Analysis

  • max time kernel
    118s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    05-06-2024 17:24

General

  • Target

    98c14f48c1ae5cbbf6ff5403336e07c3_JaffaCakes118.exe

  • Size

    9.8MB

  • MD5

    98c14f48c1ae5cbbf6ff5403336e07c3

  • SHA1

    d4b101f66a40114d3d1075d7c3a59cbbd47c707d

  • SHA256

    8dc94d486fd546ffbf8f21252aba65efe18432a6cae815e02b8be4ce4449291a

  • SHA512

    e9e88e5843fea3f0fcb2e446674b3414e2e2a6be478fb9325a2d623b50f9de009cbc0a768a2572b51de637bedf1f83f3dccf5996b1396f8a736215bfccbb310e

  • SSDEEP

    196608:AWJmVsyb49U8ILoP1HqsimvlG2etbYPvbJQlHJCsdg8C6fvwJP4U:dJmVsU4iEP1RimtokJQlp7tw+

Score
10/10

Malware Config

Extracted

Path

C:\Users\Admin\Desktop\README.txt

Family

demonware

Ransom Note
Tango Down! Seems like you got hit by DemonWare ransomware! Don't Panic, you get have your files back! DemonWare uses a basic encryption script to lock your files. This type of ransomware is known as CRYPTO. You'll need a decryption key in order to unlock your files. Your files will be deleted when the timer runs out, so you better hurry. You have 10 hours to find your key C'mon, be glad I don't ask for payment like other ransomware. Please visit: https:xyz.io and search for your IP/hostname to get your key. Kind regards, arman

Signatures

  • DemonWare

    Ransomware first seen in mid-2020.

  • Loads dropped DLL 18 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\98c14f48c1ae5cbbf6ff5403336e07c3_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\98c14f48c1ae5cbbf6ff5403336e07c3_JaffaCakes118.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Users\Admin\AppData\Local\Temp\98c14f48c1ae5cbbf6ff5403336e07c3_JaffaCakes118.exe
      "C:\Users\Admin\AppData\Local\Temp\98c14f48c1ae5cbbf6ff5403336e07c3_JaffaCakes118.exe"
      2⤵
      • Loads dropped DLL
      PID:2776

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\PIL\_imaging.cp38-win32.pyd

    Filesize

    2.1MB

    MD5

    114afee6280e95bc6c41a29a96a9af38

    SHA1

    d291c7ebb76379fa27d50247c99930d7008098e7

    SHA256

    4574a908b73eacd5e00a00e6ebe5c040372cddbd583fa5b2ff8f7cfa03970c3e

    SHA512

    976782f6419e542aa5b4cabe300029a47a5fb4d2699b2e94a1f12ab846c1c19e8df3414abc13d613eac697ad94f67b5338293204cc574c979de098c125880b84

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_bz2.pyd

    Filesize

    76KB

    MD5

    2002b2cc8f20ac05de6de7772e18f6a7

    SHA1

    b24339e18e8fa41f9f33005a328711f0a1f0f42d

    SHA256

    645665cf3338e7665e314f53fbbcb3c5d9174e90f3bf65ddbdc9c0cb24a5d40d

    SHA512

    253d0c005758fcb9e0980a01016a34073e7cdffb6253a2ba3d65a2bb82764638f4bd63d3f91a24effd5db60db59a8d28155e7d6892d5cc77c686f74bf0b05d0a

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_ctypes.pyd

    Filesize

    113KB

    MD5

    c827a20fc5f1f4e0ef9431f29ebf03b4

    SHA1

    ee36cb853d79b0ba6b4e99b1ef2fbae840c5489d

    SHA256

    d500cff28678eced1fc4b3aeabecc0f3b30de735fdefe90855536bc29fc2cb4d

    SHA512

    d40b816cde6bdf6e46c379674c76f0991268bd1617b96a4e4f944b80e12692ce410e67e006b50b6a8cfaef96aacc6cb806280bac3aa18ee8690669702d01065c

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_elementtree.pyd

    Filesize

    173KB

    MD5

    fa9381d1851da8b8f61547013d8cc81e

    SHA1

    95c6157c0589278dd0c2459b2282b3e446e11c53

    SHA256

    12147b8d57c9c4740d4ac23615f75fc62a2f41379b2ba0e159b9838819b1700a

    SHA512

    a2af89bb8e9cdc68c0a6426f0150b6172ddc1c499b4a718d0c6754e51d18aa63d4357da98628a5a05354b681207ff887ede16562eb5b80fac33bf4473b727486

