UMOWA DEV8759 - pdf[.]exe

resource
unpack001/$PLUGINSDIR/Banner.dll
unpack001/$PLUGINSDIR/BgImage.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

UMOWA DEV8759 - pdf.exe

IMPHASH 59a4a44a250c4cf4f2d9de2b3fe5d95f
SHA256 baa364ff2127d6dc7cd49fddc9fe7a3e1c4b93173d8f7531d172a38285115ea9
MD5 2f6fbd4dd3ffb23e86b8fe0c092d4d59
SHA1 a093d228d0aa8769419ef25153d1310e826aec79
SHA512 78cbb98cd4ade680b0bee831db01a4babf4c9b17c5252362cdb380291cd10deaf01a81657c9986802b07a246617b080ff4680d45d16e2a43d25fbe86a0fb2762
SSDEEP 12288:29HJyccI40lhH3k07aii3riCeYUG+PcuU:29HJZcI4gJGQAdx
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

35:a2:f2:f4:c3:3e:1c:d1:c2:1a:d5:b0:91:62:44:3f:ab:17:94:7b:a9:dc:09:9e:79:37:25:d0:ac:95:a9:00

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Therewith,OU=Chasskmet Jubelidiot Terminalsekvensen\ ,O=Therewith,L=Lyon,ST=Auvergne-Rhône-Alpes,C=FR,1.2.840.113549.1.9.1=#0c1066656c6c40417a79676f75732e466f64

Chains

Apr 17, 2024

Minor OS version

0

Major OS version

4

Entry point

12825

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA SearchPathA GetShortPathNameA CreateFileA GetFileSize GetModuleFileNameA ReadFile GetCurrentProcess CopyFileA ExitProcess SetEnvironmentVariableA Sleep CloseHandle GetCommandLineA SetErrorMode LoadLibraryA lstrlenA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcpyA lstrcatA GetSystemDirectoryA GetVersion GetProcAddress GlobalAlloc CompareFileTime SetFileTime ExpandEnvironmentStringsA lstrcmpiA lstrcmpA WaitForSingleObject GlobalFree GetExitCodeProcess GetModuleHandleA GetTempPathA GetWindowsDirectoryA LoadLibraryExA FindFirstFileA FindNextFileA DeleteFileA SetFilePointer WriteFile FindClose WritePrivateProfileStringA MultiByteToWideChar MulDiv GetPrivateProfileStringA FreeLibrary

user32

CreateWindowExA EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard GetDC SystemParametersInfoA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA ReleaseDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer GetDlgItem wsprintfA SetForegroundWindow ShowWindow IsWindow LoadImageA SetWindowLongA SetClipboardData EmptyClipboard OpenClipboard EndPaint PostQuitMessage FindWindowExA SendMessageTimeoutA SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegCloseKey RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegEnumValueA RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/Banner.dll

IMPHASH f81377f1c55b7962f1e18d52fc7eb628
SHA256 f4530c734e3ce6253ffa6e5d755d61e4709ab9fc3b0eee3d4cdb89ec89c48bd2
MD5 aea3ac67fa68fd3f00edfbf9b43a2770
SHA1 aa59d1a4311c42b612ee66a027f224261beebbc3
SHA512 ffb6abc624d50ae8bc9c83ff518cb532dfd076f107077dceaf0e23d11c186a18671a5f538270be8b0b986e41ad1981a3606995046a6ee7b6b64a33c83ed72df9
MD5 SHA1 SHA512

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

4759

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/BgImage.dll

IMPHASH bdcecc8b26871abb93996c6c18e09c94
SHA256 dd4e24bcee7e9e952f1c7cda7532c0b851b87577e1b679380808f22d875c7c96
MD5 c430c0a7ef0ac8f80004de7f7898bced
SHA1 1f698e988bcc19d280a70c3283ff2816bb0db465
SHA512 3fa4fe59cadb580ab8b452ff7c2dd3802f8f6fe920dee15c81492c0c324ab991471de01fdb6f3ac07e336a90755243a1ef1de1bb5dd1c51cb70918e7192b46b4
SSDEEP 96:8eZ0AKTIfv7QCUsthvNL85s4lk38Eb3CDfvEh8uLzqkVnLiEQjJ3KxkP:tXBfjbUA/85q3wEh8uLmcLpmP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 8c8a576201f68de1a3f26fc723b9f30f
SHA256 484f8e9f194ed9016274ef3672b2c52ed5f574fb71d3884edf3c222b758a75a2
MD5 960a5c48e25cf2bca332e74e11d825c9
SHA1 da35c6816ace5daf4c6c1d57b93b09a82ecdc876
SHA512 cc450179e2d0d56aee2ccf8163d3882978c4e9c1aa3d3a95875fe9ba9831e07ddfd377111dc67f801fa53b6f468a418f086f1de7c71e0a5b634e1ae2a67cd3da
SSDEEP 192:jVL7iZJX76BiqsO7+UZEw+RlthVEoC0O3XB:g7ssOpZs/hS3X
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10027

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 38e7b5c3ee58b43a91f9679e94aabd09
SHA256 495bddc0be6e18e981db82fab9d1de55c7e269ab4ec3ff43035193bc017a307b
MD5 8ced0b79f7b9033d0795aab3be6d627c
SHA1 90c2043ffccd068f407c624c50ac7b795db1e132
SHA512 e38f63a342729f5ff6d0db607d7877b65c33ed19e2b5a97dd868ece8c2a3e829d4153624943444be2f0de885496161d54c1da9594bdc0a5a0bcc8b727e2facb0
SSDEEP 96:3Rp41CMj95rKhkfL5RkEdKkcxM2DjDf3GEEE9v5E9av+Yx4indY7ndS27gA:3RujesS4HREEK5MYxDdqn420
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Cernuous/Anostosis/Tejlmand/Assurandoerer111.del

SHA256 be71ad7fb9beee19a3a5c55c5caea61164f99a7cc64cf96df6b8a1eaaf6606da
MD5 c9498efae467de1d439f0c011b5dc354
SHA1 d4348045e0da4f7e7e2af3c3895d84db610c5ace
SHA512 2110bd9e5d2aea100bc888fdd56468379a046b411c9a4dbc5c6f271d37a34dcd65f52ffabe72eb95e4b826a03c2fe8954da9a3c5d52fee10974be7c1f15dba73
SSDEEP 96:CyNsJb38hYH8zD0ij/AutZGO3OlwWkGyImN/S5xn61XBILpp7n:Cye8hSfKIunsexSIaLpp7
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Cortisol190/afhopningens.ple

SHA256 659c781bc52839156c811124d27f914690a0d6176d2f3679810d84943f0ac1ff
MD5 9994d222e244edd3ce2fe94b72a4573a
SHA1 b61c899ee0aae09259a2193794614797da3146ba
SHA512 7a1d7b91d9ddb61e324b0a55b107fd27a5f885725d40fbf250d47b03d9b69311aa2024320884a93ff1fca8ee80f7001281d3e4525213930a7444ded903c2f842
MD5 SHA1 SHA512

NSIS installer

installer

Cortisol190/attila.vej

SHA256 139560a97251a1b0200d4619829ee39e2f63a9e67bba2b91279827a108ede5d7
MD5 2a79f87c6662a2fee9b2c7990920cf1c
SHA1 19d7b37c0f8518c2ea1d72b7da7f1e778c0da542
SHA512 e4e67261dddbb80dbc2fdc3fcbb5fc5880b7ad020a2353b6d232e6e3e7055180f13c881df633b225dcc2c386148b5303ef8da08a5e901b68587bec00d55223b5
SSDEEP 192:mJrHHOT344MKwTxJwD2vPPldsbroiq9kdbTeNa/C:8nOT344wTx+qv3ldThkdbEAC
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Folketlling/Spydskaftets216/impaling.uns

SHA256 32b8cbbf81ea9d4eb76ad6a8f1d44e405e4346833765bd843f313451364b2574
MD5 d9c3f89aa3089c8b894a97d6fe2d1d93
SHA1 3733c7993c3c193f69ff4be738acc343d3e80102
SHA512 b770c3fd6a7f3ecaef16e10586c9a5a5eb815de7fc21f59992240ae7b86384a5492271d474fe6ba32addd590ac77d1a5b6b6d3fba661d59f90770909333864ab
MD5 SHA1 SHA512

NSIS installer

installer

Folketlling/Spydskaftets216/isoteric.bru

SHA256 c37c0053a398870f88ce4ba3a9d275775eb646fe98ee5fd390646e4655732e55
MD5 f348392c531e10808cca915d225f4409
SHA1 d062546057e432de8b96f13caa0f09cf1ea54008
SHA512 5502b3dab3a94d8ae6fcd626ad7fd1474dbebda4d6ff511a098859d2ee7d69bea97639f737b4274509d55ea8c1c0c0ab116b0b12ce98caa790d2ae888855a710
SSDEEP 96:Zxu/m/VA5JYpQ3ryYP81TV9Yp+vPPTQf+eZcY+xeFnNw7yAo8Vqkq:SmGHYyDGTHc+vPPTy3ZcYPe9o8Vm
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Folketlling/Spydskaftets216/jerrys.fri

SHA256 8f04112c066924ff1ed6afdd234c2f77fd9c8a1c482b2ec9094b9831b2b1278e
MD5 942b88bb928117a639461e8717ab5ec6
SHA1 37d86386e4b8e3f112257ac5cc619d81e199b394
SHA512 7974cd7716022d10bf5738ebbca8e301f0ab468b4b21b0299ffe1b628cfde301be39f78f1db4d84eed047d02626a6597a64047c7b034b44afa7223843943e237
MD5 SHA1 SHA512

