f46592fccdfe87478bfa33d5119ba8a52ce14f8b6bcd8ace66f0b7cb790d78d9[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource
f46592fccdfe87478bfa33d5119ba8a52ce14f8b6bcd8ace66f0b7cb790d78d9.exe

f46592fccdfe87478bfa33d5119ba8a52ce14f8b6bcd8ace66f0b7cb790d78d9.exe

IMPHASH 7eae418c7423834ffc3d79b4300bd6fb
SHA256 f46592fccdfe87478bfa33d5119ba8a52ce14f8b6bcd8ace66f0b7cb790d78d9
MD5 02c94e2469eda4b383a97f53efdcf83f
SHA1 b9ebb0edd28e92a0b79c7ee1bc814f39b9a135da
SHA512 c67b2c70468921a823e3a526a3e64db4382ca979746462c28de1be255a0326af4ab110be05c0c8b1562c27c731a09771ac350f80e85452426b136676a23a23b7
SSDEEP 12288:DGzMtp481/xdghmmOsyFrzRob9Mk/LmjtG/:DGzMtp48Ldg8wUXRo9MIJ/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

ee:32:fd:5d:ba:c8:1d:62:58:8a:7c:ca:26:17:7a:b1:57:60:59:69:33:4a:a6:55:aa:fd:79:dd:29:b8:c7:b0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=katedralskolers,OU=Flyulykker Tabellgge satirizers\ ,O=katedralskolers,C=FR

Chains

Dec 4, 2025

PE Signature issue

Digest

73:b3:6a:e6:65:31:82:fd:e2:bd:73:cf:db:61:a3:40:0c:e5:fe:a9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=katedralskolers,OU=Flyulykker Tabellgge satirizers\ ,O=katedralskolers,C=FR

Chains

Dec 4, 2025

Minor OS version

0

Major OS version

4

Entry point

13306

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess MoveFileW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW lstrcmpW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc DeleteFileW FindFirstFileW FindNextFileW FindClose SetFilePointer ReadFile MulDiv lstrlenA WideCharToMultiByte MultiByteToWideChar WritePrivateProfileStringW FreeLibrary GetPrivateProfileStringW GetModuleHandleW LoadLibraryExW

user32

GetWindowRect GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu ScreenToClient EnableMenuItem GetDlgItem SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect SystemParametersInfoW EndDialog RegisterClassW DialogBoxParamW CreateWindowExW GetClassInfoW DestroyWindow CharNextW ExitWindowsEx SetWindowTextW LoadImageW SetTimer ShowWindow PostQuitMessage wsprintfW SetWindowLongW FindWindowExW IsWindow CreatePopupMenu AppendMenuW GetSystemMetrics DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectW CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

shell32

ShellExecuteExW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetFileInfoW SHFileOperationW SHBrowseForFolderW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ord17 ImageList_Destroy

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 20e642707ef82852bcf153254cb94b629b93ee89a8e8a03f838eef6cbb493319
MD5 109b201717ab5ef9b5628a9f3efef36f
SHA1 98db1f0cc5f110438a02015b722778af84d50ea7
SHA512 174e241863294c12d0705c9d2de92f177eb8f3d91125b183d8d4899c89b9a202a4c7a81e0a541029a4e52513eee98029196a4c3b8663b479e69116347e5de5b4
SSDEEP 48:S46+/+lTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8m0ofjLl:zMluPbOBtWZBV8jAWiAJCdv2CmHL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 6950991102462d84fdc0e3b0ae30c95af8c192f77ce3d78e8d54e6b22f7c09ba
MD5 8cf2ac271d7679b1d68eefc1ae0c5618
SHA1 7cc1caaa747ee16dc894a600a4256f64fa65a9b8
SHA512 ce828fb9ecd7655cc4c974f78f209d3326ba71ced60171a45a437fc3fff3bd0d69a0997adaca29265c7b5419bdea2b17f8cc8ceae1b8ce6b22b7ed9120bb5ad3
SSDEEP 192:BenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XB9IwL:B8+Qlt70Fj/lQRY/9VjjlL
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/modern-wizard.bmp

SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
MD5 cbe40fd2b1ec96daedc65da172d90022
SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
MD5 SHA1 SHA512 SSDEEP

$PLUGINSDIR/nsDialogs.dll

IMPHASH 6b5c4f7d679059f68f1269aad3a5cecd
SHA256 c5ba017732597a82f695b084d1aa7fe3b356168cc66105b9392a9c5b06be5188
MD5 ec9640b70e07141febbe2cd4cc42510f
SHA1 64a5e4b90e5fe62aa40e7ac9e16342ed066f0306
SHA512 47605b217313c7fe6ce3e9a65da156a2fba8d91e4ed23731d3c5e432dd048ff5c8f9ae8bb85a6a39e1eac4e1b6a22862aa72d3b1b1c8255858997cdd4db5d1fe
SSDEEP 192:oRsHeylO012En8pqHtcE0PuAgkOyPIFc:sATI0d8pUP0WAgkBPIFc
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Desmoma/Bevgelsesformen.som

SHA256 3d4fa2f627a6f6fd42018186d7960c1ded2d92d3318d94080c980bbe799b0227
MD5 58f97a92a5e0575788ea9a08aa9ec452
SHA1 dcf11216b074df89a1dba2d66b20255b5cf589b3
SHA512 77bfbda4fded96917179cf8ebd9496aaee532cc3153e1c7f2b1e94d34255d11473ff619338d1e6783b2b10f1d4fe05701a328a1952ccdac78d4b9410d04aaaa9
SSDEEP 192:n1Zot9KIrVZhMBakuvG0wAR/m/UjgW1A2H3G0HuF9dhw5uUAqpkkRw5Ah:n8HvsARkU8SA2H3rIdhw5uYkk4e
MD5 SHA1 SHA512 SSDEEP

Desmoma/Conoy.sch

SHA256 c8a49ac2efc1ec9a77f0b3926e4dc99d93e73e0629e87881484cb80265582ea3
MD5 bf5c0d796ccc0aae7fc03c1142f208ec
SHA1 7d9d7d63aa50d3d334770acd29219140db1985e6
SHA512 18fb3cd6397ab065504e4b68d4a7712e55e3dbb076d10528660af85cae18e0e067e649a2ff2ae92d2770d6feff1e2676a8584e2e2c25b079c14dd4faf76e9cac
SSDEEP 192:0URx/MBA28B3qXyqfO8DuTAyc6t47TGwThYGssNLUk4RTa4Kf/4:HEBm365yXqLUJIH4
MD5 SHA1 SHA512 SSDEEP

Desmoma/Diskonterer.eks

SHA256 53b8f5f9dd81dec19407534fe1890d058d1fb2c262e8bd384fc45f91fa27b573
MD5 cc899a8bc879b91983c81846fb7fab77
SHA1 eab89f6ba0ff1ff28fa02832eeb5837159f74677
SHA512 e31555ced893ff3e62ada801415fa9bf1bf4a93d0b0d06454d5a85d3a59ff35267ddcec93c38e0c304a03c9a6adb5713950dec1f8788bcfb5095055424e33ebf
SSDEEP 192:hmmO8bX0BygOxyhn5zMzFOcol0SURRMjkLS71sWvcbTPzdfeY5fic:hmmZ0BygOYN1wmlKMjd71sAab5Fic
MD5 SHA1 SHA512 SSDEEP

Desmoma/Heterosomous.bas

SHA256 1ab37f55cbf07a1672fd90eec21230eb46e56d15a425c1db6bf861aaab562e4e
MD5 9e3874e1c23ee1dcc1efcd6ad5e02134
SHA1 0e21d1e7c3b0eccd1d4444e58c989eb686a8b62f
SHA512 0c0f1beb7b385526b677d63b136d90f7ecb28cc59c6e13efb3499fdb9d6ac38220cdc002251613ea47f05c8a3f28230cbf159de4207f052a5aba2424365f6592
SSDEEP 96:G0IkQ15FP1JG75nO+ghUD1/Sw8DBLMyF80:Gxk6FNJG1O/AqnaM
MD5 SHA1 SHA512 SSDEEP

