50ce8538ad3fbae1449bb7c6e7fb4a8d593dad5c87e2a1f332aaa80ce459ef64[.]exe

resource
unpack001/$PLUGINSDIR/nsExec.dll

resource
50ce8538ad3fbae1449bb7c6e7fb4a8d593dad5c87e2a1f332aaa80ce459ef64.exe

50ce8538ad3fbae1449bb7c6e7fb4a8d593dad5c87e2a1f332aaa80ce459ef64.exe

IMPHASH 1f23f452093b5c1ff091a2f9fb4fa3e9
SHA256 50ce8538ad3fbae1449bb7c6e7fb4a8d593dad5c87e2a1f332aaa80ce459ef64
MD5 9ab4602326beb927310c89572053fa43
SHA1 c806e583ae7972d5f1669636a5b778e5542b1584
SHA512 4e24506da423c3548aa4f8b52412ab539745558738bab54cd232d2601f310b925a6c15cba8520608b2f1c0e5736c67982819e04ff0dde42ab96a6196b6334de6
SSDEEP 12288:m68ne9z+D7kCXN1SZoenpHHzGK+/wqvJxkfUEpOEfea6NKyfQ:mkz+DDK1nNGK+IAJxkfziPY
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

64:27:d3:e2:06:d1:33:a6:8c:6c:2f:7d:bd:30:21:0a:7e:80:5e:f1:22:2a:eb:e2:c5:37:35:96:f1:f2:3a:97

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Benedicite,OU=Sunesen Bjrgningsfartjet Forhandlerstrukturers\ ,O=Benedicite,C=FR

Chains

Dec 4, 2025

Minor OS version

0

Major OS version

4

Entry point

13449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

ExitProcess SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess SetCurrentDirectoryW GetFileAttributesW SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW GetShortPathNameW GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalUnlock GetDiskFreeSpaceW GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/nsExec.dll

IMPHASH d31c5eb927119d00232e4d4b0e32fcdb
SHA256 938580b466533dfa1461e9858fd106b60e1a52b713380915cc03afd3e4b4573c
MD5 98bdb37511634dad8d1236d91d373b26
SHA1 778cf74b4f8860cc378fa4e61aeba318197783ce
SHA512 5a7a903c2346750f20c0b41ceb6259bc7a5c9c6779acfeef94e0cea756aebabef58fdd83389353a165530279ec74ff20b903fc9a11acf475ef9471bd5e8d140e
SSDEEP 96:CjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkND3m+s:nbogRtJzTlNR8qD85uGgmkNK
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Chaucerian/dikket.har

SHA256 1145d17559d30f58b2745f1e056f97d973a2710ac4e3153d521c0f9aab03cb7f
MD5 395c73d30c64372f333bb12e1c489fa0
SHA1 d5bbb8bc0557290cbb33d33ceb229c49a89368f7
SHA512 a8e1532ed876ed4779a9a3b9db0270704dbaa0a031c59edc8ff8383e103686bd872570df7835448d68ddc7d7ae372136584f62a12ecc4e7b0932d27476c1ad1a
SSDEEP 192:0JXySt5/3FK3fIq/+AEG/qcLHseq3nvZUnQUjjdJRT2u+eyRR2hr6HcECFOijP8l:PXRzTUxujDNyeykWHWP8inakc
MD5 SHA1 SHA512 SSDEEP

Chaucerian/fletchers.dep

SHA256 c63f2766e493e695785dbac7c654de788380a09c94baaea2cc42e3e3c0c70470
MD5 ee1de002e57960e06d8ce1b12ed3db60
SHA1 1c5511c7a19491bc6ed1173c36280049edc0bfb1
SHA512 5ef98d30546f91fec25b60844b58457dd7e26507d84041dbd7f5e80dbf4f0bf1fc802e4d21a602187f16ac6522ba77ffe1f61754a2a3efdd4fcb5e70428a1375
SSDEEP 384:sDVVWN51sRvhm7eTWs2Q7CWUKfj3e+xucubccbIuERA+gfbNMtYBpkh6mH6J3+5+:sfa51tRyZqbmA0adhI62kH
MD5 SHA1 SHA512 SSDEEP

