Analysis
- max time kernel
150s - max time network
132s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 12:08
Behavioral task
behavioral1
Sample
CSMFix.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
CSMFix.exe
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target CSMFix.exe
- Size 11.5MB
- Sample261027-pawkvatwg1
- SHA256 51376c9dc41eabe3d49722863621cfc6e64c43bb4e36750bea59fb2c46947964
- MD5 b72ec942b947d8cabac3429482ab4d4a
- SHA1 b597b9e5418208a8e430b74d33035a76e2c8868d
- SHA512 ffee28fedbae3983424a422fa43420c38339084deda15dc846663a2848e136379b4a06a2478bd85c91398301451320b07de5b8422ccf5588e88ddba2235cab92
- SSDEEP 196608:ge/bGV2u60W8/LogNTwhLypA1HeT39IigwRTet4Q4GSau50otk0ax86NsIyzyzWj:PbGV2+W80pLyC1+TtIiFRSUau50IaxRu
- TLSH T196C63384B3D508E8EDDB633999D1462657E238E683F0C1DB5BF809620E631C9FE79B50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 18 IoCs
pid Process 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe 4308 CSMFix.exe - Discovers running processes 1 TTPs 1 IoCs
Running process information can be used to identify security tools or plan follow-on actions.
pid Process 3144 tasklist.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3144 tasklist.exe - Suspicious use of WriteProcessMemory 2 IoCs
description pid Process procid_target PID 3156 wrote to memory of 4308 3156 CSMFix.exe 91 PID 4308 wrote to memory of 3144 4308 CSMFix.exe 92
Processes
-
C:\Users\Admin\AppData\Local\Temp\CSMFix.exe"C:\Users\Admin\AppData\Local\Temp\CSMFix.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:3156 -
C:\Users\Admin\AppData\Local\Temp\CSMFix.exe"C:\Users\Admin\AppData\Local\Temp\CSMFix.exe"2⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4308 -
C:\Windows\SYSTEM32\tasklist.exetasklist /FI "IMAGENAME eq ServerSide.exe" /FO CSV /NH3⤵
- Discovers running processes
- Suspicious use of AdjustPrivilegeToken
PID:3144
-
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\VCRUNTIME140.dll
- Size 116KB
- SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
- MD5 be8dbe2dc77ebe7f88f910c61aec691a
- SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
- SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
- SSDEEP 1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
- TLSH T1C4C37C4673A402B7D52EC274C1E25A06EB71B5448770ABCF03B589AA0F53BE1AF3D359
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_bz2.pyd
- Size 83KB
- SHA256 324268786921ec940cbd4b5e2f71dafd08e578a12e373a715658527e5b211697
- MD5 dd26ed92888de9c57660a7ad631bb916
- SHA1 77d479d44d9e04f0a1355569332233459b69a154
- SHA512 d693367565005c1b87823e781dc5925146512182c8d8a3a2201e712c88df1c0e66e65ecaec9af22037f0a8f8b3fb3f511ea47cfd5774651d71673fab612d2897
- SSDEEP 1536:+yhz79151BVo1vXfzIFnaR4bO1AsCn8Bsjk+tI1CVQ7Sy4x+R:Nhzx15evXkuxAB8BMk+tI1CVQF
- TLSH T141839E92E3956AF5F41F81BA96C10367E771B954075083EFF344C25A2F03B426EAC36A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_ctypes.pyd
- Size 122KB
- SHA256 8978972cf341ccd0edf8435d63909a739df7ef29ec7dd57ed5cab64b342891f0
- MD5 c8afa1ebb28828e1115c110313d2a810
- SHA1 1d0d28799a5dbe313b6f4ddfdb7986d2902fa97a
- SHA512 4d9f41bd23b62600d1eb097d1578ba656b5e13fd2f31ef74202aa511111969bb8cfc2a8e903de73bd6e63fadaa59b078714885b8c5b8ecc5c4128ff9d06c1e56
- SSDEEP 3072:cXw32spTVYgFoj6N2xE9sb7VRf/EiZBq5syCtYPU9BI1LP885:cgGEOgFoj68ksrf/Ejsa5
