Material_Technical Spec_Details_Rev0[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

Material_Technical Spec_Details_Rev0.exe

IMPHASH 176ce6397deb91dca8c8158bf86c99a0
SHA256 6522e1cbb35d2fa5a99b7c723852d05b8c7ebabd3bef0efb6778e4981e34dfc3
MD5 19c29717d46cf4992535f2610897ecc2
SHA1 05beae427373ca23470fd845f6cd5e474832a542
SHA512 d78b973ad9f1ad802797853a422ec54ba0358c3450459074c562053bf16da85448e7b994210edf69d6d8e5545caac80f1d79439b75c24f6631482998ea717d82
SSDEEP 6144:L/c/43APFfoB1DQU1jrFYEcFLhmFEuk+k1MrB+BKnU4NGHXnzo+DwcUyaelm:LR3efoB1hHEwufQB+BKnU4NG3k+Dpr4
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

PE Signature issue

Digest

92:d0:c8:4d:26:de:6f:69:f7:41:cc:ed:b1:40:d5:49:dc:56:81:11:4e:ab:41:0d:a7:d4:42:26:cc:ce:b1:13

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Behandlingsafdelings,OU=arlene Erasable Gonores\ ,O=Behandlingsafdelings,L=Montauban,ST=Occitanie,C=FR,1.2.840.113549.1.9.1=#0c2153616669616e626f6762696e64656e654055626564726167656c6967652e416e61

Chains

May 3, 2024

Minor OS version

1

Major OS version

5

Entry point

14340

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCloseKey RegDeleteKeyW RegDeleteValueW RegEnumKeyW RegEnumValueW RegQueryValueExW RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW SetFileSecurityW RegCreateKeyExW RegOpenKeyExW

shell32

ShellExecuteExW SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW SHGetSpecialFolderLocation

ole32

OleInitialize OleUninitialize CoTaskMemFree IIDFromString CoCreateInstance

comctl32

ord17 ImageList_Destroy ImageList_AddMasked ImageList_Create

user32

DispatchMessageW wsprintfA SystemParametersInfoW SetClassLongW GetWindowLongW GetSysColor ScreenToClient SetCursor GetWindowRect TrackPopupMenu AppendMenuW EnableMenuItem CreatePopupMenu GetSystemMenu GetSystemMetrics IsWindowEnabled EmptyClipboard SetClipboardData CloseClipboard OpenClipboard CheckDlgButton EndDialog DialogBoxParamW IsWindowVisible SetWindowPos CreateWindowExW GetClassInfoW PeekMessageW CallWindowProcW GetMessagePos CharNextW ExitWindowsEx SetWindowTextW SetTimer CreateDialogParamW DestroyWindow LoadImageW FindWindowExW SetWindowLongW InvalidateRect ReleaseDC GetDC SetForegroundWindow EnableWindow GetDlgItem ShowWindow IsWindow PostQuitMessage SendMessageTimeoutW SendMessageW wsprintfW FillRect GetClientRect EndPaint BeginPaint DrawTextW DefWindowProcW SetDlgItemTextW GetDlgItemTextW CharNextA MessageBoxIndirectW RegisterClassW CharPrevW LoadCursorW

gdi32

SetBkMode CreateBrushIndirect GetDeviceCaps SelectObject DeleteObject SetBkColor SetTextColor CreateFontIndirectW

kernel32

WriteFile GetLastError WaitForSingleObject GetExitCodeProcess GetTempFileNameW CreateDirectoryW WideCharToMultiByte lstrlenW lstrcpynW GlobalLock GlobalUnlock CreateThread GetDiskFreeSpaceW CopyFileW GetVersionExW GetWindowsDirectoryW ExitProcess GetCurrentProcess SetErrorMode CreateProcessW SetEnvironmentVariableW GetCommandLineW GetModuleFileNameW GetTickCount GetFileSize CreateFileW MultiByteToWideChar MoveFileW WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA lstrcmpiW lstrcmpW MulDiv GlobalFree GlobalAlloc LoadLibraryExW GetModuleHandleW FreeLibrary Sleep CloseHandle SetFileTime SetFilePointer SetFileAttributesW ReadFile GetShortPathNameW GetFullPathNameW GetFileAttributesW FindNextFileW FindFirstFileW FindClose DeleteFileW CompareFileTime SearchPathW SetCurrentDirectoryW ExpandEnvironmentStringsW RemoveDirectoryW GetSystemDirectoryW MoveFileExW GetModuleHandleA GetProcAddress lstrcmpiA lstrcpyA lstrcatW GetTempPathW