NSIS installer

installer

Forfatningsstridig.plu

SHA256 8822d1b9e24e6753f0eba1103df055c26b5d33dbd50fbb4f755b8ebd88fe25c8
MD5 cd2eae73f1a473e6fdc859c85f8d62a7
SHA1 eb5bb5297e099ca007ac805a85e343e0d2787374
SHA512 e5f30f63a4fa4db22f0180f22367f0ebd1cec1b57e4b4a4294c24afcdd9ba1261ba3c8344ead68d7bcb638328b2c5ee5656657c8af7d35ed551718dc2ab7d5e0
SSDEEP 96:vaREh1PjvwN1yWoR6PlUWomXrP0jGjkv4rWYsb8/DJbHFKrSk/:vaMPjvwaWoRYdbbkG4vyWNbKlFfk/
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Forhaandenvaerende171.txt

SHA256 ce33bbe38b36fd3509a9b47d0474f64c49ba4b8e3ca8479f20f68201c3813b69
MD5 bb3a71b2e14e573cac8f3a7499992c07
SHA1 6b1c6031fd822786bd108bd28c38fd3dbcfca5b1
SHA512 4350755caf40c084f7df2aeb5abc9f33de8c6a4c1346c3b9b2d6bfca2e27d45f22de1545bba1677774681d3fab40372a5eca5e3b5aba650c9025252e15713d56
MD5 SHA1 SHA512

NSIS installer

installer

Industriomraadet/Erhvervssygdomsudvalgene120/dogskin.cam

SHA256 681af5368cd90dd67680e1751b81a38ae3544ddf895b84577960b9daec7f5550
MD5 d63c5a2bd66ad4c460feb63e960adcc2
SHA1 730d54afbfd5acc408bdd9670e7c37d547f5a8b2
SHA512 5b5b2a76fecf48c9fb37d5401d43c48580c297c5aac67f7f7a23f7435b22f4960764606c4d0f4520e66d0df700ec683f5a2c3078734ee5fc3fc63513742d4527
MD5 SHA1 SHA512

NSIS installer

installer

Industriomraadet/Erhvervssygdomsudvalgene120/drawpoint.apo

SHA256 a7c65e860fa4bf340144b3c87926b2432d7b1d726806d457ae7a68736fe96536
MD5 bd52b534e473701a890bca7e396297d0
SHA1 b25075b47ddcf242203f437b96a6f6ad049b2214
SHA512 b58c2ba3c7eaad9c490a10cd38c4b2988c2a889e9a91df655f5afc666edc5f9fd8c55b022665b4b5a7fe1f96d855018147016d4aa21c8ea1bbbc5788cca5bd8a
MD5 SHA1 SHA512

NSIS installer

installer

Industriomraadet/Erhvervssygdomsudvalgene120/drueklasers.har

SHA256 ed7c8b56192d1a3ea38e95f9edb67a767a3c1b28b7f1584dea960391bdf65231
MD5 4e890247a015b5933b9b29501cea3d00
SHA1 41411d9c4e525aecb08176a12cb1c6a2015a6b45
SHA512 7432b36a0778c9d1753f6726241192085ff6dd57c89315ff2acd428f19dff2fbaf389dc511e53b3bbe31f251258cd54e0b4d2be95a9a64723b51f28c46779452
MD5 SHA1 SHA512

NSIS installer

installer

Irreligise/Offsettens/chalazia/Kollisionskursens.afs

SHA256 f96fc521c510f86d0e6727545889d39fe4f0681c756eaa8b9cf0c276a88590e8
MD5 f60a98d79dcca22cfde0625115d1a50b
SHA1 bb00021fcacc46c3fc58fb849aaf05df3c289ae4
SHA512 5e81cefc4ed326cf1241e7fe04644a1b0e42815c4d479cac9154c4b42ab15c669d62fda9240b63d3df169491eb5021c77398e6a545cc1e3313886f2a17018480
MD5 SHA1 SHA512

NSIS installer

installer

Irreligise/Offsettens/chalazia/Kvintetter.tra

SHA256 423c9a03396547435d93f9ebb91525e649260884d7d48b5ac638b51c5e2249d0
MD5 03222953b540342d6167480b99cfcf44
SHA1 c88df66cfff6bb0f83169938e2e9796536d85430
SHA512 f565ec680e6fb38398b46ac8e20a4dec9b5f62fae74c1658b75b323ef90e27df906d186534a23d92310ab809090ea1f5c290ad1e9c21c64a9e50e8401de761e1
MD5 SHA1 SHA512