- TLSH T149C36C0B339400A9EBA34179C8B36E07D7F1B41B175193CF1294C69A2F637A76E6E316
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_hashlib.pyd
- Size 64KB
- SHA256 f95ec2562a3c70fb1a6e44d72f4223ce3c7a0f0038159d09dce629f59591d5aa
- MD5 d19cb5ca144ae1fd29b6395b0225cf40
- SHA1 5b9ec6e656261ce179dfcfd5c6a3cfe07c2dfeb4
- SHA512 9ac3a8a4dbdb09be3760e7ccb11269f82a47b24c03d10d289bcdded9a43e57d3cd656f8d060d66b810382ecac3a62f101f83ea626b58cd0b5a3cca25b67b1519
- SSDEEP 1536:/9gLpgE4Z27ARZWZnEmoAlI1OIH7SyT0xq:26RZeEmoAlI1OIHth
- TLSH T198537D09A69544E8C96781B8C8A35F57FAF2F1511B10A7DF0368C18D2F237C3A6BB356
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_lzma.pyd
- Size 156KB
- SHA256 6d548db0ab73291f82cf0f4ca9ec0c81460185319c8965e829faeacae19444ff
- MD5 8cfbafe65d6e38dde8e2e8006b66bb3e
- SHA1 cb63addd102e47c777d55753c00c29c547e2243c
- SHA512 fa021615d5c080aadcd5b84fd221900054eb763a7af8638f70cf6cd49bd92773074f1ac6884f3ce1d8a15d59439f554381377faee4842ed5beb13ff3e1b510f4
- SSDEEP 3072:lsvkxujgo7e2uONOG+hi+C8znfF9mNooXnmbutI1Z1mb:lnu0o7JUrNYOo2Kz
- TLSH T111F32992A394F0D5F6728C78D6624F17E7F678490320929A02CCD37D2B1FB759A2A317
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_queue.pyd
- Size 31KB
- SHA256 76bba42b1392dc57a867aef385b990fa302a4f1dcf453705ac119c9c98a36e8d
- MD5 7d91dd8e5f1dbc3058ea399f5f31c1e6
- SHA1 b983653b9f2df66e721ece95f086c2f933d303fc
- SHA512 b8e7369da79255a4bb2ed91ba0c313b4578ee45c94e6bc74582fc14f8b2984ed8fcda0434a5bd3b72ea704e6e8fd8cbf1901f325e774475e4f28961483d6c7cf
- SSDEEP 768:1lzRmezd6rGjMoW4BI1QUGL5YiSyv8+WAMxkEW7:LRm0MGooW4BI1QUG17SyIxC7
- TLSH T192E2AED3BA541C56C963C871D8E25F25E932B786470183DF2229C24D2F327837BB9765
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_socket.pyd
- Size 81KB
- SHA256 2c2a6a6ba360e38f0c2b5a53b4626f833a3111844d95615ebf35be0e76b1ef7a
- MD5 e43aed7d6a8bcd9ddfc59c2d1a2c4b02
- SHA1 36f367f68fb9868412246725b604b27b5019d747
- SHA512 d92e26eb88db891de389a464f850a8da0a39af8a4d86d9894768cb97182b8351817ce14fe1eb8301b18b80d1d5d8876a48ba66eb7b874c7c3d7b009fcdbc8c4e
- SSDEEP 1536:COYhekrkJqlerLSyypHi9/s+S+pzjii/n1IsJqKNBI1Lw9PD7Sy9duxJ:jwkJqHyypHi9/sT+pzjiE1IwdNBI1LwU
- TLSH T176835A11A69050F9DB63C0BAC2635E23FBB5B4C013D5939F1166C66A1F33783BE79A81
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_ssl.pyd
- Size 174KB
- SHA256 68dad60ff6fb36c88ef1c47d1855517bfe8de0f5ddea0f630b65b622a645d53a
- MD5 6a2b0f8f50b47d05f96deff7883c1270
- SHA1 2b1aeb6fe9a12e0d527b042512fc8890eedb10d8
- SHA512 a080190d4e7e1abb186776ae6e83dab4b21a77093a88fca59ce1f63c683f549a28d094818a0ee44186ddea2095111f1879008c0d631fc4a8d69dd596ef76ca37
- SSDEEP 3072:ZmkiCZfBmvD1ZLnM2Yfp6XSVJLX2GvMf1ba+VRJNI7IM/H9o/PCrXuI3JtI1C7lD:xiC5QD1dwp6XSxMfjTwJxd
- TLSH T1AD046C03B5902EBBD813E4B9C1231913DBF1F015331257DE49D6D64A0F17B4AAEAAB63
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\auto.tcl
- Size 21KB
- SHA256 517204ee436d08efc287abc97433c3bffcaf42ec6592a3009b9fd3b985ad772c
- MD5 08edf746b4a088cb4185c165177bd604
- SHA1 395cda114f23e513eef4618da39bb86d034124bf
- SHA512 c1727e265a6b0b54773c886a1bce73512e799ba81a4fceeeb84cdc33f5505a5e0984e96326a78c46bf142bc4652a80e213886f60eb54adf92e4dffe953c87f6b
- SSDEEP 384:UqT9XC9VZv9QXCTxsCTHI7672ORgS0mzBvxFRTX7Xvt3wBTnFXhCUvuyqz:LT9XC9VZviXCVsCLI7JlmzBvTxvt3gTW