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_hashlib.pyd

    Filesize

    37KB

    MD5

    f9799b167c3e4ffee4629b4a4e2606f2

    SHA1

    37619858375b684e63bffb1b82cd8218a7b8d93d

    SHA256

    02dd924d4ebfbb8b5b0b66b6e6bb2388fccdad64d0493854a5443018ad5d1543

    SHA512

    1f273bb5d5d61970143b94696b14887faa5ed1d50742eccec32dbd87446d696ff683053542c3be13d6c00597e3631eb1366abb6f145d8cc14d653d542893001b

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_lzma.pyd

    Filesize

    154KB

    MD5

    38c434afb2a885a95999903977dc3624

    SHA1

    57557e7d8de16d5a83598b00a854c1dde952ca19

    SHA256

    bfe6e288b2d93905f5cbb6d74e9c0fc37145b9225db6d1f00c0f69eb45afd051

    SHA512

    3e59b79c47cb022d7acec0af164c0225cd83588d5e7f8ca3e8a5dfae27510646391a1b08d86d5ee0b39d1b6bf08409d3758488df3c8cc4d458bed9faab7686e8

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_socket.pyd

    Filesize

    67KB

    MD5

    6b59705d8ac80437dd81260443912532

    SHA1

    d206d9974167eb60fb201f2b5bf9534167f9fb08

    SHA256

    62ed631a6ad09e96b4b6f4566c2afc710b3493795edee4cc14a9c9de88230648

    SHA512

    fa44386b9a305a1221ed79e1ca6d7edf7a8e288836b77cdca8793c82ebf74a0f28a3fc7ae49e14e87029642d81773d960c160c8b3bcb73e8a4ec9a2fd1cdc7fd

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\_tkinter.pyd

    Filesize

    59KB

    MD5

    b6d0111bf1ed6122d4d03a332b13c8d6

    SHA1

    5050ab91996c59ac7f09fcc2da476a3cc9e34cbd

    SHA256

    0d1b0f2180b095cf742f4629026c2bf14e5d788755ddf9e9ebdc5574082318d9

    SHA512

    d10940d4425e488d073eeed514a1da47a1065db4bef3803ebb5670f628dc690837d8adcf6512f3de23bedeb9f40c2e712e94f540188cdc12ca841d379a621db2

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\base_library.zip

    Filesize

    768KB

    MD5

    966f00854603090d3eb4ae7e145d3beb

    SHA1

    9bdc108109c89706ed513528f3517d08d1ce3c5d

    SHA256

    c03eaadbc5ca43448500f45b71ba95f590d05ba13212cdc9e30edb8f27e7a67f

    SHA512

    896b0e2ef7aaadfb762cb51cc7fd0177d3a57c9c54c039adbd409799f532c2fc6ca144c66e83106a3b1d14a41638ab4c61704581be7bda0e5b5bae0e30348f27

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\libcrypto-1_1.dll

    Filesize

    2.1MB

    MD5

    aad424a6a0ae6d6e7d4c50a1d96a17fc

    SHA1

    4336017ae32a48315afe1b10ff14d6159c7923bc

    SHA256

    3a2dba6098e77e36a9d20c647349a478cb0149020f909665d209f548dfa71377

    SHA512

    aa4b74b7971cb774e4ae847a226cae9d125fadc7cde4f997b7564dff4d71b590dcbc06a7103451b72b2afe3517ab46d3be099c3620c3d591ccbd1839f0e8f94a

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\libffi-7.dll

    Filesize

    28KB

    MD5

    bc20614744ebf4c2b8acd28d1fe54174

    SHA1

    665c0acc404e13a69800fae94efd69a41bdda901

    SHA256

    0c7ec6de19c246a23756b8550e6178ac2394b1093e96d0f43789124149486f57

    SHA512

    0c473e7070c72d85ae098d208b8d128b50574abebba874dda2a7408aea2aabc6c4b9018801416670af91548c471b7dd5a709a7b17e3358b053c37433665d3f6b