NSIS installer

installer

Irreligise/Offsettens/chalazia/Trockery.avo

SHA256 f2b63689d5a276ba29c3db96ac2f12c078d17b9ddc3b15ec34a584222d8fce94
MD5 a28f1e1f2cec12927953c63dfa7f8982
SHA1 62d1225c18badf4a640f81edbc0329feb2ceaaa2
SHA512 31b20e908ab3581e62ce5c6dd7c20229b074326743c2aacb4505445b759bf78a3cb251bfb22c10179d4af4671194a6e4e35ac3fc6ddc9f665555ef06b59d73f0
MD5 SHA1 SHA512

NSIS installer

installer

Irreligise/Offsettens/chalazia/Underrealized.raa

SHA256 089ab7065d149c95f40b22656892ea57e190f778ae926da64d0297eb940b5694
MD5 d3d7ce8b4769b24568bd37ad61d4f166
SHA1 04ff7649b966ab8283540cd5e9744fcd5ad5b9e0
SHA512 136375daa67f198d7f5b50297d2a0a4515af0cf19d203a02b9601fd2ed9f709dcc8c4c167c7363d588f49f48408945c99e6624091172e57caea4446b5e756a82
MD5 SHA1 SHA512

NSIS installer

installer

Irreligise/Offsettens/chalazia/abridges.kem

SHA256 b629e4af5943ff516531098a2fe432766e03fc0057ad08e9c8e8e822d6acb562
MD5 e6c5e82ba1bf697633b373a6bd5cf4e7
SHA1 30dd3e586e15d54fa856cf3163f69a7b9aba0e67
SHA512 300dce5623e2f06ca4ba70ee89b98b3c3e6ea4f43ce3412a43fa26f0e730afe5460c668e49e02090f786a1a7c939eddfb82ddd5321a7261eea78eadab48a0ed8
MD5 SHA1 SHA512

NSIS installer

installer

Kanalen132.cal

SHA256 63ab9d1d08dff8da7bd03ff848a66770e6902fc8bcbc095b16b3c3aa9abb3891
MD5 a54439f761635b841990e673071d135c
SHA1 60d556422ca8cd0ca84ad44bedd250911cb0bdb7
SHA512 09b52f2cb03309499f16f3a0cc95f50921c03637c8b5ba0fef2d7365d06becda5c9176bf484ee533f02d0bebbc95fa65f30567f85feff015be1bd1e6dd355020
MD5 SHA1 SHA512

NSIS installer

installer

Kastanjer223.dis

SHA256 6bdf9a8b11391e31953338dd014e2382c39acea4c72ef29afaa4f840e6e04b7d
MD5 ca1110e5f610cd710293efaa7e6a1a42
SHA1 3fe22dec8a115b1dad3c30539ac162b0ff031159
SHA512 f75621e9edfd1e7f0899783793d80eb945d7b38721c7f02549f5c1c47c53ce803340396a6611dd65ecf4b5671f132d225a8941ffcadf74897b797eb99d9f2fab
MD5 SHA1 SHA512

NSIS installer

installer

Maskinvrkstedet/Zoograft227/Handlingplanerne/whaled.pla

SHA256 83e0bf68ecce1cdc1b1b6c9a5edfa8625cd23719bde9918a613eb8ac36fe541d
MD5 1ebfe69e0897828bc81b2efaede28099
SHA1 753169e03262abe1fda91abab951e53e8182c647
SHA512 774275de64993a05804671e93addf1733da2c2acfbd5abb221796289487be1c8624a9d189f2d82319ce8989bfb39ef21db7543d66d3a3954617c9383f2ad5f7c
SSDEEP 192:0rzMcHgIIgYWBlbIi5f1TT6LUkXdCMBjyFqyQF:ezMcAIIiBl0oAdCiujA
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Mellemlanding/emmendes.fah

SHA256 ecd628ea35eaf7c50615a5ab08f1e3e505dc22ad341ccaede5f135f34c233f5e
MD5 8836266f0f95137e746a3b55fd8da026
SHA1 9c4422ad081352f996267f17489b93d94ca3f3c6
SHA512 0cc8c33f09cce988ab81466fc5c559fe5fb18d7583299b2dc0cc016886a50b7f44f41b7262c078a4877a6c055212ba9a13fca9e70b544b88965a42514f26622f
SSDEEP 96:jj+d1YXx2y/iRJNhdWnxnlRVOtE3Qw6A2YyYS6cDCH6qY3gFVR9NCDNBJb4R45x:GK+RJNh+xHVTQ9a1S6cDCH1/3R9NCDNt
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Mellemlanding/entitling.qui

SHA256 bfcb8c4981601ed3d9d9f8c3be1bdd9568433cd9efcc409751ac34a643fc0406
MD5 ec4be32686d380f2e9a00a861f5d54b4
SHA1 99e370d8f4430f55e1cc05da4fc24963a4499688
SHA512 ec1c11aee1204ba065d98e7320e9feb10585414c50e0491fd79ffa9207c03b253d034e61bfec0a1b9d4404e1388c51a5a985c43ef0d13b22b65b0aa67d9dfc5e
MD5 SHA1 SHA512