- TLSH T199A2C7635F9542A630B1C22B553DB9A4EF2F81B70675801D38FC912C37F1815C6BEAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\encoding\cp1252.enc
- Size 1KB
- SHA256 741859cf238c3a63bbb20ec6ed51e46451372bb221cfff438297d261d0561c2e
- MD5 e9117326c06fee02c478027cb625c7d8
- SHA1 2ed4092d573289925a5b71625cf43cc82b901daf
- SHA512 d0a39bc41adc32f2f20b1a0ebad33bf48dfa6ed5cc1d8f92700cdd431db6c794c09d9f08bb5709b394acf54116c3a1e060e2abcc6b503e1501f8364d3eebcd52
- TLSH T13621362446A58CD8FA4F31D520ECFB70453B75F3D1DA629027B88308E789E8D0C897D9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\http1.0\pkgIndex.tcl
- Size 746B
- SHA256 77265723959c092897c2449c5b7768ca72d0efcd8c505bddbb7a84f6aa401339
- MD5 a387908e2fe9d84704c2e47a7f6e9bc5
- SHA1 f3c08b3540033a54a59cb3b207e351303c9e29c6
- SHA512 7ac804d23e72e40e7b5532332b4a8d8446c6447bb79b4fe32402b13836079d348998ea0659802ab0065896d4f3c06f5866c6b0d90bf448f53e803d8c243bbc63
- TLSH T1720110C7AEF563A02C318B82364BE791DF1DE218F37256FA7450541C80A3866AB4A934
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\init.tcl
- Size 25KB
- SHA256 7a103a85413988456c2ad615c879bbcb4d91435bcfbbe23393e0eb52b56af6e2
- MD5 fe92c81bb4acdda00761c695344d5f1e
- SHA1 a87e1516fbd1f9751ec590273925cbc5284b16bd
- SHA512 c983076e420614d12ab2a7342f6f74dd5dcdad21c7c547f660e73b74b3be487a560abd73213df3f58be3d9dbd061a12d2956ca85a58d7b9d9e40d9fa6e6c25eb
- SSDEEP 768:cXugPHudKlExBG+Xg3Qonlm6ofRRECLSQDjr5vkhzx/i:hgGdKli4eonlm6offLzehNi
- TLSH T1A3B2A7112384917932B343368AB9B598ED7EC1F715AD41BCB8CC825C777150A4AFDBD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\opt0.4\pkgIndex.tcl
- Size 620B
- SHA256 6a4abd2c519a745325c26fb23be7bbf95252d653a24806eb37fd4aa6a6479afe
- MD5 07532085501876dcc6882567e014944c
- SHA1 6bc7a122429373eb8f039b413ad81c408a96cb80
- SHA512 0d604e862f3a1a19833ead99aaf15a9f142178029ab64c71d193cee4901a0196c1eeddc2bce715b7fa958ac45c194e63c77a71e4be4f9aedfd5b44cf2a726e76
- TLSH T1A4F00CA6AFE183A468A18CC33584F751AF2EF078726010F63414E49CE2A00A65F8F8B0
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\package.tcl
- Size 23KB
- SHA256 f46ab61cdebe3aa45fa7e61a48930d64a0d0e7e94d04d6bf244f48c36cafe948
- MD5 ddb0ab9842b64114138a8c83c4322027
- SHA1 eccacdc2ccd86a452b21f3cf0933fd41125de790
- SHA512 c0cf718258b4d59675c088551060b34ce2bc8638958722583ac2313dc354223bfef793b02f1316e522a14c7ba9bed219531d505de94dc3c417fc99d216a01463
- SSDEEP 384:8xgjLNILEHsdAW2UfnImRqXqux6XmihmCchzPLrXJjJh6PLfzdklG:8xgjLNImsdnvIm86uGLhLchzDzJ9h6Dn
- TLSH T174B2C9217389925A34B153639B352C8CCF3EC0FB51A951BC78D882BC77709190ADEBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\tclIndex
- Size 5KB
- SHA256 ddf7e42def37888ad0a564aa4f8ca95f4eec942cebebfca851d35515104d5c89
- MD5 c62fb22f4c9a3eff286c18421397aaf4
- SHA1 4a49b8768cff68f2effaf21264343b7c632a51b2
- SHA512 558d401cb6af8ce3641af55caebc9c5005ab843ee84f60c6d55afbbc7f7129da9c58c2f55c887c3159107546fa6bc13ffc4cca63ea8841d7160b8aa99161a185
- SSDEEP 96:eOaVhNUMUuUQU2UsUIUbUEUEeUkgU6UWSO0DT5RTdcvsilrvs+jscMK57ehXowrz:ejVHRRLP3LWDXewTbSO0DT5RTdcvsilg
- TLSH T14FC1301AA756C72803F481074999FE283ADED1E4D33DC93E99A491CD10B30076FEE9E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tcl_data\tm.tcl
- Size 11KB
- SHA256 4b7ed9fd2363d6876092db3f720cbddf97e72b86b519403539ba96e1c815ed8f
- MD5 215262a286e7f0a14f22db1aa7875f05
