d9092c1ebe261746efcb538fccda3e27c41e8f011ebc03f5983ad8f9a9f88c4a

resource
unpack001/$PLUGINSDIR/nsExec.dll

IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
SHA256 d9092c1ebe261746efcb538fccda3e27c41e8f011ebc03f5983ad8f9a9f88c4a
MD5 aab6a4173ceb92692dbe30024299f01e
SHA1 b2dae66489900a449cfb14f66c1413f0a1850108
SHA512 438fb090a40bade88c91dfb05abe6b1ba0474295fd3ebd5b0c14f539b29bca768eaeb20da16bbf809417690881231ae984dfb55b886b486054afd3f0e1be3c54
SSDEEP 24576:5PbkackplDNPSwv33lmaIuYgxEJisWHbJrz5ACBv:5wack7BS8lkgEyl
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

16:62:15:27:22:2e:40:08:6b:b8:6f:d8:72:47:f2:bb:da:19:80:18:2f:5d:06:87:d7:c0:7e:d7:6c:fb:5f:b2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Fejldisponeringernes,OU=Drivelingly Lumme Terrarier\ ,O=Fejldisponeringernes,L=Fenn,ST=Idaho,C=US,1.2.840.113549.1.9.1=#0c1a4772617065667275677465724042726e6563796b656c732e476f

Chains

Jan 24, 2025

Minor OS version

0

Major OS version

4

Entry point

12846

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathW SetFileTime CloseHandle GetShortPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError GetFullPathNameW CreateDirectoryW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW SetFileAttributesW ExpandEnvironmentStringsW LoadLibraryW lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW lstrcpyA lstrcpyW lstrcatW GetSystemDirectoryW GetVersion GetProcAddress LoadLibraryA GetModuleHandleA GetModuleHandleW lstrcmpiW lstrcmpW WaitForSingleObject GlobalFree GlobalAlloc LoadLibraryExW GetExitCodeProcess FreeLibrary WritePrivateProfileStringW SetErrorMode GetCommandLineW GetPrivateProfileStringW FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar WriteFile lstrlenA WideCharToMultiByte

user32

EndDialog ScreenToClient GetWindowRect RegisterClassW EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData wsprintfW CreateWindowExW SystemParametersInfoW AppendMenuW CreatePopupMenu GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage GetDC SetWindowLongW LoadImageW SendMessageTimeoutW FindWindowExW EmptyClipboard OpenClipboard TrackPopupMenu EndPaint ShowWindow GetDlgItem IsWindow SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegCloseKey RegOpenKeyExW RegDeleteKeyW RegDeleteValueW RegEnumValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/nsExec.dll

IMPHASH a89a235c853214d5f945ce4c2f607130
SHA256 49a6a1c1f19574b2a247ce6c5adc0751e046d27c30912816ba415f871b74ae5d
MD5 fa299e199922b3ba833be655a8d71b75
SHA1 4d74c53bb6927a2831df93af26f3e4e4fb007797
SHA512 7ceb64d3d826762994c48ffad3ad2234410cbcdbedfce9a2dc03d18915ce22d687173f90e954d7bdb0eae76954c360059ad761aedc48cd7fa4ec29d6094f6a65
SSDEEP 96:v7fhZwXd8KgEbAa9PweF1WxD8ZLMJGgmkNO38:4N8KgWAuLWxD8ZAGgmkN
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Fiskehandlers/Avlings.rig

SHA256 8aeef1f9fa8a0d54d5887b5f896895e3589e1920f71376156bf2046cabb577cc
MD5 bf3e3ff290f527d4818776d06be7577a
SHA1 028da271448925014bb90a6c578a0f17b5a9af29
SHA512 87076920a842bc85264de04ee82578222fdcffe981436fb376cbb60126fa8364aaa2c6ed71e79a3211ce7eacf9b96541d2bb9c98d7653aa2f8fcc7cad60b2e28
SSDEEP 768:RLL3GbOL6rsNHt7WneF7Be6DqSdassCN1cqOSxP3/4BlkWXsm5a7kUDIWgfF91U+:xtdLgwdmIS
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/Elge.sco