$PLUGINSDIR/System.dll

IMPHASH 4f33ea844b96a31c8f4690530ba63854
SHA256 f917aef484d1fbb4d723b2e2d3045cb6f5f664e61fbb3d5c577bd1c215de55d9
MD5 d6f54d2cefdf58836805796f55bfc846
SHA1 b980addc1a755b968dd5799179d3b4f1c2de9d2d
SHA512 ce67da936a93d46ef7e81abc8276787c82fd844c03630ba18afc3528c7e420c3228bfe82aeda083bb719f2d1314afae913362abd1e220cb364606519690d45db
SSDEEP 192:acA1YOTDExj7EFrYCT4E8y3hoSdtTgwF43E7QbGPXI9uIc6w79Mw:RR7SrtTv53tdtTgwF4SQbGPX36wJMw
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6730

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Fllesnvnernes.uno

SHA256 5a4dd09fa6c2f2334970918828e2b5216560fc942850e20f67f72923558b3099
MD5 6a7cc5f5cecdea9718e221625e0ce463
SHA1 90477e728337c001f50679532548281a9c988369
SHA512 2379bcef76da1a8c7d42e9a4c9f8d684ad1f6213ee76c0cc4b268a20356465edff873a6f7136d60caec2c6fc9b71c5cc763e1927f76ee777c73d9810ca058ecd
SSDEEP 6144:7HozslbxKUTYYSmONbUlK6xqfZcxkPhKQwCZ:7Izib3TNWbUouqRukpDFZ
MD5 SHA1 SHA512 SSDEEP

Formaaende/Cloff.det

SHA256 c83b3461dc811fc93485974e626bc184cac694f20d4bbd0db7443660de9680e3
MD5 e5edda61aa55b4e2d45b05f4a12b79bc
SHA1 29f9728e7ccd6aca6c74c661682251d8b034b941
SHA512 4b23c281aa0ce1d870ca9d78ff5098803c93c32833a7ca80728c33baf0b2ac13ddc0698fb65151ba05d5d0a26803a528a901fc2507eb35dd3fce5288febc1baa
MD5 SHA1 SHA512

Formaaende/Dirigentklokke97.kil

SHA256 bdc58f336eda30af65937428061b28ab785bfcb6e9b1fa05174e9bbdb8ed1e34
MD5 2d3e1a163cb35249987f81d36355bde6
SHA1 39ea64179ee7adaf40c1f28d8fa91cc265e4aa0f
SHA512 37b08d7f7a2e9f4686f418604731c7a343018a51dc8ac33532efa32239506770dac7865d5f85feca5b1fb23d461ce27bbc597e61b26ee198f813182b89f15dbe
MD5 SHA1 SHA512

Formaaende/Erythroxylaceae76.dej

SHA256 7435e62c45eea99b907888fa9a2b3debdaf6690cc414a132cad441faeecb104a
MD5 c86e65d28713c0ac785df939a5a55297
SHA1 19bec72b29b2427d310c461ded8c0f405cdb88ec
SHA512 4474286413ba078ac6c6d56fd060c12586ea15c17492871110dd71a9385d63939abf26bbee570ece5b019c7f5a1778ebcb230af9a8bcc2a71c113b86f0088790
MD5 SHA1 SHA512

Formaaende/Lillith251.hom

SHA256 0e6d6e02660e83268f07b17d6d4758ac46a25ec1e6ded878f9c10a21dd30b150
MD5 7b35650e7aab4dc63a69e4c728cc06c4
SHA1 3c39a33abb341447e2beb40d37ba3b47011cd39b
SHA512 0f816d9f78c08250c51785afa26ed7619e4bc0a1e7eed36e2389d760949a72fb05ee293acf3603c50f734864d96c66f972fd181aad5c532614fdcba0de23e40e
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/clogged.jon

SHA256 96ac54f380809f747170800dbd72b4f8ca2e01b45b552fb731f2af53de2d6a71
MD5 b0bfa1923bb4cb794aa0ce584f74d2bc
SHA1 11fd2b8f4d5992699029c51fff8e315b49be3b7d
SHA512 e857ee9fe5e6cbc13a65d881383691241911ed94079521e3228c6b31483cde6105c166fb734fd9758f9516e96984736ef3762e2421a34179612f42e4c57894d9
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/dotlet.tvi

SHA256 226a8614127efdb31f8870cb42a28c5d5aa2310cf455b1eb206f838410190ad0
MD5 6645cc9030b582045adf13cc56a121a9
SHA1 e151c1bd1861cd5ea73585a9ec5197705544a5c1
SHA512 f4535e67abdd8ba15befe2f6868f521bf06cac41bdac6a33595bdcba26d574e9574c6a48a4865989f1798ddaa998a9df712f25d976a6d5a1e2d8d8ea10644c8b
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/elektrode.mde

