IOC Report
https://bambulab.com/en-eu/download/studio

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Local\Temp\nsl489C.tmp\InstallOptions.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Local\Temp\nsl489C.tmp\ioSpecial.ini
Unicode text, UTF-16, little-endian text, with CRLF line terminators
dropped
C:\Users\user\AppData\Local\Temp\nsl489C.tmp\modern-wizard.bmp
PC bitmap, Windows 3.x format, 164 x 314 x 4, image size 26376, resolution 2834 x 2834 px/m, cbSize 26494, bits offset 118
dropped
C:\Users\user\AppData\Local\Temp\nsl489C.tmp\nsProcessW.dll
PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 17:44:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 17:44:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 17:44:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 17:44:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 17:44:51 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\Downloads\Bambu_Studio_win_public-v01.08.04.51-20240117164301.exe (copy)
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
C:\Users\user\Downloads\Unconfirmed 629002.crdownload
PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
dropped
Chrome Cache Entry: 165
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 166
ASCII text, with very long lines (13703), with no line terminators
downloaded
Chrome Cache Entry: 168
RIFF (little-endian) data, Web/P image, VP8 encoding, 1574x799, Suserng: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 169
PNG image data, 215 x 27, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 170
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 172
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 174
JSON data
downloaded
Chrome Cache Entry: 175
ASCII text, with very long lines (5140)
downloaded
Chrome Cache Entry: 176
ASCII text, with very long lines (39516)
downloaded
Chrome Cache Entry: 177
PNG image data, 259 x 300, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 178
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 715x594, components 3
dropped
Chrome Cache Entry: 180
PNG image data, 772 x 482, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 181
Unicode text, UTF-8 text, with very long lines (65484)
downloaded
Chrome Cache Entry: 182
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 183
Web Open Font Format (Version 2), TrueType, length 65704, version 1.0
downloaded
Chrome Cache Entry: 184
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 185
ASCII text
downloaded
Chrome Cache Entry: 187
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 189
PNG image data, 570 x 480, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 190
GIF image data, version 89a, 1 x 1
downloaded
Chrome Cache Entry: 192
PNG image data, 772 x 483, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 193
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 194
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 195
ASCII text, with very long lines (5116), with no line terminators
downloaded
Chrome Cache Entry: 196
ASCII text, with very long lines (4827)
downloaded
Chrome Cache Entry: 197
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 200
gzip compressed data, from Unix, original size modulo 2^32 39243
downloaded
Chrome Cache Entry: 204
ASCII text, with very long lines (51188)
downloaded
Chrome Cache Entry: 207
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 208
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 209
ASCII text, with very long lines (8779), with no line terminators
downloaded
Chrome Cache Entry: 210
Unicode text, UTF-8 text, with very long lines (40934), with no line terminators
downloaded
Chrome Cache Entry: 211
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 212
Unicode text, UTF-8 text, with very long lines (61476)
downloaded
Chrome Cache Entry: 214
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 215
PNG image data, 772 x 483, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 216
ASCII text, with very long lines (55763), with no line terminators
downloaded
Chrome Cache Entry: 217
Unicode text, UTF-8 text, with very long lines (65470), with no line terminators
downloaded
Chrome Cache Entry: 218
PNG image data, 482 x 560, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 219
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 220
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 223
ASCII text, with very long lines (56922)
downloaded
Chrome Cache Entry: 224
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 226
ASCII text, with very long lines (65451)
downloaded
Chrome Cache Entry: 227
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 228
ASCII text, with very long lines (4293)
downloaded
Chrome Cache Entry: 229
ASCII text, with very long lines (2627), with no line terminators
downloaded
Chrome Cache Entry: 230
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 231