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\pyexpat.pyd

    Filesize

    163KB

    MD5

    d2a2d11003ec60899823733bc3a4a0b1

    SHA1

    d1c22c7821c881d1c4ae91a863eaf3ae5409a85d

    SHA256

    91e096b1ece79cb4fcd76f0f430a810712235ca9603443b378ca6be03218500d

    SHA512

    1a3f09bfe899ddcf89724fdb637467466536971e60f3ee77044a9566ced5b0f5f21e3cfe2a46a9785290cc5c2498969ac222ad8ad98cf474979098548ea572b0

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\python38.dll

    Filesize

    3.9MB

    MD5

    c512c6ea9f12847d991ceed6d94bc871

    SHA1

    52e1ef51674f382263b4d822b8ffa5737755f7e7

    SHA256

    79545f4f3a658865f510ab7df96516f660e6e18fe12cadaaec3002b51fc29ef6

    SHA512

    e023a353d6f0267f367276344df5f2fdbc208f916ca87fa5b4310ea7edcac0a24837c23ab671fb4b15b109915dfd0e57fbe07593a764b3219312ed5737052822

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\select.pyd

    Filesize

    23KB

    MD5

    441299529d0542d828bafe9ac69c4197

    SHA1

    da31b9afb68ba6e2d40bbc8e1e25980c2afeb1b3

    SHA256

    973f851dfaf98617b3eb6fa38befeb7ede49bd993408917e207dc7ea399de326

    SHA512

    9f0fb359a4291d47b8dc0ec789c319637dde0f09e59408c4d7fd9265e51c978aa3ba7ea51ca9524833814bca9e7978d9817658655ee339191634d4ae5f426ddc

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl86t.dll

    Filesize

    1.3MB

    MD5

    30195aa599dd12ac2567de0815ade5e6

    SHA1

    aa2597d43c64554156ae7cdb362c284ec19668a7

    SHA256

    e79443e9413ba9a4442ca7db8ee91a920e61ac2fb55be10a6ab9a9c81f646dbb

    SHA512

    2373b31d15b39ba950c5dea4505c3eaa2952363d3a9bd7ae84e5ea38245320be8f862dba9e9ad32f6b5a1436b353b3fb07e684b7695724a01b30f5ac7ba56e99

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\auto.tcl

    Filesize

    20KB

    MD5

    5e9b3e874f8fbeaadef3a004a1b291b5

    SHA1

    b356286005efb4a3a46a1fdd53e4fcdc406569d0

    SHA256

    f385515658832feb75ee4dce5bd53f7f67f2629077b7d049b86a730a49bd0840

    SHA512

    482c555a0da2e635fa6838a40377eef547746b2907f53d77e9ffce8063c1a24322d8faa3421fc8d12fdcaff831b517a65dafb1cea6f5ea010bdc18a441b38790

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\encoding\cp1252.enc

    Filesize

    1KB

    MD5

    5900f51fd8b5ff75e65594eb7dd50533

    SHA1

    2e21300e0bc8a847d0423671b08d3c65761ee172

    SHA256

    14df3ae30e81e7620be6bbb7a9e42083af1ae04d94cf1203565f8a3c0542ace0

    SHA512

    ea0455ff4cd5c0d4afb5e79b671565c2aede2857d534e1371f0c10c299c74cb4ad113d56025f58b8ae9e88e2862f0864a4836fed236f5730360b2223fde479dc

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\http1.0\pkgIndex.tcl

    Filesize

    735B

    MD5

    10ec7cd64ca949099c818646b6fae31c

    SHA1

    6001a58a0701dff225e2510a4aaee6489a537657

    SHA256

    420c4b3088c9dacd21bc348011cac61d7cb283b9bee78ae72eed764ab094651c

    SHA512

    34a0acb689e430ed2903d8a903d531a3d734cb37733ef13c5d243cb9f59c020a3856aad98726e10ad7f4d67619a3af1018f6c3e53a6e073e39bd31d088efd4af

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\init.tcl

    Filesize

    23KB

    MD5

    b900811a252be90c693e5e7ae365869d

    SHA1

    345752c46f7e8e67dadef7f6fd514bed4b708fc5

    SHA256

    bc492b19308bc011cfcd321f1e6e65e6239d4eeb620cc02f7e9bf89002511d4a

    SHA512

    36b8cdba61b9222f65b055c0c513801f3278a3851912215658bcf0ce10f80197c1f12a5ca3054d8604da005ce08da8dcd303b8544706b642140a49c4377dd6ce

