A478AA92590B67EE7EB15
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsgD36A.tmp\modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsgD36A.tmp\nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsgD36A.tmp\nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH