Product List[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
Product List.exe

Product List.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 9e78e9fe1051d21e27a8b637b8b8a096623a0a0880de1e46bf07e3bd036e8914
MD5 691275595ad03368888782894389d78f
SHA1 dc6b418035844a75da71060b57e2c8477984b3d2
SHA512 aab3bd7cec679a8b2ed91bbdcdcad22a22e87a5e578ebeaa204a78e5c8f96abaa50a8dc8e7addb1de9d321519b631a74f126da1a7938bf4d93f5a9c13a676003
SSDEEP 6144:np+ggLDtuYHBwBwsZ+kz66QCqhnrGl+RYrlHaiaEGrW3P:p8DtuYhwBikz66QCWQVrFanEGi/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

44:7d:ce:cb:9f:6e:cc:c9:27:90:39:57:ac:c0:8c:3f:13:b3:88:29:fb:82:82:69:a8:fa:11:3c:91:79:7f:c9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=uncovers,OU=Jenlystens Sexfid Albright\ ,O=uncovers,L=Villers-sur-le-Roule,ST=Normandie,C=FR

Chains

Sep 18, 2025

Minor OS version

0

Major OS version

4

Entry point

13477

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7
MD5 75ed96254fbf894e42058062b4b4f0d1
SHA1 996503f1383b49021eb3427bc28d13b5bbd11977
SHA512 58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4
SSDEEP 192:X24sihno0bW+l97H4GB7QDs91kMtwtobTr4u+QHbazMNHT7dmNIEr:m8vJl97JeoxtN/r3z7YV
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10647

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Antisupernatural/Coalsacks.ini

SHA256 b4da8238362f72a6aae5223906c31930db0d645bb79d2b5ccf0496ad42bded76
MD5 c14d3bfdc329ebe4b429ee7d4bb866ab
SHA1 ff7a62adbb68c29cf10fada4c0b6e9cb11e8cd53
SHA512 30ef266d381ad2b63815bb7c109bd95878a690f0bef472724d5fa33a81bb04963c171e4dd90662f461c8a12d7098fac4286b569340d96eedf0f079558b154e40
MD5 SHA1 SHA512

Antisupernatural/Diodia.raj

SHA256 11d93e805ee2932021c0e16206db4e077e21e9e9c1b2d063023f2b26960b0541
MD5 03050ed1496d96579a4660663427bd9d
SHA1 47f95b99a5199f4e65856e288eaaf7303289d00f
SHA512 040694fb6deb8fb5cf780738410dd32fbbe91a09a35e2e82ffc378005b95716039a04a374275693e9a790a5d59878dbe90b2c465b1dfb6723dd14e1610524bed
MD5 SHA1 SHA512

Antisupernatural/Koblende.txt

SHA256 d3c50a4b2bb1be5207122b18385cb389308946614f4fb031a26d34eea4a62d51
MD5 0c96c754d84c3f3277f749b0c51c2e4a
SHA1 5f1f5d58d322fcc2439fd13411db3c9d4e0fada2
SHA512 694bdb66a419e0d7c3162ba737739ee1d54919ebfb18d23f3a781adaddbcc9bdeb7cff306da877593aa0d978e997f1eafbc7cc8e823a2ebc3e9b71d1bc658078
MD5 SHA1 SHA512

Antisupernatural/Mesenterical.ini

SHA256 c087cb6830909e131a296df0ad9ac5fc988dec51496ac68f96ecae4a91198e8e
MD5 45fb1c2b51856ca9122233932b1193f4
SHA1 4cc2d0acee026a6d6c10996b0182a846ad222d2e
SHA512 3f2ecd42fca92a03430381403875dfeeb50d6b4f3810160859a45e6eb649ea3e20ea976a75f6e980e81c3952ce2134222da68290de37b3b34a4543c0d92cf952
MD5 SHA1 SHA512

Antisupernatural/Telemekanikernes.Sta

SHA256 cdd68f5fa903f46421948737a880b98c8ae5204abd1afe6238f42568409e09ca
MD5 888d331337c8f2b2d1891c90d4038329
SHA1 eb4bd4d61ae2556fdc441fa864b7dac865b7263c
SHA512 401f4b486e7ee3641bbf7187a22241661fcb3a19310786423f91786900d28a6ffb6f9078eb40c9d201823a360a41cb9759d1c647e206f6b2ae6169e362fd1dbf
SSDEEP 384:KKJYBo1vXMv2Kl6A26xYVvChrtB57xGbjznR:h6Bo10+KY+00BmR
MD5 SHA1 SHA512 SSDEEP

Antisupernatural/Womaniser/maleo.ini

SHA256 ab924eeeaf3e408e403b98e9b5d13c0bd0c3cac723e50f73d35e69f684106963
MD5 0f05c50b67d0da7f084e8323f6f96435
SHA1 0671f06e57d8bb5fc7145b201d719acdb4f95fed
SHA512 c41f0a971d92aeb6915287aa1dafd6282cac49e66dee11a3d37ad7932a79a67fe6615a5cd5e5f161af1a73a751f4c8f4aa66d470be912431bfc07e50d3d0139a
MD5 SHA1 SHA512

Antisupernatural/Womaniser/otogenous.ini

SHA256 4ec19a45f0a6366b92ca47c3d1d690ade116a721a7aea58cfd27ad50d1a080be
MD5 d010e6cacb9040b32b72e3870579380d
SHA1 71eb6d477a39a6c350a9ca72363af467af00b62e
SHA512 aa68f1f96478db6a285b64626419feefc55c5902fffa5d0510cf0dfcda5b9fce7b1ca5007af0b61bbf84a49afed37e30b46ef0f62b64baf05bbb591e03b1a150
MD5 SHA1 SHA512

Antisupernatural/Womaniser/selvmordskandidaterne.jpg

SHA256 f1bbcd32be879afb358838fb8ac3175d32ceb2cf200b581e20bb177064cfa473
MD5 287c81dddcd58630d6e941ef439579af
SHA1 6161da9d2e9ab6aca45a3bade88f23dae09f6e01
SHA512 14fcc789dfde454c8185e73777f7e85704a5fc55bb5ffb362c94dc04873f1208126888f287c419f4942a6260c08518f801d21ba2f4b3917dd40dbcff3808857b
MD5 SHA1 SHA512

Antisupernatural/Womaniser/torsdagsmdes.ini

SHA256 56ca21a8ab1a40dafdb53a35c7aac0724ec98aca0efc0563fc1d9f67e7244d72
MD5 4d055189ea0e1ccc692a633d48dc44ce
SHA1 a93dc280ef83b880328bfe5f209e9dbeedac2dde
SHA512 c88c7433e42b92bb20e12be3e36ee209729f9ff854b22ed8a243c40feede935ee41278d4a7ca620b7ddd03e0c088b623be714a00d1a8d53594e5714a946c1229
MD5 SHA1 SHA512

Antisupernatural/Womaniser/udlaaninger.txt

SHA256 8a6c382b49838d8296f0ed985919e6ee73b72a3626c48a9ec9f8147873de6634
MD5 0183b359e36815d50ca0b6e92a43cb2d
SHA1 07e4fa8e6267790c67d5c37771b96a033d594b54
SHA512 8247e56dff2d7bb15bc31c64dc2972c1a26d8cff509dabbc0c4803395b5938d02972eb2bb2c9b672fab3722574caf29b1d40dfd116d248d301a85515822db85c
MD5 SHA1 SHA512

Antisupernatural/bakgearenes.ini

SHA256 818987fd7e94648cfe00945068cf0c11c9816f2916b9a8c41486987600b7167e
MD5 e95dae6a5d419d6b92d83ba057039787
SHA1 894d9263d3fc319d29e2e22fa552593e3c66acc6
SHA512 311dec1209b048869b9737a3c36b298375431c048be948bd6fdc4cf13dc239609bc568a7b847f0c1ea0e006d7f2d31634f017b951579ea1b70b0334f6838a60f
MD5 SHA1 SHA512

Antisupernatural/chlamydomonadaceae.udu

SHA256 bb2f1558dd750e6199d53451300f60f1cb9aebcd4dbe25caaa34cd7d54ce3567
MD5 b3c3d2b1757594681dd242a38aa1bb26
SHA1 71f9854153f44820e6c5450857839fa59b85b8b7
SHA512 9b90ce80934554a828f51842d4bda5b96dc64d353c5552dd5dd93059e9a87fdee4f34cb910603328ae76d27f79b3c0391d2e2aafd563556178986197b6d5e04f
SSDEEP 24:nATURUCfmIRm3PnfVO/pXJGzRy+CkbsRdTEUMK6K3loa/t:nATUXfmkWng/bGzg+VIyPa/t
MD5 SHA1 SHA512 SSDEEP

Antisupernatural/dirtplate.txt

SHA256 624fc68dc94fdc73b68fdedeb37277dd441bc487b70624fde4c2ed0628ebda8b
MD5 3f10a73411208b0be0832963534e1388
SHA1 bab439c5667a8c045d96ac076db5dcb85dfbbaff
SHA512 4bc8d8c2468d93dc34ca4dc98eb621d2707c36b3a87dec41bc8c6226f8b7ffeb50b1ebb9c8a6ffbd0a3ade9467170f66ea55b4eb4e8726801fd799805407875b
MD5 SHA1 SHA512

Antisupernatural/forhusenes.ini

SHA256 f708326519e7d88ee91745db4e7d67caf5f5caa83e496428ea2f3a8439b57071
MD5 c4a7314fe404329062fdcaab9028adae
SHA1 f0245642c02724b8ab9b6caa8c684bb193d0e608
SHA512 f89f0eea0c8b7d017a6c55c65f156015949bffe40081e4dcba248882cf12e2a44c85ce2310b81229bdd2795ddd0604f26ba3f6202d5fc85d6c56b5a1a2e16086
MD5 SHA1 SHA512

Bankbokse242.ini

SHA256 e4835a82a8f1271c351865113946bd18410d361273d861eb878c839eef84d82f
MD5 3686b514f3ae6dc91463098c8e31c170
SHA1 328c301904330eb090381498855d42a62165c2dd
SHA512 86f3ab3f873cfd951879f14695e6f9de53cbe7635e51904c8881df7cb0754fe46221c4e6d7716d959e7a7e5d114dc951badb3e5903a6a9f3dcc3f787202c4aaf
MD5 SHA1 SHA512

Irrationalistic179.For

SHA256 6d8ff618ca7897fa27819b7812a9063006dbcfdcb58554dc94e382b8128f6c13
MD5 bce3221ce68d3a7a0208f690a94e5ce4
SHA1 38421bc21033ee0cd1d992502d4166e14777364d
SHA512 f7b56e0713a8932f0c11fd05845fb427ff33d227934a08f0565b7d4372a7a88be08a726b01a3721963a5eb611f42a61f111bc5d4396827273e4f10c8eb0f9f81
SSDEEP 6144:DiQCQGImMQ2nkdYdc5J+iM7SSuHJUZT9Q1velU14JlRbfztWxJnvH2PTF:ySd3kTMGS+461veG14RbfztW3WPTF
MD5 SHA1 SHA512 SSDEEP

Product List.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Antisupernatural/Coalsacks.ini

Antisupernatural/Diodia.raj

Antisupernatural/Koblende.txt

Antisupernatural/Mesenterical.ini

Antisupernatural/Telemekanikernes.Sta

Antisupernatural/Womaniser/maleo.ini

Antisupernatural/Womaniser/otogenous.ini

Antisupernatural/Womaniser/selvmordskandidaterne.jpg

Antisupernatural/Womaniser/torsdagsmdes.ini

Antisupernatural/Womaniser/udlaaninger.txt

Antisupernatural/bakgearenes.ini

Antisupernatural/chlamydomonadaceae.udu

Antisupernatural/dirtplate.txt

Antisupernatural/forhusenes.ini

Bankbokse242.ini

Irrationalistic179.For

Sharing

General

Malware Config

Signatures

File Explorer

Product List.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Antisupernatural/Coalsacks.ini

Antisupernatural/Diodia.raj

Antisupernatural/Koblende.txt

Antisupernatural/Mesenterical.ini

Antisupernatural/Telemekanikernes.Sta

Antisupernatural/Womaniser/maleo.ini

Antisupernatural/Womaniser/otogenous.ini

Antisupernatural/Womaniser/selvmordskandidaterne.jpg

Antisupernatural/Womaniser/torsdagsmdes.ini

Antisupernatural/Womaniser/udlaaninger.txt

Antisupernatural/bakgearenes.ini

Antisupernatural/chlamydomonadaceae.udu

Antisupernatural/dirtplate.txt

Antisupernatural/forhusenes.ini

Bankbokse242.ini

Irrationalistic179.For