7d08a800f3701e5ddd12d5f839a4be1d65b96287c7fc28f37d3778b9e822fb9b | Triage™

Login
Reports

Overview

overview

6

Static

static

6

TLOU-Remas...er.vbs

windows10-2004-x64

5

TLOU-Remas...er.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...ut.vbs

windows10-2004-x64

5

TLOU-Remas...ut.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...ne.vbs

windows10-2004-x64

5

TLOU-Remas...ne.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...nd.vbs

windows10-2004-x64

5

TLOU-Remas...nd.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...ut.vbs

windows10-2004-x64

5

TLOU-Remas...ut.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...ry.vbs

windows10-2004-x64

5

TLOU-Remas...ry.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...us.vbs

windows10-2004-x64

5

TLOU-Remas...us.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...er.vbs

windows10-2004-x64

5

TLOU-Remas...er.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...st.vbs

windows10-2004-x64

5

TLOU-Remas...st.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...ox.vbs

windows10-2004-x64

5

TLOU-Remas...ox.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...et.vbs

windows10-2004-x64

5

TLOU-Remas...et.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...nu.vbs

windows10-2004-x64

5

TLOU-Remas...nu.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...nc.ps1

windows10-2004-x64

3

TLOU-Remas...nc.ps1

windows11-ltsc_2024-x64

3

TLOU-Remas...ox.vbs

windows10-2004-x64

5

TLOU-Remas...ox.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...te.vbs

windows10-2004-x64

5

TLOU-Remas...te.vbs

windows11-ltsc_2024-x64

5

TLOU-Remas...tk.vbs

windows10-2004-x64

5

TLOU-Remas...tk.vbs

windows11-ltsc_2024-x64

5

Sharing

Copy URL Twitter E-mail

General

Target
TLOU-Remastered-windows.zip
Size 74.2MB
Sample261110-1khyaabe28
SHA256 7d08a800f3701e5ddd12d5f839a4be1d65b96287c7fc28f37d3778b9e822fb9b
MD5 32753b76829823dfe8ffb254992fa290
SHA1 51dc3f9e1e0ebc0cdb3c57b432fa4d6785c95081
SHA512 bce7b9f7174d1e31960732af2490fd5e6135e3b003aace311db5be3191b20e288748d7b2d19fd5c2575e35622f149d4581891ecb2993a227578822410572e99e
SSDEEP 1572864:mjgOYXCSR6FxPpLh2HrZRfkYI3b4TBbyKonTKR/nA:Qc96F1Pqr3kncyK+yA
TLSH
T1BE083342B540A66AEEE3ACFD754FB300A0CCA0D72189E7DA14AD0DC27CE7553CE5A176
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

adware discovery evasion execution pdf spyware

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/textpeer.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

4 signatures

300 seconds

adware discovery execution spyware

Behavioral task

behavioral2

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/textpeer.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral3

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/ttkbut.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral4

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/ttkbut.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral5

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/ttkpane.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral6

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/ttkpane.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral7

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/twind.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral8

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/twind.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral9

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/unicodeout.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral10

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/demos/unicodeout.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

2 signatures

300 seconds

Behavioral task

behavioral11

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/entry.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral12

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/entry.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral13

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/focus.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral14

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/focus.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral15

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/fontchooser.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral16

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/fontchooser.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral17

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/iconlist.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral18

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/iconlist.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral19

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/listbox.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral20

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/listbox.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral21

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/megawidget.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral22

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/megawidget.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral23

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/menu.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral24

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/menu.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral25

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/mkpsenc.ps1

Resource

win10v2004-20260911-en

windows10-2004-x64

3 signatures

300 seconds

Behavioral task

behavioral26

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/mkpsenc.ps1

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

3 signatures

300 seconds

Behavioral task

behavioral27

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/msgbox.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral28

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/msgbox.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral29

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/palette.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral30

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/palette.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Behavioral task

behavioral31

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/safetk.vbs

Resource

win10v2004-20260911-en

windows10-2004-x64

1 signatures

300 seconds

Behavioral task

behavioral32

Sample

TLOU-Remastered-windows/python/tcl/tk8.6/safetk.vbs

Resource

win11ltsc2024-20260911-en

windows11-ltsc_2024-x64

1 signatures

300 seconds

Malware Config

Targets

- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/demos/textpeer.tcl
- Size 2KB
- SHA256 440f52dbedf0c2e4754c93971d478425c9e78f71db19df3274720903647c9e15
- MD5 db84ac00b54e9685430d91087dc43bf8
- SHA1 b0dd9e005fb0b8c18e110132744e9c8513ca83a1
- SHA512 898d8e30ad084ba977da714bafdd0326b20377d3ae54074b307b10777ceae9f83acfd621db8dd9168309283b3c41a9b58c2bae714ec7e3ec685aec7a668e703d
- TLSH
  T118412023124A9F11EBA5C9337A846290FB11D25B96C6EA0D78DDE02817D0B2884BDB91
- MD5 SHA1 SHA512 TLSH
Score