Chaucerian/impartialism.sek

SHA256 d220e6146741733aa25059c1d57576529f54ff5ba11a880e54f4afddb546d869
MD5 b7bb75df9421c7ecd03edd77ec7ddfc3
SHA1 5f8d8e48227c67a7613b9b3d3037e636cd67da3c
SHA512 d35954b7c5010b4b61756a505cca80f7d2ae5d237885474122a94b43f648a9f984cfe6e83ca7f6bc8886493e6e28d301168124649764f3fb2798fd9beb3072f0
SSDEEP 192:XfzslU0EgYoD/VaMdgC2WJyhuvO5mlWBVprn/nrEnG:IYPuJyF7pHEnG
MD5 SHA1 SHA512 SSDEEP

Chaucerian/konomernes.lan

SHA256 bd20004c8526ad281c26f7340588100e67388b0f35102dee377bb96fc29aa946
MD5 ef18c169d221e0239f2a8077c4041ce6
SHA1 b9243821aa63c425fc56fbb3ae91128988534151
SHA512 31cae6e3e47cdbf9d12643f800029f89f5806a25639787f94d7925691089ffc919fd9eb47d967ad32b968c907c47e002b1e081ad7bc01ac9c4ae9981095f4d4d
SSDEEP 768:X8qwByDBItLzG0v6YS+n/LS5Gsf5DHaUEt:YO+LyjYS+n/LS0sxraPt
MD5 SHA1 SHA512 SSDEEP

Chaucerian/kursustiden.ari

SHA256 63ae7293bdb854b4c1d58e1ea95817391ed07df01259f18079aabf8d41adaec7
MD5 47b7b87433f5af9ce78023f1af336804
SHA1 f8ce3785c210509ca134202a8f4fd7987474ad6d
SHA512 f48ff3c67e8f512e021e4fdb28e101782b2f77cd92d5ef3d4984b39c03e8998174604477230e24ad47b75ea49a804c3dd945f86f3bfda3f056a07148c8c3b0e9
SSDEEP 24:vESekasVx1T7qAV0Qr3hcNTgkSbcGnG/tdgmx6tvp7bpZqncZcQrwSW8Aq2OMPAX:80Zx4AVTRstsNJnrOLdy9fzv0N9RGr
MD5 SHA1 SHA512 SSDEEP

Chaucerian/medlemsgrupper.typ

SHA256 7b4eeadb523328bb31df82d1d85c9d8ea606bfa1581d178f4dbe910d0d962194
MD5 14f9c537660206336a9080e0d95ec318
SHA1 fb5aa20bf19736d6db6fccfbe6b6da9cb8e9213e
SHA512 dcfd4a1f4b99a2405059b82e5b930efa3e65075739b2b519d392794964768fe98ee2e2df7e4742101fa17c3c585fd009648f0e66be3b362f76b2ab4373a897a7
SSDEEP 24:B44TNi6vTHkcnvUKOZc4iyVP4oHNJAU3vFN:B44TQ6vEKAYy1BD
MD5 SHA1 SHA512 SSDEEP

Chaucerian/mottoets.bri

SHA256 681e5d08e25689730c703f73f77e61f0e32a16f92e99f2b1834c856d8684a5ea
MD5 08dd03a1325ded7367fd1949a72b3904
SHA1 d1cf06d835634f8754bda1a980b6b7484f3bbf0b
SHA512 275a52baf8d1b448f9cdb600840ca7f7e96e8a10831098859cf01b3138b176a73790a6ee62dfc64db07bcf718614ebc47b8eb05243c89a38f90e43fb18d40f65
SSDEEP 768:VsFaX2LEZqvoS9lUe3VWAYtiZ8SSPgmFgo:HmgZWJ7zxmFgo
MD5 SHA1 SHA512 SSDEEP