NSIS installer

installer

Mellemlanding/excusefully.mag

SHA256 bf6cf499352101e992eb4a8ebbcc65771a39baa0a2823aae2066c7f089195121
MD5 572cd7b9ec616b5adee2e741d001bc83
SHA1 e1b05535dc91d029455d6e8f9fc02239c7a4c1d5
SHA512 8d706ca6118b545e96bd5a1718925c28043cd91fe6e8d3b81129591a54e1fb034fdbe44eaf89f2eed9100cc785716d7067eeafd28802db2b7bd1e4b92552d465
MD5 SHA1 SHA512

NSIS installer

installer

Mellemlanding/galvanometry.lat

SHA256 2744de5e334d0e990d9767235ff6a60de007a16adb93468edc0312a9fb24499a
MD5 e0c455e51cc717c44b7ab834f442aa03
SHA1 95b50987951e4d5953f0cbc6327fae32f8f9df77
SHA512 8df98c4926aff8c5369290616fa734865a9c318d6d54534eaed6fd51890f6bbb5f1a2c7a9536a1e79b9897d0729bbbe8733110f9d421bfee0d390521e0d18c9c
SSDEEP 96:4kePLFoGiAgixSczjbmgOIQskyTTXiaMxVOHnDE/NhApIzEEafCgwDbd5rJB:cD2XfixzjbmkXitxMnqhQIzbDXJB
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Mellemlanding/grimasse.gue

SHA256 f4d75cd4dee69968e37025ada7ceaa67af7eabd7ce026dead6d6ee43c3c01014
MD5 360b6c89cf0a56e3cdd4b57e44609d64
SHA1 2dd84511b5edaf2088298ccf9c10e049fd3c5b90
SHA512 a201929eab1f65e05ac9cb8c627cce7e300e743dfe672570eea5dc2738ee94c875825f29262a7a80438ba10187bc647df504c6359e73ba0dddd991759b8ff072
MD5 SHA1 SHA512

NSIS installer

installer

Mellemlanding/handskedukken.pla

SHA256 8776135249adda067f2234f1627bb32f975c91e0fbbdbf917a995a8aba5ab8d0
MD5 7676c99f9013919436b3218c1fb1eb9b
SHA1 b483236b24847a6f593f75b94342a32c8feeee73
SHA512 60a0fa091cc3ffdd6a03adffb13410d92e5a2b74e4cb0edc8c57b74d114e035db6ffa26ee1d5ef0ba2d91c1c75bf94135567dc0c5d629cf979cc3b05a749c2a2
MD5 SHA1 SHA512

NSIS installer

installer

Mellemlanding/herbicolous.vic

SHA256 ce7ef01a2197fb7e4d298813653cd74342513495c204842b6dca33ec6c70b52c
MD5 2df8dfa9f58f666f7dd74d9838d36890
SHA1 9686360e97cc5faa319095e0cbbf584eca89f5b2
SHA512 cc04f9d110039ce3de867d8ff2aa1ec7086638cecdc91d3fa117f30f897f45adf9fb25277e9f20b14d2c48859f714cc0d19d573d25428403ea2d43d22d9635b7
MD5 SHA1 SHA512

NSIS installer

installer

Prioriter/Overmaturity/Seksualpartnerne124/behavioristens.ben

SHA256 d403510bf4f65d5d3d132577317b9d9e4a08b527c44caa709f19ea076d18c22e
MD5 6393d70406b2b6a665b9a5095edd6911
SHA1 0e1c288b4868dccdc29c702f9c6ca9a7d6804812
SHA512 153d8433818a8c55be7736e27dae0cf5fe5423fba204cc47999f4c4bbd01f09c017ff35dbac41356fdb6d7836fe7dbabbeabbb8925dbacd5c9843cc47bafdd7c
SSDEEP 192:zRUgpRxNW/yaSERp/40qw3jO3gcZNmKjWti0QF1:zeGXW/9R5405zOwgn1j
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Raafilmen/Slidometer/Parapphyllia/Afgring98.cad

SHA256 cea961d5a49e3dc419822d757cd88aefb0b3ac7b654b6255e90ced9d61fc213d
MD5 1eb53ef1ea36807cfff839f6d7f116c9
SHA1 1001ac06138c7bc5704dfaf8a86c09022ae23c60
SHA512 3621dd96fffc11e078e4e403f6c5978ecb74b529543aab336e2cf250010f5c7a3252fabea141927292ca318d6cd0ba5cdda9774de88f253b6e7ba45dbef5ec63
SSDEEP 96:J72NDYI+BjZfPRJaVahpVg3+6f4z0GABR6yr6KXHonJsKIIaGtTz+g:JCb8NXaVuVS34wG4Yyu/nJahSH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Raafilmen/Slidometer/Parapphyllia/Grahamism.Ads