SHA256 788fc6d532f92d1a24d65f7a4313d7b95ac53193781e62fdab4ac91baf37d467
MD5 b73d6bd5d1066c7cce85eb2c1742c491
SHA1 369d0578e6f8ceb53587383bff00ac84f1989a7b
SHA512 1aa2b530b96290c1ab948943270226f0faf26b79cbfe302d3a906890c4dd92dee851ddb6dfc697cc3f92fd483661c254675de6a647f5bade0a2a0d27e12e89d3
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/enneaeteric.spi

SHA256 0ff38b7bb35f4c188c8b7665f2fdad8ffcc17e10eaeecbdd6862262a230e3c97
MD5 9f3821121676cefb39336fd6ac62cae9
SHA1 e99cf6cdc3dd9fa6e3f7531a9e1072ddf07d8777
SHA512 426f6b4f6a47c4a7954293314a37e2b6c2ace75dd9fd8d3ce7a5b4b3f5e80b960eee30db80e549ec8941ddb21a157fe6bf6a08414cbdf5db63e2dbe7224c0784
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/festligheds.ast

SHA256 95492a32fee6f8d48b534e40f4bc80b37c99ca98be8325837592ef5b96ba7e0e
MD5 60b3163f0d661820f755c984f60eff50
SHA1 ff9a8ab8a56ae5364dbb81b7f63297d44e4af7f4
SHA512 b89b557b76950acc66b6b186295f228cd55eaf308d6e51307aa0ddf065eeaae2e087591136cc89077fb940d63295949d6c3b3b85f9d6c1893920f35052b7a0fd
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/hammondorgelets.non

SHA256 19cb9eeb9c5407db6e569b7e267eb46ce77d1576e5f56e909941426bd103bed3
MD5 f9683af524497fd2a9e55301ca3b4eae
SHA1 8a34ab710b28c98404f309461246f757482ca953
SHA512 bf82c23a36f84951431b5d5e70c2e1553c303eb1a19e1cd8b2779c063e9b988c1bfb548e031529b263afdfc7ddedc9b7729fbfd0be7afd4394aeaa2e6c747f70
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/havel.non

SHA256 dc7c25fbf37bb8ff1ba62a5ff542650c59247bfeabb81268c5347f4ac7293505
MD5 0e2f96553fea751e7305781315384f54
SHA1 5ebce47883291bc7ec90de5c124afbdd30de1d08
SHA512 c39bafc3d3e27fdfc8ee233eefa99c78a90556782a96a266e8016a65c39f2f0307261585727aed059c9e4542d666b372104f5653d4aeffb592d217996c76c1f2
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/hud.fru

SHA256 341e867ac8adbe507386ec13ac9c1d4b6f3fe72ee860ab4f13bb09db54cada8b
MD5 845d838553b3e7362f36318ca138f0a5
SHA1 3a520ea9ae121a670f85d31d4029f88fa8ad6b25
SHA512 fc017f17162542284c2e19bfd71620fd3ab4f23193069bddd66bc837ab238ea19e8456b9ca2d800fc0a50f0e568e6c78ed64f67cdcb31b96bf1dc12fdd892ad5
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/Vulnerary/notencephalus.dic

SHA256 dcfc228558744d61f7da708cc42ee2c76e7fda44ad8edecf0e5e57807957174d
MD5 252875f8a08d4f6367e6f9194f3e96bc
SHA1 30fa17a46e6eba162ebdbdd60eae3db00f58ce5f
SHA512 d413f5abee61697f0f9beda7932eb2fff9cdc8ed09b2275fb530a139e965c2a2a1966eb6414be39efd33b727f6cec9df7e093705dc50d24ef5f41685c53b01dc
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/hylobates.unt

SHA256 5f5ca353c59d2423511fa0256e584e80c455c9dd116d5767e9c31a0af9f6c02a
MD5 bd4071eefe1e864b280271baf57cd7ce
SHA1 6c32ecba9339403651aa440edc94c58c899c749b
SHA512 2fe0c30974f263895674582fd760281ab641328cb6265b963b39d7911311d91eb21995fc0af27909a3e4e684cc53700b2fffab88573f83ec4771f0dcbba0ab7b
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/illaborate.the