Chaucerian/origanums.des

SHA256 baa3ae76860eb3db76f21ce9f0ba26d4666993e86b513dc14a3b3cf5290a4690
MD5 e0cda11351c9b9da2fc9ef48fcc70ec2
SHA1 601b738d86f22ff08df8d30720ac40e6a8688ace
SHA512 8ca8438ec25f5c9969e96833938ba411f432b782984fc8d9964211d97ae5045e9cde66152c4450c27be9cf025952831d9a8be163e662d07cc534c53d45fbef15
SSDEEP 192:9020fuolTYqcpBDSml94i/U0N8b7p1UAgMg39W81Mh63gunFWUCzCOefwpcIepN+:2UognSm0icN18tW81auFWkvJhYb3
MD5 SHA1 SHA512 SSDEEP

Chaucerian/paraffinized.hel

SHA256 4bcad8ecdb85125f2655ca5d7ecb67f3e900c28c67d75d4173c914e7daf727a6
MD5 df88856c4acf7be8db7808d8d80218d4
SHA1 4ad9afe4ceb61dfe5acaa3fb851acfe767464aa5
SHA512 158d0737d2d6866afb9a5ce289fabe2150d30d682b33bdade4f33413a1d94519fdf651a1e322ee82e0599e69012e3fe71fd6bd2925ebc836527bf20f744e3857
SSDEEP 96:c/almjtVqqQP0dqcfVAkLIusscgzIMg0VOZECsGMWhAZ3n5EESX5yc1h0mRc94Fh:Wm8QRJVt
MD5 SHA1 SHA512 SSDEEP

Chaucerian/pdofili.ini

SHA256 012c8cc25f1227a8b5e8ad2e72312f0d6bd2b06dcd360269251d9e33f5ae71a2
MD5 715e9b1b3b69764cdb1eeb454767e445
SHA1 bc1347d84e4fa7e291db6517ad9688e09d9ac0c3
SHA512 27d590b23c9315c6431f1fb22072f0694a6fbe02301bc8cf37063e92b2f6270b2e801ecf7fd8dd79c45ab493efeee9f4d4e51ba914993624dbe8296a86da7068
MD5 SHA1 SHA512

Chaucerian/proportionalerne.pro

SHA256 48372f3ecd5b3686c286b6b884d3676ba76fdb13d0fe9a638f22de207baa8392
MD5 18405daff5cb1d39fd01c5ee8488e5b3
SHA1 808dee69dcb62eb5000f1f3ad483a4da15212b1a
SHA512 f209dfa130c4781aa915f8470b64c7caef8f7724032e4b727805be7e7dfec69e146e23fc427fb295a238906b94670997dfbc387ed033ce5cee147df5e08c1e5e
SSDEEP 192:AzA3rw91V7pDYUYpZXhQwIHlXHq9bidZfiM+ZBMLHftG5p/+cg7XcY3:QKWVlMpilXOinfiNMLHfI5pmh3
MD5 SHA1 SHA512 SSDEEP

Chaucerian/reprsentationsudgifternes.chi

SHA256 e3e637041f2d5dd34a5c33c4550598b5d5398edebbcd4c7a6c411d05981374f7
MD5 fc9c489a66262a05853f48cfb97d0d89
SHA1 efe5e57c26505f7ee80a02933ace1c7a878ce250
SHA512 71cbf0942b37911da5357d9f43111a12e6f09e7ca14edb023fcb6120f03b7b7cf8372c5d0bc3caa54dc1b2daf715b5434b7432e21cd70d72944d3c6f8c45c5be
SSDEEP 192:H38G0UBvpa+6PE1v437SG71W2IJ8pFC/toTWHjGNwVEhue8pD2e0DW2ZwbBWVqne:U629S22U898NnTNr0ha
MD5 SHA1 SHA512 SSDEEP

Chaucerian/rhymeproof.fre

SHA256 cf834d91e1cb75858ada0118e7c8803d98645a9179b8814aba5d0b57a83c8bb2
MD5 4cec165b0eb53a08144b697efdbc4332
SHA1 3e8401e2062d4b1b0fd01b3004ab76c282d881de
SHA512 1754be9be5067d055a01fec8953af57f8d95cf357261b0e46b9f9655d171d1232eb8124bcda25d761bd2b2ba0fb013ec55855ae104139cae4d61d5f84a879e4c
SSDEEP 768:0jK7LTbgup/ivuLqVf/POIu/EscVhBbjK4rDCZGgVBFuDdVti0yPtLjs:0wbd/kffuIuMs8K4ru1HuDdXM1U
MD5 SHA1 SHA512 SSDEEP

Chaucerian/skammekroges.ejs

SHA256 a16c5dbf2b3c7bd18492c6031f3524ea2df382d28b90b42b0291c0b89e787978
MD5 a8b11ffb82777322555419fd3f742eb5
SHA1 6e875da69d6d241eb7559d54bcaefd0e163b2e80
SHA512 1999a5b8ee1b4d92f37a7210f12a12340c0016f532850e29ab4350d88a294334d9ea61ebc0ef60abbe665ebce4f18c9da3cf791806d48522711e27eb0fb014b1
SSDEEP 24:DkYQQ6o+2coZBZjLM1aePl5C6UN6vzjwtaz0cxX+BFOrr:DkYQVoCoZBhDeXCw7jwtkhN+bO3
MD5 SHA1 SHA512 SSDEEP

Chaucerian/skibonitternes.ans

SHA256 e4606b3e91bd3d852516d183fdef4ab87110b8fe3160400a297c9bc71918adaf
MD5 46cc206d68220939c9e4bf41abd4b058
SHA1 d4a42539f2bd18cbd23fc7d8e44cdbced95c73a4
SHA512 70663ab723d1efa579504b45a4a8f247a186c9c517dbfdcb0ae047404c0b2f4ab4f6cdfa74d22b8737c0c89e30cb5f4a01e547b59499925d6d3610687fb48cc7
SSDEEP 384:CMXoTN7sLiw42h0ALMGw/+5TSBsW8QsKeVHlJaXdKKz2bwn2:CSoTN4t+ALLwGsO1JyKb+2
MD5 SHA1 SHA512 SSDEEP

Chaucerian/tilstransporter.bes

SHA256 bfb0b48cf96676e147ff512dfc2b96efb71aaaf2f9d6c119d287d8ea8d526dc7
MD5 e2ab5bdb2aa99c86f4dba6468ef09986
SHA1 e02a249fbc02af6cdddf59d3f568db1b39035fe2
SHA512 54c079963015d828ea9bb2715879b8c6d1cd0aff6c7ca671b363e32216503c6915dfd7b27f973973036e2f536e9a244229b43c946fa051b56826be4821d5c17a
SSDEEP 768:8QAnCJJPCARYC7ymNhcR6Gl+9XAp7YVlF:N
MD5 SHA1 SHA512 SSDEEP

Chaucerian/tvinger.fis

SHA256 1260bca23aa78c9c4e63bd09c2b1104a5d2b68e684f1bd4f9bb3a6af94c89cd0
MD5 bc498cb39e25545a799e418d440a922a
SHA1 648775b4374b61b375fae618370607d19d7b7b64
SHA512 650d9536425598a9e2d076536aed4dda044883e7e70bc2eeb4875e9bcf6ad76a67ee6b4f4a80d9797b8c57d8ed77217878c8acec71a1448cc429a1529680b34d
SSDEEP 384:PShm0usHBo/gQgwNbKQeuKFkLA/7UlJGbGm2b4CGgX:6hm09ho/gQgwN9evTUXlm20pgX
MD5 SHA1 SHA512 SSDEEP

Crazies113.Bun

SHA256 4c058130442426e8d7c1c57961f1bab0a35d786004ff63cf6774eac3b7ce4a01
MD5 b64d4f3843ae879282da46d2e5970c9c
SHA1 9af6d4c28161c7a08c83424a78d8e25604a3ef26
SHA512 9910d9e966e144b5f836a86b699aed4034bc926dbb8efdcca1b6f0bb03ab44dd75719c250521fd45c2335dd933a08be7a4264e05efcffc375badfbcf81c78526
SSDEEP 1536:nAduf2xXidEEltemvac1GwYDZtpyO3rgOZ:nypxiuEltemvJgLDZD9g0
MD5 SHA1 SHA512 SSDEEP

Doubloons93.txt

SHA256 68d58a503070bfcb72c1f5fbd300859e81ba2672b51832acf7dd7076b2cccedd
MD5 8774603142870745f96a885fc5f91cbb
SHA1 239eab05d9f5baea6df85a9b0091e1a9c8b376df
SHA512 81cde9032d7aa80833558216c5c70c7c4b0138b7e49aaebcaa48980dcde5bd89be259cccdd9135bac2b4a556fccde52d5002fa54cf0ebc5ab2fbd2f14b1afa9e
MD5 SHA1 SHA512

Fyrvrkeris174.ini

SHA256 4973447a72acf1b00b98b45cb57705ff3a6a589b74e7147ad5d04073e8fc5097
MD5 d0cf6ebc4a50b636a9b059909b5de98b
SHA1 e76b1fa6594b21ae23b88f62bd3090b5fc1e66f0
SHA512 d2d897451f726aeb135c60a92fbb94afc7e01ec7d39848bf6e7cc624e6b61d96bc77b5c8eee5bb07e3d1215aef2d00eee6f6449fdb6d4c91be98c734ca0496f8
MD5 SHA1 SHA512

Manhattan.gre

SHA256 c8dcc07a79bcd39de1eb193594dea24c7528907b5260202f7b356af5d0268893
MD5 75967760892aac6e550dcdb8aabc432e
SHA1 36ff0a33ebef8e48fb3318bf5877f52fac3ff442
SHA512 2416b40d77818f65017096987163bfc8e8cc5bb31e66e5ca12e6ed75140b3edf5389c855ce46cda228b67ca381af7a4582ea66287d3244868480e33a3179f419
SSDEEP 384:p+uiBmn6yk4lJ0gnBRDv9RX1RTtjo8/ODoQ94Q1Ox2zW0zUKsuedNeIcw:Yu96yk4llLlNRkkODo5UOx2zWQguedH
MD5 SHA1 SHA512 SSDEEP

Satsarbejders245.hal

SHA256 5d8fde9a825aca34bd30dddca94f08eba98c25108e9a10662d89fb96195da880
MD5 872f898962090e440440dd1e42143d4a
SHA1 89ceae6981b100aaf436e4e7f4c42d95ce41ce19
SHA512 d72c780a68e68917436280e65084cefbca978ed9284f061bb50a744c5bb82f0a007331aeb5105e32eaf4a3b67cd260ead63b5917d747e3ed7b358871dbe2c1f4
SSDEEP 192:RuxZARpeQ2Y68PxR4RNsVF1sTpgJUyCSyurmgMiHLSkuTu0:csSQ2Y6NRNk6gJUyDyurmaS5
MD5 SHA1 SHA512 SSDEEP

Trantlum46.lan

SHA256 836e3273d0d136a57c95d7ebf9c7ca050da66c4249939a10a691215975e96e32
MD5 9de053c7f49afc39fde579a73d9c08e6
SHA1 1d8c433daeb4de48a0b00609ef15155180e6c87e
SHA512 c309af8af166c077ced52f76c9d9c5c82f45f3eaa43d2640bc04ee9e17b7f544761b855ece4614c48f32f5d26cd855abefec013fa3a4dce29767d593b316d450
SSDEEP 384:3EK5I1E/jaZOB1YJxadHec3VanR2jeZ0sIkQqe3qafagwkjw2l4HEeYSf:3Er4jaUYJxascFK2ZDqfafan2l4tY+
MD5 SHA1 SHA512 SSDEEP