- SHA1 66b942ba6d3120ef8d5840fcdeb06242a47491ff
- SHA512 6ecd745d7da9d826240c0ab59023c703c94b158ae48c1410faa961a8edb512976a4f15ae8def099b58719adf0d2a9c37e6f29f54d39c1ab7ee81fa333a60f39b
- SSDEEP 192:55CjnlRfMKqaOH5bE2KjNkkpgpCmqkkuowUh9PTYMsvSO+xy8h/vuKisM68E:5q3MKYH5bE1jNkkpgomq/uCPTYMC+k83
- TLSH T1EC42B512B38A536A62B313254EBAF294DB2DD1FE57E5506C744D81A837208284B7F7CB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\button.tcl
- Size 21KB
- SHA256 1f5dd8d81b26f16e772e92fd2a22accb785004d0ed3447e54f87005d9c6a07a5
- MD5 aeb53f7f1506cdfdfe557f54a76060ce
- SHA1 ebb3666ee444b91a0d335da19c8333f73b71933b
- SHA512 acdad4df988df6b2290fc9622e8eaccc31787fecdc98dcca38519cb762339d4d3fb344ae504b8c7918d6f414f4ad05d15e828df7f7f68f363bec54b11c9b7c43
- SSDEEP 384:Tv7cBCAsj9oqlFFSsB3VfRt+lMpWaNwJgzCHarc6gAsj9oqlFFSsB3VlRtYlMpBz:TvweHBBTfIZxHBnZWqbJPBFIaVlCj26+
- TLSH T19DA2CED1CA01437667738226957FA260EF5050FA86AB5418B45E80FC3FFF86A466E3C7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\entry.tcl
- Size 18KB
- SHA256 65ba33a1e0b21e8e074780a51189cee6fd9926c85273e9e7633987fc212a17b2
- MD5 007f42fbcdc57652ac8381f11af7fb67
- SHA1 1bb1b0fcad6f5633d1beb8903112f180b1c4ba7f
- SHA512 a27089719adafc48b5abb905e40d0c6a0a2507526223d72c1cff36ab7c15362c6f0b8ee5775181ba1730852802afa64631ee3720e624b630e3274bfb32f6a59a
- SSDEEP 384:mDfyPIlBk3yrt8qLjtpa+qh+rA4rsWRWrrMUtCPnkKYNlPp64ZnCD:mDfyPIlBk3yJ8mtpaplcp6o
- TLSH T12A8241D62D05577562B7C373E3BBF600EE36907726934026759693A02FB6022036EFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\icons.tcl
- Size 10KB
- SHA256 1264940e62b9a37967925418e9d0dc0befd369e8c181b9bab3d1607e3cc14b85
- MD5 995a0a8f7d0861c268aead5fc95a42ea
- SHA1 21e121cf85e1c4984454237a646e58ec3c725a72
- SHA512 db7f5e0bc7d5c5f750e396e645f50a3e0cde61c9e687add0a40d0c1aa304ddfbceeb9f33ad201560c6e2b051f2eded07b41c43d00f14ee435cdeee73b56b93c7
- SSDEEP 192:0nEPytJLl1S47T3YqN5/vkJpnhXqBB4aw2rqZiygTtYTpOq/pc75Mk:xqLz7F5KTqBBLuZ1gTSsqhk
- TLSH T182329E33554065820BF7CDED7B9BE289FD5004AB260D2885B48A832A7FB5550EF317A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\listbox.tcl
- Size 14KB
- SHA256 47c75f9f8348bf8f2c086c57b97b73741218100ca38d10b8abdf2051c95b9801
- MD5 804e6dce549b2e541986c0ce9e75e2d1
- SHA1 c44ee09421f127cf7f4070a9508f22709d06d043
- SHA512 029426c4f659848772e6bb1d8182eb03d2b43adf68fcfcc1ea1c2cc7c883685deda3fffda7e071912b9bda616ad7af2e1cb48ce359700c1a22e1e53e81cae34b
- SSDEEP 384:apDYV5Yupn5OcckwBv3HCpg2J8JvJBfWeZhXkz+WkHGowv:aPPkevB2JuvJ9D3XmSc
- TLSH T1246242C42C34637171FFD22746FABB81FF6990A70595504438ACD0A4BF758B246ADACB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\menu.tcl
- Size 38KB
- SHA256 312af944a276cdbf1ee00757ef141595670984f7f13e19922c25643a040f5339
- MD5 b7daa21c1c192b8cb5b86cbd7b2ce068
- SHA1 ae8abf9017f37ccdf5d0d15de66bb124a7482ba0
- SHA512 b619e3b8be5ec4545e97b7a7a7f7fecc2aafa58438f9ca3819f644720cf5ff5c44da12ac25988570e595d97cad799f87d93c24d5e67a7a953b9f5312952fbeb6
- SSDEEP 768:NKJsO8O4IzOQjJwxzire5pKVjriecYyq4CpKgnP:NKJsO8iOQizire54lriecYf40
- TLSH T1CC0386906E09E3375233D3A583B79054FF3A92F31346509C745D92AC37B58260AFEAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\panedwindow.tcl
- Size 5KB
- SHA256 aa4f87e41ac8297f51150f2a9f787607690d01793456b93f0939c54d394731f9
- MD5 286c01a1b12261bc47f5659fd1627abd