Desmoma/Landboerens.non

SHA256 41c4468c2492ab28217df6165d3321d6cb99882835bf162f399f8a73b4731bd3
MD5 2a7cc99d05918c70c554a3e4f036373b
SHA1 941bbf42e2f8a86113d14b7c7225304a3951fa11
SHA512 2771d4642cf1799067af76d13246cb4c20183f096cee989f121b3a062f86ab4b2f0151ccdc339632eed351df8665045d333b7c4c2b8238ac839978521f271e5e
SSDEEP 384:I/WBEm5ep3Vgw5ZuLl7z8zQ0Uir3HhwASzQw22OvNasmtrIELhMmtHTliuK:I/WBVecJx74zV3yAghbtrIUhMMK
MD5 SHA1 SHA512 SSDEEP

Desmoma/Mandarinerne.Kom

SHA256 1aecfbbdb82f2d23ded7059af7bdb4375c6f83c56abd60053d2fc8c2ee30de0c
MD5 0a8e5c41ef9caf6cb6c9844858a012ef
SHA1 db4be15c757e1dd237e22a2d7dd0255952ef6115
SHA512 a90eecd33eaa49b7153da530fdc9a5a66eff210bc77a838898910273f20a7eea17c8ab98339f4b0a158bee6cec493e06bca347093578192bcdee54b0540635f0
SSDEEP 768:GoMneW0AC0ss8bFPA5y8bZbN9aUKbdigKYcJ3xfIYT7ensSPSX7H3641RTmAtc:C/G8hi1bUVHLUiqCRSP
MD5 SHA1 SHA512 SSDEEP

Desmoma/Torsos69.for

SHA256 12751727f6cf0678bf99dc0e7768203e911b8a04b233bc75f42775d03cfaa156
MD5 bb5170f295886eebc054d03cdb6c95b1
SHA1 2311aa6c7472c80cf0f4dae7749d1bade4c60954
SHA512 a1ccdacbf8a6333ffb8c3c310d4a33f09de53032b45475f1003440e2a86c740ae232a9bd0a6724169f0c3ed4574b1b2500d1c72088125441c1fb7d1f1445709b
SSDEEP 384:Jqec1NyLtc5BRyhTEWimbJeIPEOziXHmsJnVj1KhMG1A0F:yTvyIwr29nOF
MD5 SHA1 SHA512 SSDEEP

Desmoma/Volatilisables64.med

SHA256 9b736610fef67fea73a8d939a69b698d10577f710cb5a0b150d3d0335e5779d6
MD5 f9744a1942a247d2b1597760e1465658
SHA1 3ae9e1647f300b0aa5ddbb6f8350da3eed43089b
SHA512 7f4dd8c4ec49e9290dd7a707d3439978b08136b72f814c80e6abb22ad49e1e35af6145d6c94e057994af7b252945c2d7efa98728eca889a1b2a98de2916b6a04
SSDEEP 192:8wFWOz3z/bdky7NAlaxdL9R3KK/YR/fZr:8wwOz3zDdk0S47HDe/fZr
MD5 SHA1 SHA512 SSDEEP

Desmoma/astronautically.hem

SHA256 0dca384ba03759518cf962290c60166a9ce8ae35ffdcf85a4d1d9423a145b096
MD5 d4ea2068cef0a82be4217ec807bcdfdb
SHA1 97761bd2bb931a46336592e9cfcd59e3a85b2f5f
SHA512 1f2c2d2dacd0147cc2d25f6b3d232ad8c6180dbab6da0abab128baed101799ab4cd71a114981e92f7db11649c4941071cd785c8074ca45ea53737af7be72e85e
SSDEEP 384:ARXJeFY8hFMo9Ba/JFdW1zUmWafXE0/ie3v547FrokSI5jxQC9ypRkaAN:YJeFhhx+FjuE0qCY5okl1xQwqk9N
MD5 SHA1 SHA512 SSDEEP