Untessellated.Dis

SHA256 a88753c1017c4a9cde884ee56f040a42135d5f455c3e948ca291f0a12fe17a97
MD5 2c30252c39fd040db6a005c930db32b1
SHA1 f4aa36d45e63148d2ffd60b7903fb90eb5d1fee6
SHA512 5dcafb68cbcd2fd34464b0749080ee1660045f62f7458f88de0d086666e2a43c53b902157c9aeda0acb8194967af6b27513607d8a7b92dfc225dda7d3e6e0e9d
SSDEEP 6144:cClDXW9Ig7DCpiedJ4Cq40LpErfhzmwiOE55FxXW8AhfNHwdjLB:cClDmSg7DCpNCCqjCf4wink8A3C
MD5 SHA1 SHA512 SSDEEP

apsidernes.non

SHA256 59d3599f3f4934179d177a132262c6bea2c8c04c511d2992af4c1f84d40eb370
MD5 cdbe615e7d0ad847f69302a3a8e2395e
SHA1 79c96f0edae0b5a9be0d64f95ee71490f10c9689
SHA512 073a95d37e27673b93e6bb6a98b83687664b0742078c3508bcb29de00d9ee5ad2dcd870b76f8e43ace7715c7b4877eb4737e7362934bee09a828ad1df644ce31
SSDEEP 24:IXnZhttn680MtFnGOt24a6cdOkEvkIHwovYgcmoiorHoiOzO:IXnLttn680Mt12ikEvktiYgzoiYHo5zO
MD5 SHA1 SHA512 SSDEEP

daekke.txt

SHA256 4226f91f3b1560d092d031dcfc45ae6ff71ca3a1e1ecd84b406df9f12a9b461b
MD5 ad014f62c57c1304e5cc8f8b679d6913
SHA1 5a7efe37300c47370ba6b8a33ed3a986abe11886
SHA512 f1a8fff24649f8dbd921863dbe162e79db1234827a99c2be28cbc1827cab79a9dd2f9bb84afc3e720bfc3c4f61217ab00b2734e453c7e1e8ad84a68c4791ca45
MD5 SHA1 SHA512

denationalisation.der

SHA256 fbb4ab0ad1da0f1594a734b102fc3065081859d0806b923e5ef35a5bd44bd584
MD5 51a93e8a05675cbd9763b60d57bb5ecd
SHA1 278c79b7741c5c18ccd91afea16d4bbe546315ed
SHA512 0fa1beb9a77413414a2dbc3382ce173f21dd00953ecd5d1fcf2b143ce19a75039f9a86cabc71922aa14270ce09963e58e11f93659b114177dc021099c86579f8
SSDEEP 384:p2pb81glcdqCW59vrcFfpwAwPi6CXODdFMZvXaX5833NeajHWOVAC1y0xhf+C1e+:p2pbCKzvrAebEmF068Hf+A91eesj+Waf
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

50ce8538ad3fbae1449bb7c6e7fb4a8d593dad5c87e2a1f332aaa80ce459ef64.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

Chaucerian/dikket.har

Chaucerian/fletchers.dep

Chaucerian/impartialism.sek

Chaucerian/konomernes.lan

Chaucerian/kursustiden.ari

Chaucerian/medlemsgrupper.typ

Chaucerian/mottoets.bri

Chaucerian/origanums.des

Chaucerian/paraffinized.hel

Chaucerian/pdofili.ini

Chaucerian/proportionalerne.pro

Chaucerian/reprsentationsudgifternes.chi

Chaucerian/rhymeproof.fre

Chaucerian/skammekroges.ejs

Chaucerian/skibonitternes.ans

Chaucerian/tilstransporter.bes

Chaucerian/tvinger.fis

Crazies113.Bun

Doubloons93.txt

Fyrvrkeris174.ini

Manhattan.gre

Satsarbejders245.hal

Trantlum46.lan

Untessellated.Dis

apsidernes.non

daekke.txt

denationalisation.der