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 232
ASCII text, with very long lines (21229)
downloaded
Chrome Cache Entry: 233
PNG image data, 806 x 653, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 234
ASCII text, with very long lines (21778), with no line terminators
dropped
Chrome Cache Entry: 235
gzip compressed data, max speed, from Unix, original size modulo 2^32 24067
downloaded
Chrome Cache Entry: 237
Unicode text, UTF-8 text, with very long lines (64891)
downloaded
Chrome Cache Entry: 238
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 239
Web Open Font Format (Version 2), TrueType, length 319984, version 1.0
downloaded
Chrome Cache Entry: 241
PNG image data, 706 x 495, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 242
ASCII text, with very long lines (16389), with no line terminators
downloaded
Chrome Cache Entry: 243
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 244
ASCII text, with very long lines (5137), with no line terminators
downloaded
Chrome Cache Entry: 245
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 246
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 247
ASCII text, with very long lines (29362), with no line terminators
downloaded
Chrome Cache Entry: 248
PNG image data, 707 x 496, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 250
Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
downloaded
Chrome Cache Entry: 251
PNG image data, 228 x 72, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 252
Web Open Font Format (Version 2), TrueType, length 44588, version 1.0
downloaded
Chrome Cache Entry: 254
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 255
Web Open Font Format (Version 2), TrueType, length 65820, version 1.0
downloaded
Chrome Cache Entry: 257
PNG image data, 772 x 484, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 258
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 259
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 260
ASCII text, with very long lines (3230), with no line terminators
downloaded
Chrome Cache Entry: 262
PNG image data, 828 x 828, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 263
ASCII text, with very long lines (11094), with no line terminators
downloaded
Chrome Cache Entry: 264
ASCII text, with very long lines (42289), with no line terminators
downloaded
Chrome Cache Entry: 265
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 267
gzip compressed data, max speed, from Unix, original size modulo 2^32 40253
downloaded
Chrome Cache Entry: 268
ASCII text, with very long lines (53825), with no line terminators
downloaded
Chrome Cache Entry: 269
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 272
ASCII text, with no line terminators
dropped
Chrome Cache Entry: 273
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 274
PNG image data, 384 x 384, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 275
ASCII text, with very long lines (58564)
downloaded
Chrome Cache Entry: 276
ASCII text, with very long lines (743)
downloaded
Chrome Cache Entry: 277
Unicode text, UTF-8 text, with very long lines (33790), with no line terminators
downloaded
Chrome Cache Entry: 279
JSON data
dropped
Chrome Cache Entry: 280
PNG image data, 615 x 321, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 281
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 283
JSON data
downloaded
Chrome Cache Entry: 284
PNG image data, 772 x 482, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 286
Unicode text, UTF-8 text, with very long lines (58079)
downloaded
Chrome Cache Entry: 287
Web Open Font Format (Version 2), TrueType, length 66572, version 1.0
downloaded
Chrome Cache Entry: 288
JSON data
downloaded
Chrome Cache Entry: 289
ASCII text, with very long lines (65485)
downloaded
Chrome Cache Entry: 290
PNG image data, 732 x 620, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 291
ASCII text, with very long lines (4179)
downloaded
Chrome Cache Entry: 292
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 293
PNG image data, 1150 x 520, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 295
ASCII text, with very long lines (11606), with no line terminators
downloaded
Chrome Cache Entry: 296
ASCII text, with very long lines (15296)
downloaded
Chrome Cache Entry: 297
ASCII text, with very long lines (7860), with no line terminators
downloaded
Chrome Cache Entry: 298
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 299
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 303
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 304
ASCII text, with very long lines (7475)
downloaded
Chrome Cache Entry: 305
PNG image data, 388 x 450, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 308
Unicode text, UTF-8 text, with very long lines (37754)
downloaded
Chrome Cache Entry: 309
ASCII text, with very long lines (6612), with no line terminators