SHA256 52f94f8b88a575b4085841f4fa11abc40ca8e9c9f352696139cfc8327dcc2f19
MD5 fb5e4525c03636c8645aab37f830ed3b
SHA1 3928c000c208a117ccf2d2eb2cdb76d80627c56e
SHA512 eb9d39fa917817e07c0d40102e1bd2a0d8428abcf09965691d8a621632497d4c8a0be33e72d499accaf221eb5b64de42d996c6acaa91e75021fb10fca7f3463e
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/inddmmendes.ber

SHA256 f5c9e97212524d18e3a6989b822ed2a21bc09df4ad54dd3a7fde90e5bfc051c2
MD5 41d8d175e0aa18fe0a263b2288efb9be
SHA1 f9d5c9b6068d7632f1f001fe90cac4e061e8ddbf
SHA512 4188cab48971e1e1f708f9fcdf0d9e8fd9e7cb23ad9514ecedb14cb8a46928de7c48749932ef1a26579c6bd465168a03791ea8df481388df8875021d65bfdfc3
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/kastepilenes.sto

SHA256 bd9c7ec94d1f82ebaea7e6ed499f94636ef0f1c328e2340c4692ac355e95d8a9
MD5 9ebc85e5dbebee3fe93725d3a05ff768
SHA1 9941895d67434694532d14607226ceace52ed85d
SHA512 beb6d6393568a630fe7f9d817d9350c73f4c42b8ddf8332217fc91c98dbbed5746fe34e18dd6b9a2c9126dd04c933b91804b0a37ff1d0437e9f6bac20f98e194
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/kreditformidleres.und

SHA256 45237b0272fe10e9966be373cdd1b2cf9cff6e3ef336c70a7a0816a17149b64e
MD5 7ab6e6277704fe80c3e709d5b28ef94b
SHA1 13b67c32868a3f63109dd4304d1b52c3f31fd753
SHA512 62fb7031dc256857755f4f1202ba962d12fa60125beb7b21b166c652b34a38f4d1a691e1359445b1d4db29e5e7ed05f970f7aaa76ce0cc5ee5dbf24027da3d47
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/lavenite.nse

SHA256 baf2fd45aec5e85a5c6c25351369b213d1a6747ad9dded3cadff672c13ba35d6
MD5 c63b181fa4014672c2c25614bad1cec6
SHA1 26058fe5f472fc75147a6f2cdd194bcadb6d2847
SHA512 9e37d909edd7017a6ffe17d4b1d269de99a8668829247c35ae9f1430ec41812680b33943f4575edb983ff29d8c9f4f1d416c73bb131d26fcbdc0e61aa3e9376c
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/mindevrdiges.pre

SHA256 1048061c434a72c3caae31ab49d610de24c6e5ebedf3a44f0b152b08c8883296
MD5 25554d803f80a812ee52d6ba847c1c37
SHA1 0a8c46cf893c54aa419922fd722cf4d9daba134e
SHA512 ac18429496b5757c0c47fad367948d79ad6d7fa2c128306fa4259acb3e9fb4dea299b41b9d6d05183589ea36ff12b8093c12e9cfa2380bfebf10d29612f28a8b
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/mouthier.awe

SHA256 62d5df4db092986025f70c0bfeb16c65c4e63f9534e913c2415b13546c4ca1ed
MD5 5f025e7b865bf22ac1a2d0f29ccc54da
SHA1 37c00584a38e061e9fb9b4ff1bbec193294aa96f
SHA512 71d68940b55a81966c7ff8fcd2e97f220ac0711606ca80d1af9857acc0154d3799894777f931f8c13ebf8987bdbfa876806d64d3a068bf7059649543546da7cc
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/nonsubjectively.par

SHA256 4936e64e9ff1804e8a4dfb4823ace86f4a45b9a91b0fa8e006c699a8c3889ebe
MD5 e281c500e4e1b1236b1395ffe6f80ccc
SHA1 ab03a27179f5a1541f124036435f5ca6e8e906ec
SHA512 46889e263841357cfb2ca1ba4797a7c959c9a322a0ae0ed284f9e835d5fc508294e500221829da9e7a4acb44883fc911791eaf5135b4bbda556460df93b6700c
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/bandolerers.taf

SHA256 8be902790c392553a4efe1b89d0c82928e03c55fa1e18c65ed99ce6b40c03465
MD5 f17be46cf45ffa07c1afef01e2343d8e
SHA1 011c9fdf869398e5eea6e49ea9a6be9ce39a14e7
SHA512 30b08372c1aefdff6ca4bfb4009958a31d34fefa01c98520840598675157128ebe59fd21ea592ac0527c7cfab0e4f13ccc11f5fa41a5a496acc3b3916eed7080
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/Fstebondes/cirrostrative.fun

SHA256 395da67efd4686517f111c624ce116e0d1e5fdc098f80bd8ff1ecf23c6f5f564
MD5 e8df30b4eabb4c0508245a5a2bc0194d
SHA1 6a880b624f664ca04b785781015a488db1ed848a
SHA512 80597dfa261121c7e6ecb08225a928cfda5fdee1b2e1a335bf277348a3122bdca8801d90477a2c92e3f963eec7a1b92d2d1ed5fc257166af6cc3743438fd9da3
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/antihistamins.fes

SHA256 7724eb972b83a1e55da8dcbf0e001cf4c190114353cbd2d1e39fd9b8a4e59225
MD5 90f83153cbee93d6b6c9f4682ff89b1e
SHA1 230f14357fd8cb6f356fb0ac52c385fb7ac34507
SHA512 a8a4bed76cadd4b380ad92d62ca3c5769b868b74e8e0bd9a5797f4bf764ecea723b077d863a37ea9912e57d89e54a06c6693026a99f5eb961bfbe5239467cf75
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/authorish.sta

SHA256 5072b70c29f8fb4d75d9ad3eb050710fdb88721fff54287e5df4bc601b2488d8
MD5 b02f1032f6a01beae20d7e1076253e3c
SHA1 0e61229f3ee09694d0f53ab6d48495b06326c26f
SHA512 cdfe3824e71c907204a731eb0bface22dc3dd88e64a96d22a8a9c52d65b4cfc6e56da8cc40b264c94ed7571e182458ceb85cebe9c234958d3513890024782ea7
MD5 SHA1 SHA512

Formaaende/Pianos/Uvsens139/aviss.pac

SHA256 c9d1b6761a57cbe0ab0f66263874f4dc08274ef0d87878b5e7368405ae6f6694
MD5 ade99644024ad8a068cbbced79e5ce4e
SHA1 31707de7fe1c8417a242cb86eed41788903701e0
SHA512 681ceb7cfc2d78f55e4060a49442a6066e91919a8f73a94c41ed03caef320e335d4991a7103294c83290e84f845509f2df48699f1f21105e9b41b4969b02aad4
MD5 SHA1 SHA512

Formaaende/Pianos/adresseseddels.luf

SHA256 d770800ca143d53867a63a2f3d663b506284b5e35fb052570561699f3bfbb383
MD5 43736880730f1c6b84f2c4deffdb3c26
SHA1 64f13e2750ff22096fc5df9b3a39f14fe61684bf
SHA512 c34fe1fef3778ccb01749c27d12a8820e40c313d034381446ea38e101b0f888b6de33b2d8aaf4fd5b22d28cf33939e592c11e0961511f2be9f991b4ca2cdbc36
MD5 SHA1 SHA512

Formaaende/Relativpronomener157.sum

SHA256 d7cf040f0d1bc81d681cf1bfa03d134e156da8c32eba09a80cbbcec176c70812
MD5 194c627ace049b40de62e0b9781b548e
SHA1 991ad6808d22eb0cbb6c0e4d530c198cb93b3484
SHA512 bb83b7dcb5286b62742bbc1ac9d55161e3bbc9f331c4a8d900d47dd7b6360c1cdcee6865c82ad57ef06f10689d0ed9678e575f2a8851bdc9b3037d7d3482d8cf
MD5 SHA1 SHA512

Formaaende/Rollingen.vow

SHA256 920ca0d41f22780d79540e6989f07659629793ac787cf73841700460b12e0ccc
MD5 872aecc79e834704faefa1b57a95f6b7
SHA1 dabfcce138b7ec84c5f2182d59cc542cc534001b
SHA512 489331923bebea3fb57820db08d7632e74c4d1563bc483726c48be345818759430f5c02698ed59aa901d5334988f72325412f057fdecc0d2896b31b9359ad6b2
MD5 SHA1 SHA512

Formaaende/Tesers201.clo

SHA256 26b650d049b734c25aff58c2bf77661e2b54efec8aeffd086900440823a90c7e
MD5 b0f83e6bce497963f6798d8e618546b1
SHA1 893063942d45b95d6febdbab2dc9e806872d45e7
SHA512 3543cd8d2a1ee348540a4ab584f91f4a5e3e800dcb489ec6b67457666d1c462029335a85df9ce3f2ed354b5a12de8c7632b9de414df53721ae3f6013e7522053
MD5 SHA1 SHA512