SHA256 77aa335323f2bef1334a7c3d5c0361bf58183ca6f05c4de80df49da3aea6433f
MD5 95aaaca5a96551affff7da584336171b
SHA1 b9cb16edbfe52b049b22b4545b2abb40a2f4649f
SHA512 5b12ae67943490da13c8ee211447062302db10505713630346354a4d1e79ce0bcc4ab5e44b359ecbc5b9e1a0be82cb1c75a10a1fd500eae9ca469e41f224bfd0
SSDEEP 384:gW+RhIqPKScJwQXZpPxP2tTr+58laDQUflpJhATJQg+7FbFO6KkdLZLQMZJT:2RhIqPKVJ/XZxx6We2fx+Teg+L/3bUMP
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Raafilmen/Slidometer/Parapphyllia/Sexfoil.Fav

SHA256 2ffa9b2aee64c2253f5826db88eae6cf2302ba72638b0d9649aa0f56332855ed
MD5 5bf2724551ac875cc830ff896b512518
SHA1 a7b9683af8ed10141880d5fb950ea0b748ffb717
SHA512 12abdb37639710073c9c1d058c0b1e94e03f2a8bc11599a1751f2edf2776451447f9d3a3d83a37b44c2b6e5cda5ce589e1520444b358a074ae32539e1f9680de
SSDEEP 6144:Uv6gKanKRq437fAI1cz2oY2jYvpmc+3QSAQJqSzZJQKIQ38:4TMdLfk3YRB+3Qs/Qq8
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/linnet.une

SHA256 a359dcd623c287c384ad0642cf8f7416fde820834575e18c264e3a5e40322cb9
MD5 a4c66b3efeff572d171778ea9d4ce3de
SHA1 a9ad517f23521952c8f4ce34b9ea803b4527fee2
SHA512 2842e7d14dcf174cd8d79b853905079c094f799be662a5b78987dc0fe36cc54d18ad65f33c814f80d5a58b6b60aae7bf3f928d9c1ad33d8337b8ede5e2b015c3
SSDEEP 96:n6N8ivm/+10Sd6IO/hlOnzV/qmqCfZ6UC4qbSCvenD/F2WfKSZM:nkvm/lSALJlOnzdDF6MjCmD/FjJZM
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/pattebrns.kly

SHA256 b56c38422239bdd7061ca7ee0b5c05c995f360c7fa1eb957c7820b373c1515f9
MD5 7c85b493d183df82f2e0b88c46dea959
SHA1 142d78863c5707463f96ff482a3e205bc720e720
SHA512 860aac166f37ccc35e04498d4fe5483ec347d187ac1dace18c8e29a57ce4c9e8aaa598c72fedd9a73cd1490b16301243d1b4f4dbb786a0f19d4f546e5d5ff8d7
SSDEEP 96:0XTHoJppopeCpfZKnge3qInrmfQXvdYe9nMwt2:0boopeCpf4jaIrlvaeiJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/rollers.udf

SHA256 af86550dca87a2f26e445ce2ec1051b5c5c25da883e0cbafbfb326f32647ba8c
MD5 46d057add73e2acaa72e6e92dcd581e3
SHA1 eb783a7cee331548086f74031f924ac1af14689c
SHA512 b76b407874402eb697e19d93928a1bca25028aea1303da261f0c73a17d40e96092b2a4be956a5304d56141024292ce079836152e88d88f09259e92f7c6e3ca1f
MD5 SHA1 SHA512

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/safari.jer

SHA256 af729775fb9c98e5a0bf0c9d58c234e3e14688a81067646556f70b5658bff653
MD5 d351ff5a2a26b8d9189f47f7e2cb76bb
SHA1 4a4afe3c58fb70d6deb3d4546c56a1c6059408ad
SHA512 742529eaab30ff143a63d249c64b908a69869e91b7536d9c2a1a76bf35fe46d615ebf8aabbee8549d961473ec1aa2c6dd71918aeb58224dbc983083996c1f501
SSDEEP 96:BHsWRO8QEKd1R/mxAdx4s3ca/ndiOg+pr8fRqbL:BHsb+A4Cd6s3ca/YOg+d85qH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/sangita.fon

SHA256 50a686ce19dd63aed3bddd74879616e73f897a335ba9135fc5d9c242e8371600
MD5 6e75b6158859353230879beced9b17b9
SHA1 2e07bff54de85d81c8e879e8e98dea3351989fac
SHA512 66ccf311f2ad4c7659a9927698d9bb16d9c05690f8c484124b9cc1026120ed5be7c19c5de2a41542ae9ee4d3d00e827b78f1b40d9714d2be213f48852ab3d84c
MD5 SHA1 SHA512

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/sedimentationens.gen

SHA256 157dd70c6e16d093150cb361dc12d50b7ea1faab8f447f692748634d26bfd98e
MD5 8ca4581dad77be515fbc2abab11cab54
SHA1 d007450dae8e1405de150f26c1c08d36630c36d4
SHA512 3ae9f155e95382d0c87cb710b6943ec835c8e91cc35617ed144badbf05a9cffc19c759fc963fd5fdeec0a219eda3105c8d897ecddd0c722c4265f884bf542d1a
MD5 SHA1 SHA512