downloaded
Chrome Cache Entry: 311
ASCII text, with very long lines (4745), with no line terminators
dropped
Chrome Cache Entry: 312
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 313
HTML document, Unicode text, UTF-8 text, with very long lines (4926)
downloaded
Chrome Cache Entry: 314
JSON data
dropped
Chrome Cache Entry: 315
PNG image data, 1377 x 705, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 316
ASCII text, with very long lines (846), with no line terminators
downloaded
Chrome Cache Entry: 317
ASCII text, with very long lines (2343)
downloaded
Chrome Cache Entry: 318
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 319
PNG image data, 417 x 305, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 320
ASCII text, with very long lines (1777), with no line terminators
downloaded
Chrome Cache Entry: 321
PNG image data, 772 x 482, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 322
JSON data
downloaded
Chrome Cache Entry: 323
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 324
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 326
ASCII text, with very long lines (64347)
downloaded
Chrome Cache Entry: 327
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 329
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 330
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 331
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1574x799, components 3
dropped
Chrome Cache Entry: 332
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 333
ASCII text, with very long lines (5945)
downloaded
Chrome Cache Entry: 335
Unicode text, UTF-8 text, with very long lines (34226), with no line terminators
downloaded
Chrome Cache Entry: 336
Web Open Font Format (Version 2), TrueType, length 15480, version 1.0
downloaded
Chrome Cache Entry: 337
GIF image data, version 89a, 1037 x 559
downloaded
Chrome Cache Entry: 339
PNG image data, 728 x 578, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 340
PNG image data, 388 x 451, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 341
Web Open Font Format (Version 2), TrueType, length 15908, version 1.0
downloaded
Chrome Cache Entry: 342
ASCII text, with very long lines (65200)
downloaded
Chrome Cache Entry: 343
ASCII text, with very long lines (31300)
downloaded
Chrome Cache Entry: 344
Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
downloaded
Chrome Cache Entry: 345
JSON data
dropped
Chrome Cache Entry: 346
PNG image data, 800 x 817, 8-bit/color RGBA, non-interlaced
downloaded
There are 144 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://bambulab.com/en-eu/download/studio
https://bambulab.com/en-eu/download/studio
about:blank
https://wiki.bambulab.com/en/software/bambu-studio/multi-color-printing

Domains

Name
IP
Malicious
star-mini.c10r.facebook.com
31.13.65.36
d2angmu4y4m8uz.cloudfront.net
18.164.124.45
dualstack.reddit.map.fastly.net
151.101.129.140
scontent.xx.fbcdn.net
31.13.65.7
bambulab.com
104.18.3.216
reddit.map.fastly.net
151.101.129.140
www.google.com
142.250.105.147
us-east-1-ds-2081.oss-acc.aliyuncs.com
47.89.140.83
cdn.cookielaw.org
104.19.178.52
geolocation.onetrust.com
104.18.32.137
alb.reddit.com
unknown
www.facebook.com
unknown
www.redditstatic.com
unknown
cdn1.bambulab.com
unknown
cms-oss-us.bambulab.com
unknown
w3-reporting-nel.reddit.com
unknown
connect.facebook.net
unknown
There are 7 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
140.82.113.3
unknown
United States
31.13.65.36
star-mini.c10r.facebook.com
Ireland
104.19.177.52
unknown
United States
18.164.124.64
unknown
United States
104.18.2.216
unknown
United States
192.168.2.16
unknown
unknown
47.89.140.83
us-east-1-ds-2081.oss-acc.aliyuncs.com
United States
185.199.111.133
unknown
Netherlands
151.101.193.140
unknown
United States
104.18.32.137
geolocation.onetrust.com
United States
151.101.65.140
unknown
United States
3.161.163.94
unknown
United States
64.233.185.84
unknown
United States
31.13.88.35
unknown
Ireland
104.18.3.216
bambulab.com
United States
142.251.15.102
unknown
United States
64.233.177.94
unknown
United States
172.253.124.97
unknown
United States
74.125.136.94
unknown
United States
1.1.1.1
unknown
Australia
74.125.136.95
unknown
United States
104.19.178.52
cdn.cookielaw.org
United States
34.117.10.171
unknown
United States
151.101.1.140
unknown
United States
3.162.112.43
unknown
United States
31.13.65.7
scontent.xx.fbcdn.net
Ireland
172.64.155.119
unknown
United States
142.250.105.147
www.google.com
United States
239.255.255.250
unknown
Reserved
173.194.219.139
unknown
United States
64.233.176.100
unknown
United States
162.55.131.183
unknown
United States
142.250.9.100
unknown
United States
18.164.124.45
d2angmu4y4m8uz.cloudfront.net
United States
151.101.129.140
dualstack.reddit.map.fastly.net
United States
108.177.122.102
unknown
United States
There are 26 hidden IPs, click here to show them.