Formaaende/Udenlandsdanskeren.ree

SHA256 a53a03d5606ff5de6001617b0b74e8087a40fa677be5e28357eb98c279305f59
MD5 a679a6a600aaa9e8ef9a97bba67d9b73
SHA1 d456e03900b4bac5cd9d2c720c58928ef2a51b31
SHA512 e7e3b238f59cadf17d5eb03740528cf4917cfae91c86063298f40c5180d85ea38113446b6c8f92ab0994b0e584744f64fa9ee37aa64a788a08a7b06451a44507
MD5 SHA1 SHA512

Formaaende/Underderstimuleret217.dic

SHA256 2c0c9cd3ad4847ccce46af25f5e9e273d6b6c8130db917a32d01a2afb26b11d1
MD5 40e6f1944e9d0319e2d5f6c6c0e9d5dd
SHA1 4198467e8a4ca19553f35a5437bbd4c0cb64ea92
SHA512 1a58d16be92daa7226ad12cdb6c2dbf56a548a8c2cfb24af46ff74373509f26a02462ced19e3382baa45e4149397b0c2c178c81955db33dd6a24445261f3445c
MD5 SHA1 SHA512

Formaaende/Xylofonisterne.kne

SHA256 89d41d55b52a18be3f1fbb11f63803f10b08f373f91122f0614255eedc81da1d
MD5 386072a8aeac4a9f6402f54bb11be4f5
SHA1 539c16e988aa1a11ef9751bed1f9b49bf75a3fea
SHA512 0894b58fc10220599f4968126252df102f30629e642b19b7039794d6ad6ec4f7e2bab8d6f82dbc5915a66b8ad53ea9221576cabd2c566777a8ad0ddc2d49d7c9
MD5 SHA1 SHA512

Hittebarnet/orbiculares.the

SHA256 36864884b26327705caf70fa8194d89ae0bffb805dd4c4064cb87874f42159ff
MD5 88eec991c733f179e7eeebf963e7779b
SHA1 c24b8fcd5e8ef7900cfe2cf4682933fa3e9b411f
SHA512 edb930b7f7fe46bc7d0d4eb47fbf80dad36544fc93217b91d6a8100c44b688d418d3075e5664a2144c373e7bd59a8238eef483b53412e2636f8d6428a65bcc53
MD5 SHA1 SHA512

Hittebarnet/outbids.txt

SHA256 afc2fe74927361b50238983df8852afc773f05caa46cfdebbc17b3e7944f721e
MD5 0bce7bc373b5c50ba899a369b4b3adab
SHA1 baa733eac8a841aaf0a954c02beda6c287e75091
SHA512 c85cdc024282a16ec1f686a9a284c0aef934695510d08ae781ac73071ecdb699b23ae58dcc5c16e0e208b135a4b9d24d4763908adcfb7bb54bf65af79858eee2
MD5 SHA1 SHA512

Hittebarnet/penney.dem

SHA256 dd75404421ace2c2124801e5ed6364c51674ebde18e015358779635c62075146
MD5 a46ded13cbe0b3e927b358a8c75a011c
SHA1 4fa6ae73dd664e2b6ec84efe1fe5b4be0a9f1fac
SHA512 1a2f1d1d4e5bc0a86ad6a77612d243d0b4d0b750ca0f4f4e0e6c5f931f0c1336b29830a58bbf498d395a64eb51a91d2e5377a8f58b8f90ef86f3ccbe1482309b
MD5 SHA1 SHA512

Hittebarnet/pentti.kol

SHA256 f5cf48eb90b0fe81d2b6c73d71af6925869917b0aa6c871023f01973728d04e6
MD5 0a0330d6ed6bff121de1f7d1419d82d3
SHA1 18585219afab9042c526a049ed3fd9e8ad643c6a
SHA512 6daf8083ad9d9c3d6b32d6b4e12001fe03275811474cedcb4841a30e0f8e94190df3e4a1bcb0fb98f4b5cb7be996b716ac94c5a2a89a94b0c08fbcfeee203fd5
MD5 SHA1 SHA512

Hittebarnet/resegregation.ant

SHA256 7ee9e62a426f2ee73c4165ecf44b3cb8f283ba9cf0252b2d9a52af5d286acc89
MD5 63124b9aea10fb0310b548a4c286f339
SHA1 a3a7f6a98ea4356d9ee577245340e917e2af47eb
SHA512 0dfac8e74f5a9a178a6d111f29f3f814a187af045175e88a70d2212fe7e8e4301cea998053cd3eb39868930b1797b301c6e3f7bc27d21866c8f99464d6ab9e70
MD5 SHA1 SHA512