5^/10

adware discovery execution spyware
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1 behavioral2
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/demos/ttkbut.tcl
- Size 3KB
- SHA256 e1e26aa0622d79b6532b54e4ece6d9136d36c96dd6dacea1eddebf2bb07cb9cc
- MD5 916f3f8e35ab802c643d82df4cdc1ec1
- SHA1 5bd51dd5f7c76124f7ea1d3563da2862ae3314a3
- SHA512 940d68d71d5e196d67d515fbf0b5e2230daef50355cffd3eee695293900fdeb3898bcba63a83628a7bb88e96a921e4158ae8b661205e15377880d07cf1552f04
- TLSH
  T1BE713317141423A5E3E0C174066F92A5FB2055EDD3E3B990B8CAD2BD439493398BFAB3
- MD5 SHA1 SHA512 TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral3 behavioral4
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/demos/ttkpane.tcl
- Size 4KB
- SHA256 e1c472dcc79ab4826796848e320fc8769bc9daf6fe0378995054686a006d2c14
- MD5 28c707a2cdbf91ce33938c7a301c9178
- SHA1 b8dc280ffa2c449242d777fd1decb765ce189f6e
- SHA512 05afead5a7d9029453bf208fb9437c1db26242d334732067ce7c42a4e9aa33969dcfd1cbf06ca14b2f8e4c572cb3b8351eb62d64152084ac1ee2a8fb6285601f
- SSDEEP 96:vOKwhUQKb0vA0vJWZSuKcZS3M/DFZSq0C0LfvOdpbxpjtu:vOKPSFF4xY+Ta
- TLSH
  T11B91A7760794523ED1F14A62C75F2230FB29C1E79BD3A978F4ACC05C5B3225B296CB91
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral5 behavioral6
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/demos/twind.tcl
- Size 11KB
- SHA256 36b00de2b67c0974873787b4ff033f169f7201ab88e926fb4058f5cbb0298284
- MD5 dca4731b8c909eb10453b4125b049b14
- SHA1 3da186293b4bf4b5ac8405e37a8b831e4e90d95d
- SHA512 8031b7ef4445e57f40286aa1401a5bd76daa93dc60916a25b70be1c0f1a4fe588682ccea49aabada27b5770f7f95468562f8866290fab0a3a94f5b3112a2088b
- SSDEEP 192:mOPHlHxfNieTvTFQCamBHN1sYXdgKbfNTXEs4S8xqd+1cP7ZvhqcYDmA3f2bwSFT:m0FRUerTFQCFtPdRNTXEs4S8KP7VwcTr
- TLSH
  T1AE4264176244091BA3F04633166BA200FA16D3F792D5ED4A38CAC168AB7113FC67FF89
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral7 behavioral8
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/demos/unicodeout.tcl
- Size 4KB
- SHA256 a5cc2cd45093b91cefaca4842055b89aa193cdc8a8c21ac5b049d15a7a1d044d
- MD5 3a6f391b44546c9372f2008028e12fd9
- SHA1 13d060581e3c5c5fbeca864506da446f4502cfc9
- SHA512 18d857fe0483870986f5b4fee8889567032cc40aa1f39efd72a8194a480205b1a715df3faa1a33f6a72e32f5c4bd94ff9fee5bfb38114f478a191601adcf199f
- SSDEEP 96:Zs/OhVL8i/JTDEMxqRrrPqZ9Du/2ClJoHvVDIHtjX36YUYukoOn:WOP4i9rxyrb+Ju5JoPVDIH5n6Yqa
- TLSH
  T1DBA1E96A32C5152ED335677271726609FD2840FB0BDB60163C4ED324FB760015BA5F9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral10 behavioral9
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/entry.tcl
- Size 17KB
- SHA256 af1de90270693273b52fc735da6b5cd5ca794f5afd4cf03ffd95147161098048
- MD5 f109865c52d1fd602e2d53e559e56c22
- SHA1 5884a3bb701c27ba1bf35c6add7852e84d73d81f
- SHA512 b2f92b0ac03351cdb785d3f7ef107b61252398540b5f05f0cc9802b4d28b882ba6795601a68e88d3abc53f216b38f07fcc03660ab6404cf6685f6d80cc4357fc
- SSDEEP 384:mDfyRIlBk3yrt8qLjtpa+qh+rA4rsWRWrrMUtCPnkKYNlPp64ZnCD:mDfyRIlBk3yJ8mtpaplcp6o
- TLSH
  T15A8231D62D05577562B7C373E3BBF600EE36907726934026759693A02FB6022036EFDA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral11 behavioral12
