0a46b6255876b15fee60b3e9b552c02a050429604ef697604c6ee60873dd13c9

resource
0a46b6255876b15fee60b3e9b552c02a050429604ef697604c6ee60873dd13c9
unpack001/$PLUGINSDIR/System.dll

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 0a46b6255876b15fee60b3e9b552c02a050429604ef697604c6ee60873dd13c9
MD5 f40285af80299d44d1ed87510cc7abde
SHA1 bdc5c713863ca9a76c53afdbe31771e9234b5332
SHA512 0f13e8af9a16569f4df69fd05a4c7db6d2bc79531988f6abef6447ea721d7b6b89c2e04ef16c59f13ade3f2cf3bddc6cc4d8189318d31330776516d139e960d6
SSDEEP 24576:ktdCzxWfKe9UFpDJd5vlltSQdcVFA0TMnoaQnykh8sIbAk7uVIBpOG:k2xWfKe90pn5v/42cVFhvxnVIEkSVG
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 9b93c61c9d63ef8ec80892cc0e4a0877966dca9b0c3eb85555cebd2ddf4d6eed
MD5 fc3772787eb239ef4d0399680dcc4343
SHA1 db2fa99ec967178cd8057a14a428a8439a961a73
SHA512 79e491ca4591a5da70116114b7fbb66ee15a0532386035e980c9dfe7afb59b1f9d9c758891e25bfb45c36b07afd3e171bac37a86c887387ef0e80b1eaf296c89
SSDEEP 192:eS24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35OloSl:S8QIl975eXqlWBrz7YLOlo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Domsforhandler161.Hje

SHA256 b0ca764d3cb32150f5bd7f0a9653d572ef7a006482fb98529a7ad60af24e7392
MD5 ff1ddf6ce9666cb7e2c6858ff5a62b8d
SHA1 7f632f6f29beade79d156b8d333782614218ae70
SHA512 71fabf6989d8fbf38654fe6e72c06eb3ad6a03dd1aece79c952bb9fd6739adce19342416969e076a29ad43955f6567a58df7e7b2e2dd7ce9377f8ffcad19c5d4
SSDEEP 6144:r/zV0pFY7APaMrAW1e8KHMjTdfn0GJ3OFJRw+iMsldXId6V942pQ:TzV2FgAPaMrB1fpOFvwjMI1ns2G
MD5 SHA1 SHA512 SSDEEP

Egennavne/Triplicated/mastering.ska

SHA256 e2a31dc15745f007453977fddac36a68dfbaa4f2153c5b96704ab51df407bb79
MD5 cba3d7aa64539e960f2593765d36edad
SHA1 19be741d93ac16ebbae57e44939262cb66c49ba5
SHA512 07597a2602941e44970a7407db3428a8d4cd7ba61ac547450549ed1364160e3c69f9d9d2b5c6087e6acd970805336cf5a637ddb44c27e26b89ecc24c2d00fa06
SSDEEP 768:tKumd57dXZU1uxSHFeRLILtj/PJr2/J2b2qc1wepiUL/:sj/EQJb/
MD5 SHA1 SHA512 SSDEEP

Egennavne/Triplicated/seismiske.kra

SHA256 5210e292447c4a7af41824e03f3e7c269dab75cc9f56681c69b7250d921c0dde
MD5 771f7ae6dc9c53d1e2af92c35bc88017
SHA1 51a94104209c3e218296836d310b026c05478395
SHA512 8f26928b2ed2c69269c5c65dee2d8d16dc67251aabe3554febd6d4cffe7d06062713787ec1e29a512eca93e8cf5aaf9ef38d039847be92c92740178ad868c010
MD5 SHA1 SHA512

Egennavne/Triplicated/strygersken.txt

SHA256 6d7d4706747937c3a82443357398d223c1542dde2bb04325140bca3022430325
MD5 e516af6dfe1a4685706d7dfdad27bafe
SHA1 e6977b4c97451db14c5cff92081ec1135aabd3c3
SHA512 943565d647c2c192eb40d35d8a41374958183ead6a03b7572dba927aca491ae6df13b9e9967f39117aed37cc491098b956b5291344ac4f9f08e437068a04cd08
MD5 SHA1 SHA512

Egennavne/Triplicated/tabslister.kor

SHA256 7a99e9ebbff05e6f63107c23207ed6ddd29a68f4aeadff259b2ba86b40855acd
MD5 ebd542c94710d7302ef51193c209c460
SHA1 9a4a6f60d556186ae7d08ed9ef1798ca2ee28765
SHA512 845e18fad5b0d237417cc499b80100e6637586de2760baac0f78d6f2163f390b67eb60eac0bf0a0482214281cf2a70afd8e37b93fb3bf03a5f9f291a374c8ef7
SSDEEP 768:EbUYSPOohi14ufisUP3ybETvkx5lIva255IVD5EgpcI6QPOA5fUEA+K/Sa1JIGS3:08Ppufuie2TjE9VApnESTFCoGl6dGdM
MD5 SHA1 SHA512 SSDEEP

Egennavne/Triplicated/udbedringer.ing

SHA256 d098355107eccfb850a106dbe42718da77448e1836d8575f35c2bcd8726781fa
MD5 77fcfd3352f8bebebab64798acbfa710
SHA1 220a7fa18b2d29c71cb576ad12c576a852841f5d
SHA512 56226f8c11f44cd0a471a38a3316e3d9f877a15341df5c4ad2d3985032a73cb9e6eac274a935633537916d696235ca97806986b05922b5573a984c5c0df48f69
SSDEEP 1536:adzklK67ykEpPNj0ZRSg8WICROTzFKh3jPOKo8YVkvdGIYS7BQ5p81W11I6R3Bv4:yzXmGJo8WpQFFT8TByXN8yt
MD5 SHA1 SHA512 SSDEEP

Egennavne/Triplicated/ugerapports.ben

SHA256 d456a64a80f39cc5778fa8cd2c867fbde9b42c20bab12b96fd6ff00742e0c371
MD5 006c5f605885f206a4d607db596eaf0e
SHA1 1559dd208566a583f61d4f651a41fb3f1625843c
SHA512 50b21c5968676cb4be68f7e45130541cb480c90fd50fdb43f007167efeceb85bb9dd33e00d341edee8d92821c8743428a8f5506203de7679320f9200ded43480
SSDEEP 768:s4LkRc9Dvz5fytSARIkV6zonxJVxUG/7q8O4P7rsM8XyqJ3yVbJA9CqaYqYeG07k:d4R+4LaY7m8nHJ8tJCqPEGEQ
MD5 SHA1 SHA512 SSDEEP

Egennavne/Triplicated/ulykkestallenes.hei

SHA256 e2d14dd0bcb28d68ce47c0e5b12fe989b42e777eea806f44ce541e7ca468b7e2
MD5 d4e98ddc150c8c69e8a811d420f0c80b
SHA1 1bee6683ef22002155fe499521a037634a4302fd
SHA512 c00a55b3a3cd7282b02a3358db4dd68974a63e4786c6d58462b59322accb8fcb62461857e648ab25ade87f0d8990be417c64b8284b70273a762cb31d7290078f
SSDEEP 768:pQQXGtvMtQ6MCcG0c1kXBYuGCGb+S64jOfXBZH4kAjK:KlwR89A
MD5 SHA1 SHA512 SSDEEP

Egennavne/Triplicated/vilest.pho

SHA256 588edb39467eb7b56fded0ca209ac57c7acd0ffeead831e1e155f358f0d7ddb7
MD5 ed4b59adaca4bfedb4606d3b23a00f14
SHA1 57df0516e7a24ffaaad42008b22be26874ce588b
SHA512 7a9c0d126c9c6c78dc3e4d122e1bb32cbad04fa305a305488f246efea5d6ba6c00ec4ac5c4f03c93288f76783f3c3337e2d57e37d84ae3364c83c58e5b4b10b2
SSDEEP 1536:ovOEEUNXoD0nqB9+eoQEkDfiarPC69t4nHj:Y1aAnQ9+PA6UPC4tiHj
MD5 SHA1 SHA512 SSDEEP

Egennavne/avisoplag.str

SHA256 01d2ed4639ad2232f5c637f8115d9b2aa43f41baae5bfee4763c07082d4b1df0
MD5 b05440be63dbe1d25da4d2b84d841e96
SHA1 f7ab3acc222f38fe1f2529299d0268d6b6dcddaf
SHA512 c9656066d39c6bb239c42c463a4ee7b061a1d5d4687b0576f75541d8ba67d2bbdaaf8353be405776d21c7be77c2daee5f7543d1124a7e80d176f4e979f594e87
SSDEEP 1536:ZrQ7dV8CKbbwaWE4LHt4n4cPJXzGI7zezSpnMQM4EfSCKSBCMC38:Y8Xb+nLHtlchik0wMQMPSh6Q
MD5 SHA1 SHA512 SSDEEP

Egennavne/deal.gir

SHA256 f48ee06b96df26a71da940b7b66e56d07e8034a49c8ad60e575dd0787ad41ffc
MD5 22a7a33f5b04365db29697e4f018d96a
SHA1 5a4cb42004a238d413bae2984209ea5e4ef60423
SHA512 2e747f4e2d26e098e12b0dbc8f4390dc651efbfa530277cd0c321ac257bc0a813ac1f7843a57801c514c88f116a438d0287b8551e79504a35c80fc0c04160c75
SSDEEP 1536:hEU/E1q002TRKufWtxMTUDjOITb+6sCzHoQ3Xm17Ozwvh:Z6q00guPOITb6Cz29OzwJ
MD5 SHA1 SHA512 SSDEEP

Egennavne/demaskeret.adr

SHA256 39826b2a49ee8eebbd02c93f5288c737dde0d738d243dc8a04c2e7cc84ce8849
MD5 a04c5d6b4182ea4aec9a5a3a95e336c9
SHA1 9fef09ea96d1957e6b734e6069ded14f32401a78
SHA512 f5d7450fac7d5437b786e25562a40d8d4be6b6717e8a8ff88039553243a807030420347e7510aa442b2d2c0d2587c83afaa5281d62bcb6262d3f00284716a5a5
SSDEEP 1536:vPo+Hf9M1O8p4BQH6+WRy7itTXtqNo3IMR8gDE3vp7xIo8+l0VWNpfG+BtNyJ:b+Oq42a3Ai5kobQj0cntNC
MD5 SHA1 SHA512 SSDEEP

Egennavne/exigencies.fis

SHA256 647d2ef92c7dd594f90163d4a0e97e5178be1aed4a9806d6604e5f25b0ea4e23
MD5 e273a7d0dce2b818ea7747b1675715c4
SHA1 4884833d28017f96ee27cf816c4ed6d59a6076a7
SHA512 d1d23498cb89c2c465ed9c7982eb7a6e5db07e1bfccfe247e88757ff1495f0a0496344d30805ea97825c3d766065031b9ca3a2fc1d84b1290d728fe5a2f654f5
MD5 SHA1 SHA512

Egennavne/img.jpg

SHA256 92b711979058c927749411039aa136fcdc0433bb191fd627af4da451a64a11b9
MD5 0a06fd0aa80c7d91373d1a25263e68c2
SHA1 03de4c11e307abeb35ea8539490f1ac5594700c6
SHA512 aca6e6d2f32401dab864aa1944953913b7668c0351ade077305e4567f0cf6d638d610e52ee455de169b63ea39707ef95300a77d3d3583c4fdd86d3cb47ebc78d
SSDEEP 96:4Wqknsx3/iEzGhI/Yq5749UnlskVTb1FEo+1JHGmEi3Fqiuq9Ql5q9:iknouKfE9ICWbGz3Fqiuqel5S
MD5 SHA1 SHA512 SSDEEP

Lrdommes222.eva

SHA256 c941db0a4da4c355510c369b8642be8caac976bf8f9ea60b1caeeb41eb7551e6
MD5 136d675e2dfd14899a75efd40709ff29
SHA1 4e026f44f718040279ff86e22a5c12b62c43e0c2
SHA512 6d1105f964851412522cfe2961b5e75cb7116db98c048c8732a5aeb475957a064aa6efaae0efaa68ea93ba5bce9d6b57fa0aa1e4a743f311aa0775c67a9e2c1c
SSDEEP 768:dc/KzYDn6/8frVem8Q9QifdRFFddZw/fMHM1npRFWWNlEO/TsVQ+O5Mpim1FKI5c:ywqnxhem8RK0fDJQWyFKqVREhH1
MD5 SHA1 SHA512 SSDEEP

Neutroceptive.cas

SHA256 01693d05a1b8814c9c4e147664028af3b1f8c4f61787cd32c257d9e293382447
MD5 0ed8f860679c1e4482f483fb6453e784
SHA1 71a158a7ce49659818bc17aa114c29caa880df0d
SHA512 072a80839ffb82d717d99ab6139dba6a95e382c0759b52fd15c03cb732c084822073515ad085c25f461974200482b04081a2685446bdb804074d6f986790d9ca
SSDEEP 96:k+quI+NXsPpa6P1qcpJGOJM+BoVwFSnLdec6OSlYM9x5SRtiUKK6oGG2zGI/XKid:k50Ncha6tS2BoVneYMdSgKHv2MCx
MD5 SHA1 SHA512 SSDEEP

Overflytters.cra

SHA256 a984ae7d8dd9c9e8c66bd041b25af74532631729c6d5472b980c8370d5ca8ec1
MD5 7bf32e58f985de35aaee5b1d97e69a8b
SHA1 c6a449103a3d7a9fd92a2b430189edae7c26de20
SHA512 aa4b474c3770358f7e3e1c37d8b2ae5e123ab5cb7402d7efd4d029f46d57d343eabe385ddff5bb76b5c496ea696fd161627089379955b02f67a18801f8b7313b
SSDEEP 768:pQJHgveQVWXoYmgc+ZKInFMqVONExERQapVWvnI6MI6ofH5eLVUsP2unXUIO03WN:8MIskFDPp0WJFrgA9o5cpLSksf6Rp3YW
MD5 SHA1 SHA512 SSDEEP

Unconfidentialness.sta

SHA256 7b4d1acd1a133f0b18457102d31fa46c6b525215268ad666b787d698536193e2
MD5 fba47dbfc33dff4a67efe444d5c0ea22
SHA1 8fbf206ab9328dda639dfbe7e679aa6bd8e7073a
SHA512 35520a3715207639d7b4a81f184240be7ada8563e4692af67477e9aa8fe4662f609d3e9c79dffb3e6945dfe196f3340c8ccec5e32193f54ef29150077f0214dc
SSDEEP 1536:jFDvSTQkyxLEWIsHz8jB5+jfk+dWLRyMvu/6wftn8w9Vjzul/WE:jtvSTQL1EWIfLCdWIM86wVnLu1W
MD5 SHA1 SHA512 SSDEEP