Hittebarnet/retack.foo

SHA256 958f81439101cadbbdfc8ba214583c077faee8e212eed5c32e4a552945adfa5f
MD5 5180614b3d83b8d18dc60af84bd0782a
SHA1 3e5ba99062fc02fa13f7382c668381d54cdc147d
SHA512 23a958370d344b1aa32d14cdcd4071524d8de8cb66b8c8089fcbf2cfd2551b71dfed7699a8611ab54cdfdc50bccab8ca218c5ebec51233973f407e0408b7fa3e
MD5 SHA1 SHA512

Hittebarnet/revolutionisement.sva

SHA256 4e7cc1b5b5dd5e4018a565296129c212fc83fcc31f4e393b9b7e8d0a33f3063e
MD5 01236b77433db4e00f77c4f83d1d818f
SHA1 a6292cf283ae8ba78235596a8c3311ff12470839
SHA512 40b9e9a4ae1076160fe7e4f074afa67cd149f530bff6b35878b694fad234c22ff0bd36984fd27c7c16041e1bcfda6128916702b67eaea318964b41442fc3c396
MD5 SHA1 SHA512

Hittebarnet/slushily.mal

SHA256 9a8aedb5df4cc2e8e1ca4661718d847abf97c8eed6467e80ed5b08963988e8df
MD5 7d4d0fe36dab375a88eb4b83fcd52b07
SHA1 902bcbf71d81ab950198b7e69bd7f284f40272b3
SHA512 b92b5d4635bee19cc7cd1d4bc0cfa2cbae5b4c2e7533bd0ae0a82abb02435277fafa25d06c74373dd493c86d0fcc7a58d2b8491a95e48404b9474bffd76f0990
MD5 SHA1 SHA512

Hittebarnet/snekkehjulets.scs

SHA256 bd21c443e506ce2c808eadb4672cacd60bb64005fc06b56302c2765abd3061e5
MD5 e50af7c4e8b5f34abdf7121bba8f8305
SHA1 0c4c1d25cb716d649f940bc6ae7e6a1b911b600c
SHA512 5a0c427d9ddb1712dd31fa32478a57a8b00c2a4413366e8df399e77586ff8e0204e4ff818bcf9c3a69d76bee95f8bc389c7dc066f680a6b0d2ba0b6eb5e388a9
MD5 SHA1 SHA512

Hittebarnet/srkermerne.dat

SHA256 970fcc5b69c60bc5fce6c7a41c3d230d4565dfeb2ca33a754f88209dabeb5d3e
MD5 99ee9b0d813633ff1f21a4e74fa80e11
SHA1 aae33eec37fc34c0962da963519cc98441735026
SHA512 1fbedb41a5a11c7176fbfde05c3dbdc7a83cc4e94a8b8449c1731256b824e00b1325bbdab08c49c46de64ff64d4e8995c1028aa789cc7bceee45f3490b2d1d63
MD5 SHA1 SHA512

Hittebarnet/tilsandende.afs

SHA256 2d70ca7f7afa0f2dac85393acd73213c7116a06f90552a07a15695d52d4ca05c
MD5 90b7c61d7031dc6da97e0ef5be4fdf18
SHA1 36fc8916f8f4d5b6affcaaf891d8de3361a0ab8d
SHA512 396c792a48229b2d6e43d96b94ae33b7b7200442546a7de9afd02ca95c316e06ae726c817ac3104e2dac85f703f5dc78dd3af61e89802c5c99899ce4d046ec62
MD5 SHA1 SHA512

Hittebarnet/tkningernes.mol

SHA256 1ede96551f01c1c00e2cc921f8dc906f998a5dbbfe0bf046a2f4a8a988964887
MD5 6804c594d49e5625003e65a26d3c9739
SHA1 97c86c8fde33ea7d1dba7e5e23bcdf073ea470be
SHA512 c62eafd419c2d3861ea2da4a297780d64a5a2565c36a0d0fdfc26fb98e7d8abd2f7a45963dd26cf80af0cccc0263259c8129ca9cd8563f12399fe3125ea3ecba
MD5 SHA1 SHA512

Hittebarnet/troldbandt.sys

SHA256 b0dd7b37cc7ba2d01bf05c9f6829e633db7931d378bb7afbf775c25011fc647e
MD5 48949ca9746a17612b082fcd182ef91c
SHA1 3b81fbd3aa9903371f91a8b87bd86370679e25ce
SHA512 1026045fc485ed90d95c13a5b7586ae11542cba78c534b75de01ef176c9b6c46dff84525b3727160e276d978bc0f0e2d73d3926332198baf7ff65be7045d0056
MD5 SHA1 SHA512

Hittebarnet/unbalked.cyl

SHA256 cb5f6489b6c0487dfcdc783bb4d48d307e27131834afadbc7e5c3ff4ef047fb8
MD5 2af192f2614aa975687464e11358eaf5
SHA1 6ae9717b3723abd492cb7c9dc6e6d6be6107729a
SHA512 c893c18e8d495132a20fae0c893c1055e3372e68913c33249fdccec2b87c998a78297cc89d6f469053a6a7aa1a6e8e36af8266af71193fc8f599507c6efacdb9
MD5 SHA1 SHA512

Hittebarnet/unmaniacally.ove

SHA256 2726da30a1f7ec19b3297ccbad7df7ad2a7cfde97ce161e30e7a4e9b4ae65307
MD5 6ffcf03ba42d5cec8433afaea4aab2b9
SHA1 cc13072b425b333387cdff3f0f3e2cb788ff8214
SHA512 bc8c661bef05c9ffd03862b8c4148275fbfa2b06f17174accee13b3368e998d1de8c10638e4d2d4b54b25504fcd2e5c3b17765174709ec19b01966d20651db09
MD5 SHA1 SHA512

Hittebarnet/unsuccoured.gru

SHA256 2bbe3285180a94eba1b82cbd830a4bdb4627fd36009d68d2880226aecf23e2ba
MD5 2278f7c6e07ad0fa64f3635523d2c5d3
SHA1 2378c74f456d2220cba9fd492a350afe55841e57
SHA512 18ea9c283c5a38eb5615794f53e0215b8061639223ed06a36cf3a8b36352e819af2ebb2f79038b3f3cba59600efac4d041b2b170a6fe909ea4e1f0c8a70dfd1b
MD5 SHA1 SHA512

Hittebarnet/vulgarising.tyl

SHA256 5985a8fa66c5a96d43b50c5acfd86e89d56fcde79c0a07146729a9a6fc9b8e15
MD5 a831ed9269ae483c6ae5be2f5e6f2a1a
SHA1 828f475b2b1089fa33eebd397dd53c4aaa3b29bc
SHA512 e1158466ca6e515341da6581b890bd5d32ffcfa6328d227031fe99ee79d4a97bb312c73d877c28698222a9d4f923a63eb3bfe7a785e77682cee67995472f02ab
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer

Material_Technical Spec_Details_Rev0.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Fllesnvnernes.uno

Formaaende/Cloff.det

Formaaende/Dirigentklokke97.kil

Formaaende/Erythroxylaceae76.dej

Formaaende/Lillith251.hom

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/clogged.jon

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/dotlet.tvi

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/elektrode.mde

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/enneaeteric.spi

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/festligheds.ast

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/hammondorgelets.non

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/havel.non

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/hud.fru

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/Vulnerary/notencephalus.dic

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/hylobates.unt

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/illaborate.the

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/inddmmendes.ber

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/kastepilenes.sto

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/kreditformidleres.und

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/lavenite.nse

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/mindevrdiges.pre

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/mouthier.awe

Formaaende/Pianos/Uvsens139/Fstebondes/Ndplans/kontaktflade/nonsubjectively.par

Formaaende/Pianos/Uvsens139/Fstebondes/bandolerers.taf

Formaaende/Pianos/Uvsens139/Fstebondes/cirrostrative.fun

Formaaende/Pianos/Uvsens139/antihistamins.fes

Formaaende/Pianos/Uvsens139/authorish.sta

Formaaende/Pianos/Uvsens139/aviss.pac

Formaaende/Pianos/adresseseddels.luf

Formaaende/Relativpronomener157.sum

Formaaende/Rollingen.vow

Formaaende/Tesers201.clo

Formaaende/Udenlandsdanskeren.ree

Formaaende/Underderstimuleret217.dic

Formaaende/Xylofonisterne.kne

Hittebarnet/orbiculares.the

Hittebarnet/outbids.txt

Hittebarnet/penney.dem

Hittebarnet/pentti.kol

Hittebarnet/resegregation.ant

Hittebarnet/retack.foo

Hittebarnet/revolutionisement.sva

Hittebarnet/slushily.mal

Hittebarnet/snekkehjulets.scs

Hittebarnet/srkermerne.dat

Hittebarnet/tilsandende.afs

Hittebarnet/tkningernes.mol

Hittebarnet/troldbandt.sys

Hittebarnet/unbalked.cyl

Hittebarnet/unmaniacally.ove

Hittebarnet/unsuccoured.gru

Hittebarnet/vulgarising.tyl