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/spiritusindkbet.snu

SHA256 39aea44dc94d825d466a951223764ac455be13ae104bceb198b13629ceda6f21
MD5 a70e005731b68c574f55a9df784bfc7c
SHA1 968dbf77da031412377893dd64fda90f496b2d60
SHA512 aa642ac9372d31540ffc906905e819f4e2a51a91cc4edb3ec5c4c0fd9c4406fdba0c26cd06859a0d12fb053a2310e92102cff6074881edf1cc169bb5cecef103
SSDEEP 96:XEXXaZ9mrt6eKpOUDlCjNsCtc7cx41t95eUFzgKTClnRKyuw4VBA3aFOtsba3FGA:UnJrtL1Ml69e7Y41t9X8RpxiBA0CFIch
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/supportress.uti

SHA256 d71202512102aed0e5983833046c546dd8410093e3769b25754327fb777b0ee5
MD5 3e062c1c7345fff4d69d8ac60ba0d5c5
SHA1 2448a282d3d1ca427a58feb4f60e567556e62a88
SHA512 a7b8b031ea6afdbdc0358081c7ab134bbeeb0018b3f26145dd7cb05b6ab1000221601e5150b991558527eb3a6860d219a1bfd4ffe4fd3389b89dc01296ea1d22
MD5 SHA1 SHA512

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/telextjenestens.sta

SHA256 d5b789778d724b0f8e183dda34d96fe499a4ad07b1e624849d92aace4fd014e8
MD5 f9b5cf4ea37fdd7340c7db13e6b3339a
SHA1 d081165fc692e7399d791ba3e9fcd3fc42da33f0
SHA512 e321cde5dd634b2de5e19170a984755c0ff16fe7bb9c05defda981c2fdcb3460c7df82528ebb3872be108e2e91d272db871b62ab2e0cc517c73bd692c19e260d
SSDEEP 96:NotYAEAS9P//MU2Y9BeelKsDXHHnC1Aor/eu5WM311f2zT:SVc9PM1MBeETLC1AqGZT
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/unreworded.rej

SHA256 3529c1a3404e07cfa878d8fc6c420803fde6614bdac6f87cf992dfa7d595baf2
MD5 1e148e3a4e28443b57bcdb2de83b39a7
SHA1 eb8aa2e5635bc71347b9a09ebd0ca63bd85ca2c6
SHA512 9f7ff12fec2e24eb06c0df358048aa41213446f8023b867bb5b3a1d6652afa3083f2b327c606110f7da4e3ea375a71a84099d718b6eb8957fe7124207100ca4f
SSDEEP 96:8Kcnp/VzvGgAC6Obw0Bb+jXH27h5ygZVMENi5CfFJDE:8KYNxACfrBbUH23+ENi5j
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/videnskabsmndenes.inc

SHA256 78cc38629ced52378701f8c7342ecc60b5346192428411a9241fe3502b4248a2
MD5 059077737f3d4a83815023c7db409ea6
SHA1 b1cebc82634b863c587cf717c1829ffba231fa17
SHA512 68b193999f3638d836232c1c8636307c3d8f3cc3923d53d09d48aee10cfe7de0d920520f486f007d13f32b70857b7635385a85a31056075161fa691c379030c5
SSDEEP 96:uxmmxzXuOHw0ws/2sTqDoTH8gjUPKhGAzaCzpCDYQKpOCZ+BPgh/AxYto5cbH:uPsOQPs/NWs7FjQAzaqQf4+VmEYaCbH
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/vill.hep

SHA256 a8dfc87935d737f9a6795bd0cf3abc0cfcb33c671feb3c5f4d16beb5941fddc3
MD5 60c3c3373a43e95d9680037f214836b0
SHA1 181653ad6853c6cc0d74ffb5c5ed5266e455ab87
SHA512 d09b1896fa79e596969c6b92ece3c3ceb17595af89a76fe5e84f416f1a41b0911c5fee25aeec66338073bb10a7a5ecf7d9e8870b56c78403e971aaff3da4735c
SSDEEP 96:NINlhWQgx+2WlW4tkincq7e8Ya9oBaNBN67WiGqZ8juQmJfw:N0hc+2I7tkincKe8Ya93Q7W8EEw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/weighable.cer