Desmoma/besov.Aed

SHA256 a7d244370b10306a455ea23a691126262513081a9878a59abb5257b3e87d1cf8
MD5 05332a6129757f85c51c178760f29cea
SHA1 53dd4a53a9a8c89fe25ccfaaeafa75c6043b7bc3
SHA512 13bb1d776ab3e2be5a4197a7bbeefc5bc708c2c3c3d8a3024c3635117027f4f3b071b3783587c20d8c889412e1bdd420e2c1cb9f02ecbeea4be519f1c8c1a1a2
SSDEEP 6144:jUGWJLSSelW9dZQY3c9Un6zeO6Z8e2bLtA5rMv:jUrS3lW9dZQy0zeO6Z8/L4S
MD5 SHA1 SHA512 SSDEEP

Desmoma/flirtier.pit

SHA256 f9fcede4f941afc734c6a5c23473bf2244292ebc43dde7f87ae91ef45e350fd6
MD5 8997300f507fb5a557e993ff9cf44cdb
SHA1 7677043184736bde36a5b97348c639b9a2326b74
SHA512 ebcc5bac91f477cabe809faa33be8ee8c62c263802888888825ed10244b10ad8ef1fd1309ddef47d78a29224a49d457ca6d05ec40dece7fcdd9982badeb00635
SSDEEP 768:emR2FPe2N1CmrR8FFnbggHfuLg0jQXXv6v:H6
MD5 SHA1 SHA512 SSDEEP

Desmoma/karyolysis.est

SHA256 dbf332961f3e38fb0d36a99617d541656151e58f5c9266224824744176cc41a2
MD5 a6ce942b1d81c5ae9da0d4a04793b3b3
SHA1 53c3fcb38af38344c5115dde8000671bc670737f
SHA512 9bd12f759613a833fff46125a7ab2dcd022b1bc1c8bb657bab6a69c8e0eb1f636f2e112ef9d3a44059811fe032d6b351f02d72d44b71f9527cd7724e3b61eb38
SSDEEP 384:9icL9Zd6Qk3A8AxX99GKX5mx3eClQVWiQwTf:zDl1uIf
MD5 SHA1 SHA512 SSDEEP

carnie/Buskmnds/stumps.sli

SHA256 098be4d81cfd876233bf4ae0dca4b3478e08d8041ca27921ee19664dc363650b
MD5 2653c129d84eda7c0eb7bb5a1a326961
SHA1 e087896ccfab191f010a51fb37636f8b93d41c01
SHA512 ae06710de5ff737464149e28b8b0247c31c92cad8bbaac1ab925ec2d57f563146ef42258d190ae2a3c8c29d996ad1f49ee03385c24d29c832fc0270853f3ee00
MD5 SHA1 SHA512

carnie/Buskmnds/torve.hop

SHA256 2d89c00e3fe4f55a6aa59565f25b2ae72dfcd15dd41641715c9b680e1596c64c
MD5 1a48d92fc44f39ccad5fe6e66e6ccf30
SHA1 88c21e8f26426d3a161dd90bb8b66ea6b51c8362
SHA512 e77599aa88afdb328f35e826682f65b8ca33b7fdcf2c963fc1af4fbac74d341e0a866db8527e1296e513c8154bf9e120d810d3486205a629bbcce0c08a3bdcca
SSDEEP 384:TfRg09bAQcrgIE8lgn/B18nEyUiOYRWfPjpHs:bm09OrgRYxU+WfPdHs
MD5 SHA1 SHA512 SSDEEP

carnie/Buskmnds/velfortjentes.kur

SHA256 6c9a764155125f270ab6c6a084af57447353c0f4780ebc7559016a8e97aceace
MD5 51eb4d639432a1ee1d331a2ed84d3950
SHA1 163169935af92bd96748ed7cb775157bb8a0e50e
SHA512 3511b02df6ec1ab78c3e13c98106ba9876a95d4ae8fa2541e9691a97af3258d3f8ca1e003a87fbbfa4eece94576ca6c0ad537ee4f17d04d8d036697a80303d19
SSDEEP 384:CBTq7EovTcDEt6AZY5UQ5woSFJFcisTD6NPJuNK:CJq7EcTzt64Y5UQ5rSFJxGWNhuNK
MD5 SHA1 SHA512 SSDEEP

carnie/Buskmnds/vokativiskes.fej

SHA256 cbe891676e18ab2a674b0f42db17b0a492ff43cfb6ac2356beb86d7e44b5f3a8
MD5 f2f6d801c55d6bafe3157fe0ce4c83b4
SHA1 feb1a69ea06c683d76e61763b144e430489778e8
SHA512 2e740b735cdd6f524338a7f54221059e9bfc652789f0a89cd1a14070835827cbeb16cfced223ec738f3ac95c34319beb09ebacca80382b49cc251697cec45f96
SSDEEP 96:JcQE2Tl55Uv3KtJceOJqtI10mBooeX3Dg+a1VDYgT81Jqe8CtSFfqcxUCIXjU67J:EN+DgtD8Z2GhBkSXb8yDcVAVqM
MD5 SHA1 SHA512 SSDEEP

carnie/koncertsales.mar

SHA256 d8176668005bc7688377cee3e77eb5a51ab6b5ff8509ac10863380b7df3986fb
MD5 b991d048d1e6e4d69fb8cb004ecfa7a1
SHA1 354468c9df8cead3f0bbf0c2a63ac4b8f42ab9fb
SHA512 8b6307f91632e059df660fee1e494a7dafe3287556683b069d78bcf744ba544c73e93db202a3eb863a241558599a4fcf2cf2f0d2fa727fe5a12c3d59c5b94f15
SSDEEP 96:jtQU0HTPTkgp34UvN3kn97laJm4uW9tIMsemtksJEvwd78by6nruQn26C:WUqTn34UVUn97lKmoIDeFsCwd78bNuM+
MD5 SHA1 SHA512 SSDEEP

carnie/livsfarernes.alc

SHA256 31308501c0c6280209ad9594dc3bc5256c9c68e826ee933811954320b110e367
MD5 dcb9f3c91b3f8f273f385fef172804c2
SHA1 91c24edf60fa6b5c955e8631e4c99e5cf859cfb6
SHA512 9892e63b9975a23d59440ec2d13c0b824dd5970581534b3c194055e394c95bcb003278e88aed5cb0566b174c4a2b6d9f486069f4f77d961360c84b8e309322f5
SSDEEP 96:lK+YYzKzWsq5+YP7XyEEAyDitE3ryt+lGBSxe/aM5mGhdz8eXohDv+IlLJB7nefk:XLcuVTavjLDuNyfbiRUUaFabw
MD5 SHA1 SHA512 SSDEEP

Sharing

General

Malware Config

Signatures

File Explorer

f46592fccdfe87478bfa33d5119ba8a52ce14f8b6bcd8ace66f0b7cb790d78d9.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

Desmoma/Bevgelsesformen.som

Desmoma/Conoy.sch

Desmoma/Diskonterer.eks

Desmoma/Heterosomous.bas

Desmoma/Landboerens.non

Desmoma/Mandarinerne.Kom

Desmoma/Torsos69.for

Desmoma/Volatilisables64.med

Desmoma/astronautically.hem

Desmoma/besov.Aed

Desmoma/flirtier.pit

Desmoma/karyolysis.est

carnie/Buskmnds/stumps.sli

carnie/Buskmnds/torve.hop

carnie/Buskmnds/velfortjentes.kur

carnie/Buskmnds/vokativiskes.fej

carnie/koncertsales.mar

carnie/livsfarernes.alc