- SHA1 4ca36795cab6dfe0bbba30bb88a2ab71a0896642
- SHA512 d54d5a89b7408a9724a1ca1387f6473bdad33885194b2ec5a524c7853a297fd65ce2a57f571c51db718f6a00dce845de8cf5f51698f926e54ed72cdc81bcfe54
- SSDEEP 96:ssAXzkTQ9w5fLQYkJLZkRXKUXfwyZTq2sz8j2Em3YKhrYK:jAXgE0DQpJLGR6UXfpqnzG3m3YKhrYK
- TLSH T139B137F6D34895AA7071530552BFF39AC672B07B515F81283806C0A03FB698BE7B57E2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\pkgIndex.tcl
- Size 376B
- SHA256 a5d208887a94832328c3a33928a80f3b46aa205c20db4f050a47d940e94071b4
- MD5 8a0517a7a4c70111080ed934329e2bc5
- SHA1 5b465e0d3500a8f04ee1c705662032f44e2ed0d2
- SHA512 d9f502a006a5e0514fd61426818ad1f4168e449588f9d383d6b0bf87a18be82c420863a9a28e1beb441284a0b1bc2a0b3d3276a0fe3196341aec15a27920de5d
- TLSH T129E068880722AB1A46A26543A890EE5C3FEEA0BFD90CC19D301521DCEF12080A6DD8F5
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\scale.tcl
- Size 8KB
- SHA256 0747a387fdd1b2c7135eceae7b392ed52e1d1ebf3ffa90febe886dbc0981eb74
- MD5 d45202d3d2d052d4c6bfe8d1322aab39
- SHA1 8cdf184ac2e9299b2b2a107a64e9d1803aa298de
- SHA512 27b005f955bae00d15c4492e7bd3ebdc5ee3bf9c164c418198b4bd185709c8810aa6cf76cbcc07eeb4c1d20f8c76ef8df8b219563c18b88c94954c910bff575d
- SSDEEP 96:GSusE8YOdpO4aDtao+QYa6t2jooB6ajpaqa5xQGmLGKOC9dLrVx:KsbYQO48t+QYa+NkFjpagGmKKX9dLrVx
- TLSH T1000250D06E82A32D5133C27A51AAD580FD55B0F31A875808785A84E93FFE87542FEFC2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\scrlbar.tcl
- Size 12KB
- SHA256 eec90404f702d3cfbfaec0f13bf5ed1ebeb736bee12d7e69770181a25401c61f
- MD5 5249cd1e97e48e3d6dec15e70b9d7792
- SHA1 612e021ba25b5e512a0dfd48b6e77fc72894a6b9
- SHA512 e4e0ab15eb9b3118c30cd2ff8e5af87c549eaa9b640ffd809a928d96b4addefb9d25efdd1090fbd0019129cdf355bb2f277bc7194001ba1d2ed4a581110ceafc
- SSDEEP 192:Gf7RV8ei32PHKT8H2wwucyRlXn+kl1nBKp4nu5FCyK:2mei3qHKT8WPurnXn+I1nBg4nu5MyK
- TLSH T1004284E20D4241FA51FFE2B4FBA7C258E565A0F78B4AE0803415BDE81F2657503BDAC9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\spinbox.tcl
- Size 16KB
- SHA256 747889c3086c917a34554a9dc495bc0c08a03fd3a5828353ed2a64b97f376835
- MD5 eaa36f0aa69ae19ddbdd0448fbad9d4d
- SHA1 eb0adb4f4d937bac2f17480adaf6f948262e754d
- SHA512 c8368f19ec6842ed67073b9fc9c9274107e643324cb23b28c54df63fb720f63b043281b30dbea053d08481b0442a87465f715a8aa0711b01ce83ff7b9f8a4f4c
- SSDEEP 384:IMpfyeKu9TzD0E8+9T1wqBaQKpiqQr7E32fnzXfWJU:IMpfyeKu9Tx8WODTp2zPP
- TLSH T1EA7233DA2D14632D6173C33792BBE305FA2690B7569F40203469C1943F7AA210ABFBC7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\text.tcl
- Size 34KB
- SHA256 ab88556e349f03baca2d8dc2121071a4f299db86f484cab2d9249ff4c7007564
- MD5 9ca5094ed6fe46620abf090bf8e2ae63
- SHA1 60dc3c2e3f69ce5b6db4f2b3a1f3c109d766bc63
- SHA512 0b0c20a754be744a7fa214ba06ab0744a9bc466d51f96310d97ea1e61119a8acfef24e6dc5c4ebdd2c126bf84ace74ffe622e9641c87e5a240dd13d1f7b5e6af
- SSDEEP 768:Rp4LaQDlOrqquMwIMyv4Et8avJLgmTGXs1bYMeNnnZl8n6KRD:RYK8aymTGs1b0xncn6KR
- TLSH T18EF2769918095B7AE533C372A37AF101FE72517B06C28119749CD0903FBE46A877EBE5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\tk.tcl
- Size 23KB
- SHA256 1d5e7518afc1382e36bf13fc5196c8a7cd93a4e9d24acf445522564245a489b0
- MD5 184d05201893b2042d3fa6140fcf277c
- SHA1 aad67797864456749adf0c4a1c0be52f563c8fb8
- SHA512 291bdf793cabc5ec27e8265a8a313fe0f4acab4db6ce507a46488a83eef72cd43cf5815762b22d1c8d64a9eedea927e109f937e6573058e5493b1354dd449cb3