SHA256 2489a90f1cf612931be1c80a140ab6bbf9a3ab8df0d5eeded39db7dbc0c77263
MD5 6dfc9b55aa941af90cc3d6b06fe8feaa
SHA1 1ec5fa4dc5dd03f555ca2478d7dcb15a03df52a4
SHA512 29de70d248ad7e9e00910381cf4d5a25bc6b8e1caa83db347dc6d281dc71c8f5c06d5cbf79e72d0a66af76cfd68c683d5224b529e31b0f13ab93e8f9490409a8
SSDEEP 96:6enoOGP7IARS07pjlIrAFnKjtMdMW1nMWZFQkE7lmrqzqrlEAi5R0ve98OAN0qGO:sO2pRS0dj0AlKk9w8rTrltWR0G98re4D
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Repurchased/Unmistakedly/kontrakters/Grundvolden/Banderol191.deb

SHA256 d586b372746c68e0bff05f75c09a759175aff7949a7ebc9d098d311288ab74bd
MD5 1d08dec8dde24cb16f919aa4c280b085
SHA1 82232fddf599ebd278050ef8a14388ffb8366397
SHA512 133621bc48c8a18d792caf2673fa4da1f4dd5ac7dac85241be6ffc64726746103f1c1b001bd6017c0d85d1cc1e31cf984f22f1d037fd17392768d4db530c5b43
MD5 SHA1 SHA512

NSIS installer

installer

Repurchased/Unmistakedly/kontrakters/Grundvolden/Computersimulerede.arv

SHA256 a434f1dc6e40b58021c1359d88f6f2f395a41b0f414dfca9ec9743f8073faa07
MD5 31670760e1cf81e2841fc0919d730762
SHA1 c490630e5529e217c155091047f02412b103d12f
SHA512 b41d5bb5e61c8e833930ac92fd7b7d8a73bdedff59cb8ac59ce7628bd806c994369996a99f273dbbc80c3d8e7cbebf65b37089f6bd2ccb70559797b6ee4c976d
MD5 SHA1 SHA512

NSIS installer

installer

Signed/Brugertilfredshedsundersgelsen/Daginstitutionsomraade/huslgernes.vra

SHA256 ce73f7d76abbd5e872586640be52f3bde8f27203caf520f33f5004c2dfa85cee
MD5 e1591beff767eff314ebf8bfd7188a16
SHA1 dcc2d50866f5a70744f1a1803f0dac9c24f79c59
SHA512 1f5aa97231a8fe58aa12ead91e212b7ab4c0fca72d821f6be3a24765c4ea75ee63f557c7e556df22076a7ee7b4f0b4c802da1324db4a37f2d6d9011316ee1736
SSDEEP 96:sl/saDPWJ3y7UTqux45AAkdPpa5oH+UNsdlYvl9q8shqUqLb90fxavhEXtsKtY9J:E/H6M7UOn5aK5c+c9q8YBqv90fxaYtsJ
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

Sharing

General

Malware Config

Signatures

File Explorer

UMOWA DEV8759 - pdf.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/Banner.dll

kernel32

user32

generic

$PLUGINSDIR/BgImage.dll

kernel32

user32

gdi32

winmm

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Cernuous/Anostosis/Tejlmand/Assurandoerer111.del

Cortisol190/afhopningens.ple

Cortisol190/attila.vej

Folketlling/Spydskaftets216/impaling.uns

Folketlling/Spydskaftets216/isoteric.bru

Folketlling/Spydskaftets216/jerrys.fri

Forfatningsstridig.plu

Forhaandenvaerende171.txt

Industriomraadet/Erhvervssygdomsudvalgene120/dogskin.cam

Industriomraadet/Erhvervssygdomsudvalgene120/drawpoint.apo

Industriomraadet/Erhvervssygdomsudvalgene120/drueklasers.har

Irreligise/Offsettens/chalazia/Kollisionskursens.afs

Irreligise/Offsettens/chalazia/Kvintetter.tra

Irreligise/Offsettens/chalazia/Trockery.avo

Irreligise/Offsettens/chalazia/Underrealized.raa

Irreligise/Offsettens/chalazia/abridges.kem

Kanalen132.cal

Kastanjer223.dis

Maskinvrkstedet/Zoograft227/Handlingplanerne/whaled.pla

Mellemlanding/emmendes.fah

Mellemlanding/entitling.qui

Mellemlanding/excusefully.mag

Mellemlanding/galvanometry.lat

Mellemlanding/grimasse.gue

Mellemlanding/handskedukken.pla

Mellemlanding/herbicolous.vic

Prioriter/Overmaturity/Seksualpartnerne124/behavioristens.ben

Raafilmen/Slidometer/Parapphyllia/Afgring98.cad

Raafilmen/Slidometer/Parapphyllia/Grahamism.Ads

Raafilmen/Slidometer/Parapphyllia/Sexfoil.Fav

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/linnet.une

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/pattebrns.kly

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/rollers.udf

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/safari.jer

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/sangita.fon

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/sedimentationens.gen

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/spiritusindkbet.snu

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/supportress.uti

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/telextjenestens.sta

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/unreworded.rej

Rektorer/Enswathing/Bagsideteksternes/Somnambulate/videnskabsmndenes.inc