SHA256 965ff456c9172422fcd8e422c2adf9cab879aadea060a8e224562943bedb9ef7
MD5 a6fc33a0d7d3c369d083312f3bb56c4a
SHA1 2a8224828fcbb13efe9766b36b96c88284ec976c
SHA512 30d0599437bfd071bd5c6d74a481e8ecb680d885e679fade879b2640a01f3dff4c47a568ed2937b7093f6eb70bb51c1cebff2b1ead585b46352794cd5dd618eb
SSDEEP 768:0jN+dKDtEQdw7meS/ym1GgcCQ003+p6ravu9QpMzDRKdNha:jSD
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/Hallahs.Sal22

SHA256 cc340fe33ff811ee4dfc92fa04f8c36a56ff3148481876ea3c2ff0431d6a1603
MD5 9695d9b46c2c1cb26e4b3a3c4da04d58
SHA1 fb07acf9a8269a657bee6a038d70e020e5954933
SHA512 982e04e758eb9ab62dd47672cc0e1a4271c09c31c1fea1004b54930dc99b53ac09c07f4dc3ed6bf0a6e1b38505adbaf75dab32a2697c889c9cb32eb9120dc15f
SSDEEP 1536:nVtw6LhC7znPD4Ge9XebLZ5SxWGOipU4ThrdCAUIcal4IH:fwghC7T74GeBebdcFOipU6hrdCAUIcHU
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/Hovedvagters47.int

SHA256 99f82887f931c0ee56fbf4b393877e1a1219e652bd8348085ccb711a4c93e288
MD5 84fbc5d349d63883f7ff611383460aed
SHA1 a2cfc5fa091605fd098035633af12eb845e30680
SHA512 dcb4c7dd44903e815a13b1561345b878028ffc837c8dea0dee2cc87c7a39cac4592cfa76731bec310da067206eac61a472a93671d8f7456bb0f3e903ae6f6f8f
SSDEEP 384:LyQddOgbp7IDXkir3oxBw1N/jWDf+T1XKSXNDULbls1A/8aeYJ4w3xn62TGX6bbk:+k8NLrB18EXRULJ/5dBhbQjk+
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/Kalkholdige.tid

SHA256 0349f042ae91fe15bab84e9381512c461afd3eaea6aff99bfd6d24fe1c15bb5a
MD5 accd28b4937e6c23f45bfd33dd8c31fe
SHA1 866789850c60400e510585b3cf2cbf7e13614e1a
SHA512 e410f0ab716a6ad214e2eda2ec7a08dcdbebfb69c27002d3ff6cce4f3e63fa549eae0f2c1057af3d36d1c5a59a0b8b741754fc1f3a2a7221b55895dbb48d86f0
SSDEEP 384:ftVPs6wmzLYSpa2JmhaNQjG9+WjpXFFERVduWucFffaLjnY:lzl0Bsh/Af
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/Specialdepotet165.mia

SHA256 82fbc0d846f3e6028bbfa54bad8af0599f75b5b21ef9505d990f78389a49a095
MD5 535eb5728cdfd21d15477781ec2cec69
SHA1 f946d6fb5da2a3b33f70b2d5356bee04a8e6378d
SHA512 2e7075940072d8b1d272c78d87e68aa951a818e019bc78d06de742a469bfdfb9f002296e2aea5f67f9a371a1570109388cee36faac6d64b5c3999d8d7973c1a3
SSDEEP 384:pelmLaAHe5rVBzZgcmIs5u3UO8vKca3kXeZ5WGN5tRSXiJCodI7ydwX:pOmFT3UkqCXNCID
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/acetonise.pap