- SSDEEP 384:NJyxt+WaB9USY15gSgC3DbTbXLXKr3cIXyDAbK2LMGgtewT+3oFQRyH5bAy59HmD:NJItNe9USZblXysm7GgteoFQRYMESL
- TLSH T186B2D6195DC062B3513BC13F53BB2A00D87558FB2B76A44978DC48B92F6883B06FE9E5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\ttk\button.tcl
- Size 2KB
- SHA256 e38a9d1f437981aa6bf0bdd074d57b769a4140c0f7d9aff51743fe4ecc6dfddf
- MD5 d4bf1af5dcdd85e3bd11dbf52eb2c146
- SHA1 b1691578041319e671d31473a1dd404855d2038b
- SHA512 25834b4b231f4ff1a88eef67e1a102d1d0546ec3b0d46856258a6be6bbc4b381389c28e2eb60a01ff895df24d6450cd16ca449c71f82ba53ba438a4867a47dcd
- TLSH T132512FE2414533796FA26A26C50FC0B0FF06C4FA92A6B4D1350D8ADC07E7A6945BE7C7
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\ttk\cursors.tcl
- Size 4KB
- SHA256 5b33f32b0139663347d6cf70a5a838f8e4554e0e881e97c8478b77733162ea73
- MD5 1a799fe3754307a5aade98c367e2f5d7
- SHA1 c64be4b77f0d298610f4ee20fcebbaee3c8b5f22
- SHA512 89f367f9a59730bcdfc5abde0e35a10b72a1f19c68a768ba4524c938ef5c5caf094c1bfa8fc74173f65201f6617544223c2143252a9f691ee9aaa7543315179f
- SSDEEP 96:DRYEqfLDxGmxGUetobPT6t6brv0q3O4Uxz0:DWEqTDbxdKobPqe5PUxw
- TLSH T139A1651F358B10A77F71016699F6D44BEA06F377CA2AC108F58F495C7FB8281049197A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\ttk\fonts.tcl
- Size 5KB
- SHA256 b94c319e5a557a5665b1676d602b6495c0887c5bacf7fa5b776200112978bb7b
- MD5 80331fcbe4c049ff1a0d0b879cb208de
- SHA1 4eb3efdfe3731bd1ae9fd52ce32b1359241f13cf
- SHA512 a4bd2d91801c121a880225f1f3d0c4e30bf127190cf375f6f7a49eb4239a35c49c44f453d6d3610df0d6a7b3cb15f4e79bd9c129025cc496ceb856fcc4b6de87
- SSDEEP 96:NzEh94ntnVU8Z/1LkAKgW22SeLMQR8hzcksejmOF4ytZm:Sh9ahV3ZWAKgWDfktm
- TLSH T1C2C12347214EF0233AA11903F3A599126D3576682DB7F51838BF9E1C3FD3A174462BA7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\ttk\menubutton.tcl
- Size 6KB
- SHA256 54663fbf524cad9d74ab1ec44b7fdde0b87f06e5347191962c97f51f714e29bb
- MD5 f11a76fbabf35e446a1200a5a7a6730a
- SHA1 4cbab3507c1ef275691c98620d2b5ceeb9043b3e
- SHA512 95471d1519ae663ec7eb4639d847019e0c9f70dea2b0680d81fb8bbe7cd1ff643a3df5e06ca2cc54385be094bdcc64ab0f1aa1652f91d16c4ef7b68cb670371e
- SSDEEP 192:toMcJQkmcE6fNuLyiCzSLSRwgppdT3kXdpK3dpKkSH2tOTjvAG:tRc6kFbcH2pyXz+zO2y
- TLSH T1BFD1469127047327A532A37683FFA058ED2FD175774AE49C3446829877E142A0AFCAE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\ttk\ttk.tcl
- Size 4KB
- SHA256 2c48343b1a47f472d1a6b9ee8d670ce7fb428db0db7244dc323ff4c7a8b4f64b
- MD5 af45b2c8b43596d1bdeca5233126bd14
- SHA1 a99e75d299c4579e10fcdd59389b98c662281a26
- SHA512 c8a8d01c61774321778ab149f6ca8dda68db69133cb5ba7c91938e4fd564160ecdcec473222affb241304a9acc73a36b134b3a602fd3587c711f2adbb64afa80
- SSDEEP 96:lfxukTy5jPTq8LIgF2diyNTNR6nkrn4ijSSvNigyJ5612HtZG835MSvWOTRsHWU:BM+y5jrq8G/2nkEijSSvNigyJ5612Htw
- TLSH T1ADA154399B0EC0555EF142224B78C168E6DE7AB253510C08F8BC81BD27751774EE9BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tk_data\ttk\utils.tcl
- Size 8KB
- SHA256 4aa041c050758b3331dc395381f7fbce81e387908fc7a3c6107c4e7140f56f2e
- MD5 51086bc3315a4ae4a8591a654cfc3cea
- SHA1 2ac08309c63575b7a01fa62d3c262643cd8c823a
- SHA512 6d69f7eac9d5af3b3ea85ae3e74bdfa6278789502d5e35efe94349bfc543503be7540d783d2632e349dd53f21074c702ac1fc487ee70c74234a08397f7238723
- SSDEEP 192:e0ebpSp+IZwnmTmpx8xzaHfw8K7LlJWQl8p7M+R5:rw0+WmpWxa/w9nlJHu