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\opt0.4\pkgIndex.tcl

    Filesize

    607B

    MD5

    92ff1e42cfc5fecce95068fc38d995b3

    SHA1

    b2e71842f14d5422a9093115d52f19bcca1bf881

    SHA256

    eb9925a8f0fcc7c2a1113968ab0537180e10c9187b139c8371adf821c7b56718

    SHA512

    608d436395d055c5449a53208f3869b8793df267b8476ad31bcdd9659a222797814832720c495d938e34bf7d253ffc3f01a73cc0399c0dfb9c85d2789c7f11c0

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\package.tcl

    Filesize

    22KB

    MD5

    55e2db5dcf8d49f8cd5b7d64fea640c7

    SHA1

    8fdc28822b0cc08fa3569a14a8c96edca03bfbbd

    SHA256

    47b6af117199b1511f6103ec966a58e2fd41f0aba775c44692b2069f6ed10bad

    SHA512

    824c210106de7eae57a480e3f6e3a5c8fb8ac4bbf0a0a386d576d3eb2a3ac849bdfe638428184056da9e81767e2b63eff8e18068a1cf5149c9f8a018f817d3e5

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\tclIndex

    Filesize

    5KB

    MD5

    e127196e9174b429cc09c040158f6aab

    SHA1

    ff850f5d1bd8efc1a8cb765fe8221330f0c6c699

    SHA256

    abf7d9d1e86de931096c21820bfa4fd70db1f55005d2db4aa674d86200867806

    SHA512

    c4b98ebc65e25df41e6b9a93e16e608cf309fa0ae712578ee4974d84f7f33bcf2a6ed7626e88a343350e13da0c5c1a88e24a87fcbd44f7da5983bb3ef036a162

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tcl\tm.tcl

    Filesize

    11KB

    MD5

    f9ed2096eea0f998c6701db8309f95a6

    SHA1

    bcdb4f7e3db3e2d78d25ed4e9231297465b45db8

    SHA256

    6437bd7040206d3f2db734fa482b6e79c68bcc950fba80c544c7f390ba158f9b

    SHA512

    e4fb8f28dc72ea913f79cedf5776788a0310608236d6607adc441e7f3036d589fd2b31c446c187ef5827fd37dcaa26d9e94d802513e3bf3300e94dd939695b30

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk86t.dll

    Filesize

    1.1MB

    MD5

    6cadec733f5be72697d7112860a0905b

    SHA1

    6a6beeef3b1bb7c85c63f4a3410e673fce73f50d

    SHA256

    19f70dc79994e46d3e1ef6be352f5933866de5736d761faa8839204136916b3f

    SHA512

    e6b3e52968c79d4bd700652c1f2ebd0366b492fcda4e05fc8b198791d1169b20f89b85ec69cefa7e099d06a78bf77ff9c3274905667f0c94071f47bafad46d79

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\button.tcl

    Filesize

    20KB

    MD5

    309ab5b70f664648774453bccbe5d3ce

    SHA1

    51bf685dedd21de3786fe97bc674ab85f34bd061

    SHA256

    0d95949cfacf0df135a851f7330acc9480b965dac7361151ac67a6c667c6276d

    SHA512

    d5139752bd7175747a5c912761916efb63b3c193dd133ad25d020a28883a1dea6b04310b751f5fcbe579f392a8f5f18ae556116283b3e137b4ea11a2c536ec6b

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\entry.tcl

    Filesize

    16KB

    MD5

    be28d16510ee78ecc048b2446ee9a11a

    SHA1

    4829d6e8ab8a283209fb4738134b03b7bd768bad

    SHA256

    8f57a23c5190b50fad00bdee9430a615ebebfc47843e702374ae21beb2ad8b06

    SHA512

    f56af7020531249bc26d88b977baffc612b6566146730a681a798ff40be9ebc04d7f80729bafe0b9d4fac5b0582b76f9530f3fe376d42a738c9bc4b3b442df1f