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/focus.tcl
- Size 4KB
- SHA256 8872f236d7e824aec0acd4bacc00fdd7ec9bc5534814ecf2160610c10647b7c5
- MD5 63b219be9aff1de7de2baf0e941cae38
- SHA1 a2febb31380e12ff01e6f641fe8b4f815941462f
- SHA512 057700f8fde4b7c3d7ab7cefd6c531060bf2b1b3b727cad6a37ecd42ebc557765d94b83add438bd5afa1f6f919d80ae755a8d98918981167b871f31ad42fdf5e
- SSDEEP 96:J3MRZZ7HWb/6OgRKjtS6Mn9GRZZ7HWb2Y6aO6R5nh76SMoB2kd82KtTpsi2D0DSn:CRZdPul1RZdFaRf0XoB2gZKZpsi2pn
- TLSH
  T118A15121B60563B366725293A2BFE249FE3B40B5129D54D87C91C128732141BC3FEAE6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral13 behavioral14
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/fontchooser.tcl
- Size 16KB
- SHA256 48c6d9eabb028a57291c009e1b02756d1ea6a18f9aca7066c59bc3c5d881d3a6
- MD5 a11f7d5f858e28d67f5391454401cae8
- SHA1 8acae04be25249a3b7524b2c4ac03bf9fcf081d7
- SHA512 e8d9b11208642c62166c62af605341ec7beef4e178dd3fcc9e72e4436be1f4e5d1952b78c5fa206d85d61693922fe26acaf9267725387f2a7a56ee2d95a6d69a
- SSDEEP 384:aUcEQ2Mq56jP/oVR6EcW0i9cWHKVo8q5F2Zsb9M:aUcEQ2Mq56jP/oVR6Ec5i9hKSxFC
- TLSH
  T1537284122544E56131B2C63F69E9A124FF1DC1AB9385A1A8BCEF811C1FB05E152F8FF6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral15 behavioral16
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/iconlist.tcl
- Size 17KB
- SHA256 c8b4b2130c6ad658331c59f41d8bdbab44e0011781214a0b0be78c4920536b2e
- MD5 4fde770e3dff8b95295fb887f510534b
- SHA1 5356ba885d61910a34756188d676facd0353ed8a
- SHA512 30bf50137f18643fc3622eaa195ec7e0f21b77980c16db54cca1b7aefa17ca4ce8e6f82d6c8f4a0dfb6dd78d4f115d3a5d8da7573a928af9c1a92727bd4f0691
- SSDEEP 384:FNP8nO9Wo8k5NfQH8EsOy8WMVbcfNCvJshPOw7jW:FNf8uNfQH89Z8WMVY15DW
- TLSH
  T1EE7262013F4691AD31B6F32755F2A010DE7AC1B780DAC1AD7C6981647B3412B87EE6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral17 behavioral18
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/listbox.tcl
- Size 14KB
- SHA256 47c75f9f8348bf8f2c086c57b97b73741218100ca38d10b8abdf2051c95b9801
- MD5 804e6dce549b2e541986c0ce9e75e2d1
- SHA1 c44ee09421f127cf7f4070a9508f22709d06d043
- SHA512 029426c4f659848772e6bb1d8182eb03d2b43adf68fcfcc1ea1c2cc7c883685deda3fffda7e071912b9bda616ad7af2e1cb48ce359700c1a22e1e53e81cae34b
- SSDEEP 384:apDYV5Yupn5OcckwBv3HCpg2J8JvJBfWeZhXkz+WkHGowv:aPPkevB2JuvJ9D3XmSc
- TLSH
  T1246242C42C34637171FFD22746FABB81FF6990A70595504438ACD0A4BF758B246ADACB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral19 behavioral20
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/megawidget.tcl
- Size 9KB
- SHA256 848258b946c002e2696ca3815a1589c8120af5cc41fbc11bbd9a3f5754cc21af
- MD5 d83ed6ac2912900040530528a0237ab3
- SHA1 2d18e42a8b96c3d71c1c6701010fdf75c1e6d5d8
- SHA512 00b4cd0d58029fc37820c163a4ae1dead22fb5c767bdc118659eace26d449c362189611dfb3fab1ac129fabfec2ce853ea2c10d418fae5aeb91ddc9330ff782d
- SSDEEP 192:mvEEVwjVwqOpOLbkVAg/vyKEZ25YbKZbwrmQ:mvEEVwJwpALPgnyx25YGZkr3
- TLSH
  T1B1123201638A436F37B763B580FAA154D534C1BF9DEB582C3C9EC3D43B308A286A66D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral21 behavioral22
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/menu.tcl