- TLSH T17802A6622A05B2A71AF2D222E7E7E194FF17C4731B5390147D1D449C3FB0633C6A6DAA
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\_tkinter.pyd
- Size 64KB
- SHA256 f0ebdf2ca7b33c26b8938efa59678068d3840957ee79d2b3c576437f8f913f20
- MD5 e38a6b96f5cc200f21da22d49e321da3
- SHA1 4ea69d2b021277ab0b473cfd44e4bfd17e3bac3b
- SHA512 3df55cdd44ea4789fb2de9672f421b7ff9ad798917417dcb5b1d8575804306fb7636d436965598085d2e87256ecb476ed69df7af05986f05b9f4a18eed9629e2
- SSDEEP 1536:dGpS27sIvGJdk7YeY7S81CpnHcKWlI1OSs7Sy+xe:gpVp7xKSppnHcFlI1OSsz
- TLSH T1C1537D9BA7A0008ACEA7C179C4B36F23D675B5124B10934F0294D35A2F337A3A7FA755
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\base_library.zip
- Size 1.3MB
- SHA256 1d01c0a306739005ba6eaf96b8a684f300cdc90b9a4187a18893d94839abdc77
- MD5 8794b39dda0aa69891235cd88bb6a705
- SHA1 f4a523a5d3370b6e0a04feac539329acaa808172
- SHA512 b843835d3ee86c6e2ef01434c50d16857238db7f2114dd0d309a47eb9783c24825cb1724b7ab1d07b2e4546a8f000bcfd228371b865553adb15d2fd9242c6a35
- SSDEEP 12288:M1RvHtSDYTq+zYgEkA1qJujGlHKPWdmqHlJGUq9SYQqPQKtRwKLmgBg61d7xzBC:ML0DCKPWdmqHlJGUTUztRwKa+z7JBC
- TLSH T1C855D6817A92A5B3FC84F3BA04260A0EA3658571BF45C747389FC5E46F8F2E49E914DC
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\libcrypto-3.dll
- Size 5.0MB
- SHA256 05fe080eab7fc535c51e10c1bd76a2f3e6217f9c91a25034774588881c3f99de
- MD5 e547cf6d296a88f5b1c352c116df7c0c
- SHA1 cafa14e0367f7c13ad140fd556f10f320a039783
- SHA512 9f42edf04c7af350a00fa4fdf92b8e2e6f47ab9d2d41491985b20cd0adde4f694253399f6a88f4bdd765c4f49792f25fb01e84ec03fd5d0be8bb61773d77d74d
- SSDEEP 98304:n3+pefu6fSar+SJ8aqfPomg1CPwDvt3uFlDCE:3G+u6fb+SJ8aqfwmg1CPwDvt3uFlDCE
- TLSH T1E6366A6AA7A80188E5BAC13CCA534617D6B1F816577097CF19A1967C0F33FDA2B3DB40
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\libffi-8.dll
- Size 38KB
- SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
- MD5 0f8e4992ca92baaf54cc0b43aaccce21
- SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
- SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
- SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
- TLSH T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\libssl-3.dll
- Size 768KB
- SHA256 2e9fbcd8f7fdc13a5179533239811456554f2b3aa2fb10e1b17be0df81c79006
- MD5 19a2aba25456181d5fb572d88ac0e73e
- SHA1 656ca8cdfc9c3a6379536e2027e93408851483db
- SHA512 df17dc8a882363a6c5a1b78ba3cf448437d1118ccc4a6275cc7681551b13c1a4e0f94e30ffb94c3530b688b62bff1c03e57c2c185a7df2bf3e5737a06e114337
- SSDEEP 12288:ytPc2nnGoNg4kSHoxX09yO5EavUFe9Xb12:y9jnnpTHoxXUsFe9XbM
- TLSH T1CBF44B9DB3B8059CE9F6D13D86934623E3B6F4152370EBDB065186790F23BD52A3A348
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\python312.dll
- Size 6.6MB
- SHA256 8ad53c67c2b4db4387d5f72ee2a3ca80c40af444b22bf41a6cfda2225a27bb93
- MD5 cae8fa4e7cb32da83acf655c2c39d9e1
- SHA1 7a0055588a2d232be8c56791642cb0f5abbc71f8
- SHA512 db2190da2c35bceed0ef91d7553ff0dea442286490145c3d0e89db59ba1299b0851e601cc324b5f7fd026414fc73755e8eff2ef5fb5eeb1c54a9e13e7c66dd0c
- SSDEEP 49152:Jc7/HNCHh0IWiUDFsx3hghs7g6kIPuch+Xe16/02yWYqiVx7qb4f4wmC36nhIVcF:JcBZhxsje2kUvid5E+vbHDMiEr/l9o
- TLSH T1B4667D667268C0A9C96BA0B0CC13C28BE7727C11BF50530B70EBB75E2F737A2565A745
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\select.pyd
- Size 30KB
- SHA256 678e09ad44be42fa9bc9c7a18c25dbe995a59b6c36a13eecc09c0f02a647b6f0
- MD5 79ce1ae3a23dff6ed5fc66e6416600cd
- SHA1 6204374d99144b0a26fd1d61940ff4f0d17c2212
- SHA512 a4e48696788798a7d061c0ef620d40187850741c2bec357db0e37a2dd94d3a50f9f55ba75dc4d95e50946cbab78b84ba1fc42d51fd498640a231321566613daa
- SSDEEP 384:I8RVBC9t6Lhz64SHfZslDT90YBI1QGjHQIYiSy1pCQQRaAM+o/8E9VF0NytuSS:1GyqHfK1HBI1QGT5YiSyvXAMxkEm
- TLSH T10AD28E47AF646849D923C972A8A28F26DD36B752871182CF3358C15D1F217C27F7B3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\tcl86t.dll
- Size 1.7MB
- SHA256 fe62ca2b01b0ec8a609b48f165ca9c6a91653d3966239243ad352dd4c8961760
- MD5 3ae729942d15f4f48b1ea8c91880f1f4
- SHA1 d27596d14af5adeb02edab74859b763bf6ac2853
- SHA512 355800e9152daad675428421b867b6d48e2c8f8be9ca0284f221f27fae198c8f07d90980e04d807b50a88f92ffb946dc53b7564e080e2e0684f7f6ccc84ff245
- SSDEEP 24576:CAZ2kQrvqkPY6i6ktWc2uMOxmWu1/0lglMkgshwlfjwtorWy2eMdPhOC9JlQ5ZDR:CA0W9jEoSy2nd9JlQjaq5vWHZ7XM2eDD
- TLSH T16A858F1BE76410A8D8ABD1B8C527BB0BEBF178151350A7DB51B08B912F23FE1277A345
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\tcl8\8.5\msgcat-1.6.1.tm
- Size 34KB
- SHA256 6774519f179872ec5292523f2788b77b2b839e15665037e097a0d4edddd1c6fb
- MD5 bd4ff2a1f742d9e6e699eeee5e678ad1
- SHA1 811ad83aff80131ba73abc546c6bd78453bf3eb9
- SHA512 b77e4a68017ba57c06876b21b8110c636f9ba1dd0ba9d7a0c50096f3f6391508cf3562dd94aceaf673113dbd336109da958044aefac0afb0f833a652e4438f43
- SSDEEP 768:m3xQvCzasI/rHPG2yfkZ0Kbh91iQ3Lnq5MIVYB8mbgijsPIWtw4qvUm:4xQvCzasIDHPG2yW0kJ32imXmUij6JjG
- TLSH T1EEF2D624334741AB36B2526799B9A2A4CE3CE23F10AB959FB89A801C7731F5D43F74D1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\tk86t.dll
- Size 1.5MB
- SHA256 afc13fce0690c0a4b449ec7ed4fb0233a8359911c1c0ba26a285f32895dbb3d2
- MD5 966580716c0d6b7eec217071a6df6796
- SHA1 e3d2d4a7ec61d920130d7a745586ceb7aad4184d
- SHA512 cf0675ea888a6d1547842bcfb27d45815b164337b4a285253716917eb157c6df3cc97cba8ad2ab7096e8f5131889957e0555bae9b5a8b64745ac3d2f174e3224
- SSDEEP 24576:gJ3uXVFKflt2zwvzPYHURwgVdF9EWyCzfdmHQnveD4CGan9nViFoHb15K3cmwdbo:yeFSpvzg0RwgVdF9EWyCzfdmHQnveD4Z
- TLSH T19D754C06A261C198C66EA134C91796FADBF17C14931057DB76A0BE6D3F33BE2273A314
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\ucrtbase.dll
- Size 1.3MB
- SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
- MD5 286b308df8012a5dfc4276fb16dd9ccc
- SHA1 8ae9df813b281c2bd7a81de1e4e9cef8934a9120
- SHA512 24166cc1477cde129a9ab5b71075a6d935eb6eebcae9b39c0a106c5394ded31af3d93f6dea147120243f7790d0a0c625a690fd76177dddab2d2685105c3eb7b2
- SSDEEP 24576:cQPuhXCFmugCw3wUAZMMNX6smpRrgTuJi+1Sats7F9qmxvSZX0ypKpIPng:cQWhXCFm7Cw3w3ZXX6DYaY9lpUg
- TLSH T1BE55AE2266AD01E9C5BFD13DC65B4906E9B2781503709ACB03E94E792E3BBF5077B321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\_MEI31562\zlib1.dll
- Size 143KB
- SHA256 28484bcea1e387c4a41564af8f62c040fe203fe2491e415ce90f3d7f5c7ab013
- MD5 4fadeda3c1da95337b67d15c282d49d8
- SHA1 f49ee3256f8f5746515194114f7ef73d6b6141c0
- SHA512 45634caf9d9214f0e45e11a1539d8663b45527e1ae9282558b5fdb8465d90b0fabcf4c0e508504427a597ba390c029bc12068ac17d842fd0fcbb1886d252c6b1
- SSDEEP 3072:7qLKjJj3yg1shVjm4OvfqnKAh2mrohmR5JHDbuNy:7qGEgSefI3roCDbV
- TLSH T113E38D9AB6A224BDC6B7857056E78B76F931B81107309DEF6188C7B41F11E806B193FC
- MD5 SHA1 SHA512 SSDEEP TLSH