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\icons.tcl

    Filesize

    10KB

    MD5

    2652aad862e8fe06a4eedfb521e42b75

    SHA1

    ed22459ad3d192ab05a01a25af07247b89dc6440

    SHA256

    a78388d68600331d06bb14a4289bc1a46295f48cec31ceff5ae783846ea4d161

    SHA512

    6ecfbb8d136444a5c0dbbce2d8a4206f1558bdd95f111d3587b095904769ac10782a9ea125d85033ad6532edf3190e86e255ac0c0c81dc314e02d95cca86b596

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\listbox.tcl

    Filesize

    14KB

    MD5

    c33963d3a512f2e728f722e584c21552

    SHA1

    75499cfa62f2da316915fada2580122dc3318bad

    SHA256

    39721233855e97bfa508959b6dd91e1924456e381d36fdfc845e589d82b1b0cc

    SHA512

    ea01d8cb36d446ace31c5d7e50dfae575576fd69fd5d413941eebba7ccc1075f6774af3c69469cd7baf6e1068aa5e5b4c560f550edd2a8679124e48c55c8e8d7

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\menu.tcl

    Filesize

    37KB

    MD5

    181ed74919f081eeb34269500e228470

    SHA1

    953eb429f6d98562468327858ed0967bdc21b5ad

    SHA256

    564ac0040176cc5744e3860abc36b5ffbc648da20b26a710dc3414eae487299b

    SHA512

    220e496b464575115baf1dede838e70d5ddd6d199b5b8acc1763e66d66801021b2d7cd0e1e1846868782116ad8a1f127682073d6eacd7e73f91bced89f620109

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\panedwindow.tcl

    Filesize

    5KB

    MD5

    2da0a23cc9d6fd970fe00915ea39d8a2

    SHA1

    dfe3dc663c19e9a50526a513043d2393869d8f90

    SHA256

    4adf738b17691489c71c4b9d9a64b12961ada8667b81856f7adbc61dffeadf29

    SHA512

    b458f3d391df9522d4e7eae8640af308b4209ce0d64fd490bfc0177fde970192295c1ea7229ce36d14fc3e582c7649460b8b7b0214e0ff5629b2b430a99307d4

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\pkgIndex.tcl

    Filesize

    363B

    MD5

    a6448af2c8fafc9a4f42eaca6bf6ab2e

    SHA1

    0b295b46b6df906e89f40a907022068bc6219302

    SHA256

    cd44ee7f76c37c0c522bd0cfca41c38cdeddc74392b2191a3af1a63d9d18888e

    SHA512

    5b1a8ca5b09b7281de55460d21d5195c4ee086bebdc35fa561001181490669ffc67d261f99eaa900467fe97e980eb733c5ffbf9d8c541ede18992bf4a435c749

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\scale.tcl

    Filesize

    7KB

    MD5

    1ce32cdaeb04c75bfceea5fb94b8a9f0

    SHA1

    cc7614c9eade999963ee78b422157b7b0739894c

    SHA256

    58c662dd3d2c653786b05aa2c88831f4e971b9105e4869d866fb6186e83ed365

    SHA512

    1ee5a187615ae32f17936931b30fea9551f9e3022c1f45a2bca81624404f4e68022fcf0b03fbd61820ec6958983a8f2fbfc3ad2ec158433f8e8de9b8fcf48476

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\scrlbar.tcl

    Filesize

    12KB

    MD5

    4cbffc4e6b3f56a5890e3f7c31c6c378

    SHA1

    75db5205b311f55d1ca1d863b8688a628bf6012a

    SHA256

    6ba3e2d62bd4856d7d7ae87709fcaa23d81efc38c375c6c5d91639555a84c35d

    SHA512

    65df7ae09e06c200a8456748dc89095bb8417253e01ec4fdafb28a84483147ddc77aaf6b49be9e18a326a94972086a99044bee3ce5cf8026337dfc6972c92c04

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\spinbox.tcl

    Filesize

    15KB

    MD5

    9971530f110ac2fb7d7ec91789ea2364

    SHA1

    ab553213c092ef077524ed56fc37da29404c79a7

    SHA256

    5d6e939b44f630a29c4fcb1e2503690c453118607ff301bef3c07fa980d5075a

    SHA512

    81b4cec39b03fbeca59781aa54960f0a10a09733634f401d5553e1aaa3ebf12a110c9d555946fcdd70a9cc897514663840745241ad741dc440bb081a12dcf411

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\text.tcl

    Filesize

    32KB

    MD5

    03cc27e28e0cfce1b003c3e936797ab0

    SHA1

    c7fe5ae7f35c86ec3724f6a111eaaf2c1a18abe9

    SHA256

    bccc1039f0eb331c4bb6bd5848051bb745f242016952723478c93b009f63d254

    SHA512

    5091b10ee8446e6853ef7060ec13ab8cada0d6448f9081febd07546c061f69fc273bbf23ba7af05d8359e618dd68a5c27f0453480fe3f26e744db19bfcd115c7

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\tk.tcl

    Filesize

    22KB

    MD5

    3250ec5b2efe5bbe4d3ec271f94e5359

    SHA1

    6a0fe910041c8df4f3cdc19871813792e8cc4e4c

    SHA256

    e1067a0668debb2d8e8ec3b7bc1aec3723627649832b20333f9369f28e4dfdbf

    SHA512

    f8e403f3d59d44333bce2aa7917e6d8115bec0fe5ae9a1306f215018b05056467643b7aa228154ddced176072bc903dfb556cb2638f5c55c1285c376079e8fe3

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\button.tcl

    Filesize

    2KB

    MD5

    ea7cf40852afd55ffda9db29a0e11322

    SHA1

    b7b42fac93e250b54eb76d95048ac3132b10e6d8

    SHA256

    391b6e333d16497c4b538a7bdb5b16ef11359b6e3b508d470c6e3703488e3b4d

    SHA512

    123d78d6ac34af4833d05814220757dccf2a9af4761fe67a8fe5f67a0d258b3c8d86ed346176ffb936ab3717cfd75b4fab7373f7853d44fa356be6e3a75e51b9

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\cursors.tcl

    Filesize

    3KB

    MD5

    74596004dfdbf2ecf6af9c851156415d

    SHA1

    933318c992b705bf9f8511621b4458ecb8772788

    SHA256

    7bdffa1c2692c5d1cf67b518f9acb32fa4b4d9936ed076f4db835943bc1a00d6

    SHA512

    0d600b21db67bf9dadbdd49559573078efb41e473e94124ac4d2551bc10ec764846dc1f7674daa79f8d2a8aeb4ca27a5e11c2f30ede47e3ecee77d60d7842262

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\fonts.tcl

    Filesize

    5KB

    MD5

    7017b5c1d53f341f703322a40c76c925

    SHA1

    57540c56c92cc86f94b47830a00c29f826def28e

    SHA256

    0eb518251fbe9cf0c9451cc1fef6bb6aee16d62da00b0050c83566da053f68d0

    SHA512

    fd18976a8fbb7e59b12944c2628dbd66d463b2f7342661c8f67160df37a393fa3c0ce7fdda31073674b7a46e0a0a7d0a7b29ebe0d9488afd9ef8b3a39410b5a8

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\menubutton.tcl

    Filesize

    4KB

    MD5

    db24841643cebd38d5ffd1d42b42e7f4

    SHA1

    e394af7faf83fad863c7b13d855fcf3705c4f1c7

    SHA256

    81b0b7818843e293c55ff541bd95168db51fe760941d32c7cde9a521bb42e956

    SHA512

    380272d003d5f90c13571952d0c73f5fce2a22330f98f29707f3d5bfc29c99d9bf11a947cf2ca64cf7b8df5e4afe56ffa00f9455bb30d15611fc5c86130346be

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\notebook.tcl

    Filesize

    5KB

    MD5

    82c9dfc512e143dda78f91436937d4dd

    SHA1

    26abc23c1e0c201a217e3cea7a164171418973b0

    SHA256

    d1e5267cde3d7be408b4c94220f7e1833c9d452bb9ba3e194e12a5eb2f9adb80

    SHA512

    a9d3c04ad67e0dc3f1c12f9e21ef28a61fa84dbf710313d4ca656bdf35dfbbfba9c268c018004c1f5614db3a1128025d795bc14b4fffaa5603a5313199798d04

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\panedwindow.tcl

    Filesize

    1KB

    MD5

    a12915fa5caf93e23518e9011200f5a4

    SHA1

    a61f665a408c10419fb81001578d99b43d048720

    SHA256

    ce0053d637b580170938cf552b29ae890559b98eb28038c2f0a23a265ddeb273

    SHA512

    669e1d66f1223cca6ceb120914d5d876bd3cf401ee4a46f35825361076f19c7341695596a7dbb00d6cff4624666fb4e7a2d8e7108c3c56a12bda7b04e99e6f9a

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\progress.tcl

    Filesize

    1KB

    MD5

    b0074341a4bda36bcdff3ebcae39eb73

    SHA1

    d070a01cc5a787249bc6dad184b249c4dd37396a

    SHA256

    a9c34f595e547ce94ee65e27c415195d2b210653a9ffcfb39559c5e0fa9c06f8

    SHA512

    af23563602886a648a42b03cc5485d84fcc094ab90b08df5261434631b6c31ce38d83a3a60cc7820890c797f6c778d5b5eff47671ce3ee4710ab14c6110dcc35

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\scale.tcl

    Filesize

    2KB

    MD5

    b41a9df31924dea36d69cb62891e8472

    SHA1

    4c2877fbb210fdbbde52ea8b5617f68ad2df7b93

    SHA256

    25d0fe2b415292872ef7acdb2dfa12d04c080b7f9b1c61f28c81aa2236180479

    SHA512

    a50db6da3d40d07610629de45f06a438c6f2846324c3891c54c99074cfb7beed329f27918c8a85badb22c6b64740a2053b891f8e5d129d9b0a1ff103e7137d83

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\scrollbar.tcl

    Filesize

    3KB

    MD5

    93181dbe76ef9c39849a09242d6df8c0

    SHA1

    de3b47afc3e5371bf1cd0541790a9b78a97570ab

    SHA256

    5932043286a30a3cffb2b6ce68ccdb9172a718f32926e25d3a962ae63cad515c

    SHA512

    5c85284e063a5de17f6ce432b3ef899d046a78725bd1f930229576bed1116c03a3ee0611b988e9903f47da8f694483e5a76464450c48eb14622f6784004b8f7e

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\ttk.tcl

    Filesize

    4KB

    MD5

    e38b399865c45e49419c01ff2addce75

    SHA1

    f8a79cbc97a32622922d4a3a5694bccb3f19decb

    SHA256

    61baa0268770f127394a006340d99ce831a1c7ad773181c0c13122f7d2c5b7f6

    SHA512

    285f520b648f5ec70dd79190c3b456f4d6da2053210985f9e2c84139d8d51908296e4962b336894ee30536f09fae84b912bc2abf44a7011620f66cc5d9f71a8c

  • C:\Users\Admin\AppData\Local\Temp\_MEI22202\tk\ttk\utils.tcl

    Filesize

    8KB

    MD5

    65193fe52d77b8726b75fbf909ee860a

    SHA1

    991dedd4666462dd9776fdf6c21f24d6cf794c85

    SHA256

    c7cc9a15cfa999cf3763772729cc59f629e7e060af67b7d783c50530b9b756e1

    SHA512

    e43989f5f368d2e19c9a3521fb82c6c1dd9eeb91df936a980ffc7674c8b236cb84e113908b8c9899b85430e8fc30315bdec891071822d701c91c5978096341b7

  • C:\Users\Admin\Desktop\README.txt

    Filesize

    564B

    MD5

    d6f35044ec277e2c075d10be5766dbe8

    SHA1

    6971561f8a4c38ddd5617741abf800cf465fc4f3

    SHA256

    3ee7fb7eb7d5755788297f86b7737dec96a0f2bea65de3c4936877ef3aa15294

    SHA512

    a9cb09b4c24e9a219596565bb7cd52643056d3df2d56c8a367be909304a5b8ea8db0b57a7abcee022fc42e1576acf58a7537398df59b22ec18e9f930658d8485

  • \Users\Admin\AppData\Local\Temp\_MEI22202\VCRUNTIME140.dll

    Filesize

    81KB

    MD5

    2ebf45da71bd8ef910a7ece7e4647173

    SHA1

    4ecc9c2d4abe2180d345f72c65758ef4791d6f06

    SHA256

    cf39e1e81f57f42f4d60abc1d30ecf7d773e576157aa88bbc1d672bf5ad9bb8b

    SHA512

    a5d3626553731f7dc70f63d086bd9367ea2c06ad8671e2578e1340af4c44189ecb46a51c88d64a4b082ce68160390c3f8d580dde3984cd254a408f1ef5b28457