- Size 38KB
- SHA256 d1283f67e435aab0bdbe9fdaa540a162043f8d652c02fe79f3843a451f123d89
- MD5 078782cd05209012a84817ac6ef11450
- SHA1 dba04f7a6cf34c54a961f25e024b6a772c2b751d
- SHA512 79a031f7732aee6e284cd41991049f1bb715233e011562061cd3405e5988197f6a7fb5c2bbddd1fb9b7024047f6003a2bf161fc0ec04876eff5335c3710d9562
- SSDEEP 768:NKJsO5OhIzOQjJwxzire5pKVjriecYyq4Cp5Zn2:NKJsO5LOQizire54lriecYf4V
- TLSH
  T1530396906F09E3375233D3A583BB9094FF3A82F31346609C745592AC37B58260AFEAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral23 behavioral24
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/mkpsenc.tcl
- Size 30KB
- SHA256 c5bdca3aba671f03dc4624ab5fd260490f5002491d6c619142ccf5a1a744528a
- MD5 983c7b78f1a0ebacab8006d391a01fcd
- SHA1 7ea37474ea039ed7a37bfdd7d76eae673e666283
- SHA512 a006ef9b7213e572f6fc540d1512a52c52fec44e3a07846de09662ae32b7191c5cf639798531847b39e4076bf9dd6314b6f5373065c04f4fef221185b39c3117
- SSDEEP 768:+c4g8rSnBGzHsGK83Ch0x/0kmSq6O4+rNfPCpM2sEmqKys3pCJxi5dEaY:+c4g8OnBGzBK83Ch0x/0FSq6OnrGM2h3
- TLSH
  T131D2F91C97858E6E745222624E3744EEE02DE09E6B694534F9DCCF1D372093C4EBFAA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/msgbox.tcl
- Size 16KB
- SHA256 a07e3a3809ced3c6c9c1e171dca5ad1f28357734cd41b2b9dd9f58085b3d2842
- MD5 217087ab6b2a8f9d7252e311d69c3769
- SHA1 09aeb2bc5b7c7f4ab3de4211d786c519ae0970f6
- SHA512 6e57633c924bfc16d380c014c20dd24d5727e70d4843fcec4d7995b4db21941ea8f2a5fd6e5386df3364b6905d4d66b2b9595dc8fc70cff40a2d49a92a1b6fba
- SSDEEP 192:+haZOxBpK8uxGe4V88/wxY3Fxqipz4zz4zxxFzxT4OcErDxqdRRZeuC/Vj2CoopC:+hRWRG3FFjvsfCoopwITHzLHFHHAABs
- TLSH
  T1787220C673482066B177912EDBE65202EAAD95FB01E0648EBD7D8098EFF1013D1F979C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral27 behavioral28
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/palette.tcl
- Size 8KB
- SHA256 849b4c57e4644e51beaeaeb3ae59b7ff067e582ecd10f1b2caf6b6e72f11f506
- MD5 4ce08a10cd9ae941654b8c679df669f3
- SHA1 f1288babca698fd18c3bd221e6ae6c02f2975aae
- SHA512 0f37539da3540e9b1da7b0377e3bbb359b71db4271d63bc9501e95931b4e609e8cb91dc2f7b08a6452598d4a0d58c6a2034049a215000eef0f93a9963d003632
- SSDEEP 192:HWh/x+hFMyTA/CTzxFoUuliRLDm8pQrQlENPyF3o48M6C:HWL+MyTA/CTzvAiRqyEw3ok
- TLSH
  T1E1026112A34952AB72B3A2BA0077F084DA3C52BB515A835D3D6ED1F8373043687FB6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral29 behavioral30
- Target
  TLOU-Remastered-windows/python/tcl/tk8.6/safetk.tcl
- Size 7KB
- SHA256 579701605669aadffbcdb7e3545c68442495428ee6e93c2d3a3133583bcd3d33
- MD5 21a3ac11146ec26784c0e729d8d644d0
- SHA1 c7e0918e8692c42c1d1dd1bbcbfff22a85979b69
- SHA512 724ed83b989ad9033bec4211ee50e4c9e85b51054c518cdf7e02d0ed0416f636b9f38c0b0d29f8f4f7f465b77c7d2e01d0918d2c2c3fec4c7739ea982302fa2e
- SSDEEP 192:Eet0t8bm9Z+Yjo+j/YKOtOUOtk8XKUal320:EetG8biZZs+bIAUoxX0d
- TLSH
  T104F17490D30317D6327142A25B7AF3A5FB3500A756F762AC7C8D826C7BA7417C22ABD4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

execution
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

PowerShell

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

adwarediscoveryexecutionspyware

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy