Factura[.]pdf[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

Factura.pdf.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 d4ef07a0aa3a3deb3bac17915190bc6901199958a0e15311f1e11ffe544dc950
MD5 574cc88c85d5baa312edb17127671fd8
SHA1 064909f4659e77fcace665b0728c07ad3e636291
SHA512 b788abe0430196c12c4aef822d7f543a0959f077054f46faecd231ac4fbaf58bf6fe6d9af88671a01cba3dc53cd07cf26f34cf1d1f16cf0f81fae09ca728c4c4
SSDEEP 24576:gXzF/GbE++hYuv0ezm1wvLkS+9cVmvijqAiUzh7QobmmYjAtwC5Yjg9DLz8VxZIo:iJ/GbShYOzSELkSmccv9RHoymRtwjU9K
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

PE Signature issue

Digest

b8:cf:e0:c9:ec:86:15:ea:81:39:16:ae:bf:0f:78:9d:b2:57:f9:9f:67:91:53:84:1e:73:95:0f:f1:5f:f5:9c

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kopieredes,L=Kistler,ST=West Virginia,C=US,1.2.840.113549.1.9.1=#0c14556e646576696174696f6e404c756465732e5379

Chains

Jun 30, 2025

PE Signature issue

Digest

93:65:09:50:61:07:3d:0c:3d:7e:2a:18:53:c7:3f:d9:68:87:a7:83

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kopieredes,L=Kistler,ST=West Virginia,C=US,1.2.840.113549.1.9.1=#0c14556e646576696174696f6e404c756465732e5379

Chains

Jun 30, 2025

Minor OS version

0

Major OS version

4

Entry point

13564

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 32230128c18574c1e860dfe4b17fe0334f685740e27bc182e0d525a8948c9c2e
MD5 50016010fb0d8db2bc4cd258ceb43be5
SHA1 44ba95ee12e69da72478cf358c93533a9c7a01dc
SHA512 ed4cf49f756fbf673449dca20e63dce6d3a612b61f294efc9c3ccebeffa6a1372667932468816d3a7afdb7e5a652760689d8c6d3f331cedee7247404c879a233
SSDEEP 48:S46+/pTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8m/ofjLl:zbuPbO5tCZBVEAWyMEFv2CmCL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706
MD5 4add245d4ba34b04f213409bfe504c07
SHA1 ef756d6581d70e87d58cc4982e3f4d18e0ea5b09
SHA512 1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d
SSDEEP 192:VjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZv0QPi:B/Qlt7wiij/lMRv/9V4bvr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Amerikanerindens.Ext

SHA256 d2b24ba3d52c138e1ec7e084e689d628a65b154f15a257eacd6f2abfd0598499
MD5 4d62526cbb23074c0cca41eb7b326419
SHA1 91d2d03c557b64bcf614664c111b61bcf217265c
SHA512 04434cf884870b03e34521aa31f41804d10c3cabbf723741d0f9cdec6202dffcf6945c45bfb08518ab72cd0e3080114d2793904b99684dbea059140df4456e38
SSDEEP 6144:fDKuO33951s5n55maPKrUAm8+IIyKZCo0acQ9phNXd6GV4v+SHtgpT/1zFofNiP:uL5Un55NPKrUK+quCo0q2GyWS6do0P
MD5 SHA1 SHA512 SSDEEP

Bajonetfatningernes.jpg

SHA256 63ecbcb3b9cff11154107ce1c8d516fbdc692dcd0cb4d297728a205e71cd56f8
MD5 f59865ee0fecaa882f3bb592d6f8767a
SHA1 d8015f4b5a72f8a2b7895711824a3b8713bcb23c
SHA512 f9ff18fe5a6fc6cd21f7e7bdb3bb504ffd45ee9148dd5b58cb7e6b455a477cc1cb4fd9c6922083bb0a0d72babd81e363506db8b391797de632d030f08f142b05
SSDEEP 1536:oMW81NKJjMQgI6sFTFnufil1e5pLqKpT2rmLcO9PbUdpH0zX1tIUuUKY:5vKrgnsFTMfQ1qppTUmLcO9ATOdd
MD5 SHA1 SHA512 SSDEEP

Devow/Beskyttelsesprogrammernes.jpg

SHA256 1a67c1468b2536520ff1f328bb31a9dbcb5ee921e0e2f8979ca3c2ae528164bd
MD5 34535d967b6496d7a6a4af8b1c65b344
SHA1 dc90e91733860b36dd842078c899b04d6ee1470d
SHA512 003192c55fe0de9229c238ef9cf374bf3bfa59368ee37e5bb64ca9a16ad2c5e8bf9d6bc723a8be0f8f4e5318a8431090adbc3d92709e44c58a3d5b23b9bf26b6
SSDEEP 384:fwHVKX33jF7r65aXommeIAUndwqQNWha9ngRHHovkzH8NJHsIKy8EsUQ2IhIb:fk4XHjF72a0twqQshCg9kGHMMIKzJUhB
MD5 SHA1 SHA512 SSDEEP

Devow/Betydningers.ini

SHA256 d0701698e15dc7b311553b734cb22e390dbd6115dfc4337e81b2834cf78aead2
MD5 aa8df17f983b9592f0914e75a89225d9
SHA1 9c07c120ff112f65beafe2dfab258aa46804eab2
SHA512 a8dc5f2ba54ccba01b20e8e0605e0ab8ccd93c3ad35a54ded8e10184f0c5cf81d9be9fc3663ad8fdfc7bbcfa8c9db831a36b08dec591654ffb129e976decc1c7
MD5 SHA1 SHA512

Devow/Gylpene161.ini

SHA256 6fd8fd4d7c89718da327e922ddcd5df4f20b8a3086b9be04695cc16b850a60e8
MD5 8cb5328ed492801fa6295ecbd232d250
SHA1 291e9022f27caefb0b17452480cb880d728c9b5b
SHA512 6033341a6e457a1aebd25f8be677a6996c3961508c901a7f19323184c963c801f6aed688e2904750d6a529aa6adf9f1c41021e50891b2e7717ae0738feb6be38
MD5 SHA1 SHA512

Devow/Jaron222/Ufrivilligheden/elektrificeret.txt

SHA256 a80778e893d504f761b6cb0a4bd66e0fe269f600c5580239e36583c10a8c3f55
MD5 e111853865f84777dc44e75e59794c0a
SHA1 55c49973bcfccb6e17fb741b36746860082d8dc7
SHA512 1f6bb32d3085d20c9627fb5bdc2b3c2256fc2c536210e689424b6e1929f71f0af0529dc177e15fe436ba3f5c205d5d6d1114b51e2c011e8d42214bfe859b6db6
MD5 SHA1 SHA512

Devow/Jaron222/Ufrivilligheden/enegangens.ini

SHA256 d614a135faa507bf56d650e47d2b6b2665e0c6865b847c8950d067602d8dd313
MD5 891acc88ac77afc8de3b45fbfeca0196
SHA1 4caf4917b9c1bd9a898687161b8588f0a47345d3
SHA512 d8255bd3fb8ce28aa892542369a59e9753ae2841d4dd990bda6ff6fc7b612df31adc030dea019b845f0240e61d053acab6d8094d551bcb3353a075be65dc0af7
MD5 SHA1 SHA512

Devow/Jaron222/Ufrivilligheden/handwrote.txt

SHA256 bc59f76a202fe6082e78cbabdee292529f129f7c4b4bf7ad6e571d3fd4092b8c
MD5 bc6d942f32ede43e594bcd18d785580e
SHA1 ab2062b6808d39994e9f7466c896a3dd9a5e2b02
SHA512 58e29859d54870e68cdcb32360c7abbe71d066d771c58dbba0e65d0145a0cb9f104d5813fce9047993cbf2ca3f39a6322f1d2058b4e2697232d54504bedc6966
MD5 SHA1 SHA512

Devow/Jaron222/Ufrivilligheden/hovedreparationen.ini

SHA256 def0f9b665d6a7ef3d0127681a62dfa4055df48e929c8c751fbaa48456e5e328
MD5 b098c30203ff407df3a53820b4663a31
SHA1 52cbb208393905c6ebc1ece4d6160148da331d21
SHA512 e49d83442a5f8de381d2433a8651c4ea021aade7c605dc68878cd264d6957137d019314328ce66b0213567764ec6d6ea69ea63b931a74f499d0314a4785eaec0
MD5 SHA1 SHA512

Devow/Jaron222/besejlende.jpg

SHA256 ea72054b25793f0194d364a74d5169562ead51b3ce9bb05ad816a8d2de1f762b
MD5 b89f5b87d22da69db68c4c6db5a3ec66
SHA1 a5c2409261891ac28ec181dd8bc4cd54f843e8bc
SHA512 5a153445ce228ede54d31fd177f935b619ffa81723c0825575c6900541079072c981e6181b08ea5d90d5b3d8d656886365f5331cfcfc40766d3e0d1b495d9715
MD5 SHA1 SHA512

Devow/Jaron222/bloodsucker.ini

SHA256 55c9e0d8b86980598b1af749fe4ba4fe56ef768a2472cb44e48812522d768491
MD5 86089cdc7b589cab26b69076d01ad84c
SHA1 9722eb57b81af7fc2889e0aece9ecb94135be134
SHA512 44c8683d8877fb659fd432a514d02f422f498505bb868b471534cecf64eb4e4b0825fd2664eef826c2e049027b164d281e555a4caa2a54ca82d8e688c8f02e28
MD5 SHA1 SHA512

Devow/Jaron222/ddsdagene.ini

SHA256 75d6e528a9332b22d30b7794158ff002009e59b726fbca6aed363dd0ae138fc2
MD5 591017ed11a0ab943536d94057c5289b
SHA1 b92d715a48d00b775fedb1eabbe73ad8fa6ed632
SHA512 66d27e65139759a0338d43be5f33d3d12a03bd3db5136533621a58307ab931507fdfe1c8727a8f886827dc9598a53092c25da4e67f3cd6aac9b4ad0a1e935c8f
MD5 SHA1 SHA512

Devow/Microhistology.ini

SHA256 7f52510571e6060df62a878194c9b403512bbd85fa3afe0bebbdd20ec1d98b02
MD5 f000478142aaf6b19cef8406934ae0fe
SHA1 267139d69deebbd3845bfce13d5fd5b323da9cb6
SHA512 ff63f7a3fa4fcb16f190549b6da8934c57933f1c97c2d391e3a1c1837508fa4bd03a647f4115e65f5625c06d38e217cab0e88e0bd54ca15d3fd159c4657168ac
MD5 SHA1 SHA512

Devow/alkitran.jpg

SHA256 bb3964204baa3aef9f29ef0aa145737b9622f228141b64ece95482c631d2d2dd
MD5 bcdb06211140120ba45eac66ae4f761e
SHA1 18c0a879421c0f3754a17eea1d781ffa232ea4f4
SHA512 757ea96a7f388669acf073415c1f3e33173530ced0ef2e74fc19bf3fd8f2f1ab17fecb44a0ad3c7e7c1fd58f802bbcaef62e26beae5f7d335e679e0dd8cb97eb
SSDEEP 1536:E6v+UKkS62jHVjWo5S3lsF4t09baz0NVA:D8Lbj9Wo03C/baz0vA
MD5 SHA1 SHA512 SSDEEP

Parsi/hyperlustrousness.skr

SHA256 1f3a110cf414258745f5b545ee4d499ba4955b1b5b7837c4d4dc47e99281804d
MD5 caa4ba31cb965b8ba6178163b104c3b4
SHA1 b0370a32fc1fb5a73da6c6730883596040c64f15
SHA512 b407fbd7de5b0f729adcbe9169e4d543e10d89ede01d010fcbd22a6abd32ec2bb9d3899c64265efafe04f2662de477c9e6f3375e4373172f24d3857b0623a638
SSDEEP 384:fK6qcnchFKZvhDbKHYcBEWxAnFNaKA8pPs2BUJt5XH6DvVQYBpMxdejJGqysNRh5:6xGA811N3z21y
MD5 SHA1 SHA512 SSDEEP

Parsi/liege.rou

SHA256 20169ea2274e4946ab014f35fd5ba4169fcc9e3a9f401cfc3000d4144fa1ff3d
MD5 4e95b5c120fd22cbdf315365d476cc6d
SHA1 9a50a9721e0c41121dd0ae8d96e0bd836494ad55
SHA512 55d0d714c7b33623a0bf8d436e8664f43f10887438d684722eaa8a8cb0a2c3be7539b7887db4454314efc6eb58fdcb45167ede077f28dd1d26d1372b62c7eda7
SSDEEP 384:gBWjS9Nsdxl4yDPY6gQkKZ74CeHfeHGEMG:iWjS9Nsdxl4yDPTjkKN4X/emEMG
MD5 SHA1 SHA512 SSDEEP

Parsi/melodiseste.ini

SHA256 dab798226a8932e35bfe37c8e63d914be6225dfbd997c820ca59eec5337816ff
MD5 b5cc71be7fab5ec842dc7affdce8898e
SHA1 dd42db109ce3c014b689ef711325129dc03733f2
SHA512 01228e71d745aa761cec3e7cb81964ee4a25d402b74f0f8ce97aec7b347b1fbe30151eec1812ada6e390a14cd2cc0974b231fb321ac9a8d73ff98f56961f3778
MD5 SHA1 SHA512

Subtraktionsmaskines.Gro

SHA256 8caec12abbde064b89fa29d6485e23f33b3be1d62e1fb4fc29ba0a9318986866
MD5 4da8404c9126aa41ea5ef75478806dce
SHA1 7f762e60f29247c1c2e4a208c58f7d3b69754eca
SHA512 a8261a32408dd15bb087cea554a61b7fdcf1edd90793ea2038ac9a894516e94af32125a0a14b854fd95e393424834eca3831f4f08013aa44228ffdfc5d91a875
SSDEEP 1536:jHWnpgAerUis6GIe9bDaEqAZyA8rnbK6dRzKN/4x2HInJ:jNAZPq
MD5 SHA1 SHA512 SSDEEP

roklubs/Terran/saudiarabiskes.nyt

SHA256 b3b875cca74972e259b08f5e186a973f118eb144d7a9c527e325bf54cd0a57ed
MD5 ebd60c9c148ea45126eb66466d2b9b77
SHA1 f6812f6af40ade65ed54f53fc5b6d06480bf5918
SHA512 0ce9ef3cdd95a20205c76c86b003aa9ade271129280adffad42ebf41ed68c2037ddcbf75a8b8343d8b65abb30489f0d6847f12284ed1905a68f84f9c26a4a51d
SSDEEP 6144:tj1iCqzsTu4cBtTqG0BIrlWtyIYoJCEmRMfZWmI6GUPue7z00CtloAnE+GoaeG9d:/
MD5 SHA1 SHA512 SSDEEP

roklubs/Terran/tachyphylaxia.txt

SHA256 7ade2638334e4d53f0afde1d876eeeb86626b1be9240ded842283d59ad495e45
MD5 e61c6922f38e14cdcf8f9e1e2ac61f3b
SHA1 00fd4331d9ebf21801a1c210f2248a2d7423e8c9
SHA512 a5e5e2385606d83a214820588bf4aa58680987a7cde4bbb3fcda777616b8a8300029610191ac7d23f8dffec19bf0de1df7f4f85a4132870a335347f02c6b9231
MD5 SHA1 SHA512

roklubs/Terran/valentin.for

SHA256 c3d2368e0f66605a6cdf7baf8ac09a7a4152eb6be938c6bbe424d0b22145205f
MD5 a4e434ff89c91303b0272d15a6ea6d71
SHA1 6512b0ddd9bc3b05ea4f9c76ab02c6692dd83e57
SHA512 d472c32bb06489e43ea2ba778f5b07930336d32b69f82ce9e707ae9799cd3b3c69d82e1373484cc84c031758a5d618a730979a2db11a3dca55d41a4ff3e9cccb
SSDEEP 3072:UJAY8COeOmOZVPfsiAusrApeonEc0xSn7fHwDNckKxCFXxcCMyJKjFMcQtlgV5Ya:lwJSX
MD5 SHA1 SHA512 SSDEEP

roklubs/nongraduation.int

SHA256 9b20227c0a722ab75b2e0d192af6505612401904667d2f0162593d83a9fd3e67
MD5 0574a6c04c5da92a3722eaf7f5833102
SHA1 dda02615b88d79264d5680843899449bc275b75a
SHA512 b4c1a07f6b07270c4fe8059a73795e33ba11dc267bff08041f908a216e8fde07b4361fd6751aa0c86739581cbfd6bedbe6321b076c8842a86aa521e9c7ae4806
SSDEEP 1536:7e3HyWmPJa48a8vN3iDZLmo810XnkF9A32vnu454LfK1Xn2JGUTgp/aahi4eIzax:qcB/
MD5 SHA1 SHA512 SSDEEP

roklubs/restiaceous.jpg

SHA256 9a3efa0438c91216b3c86c797caef98ffbe09a45d5516ef29532e9e392475ff3
MD5 f1a534aed2076e256dbf02b63c99f98f
SHA1 cbc072227ff6f15c0a8d61ae5ddffc7a8a27b15d
SHA512 6b2404d28e1328a062ad8737862c7a5b9c0b20805cddfd359bb2e5143b32b07b6c373f7e71a5ab2ee4b5506a2aec9a4424dc54950d51b45b17de7a3331f8f3f9
MD5 SHA1 SHA512

roklubs/restiffen.ini

SHA256 6773b2c18a7dbc95d3cf29cebd191a60b0e1e2c26f4d13e36055119fee6992ee
MD5 553a2c8e9db5ca5c511c36006538f557
SHA1 1c9072da81a77dbd2cb4709d0858e0698cefb7ad
SHA512 88c24c929a10c66219928441ccb28eff277f488f90a1df2a63c8b3803d46b50922e84aca3314080349f081c9c490fc843bebea8e5cbb153be159a444f00cd314
MD5 SHA1 SHA512

Sharing

General

Malware Config

Signatures

File Explorer

Factura.pdf.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Amerikanerindens.Ext

Bajonetfatningernes.jpg

Devow/Beskyttelsesprogrammernes.jpg

Devow/Betydningers.ini

Devow/Gylpene161.ini

Devow/Jaron222/Ufrivilligheden/elektrificeret.txt

Devow/Jaron222/Ufrivilligheden/enegangens.ini

Devow/Jaron222/Ufrivilligheden/handwrote.txt

Devow/Jaron222/Ufrivilligheden/hovedreparationen.ini

Devow/Jaron222/besejlende.jpg

Devow/Jaron222/bloodsucker.ini

Devow/Jaron222/ddsdagene.ini

Devow/Microhistology.ini

Devow/alkitran.jpg

Parsi/hyperlustrousness.skr

Parsi/liege.rou

Parsi/melodiseste.ini

Subtraktionsmaskines.Gro

roklubs/Terran/saudiarabiskes.nyt

roklubs/Terran/tachyphylaxia.txt

roklubs/Terran/valentin.for

roklubs/nongraduation.int

roklubs/restiaceous.jpg

roklubs/restiffen.ini