SHA256 7f674b78b3ac356b30788466814f806c5490f1348041a619de03099fc27b3406
MD5 fe3cee33397324dc9892f918f8fa6a09
SHA1 eb9f1ddce23f557003ac3ef961fa36cab9140b8b
SHA512 4cd29f7c62ff64672607f2bc4ba45d1faed5e3776dc259a75c3e93bc746b4c1a6f1b73677fd44580b282019942f5d2c3279456ced08af3fd19c72b0bbc8770f7
SSDEEP 384:gcABp/u/ioofse806FnaX3nnKFCh5/fFmlwooMINwjTyjnhnXOLifUgMlyzkpHye:EBAOkRCKEfFwndINRbheLdeG189RVL
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/baandvv.fri

SHA256 dc2d223f85d76133e1ccf056fcd7b5959377977d823ef7fe3ca999f53261cfc3
MD5 70cd5e950133c2e0e120355854161018
SHA1 fbef56567d3d12a4e6631421758a34e5c6b8822e
SHA512 1c02a456772feb4996205dc34ffb34edd7e90ba85d151d70e164256f97c6735a6c0ad58bdb873fde47f135a88fd0f6a93ac2224dcd36e6fd04e390a077a6dd17
SSDEEP 768:HxRxkAHdsW1o7vYm95YetWmYZ8o2+/ws83eW2:L
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/betjentformnd.pop

SHA256 e6099561188f94c09ea1387dd75a2772c0102bfcfd5957056b9489bce9f553bb
MD5 00aa76acf7b90212f6535c57dad614eb
SHA1 b9faaff1c4cedf8c33852f5b5ed61fdb738944d8
SHA512 05db097b38e069a8dd8d158848df92bae131c13a3f1e69680c8980bc7c0d1d041184a494d43fe70c177ea2045966fd00963f30a5deb354372611eb786a4e791f
MD5 SHA1 SHA512

Fiskehandlers/brintbombens.fig

SHA256 ecb382b4b22141170129293955119ba64135314a1f94db32786897afaa79ec8f
MD5 d368f486dea8736b10b2e8bac30cebc1
SHA1 a1c32286a0743e23351c9228e6e070b254a3e6bd
SHA512 b5c3e872490251c62d53dfcc612fe4f5c9c620d195e7fa5b2dbcc5fca86034a93dbd741c7ac2ba65fcd472b99fe71666f776015d27b3d7efa6407465bcc69b5e
SSDEEP 768:qMv0SeYNKXSl6IOCBl1oa837FeGUmqu15y3VBtysqEr3vh7j3/ATdwc4uKuGM:oEHA
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/budgers.bry

SHA256 088bcf2d80eec20e92a42c73e5157d312d3b78c97ca31a18339cba11d2bc3701
MD5 c497a002d718bb880ee18275234ef581
SHA1 75e54eb465b26c468e6d0fcd03ee4a79d496f8e8
SHA512 58f3394aa5e6af52a8786721a770454866829b4222271bc0a27987d867ea6ddbf1bf0197a37d7f95314e323ff02bf3da1b19f9b865357580681eb5e96d4c0d98
SSDEEP 768:vZo7Uy4yoA7VX7wRdyry9qNGsjPAfBscSnC/woEGakfghmtT:hgJzYJ
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/gennemsnitsvrdien.sei

SHA256 5d94ae13c9413903f0adf704757ae2541c9923c2103a6cd4e5b4bd2a78390a25
MD5 ac074963a9f2e288242d4eb83e135b2c
SHA1 e9f071519bb8d9f705285336dee3eb1062d8991f
SHA512 14d78d8aaca903068e2f69ede6442fe6698f430f0ee0231cf8c46779a21b40e1d68613f417bcf96fcbcf17ad37b7862a11e760eea88f72c166930d12da645e45
SSDEEP 768:Li/GQn6+S7eWOkYIn4IlyacRb0YqyFOlYY1:SM+vU
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/herma.mdr

SHA256 4061c3cb58f3aa61bd319f0f74c131c0cf85e7968705cbc8575479b6336e85b1
MD5 ef97924f425b20752151c2035f5ebbd1
SHA1 b275e2bfd2cc71ccd6dbd7114c171478d72a5735
SHA512 af9ffcde735b1ba4f05dfbfec71a3cc552ff908e1dde8b81ebd92f6539186184387ca8b940dca068aad92fcc3a04d4fbbe2d4ebe9a79a0caec8bdde2f9477cd3
SSDEEP 768:6CPaEmIX9qVKq0mUjyQN/NCKit16t4LWWG2prN+C9gyKrdat3x2WIeRVhFlYbJq:H1spoXw
MD5 SHA1 SHA512 SSDEEP

Fiskehandlers/nippende.til

SHA256 916e63af37f43395ff65a89ef88100df8dc44fb6bce17ee5106e8554b03dccde
MD5 6e31282758387da8b170d09f0098e488
SHA1 9f161e9dd0c6c1ddb9180fd6271ddfb849aeb547
SHA512 b96ca10831920d7afe7ff6d155c9f4693359cbe830bab2bcd58afc94894c7fe8cfba59ad9a87fe7c36c34dbe18436470d2dcc24914acb7453ab270d8391e8cf3
SSDEEP 6144:/LsVy4wo7ZvDEyD3TupHisBN5uRtgssUSHZAjNzG1VOH8XTmuyIsrREl:/7cBJDDE35uLgsDSHWjNK1VlXVUtEl
MD5 SHA1 SHA512 SSDEEP

incisura.pes

SHA256 30177d7c1439bbe29f6a92da200ea7f73421d04aa4916a4a1bdc01dfc3d09aed
MD5 24cdc273c8e186d52e8591794887d6e2
SHA1 4f682a710be61f13a39d315986ce3a8e4865c72a
SHA512 4c2902496017ab905812e8feb8cf9b6ba5544b4e26b4c6fcda16fe153413f2a0010fdf59d0b12d7cdd410871e054529ac34546d34568b6748ebef3160da9bc1c
SSDEEP 192:hxTU0Hv6fv2FThXQDkw+kON3d1DiZrrj:hxA0Hv6fGThXQDk9kON3rDiZrrj
MD5 SHA1 SHA512 SSDEEP

lassoes.unc

SHA256 bad648c119b4b93b5257905074b02c381e2b9afc9685ba175082a6570619c64d
MD5 14984eb97c2319e8c0484566072f4a9f
SHA1 caa609fbf533e3bd4f9728c7fc275afa5b5c313e
SHA512 ef14869706815fc22c8925ef6900f7370a2b019ad6cd38b40f65caddb97217648d58102d78ccd8abfe5e290fbe4929e51d6eb607d8400949d72afcd209a1cdb7
SSDEEP 768:qo8Ejcxbbe3UXWPE2TdfgNItkrRBwifk49Jpur2oArF+6FP9t9nlwAFVhBWYvUxE:vPA7+
MD5 SHA1 SHA512 SSDEEP

phaeophyll.udv

SHA256 b558c65b196fb775e118a1a4eca00a4057f1f62142d3a9f9bbbc52cb7132eecd
MD5 6d33398fb50d0c78a1ad7196ee5c50cc
SHA1 010dbbcb12444041efa40f5c3e4b511090c17c89
SHA512 aba3a5e26bda58d2f5f725df330e52f49f221ef7056ac5211a52027c3c0a1ad3cb8789ae83caaec7350ce4094f93d6d721c823f181d06b8ef6e30ff937cc2f14
SSDEEP 384:/lZVqmCspd4HTkU67MRa+vxAQnq+zpi4BhX1/LFmPli4NT4ZQP8IF++c3TUltJVB:/XVFUM3pgrR8i4OZkmTqDV1Y2FQ
MD5 SHA1 SHA512 SSDEEP

projektopgaver.hov

SHA256 b77f9f2a3ca4e32560df32c17ddd9beafa34e911585f91af7e5b66bba4dd9edd
MD5 3cae0844e9e8854b2852a1b88e95c86a
SHA1 24e810b73bb3db21f560dd2608f800e2277c994d
SHA512 1a2e497b5cdef618bae4cc40845dc0ffcf95043a76d0d91f7f854e63d06167d4b43db0e51b2d52a4809ded3be5e57aaa13719f9b07a22cb9146808898a020c8e
SSDEEP 768:NaWaz3Ebtrzqa6odw5qpCNjrTV/9/oVR4PsYcuE2zwd4Xfn5Ywaooo8YkwdRtm49:Ii/oY8v9T
MD5 SHA1 SHA512 SSDEEP

teletypewriter.for

SHA256 395039693e07190927e0272d3372d0a353b11effe3ef2297b05a34e66c0e3aa3
MD5 dd2d257e5f1ebfa652b91e81a343ad40
SHA1 a3ed6cb46f863a24b61e3d8b1f749ebe9f3dbb59
SHA512 3bd8dd936a9ddf9e3a1ed6b251d9991147c606c4c954b49aa3e2ab29eccd73e4765e80560a08f113ae86eb2949cbfa6afb7d9e146787b69c5ef78758f927132d
SSDEEP 768:C2VQSsBNkFo94uaq3M9Od04g1GGqa8XIgPSlkOKNtecZSO6wbauo:SFPi
MD5 SHA1 SHA512 SSDEEP

underforebody.sti

SHA256 bbbb6536046094f2ee0600efa521fcf8e0383b0da075b07926c793b8a322dc9a
MD5 54204b3456d7b81f6bce5305d1af6416
SHA1 c5a5ef281087e1a77a1d04bdcc18d025636879b2
SHA512 60b0a9971b2b2bfddc952ad06f8e46d7ce1dc8f65e6bf1e2be3d7afbb673d73c2b4b6ad09e9ff57d54f2c02af8cac104835eae9fdd492d892d216d7d00861058
SSDEEP 24:UoBn5zYlGzpceft8iL4tdBUmmMU4fixy:UolpjHtHctjUmfU4fixy
MD5 SHA1 SHA512 SSDEEP

up.und

SHA256 2466e6959cf19722cb55ccec2a7fbd1dc86657748907b157588a4472387246e0
MD5 b3c79ee3184bc932a8fbb4fad38caa83
SHA1 3c76b4c36d92186c0e778e67b73cdf28c7b3b9de
SHA512 fa027e135e375cf2a142a9043324e74f97eb274dee36acacb274ff074086310dd6133d8e0fd0393abb369733923b01cb5f9ded54e2e5452f5e65f7f816ee92a6
SSDEEP 768:WLvKA0ze3jYHTJkuMMGjsTio8wOGc6WRkN65EgzR7fd644B71wnMIWrm5T9XNmWi:vVkLFJRX
MD5 SHA1 SHA512 SSDEEP

vinkortene.edo

SHA256 9e3e2fd57a8bc92ae654f411d10d92c09ed5a06a89830cc81a6563fd12a6f674
MD5 8844dd12b25e5013f18ec80358896bf2
SHA1 0e8e3517970ecfb58ad6f3e63c1ed6dc6598d129
SHA512 11fcecb1d5ba75ef0c12d4c4d8bf2b5bea4f519ae5a9cc4772c88e8cbcde6af430576b8fef4038fd0a3e17e89d3c8016a316a7166aeffa3f5ca32daff2edd53e
SSDEEP 384:YV1mmSyfYls14Wv2TthheTSGjyvoRE+ayEUsdxJvSoCD7TXcycaeq4n2e662uqoe:YVvGTdabJrQIoC7XhcaqH2rqAYjE
MD5 SHA1 SHA512 SSDEEP