1f8097ccc932fecf1b0ba2997ac3ef35b5d99d2d58408a6a0b45131fcedfc599[.]exe

resource
unpack001/$PLUGINSDIR/System.dll

resource
1f8097ccc932fecf1b0ba2997ac3ef35b5d99d2d58408a6a0b45131fcedfc599.exe

1f8097ccc932fecf1b0ba2997ac3ef35b5d99d2d58408a6a0b45131fcedfc599.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 1f8097ccc932fecf1b0ba2997ac3ef35b5d99d2d58408a6a0b45131fcedfc599
MD5 aa35917f9e2986db1105ea270882d267
SHA1 0ef9e9e113f8c9c18d956dd39a8d2d05194d8352
SHA512 9cb74137e1aa16d452dbaf4006b6b1a2cbbe5632adb7045a55adcfc7dce4e92bab7f97e28abdd889f8a6888308630655cd08321a6d26dbb634f82af4eb45959e
SSDEEP 12288:04nN/oHxmO8EKQyJTvq7qrEA7VVf7G16EHrx4F:LNAHQOrKQ0vYmVfrW+
TLSH
T1A4D4E11EB124448EF9114B3400F7A21FAD99EE94BE739A5F0337FC565B729112DC3AA8
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned binary was signed by an untrusted entity.

PE Signature issue

Digest

d1:d0:31:67:e9:15:05:89:17:c9:85:ef:70:3a:ca:ae:c8:30:6b:4c:ef:40:fa:c7:af:74:02:6a:cb:95:fd:f7:be:b9:57:e3:98:d8:3b:e7:74:0c:8c:d6:b2:d8:d6:b4

Digest Algorithm

sha384

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Beslutningernes,OU=Nonteacher Slgtsnavnes\ ,O=Beslutningernes,C=DE,1.2.840.113549.1.9.1=#0c1448617474696340426f677072697365722e496c74

Chains

Jan 29, 2026

Minor OS version

0

Major OS version

4

Entry point

13136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 c2f405d7402f815d0c3fadd9a50f0bbbb1bab9aa38fe347823478a2587299448
MD5 9625d5b1754bc4ff29281d415d27a0fd
SHA1 80e85afc5cccd4c0a3775edbb90595a1a59f5ce0
SHA512 dce52b640897c2e8dbfd0a1472d5377fa91fb9cf1aeff62604d014bccbe5b56af1378f173132abeb0edd18c225b9f8f5e3d3e72434aed946661e036c779f165b
SSDEEP 192:eX24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlqSlS:D8QIl972eXqlWBFSt273YOlqz
TLSH
T1BD325D06235081F3E1914138846B3E175F6A15069BF58E97DFD38646BE30BE7BD79503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Afraknings88.bra

SHA256 01fa3bcc24be50b5c2ece19ab3886c54affeac8f33ebeaf60ce24a4c3ac822a5
MD5 476d45c2cd732bc862009af23f2c9d37
SHA1 1cca08454c14ae76ffe9d64bec089ce593b14848
SHA512 96e577c4d290c012a5a02bc01fe44e3883327bc347ea0271121c30e411cd980722554195dabb3075c3c0b7a2bac1de03195ba0427a97583f770bec8a8ae8eaaa
SSDEEP 96:ByjB6vyM13453R2PT2FID4376907YML5a07WU7sr2mnCHq6BzguTaz00LD1g:x3I3RiDU7rXVazqbHqjusu
TLSH
T1B3537E1269CA884DD2382E64C056F0030AD6DC73FBF4546562EE2097D03AB457A195C0
MD5 SHA1 SHA512 SSDEEP TLSH

Corkline/skrfningerne.lak

SHA256 47560fa8e571a02001c0f17ba05ae15c02945124684ab7465f970b7d174bb273
MD5 c8a5488ce318f70637a5c8581647ae4b
SHA1 020471b2f6f8a6137000a891272b294717c0234d
SHA512 32376f9a8573fbf9d0a53d946af17b92e09d9794403620cf2d66ee1b1443a772e9db32812aeb254ac3817ad90fc219d06b32c57dffffbcd9593a79c8cdeeb1e0
SSDEEP 192:EtP+qin5ZBruRKDZhE2do0VRCEs5o1BuXFH:E5in/FuoDLE0o+PsKjg
TLSH
T11E436C3D645A9FF99F6BB168882C5EE9D83BC8241CE3625CE13E42344B0745686B3921
MD5 SHA1 SHA512 SSDEEP TLSH

Corkline/stil.bru

SHA256 1285dcbfacf935b40ac1cf367fd3eae0a342adc8e2c90300a2c48e6eb6d9d3e8
MD5 38769c9bb1b46b98af05100051ab39dc
SHA1 3a722e8f49c9c0d8bc2a037a0d4f8b1668ef61c3
SHA512 8cc174305e50ecf88f578547edd3eef040ec0dc327dcac0c42f4a77e102c5493378a6ecb6be14c1151ad256b04c7c08976b0b72cf4a5afea1c8182b0cf18d762
SSDEEP 192:9ld065dnH48n3uBIBgh3jRVoaKCSuQl0SaFpk9:Gk93azh3jRZXQlfaFpk9
TLSH
T111134C6DAD1E7D3548091760950121805B7DC729F248E59AAFC591E5E3AA300D9C3345
MD5 SHA1 SHA512 SSDEEP TLSH

Corkline/syrligst.sma

SHA256 be5ba8411a064fe953b7ef7faf9b197004f08fd7807eff195d0dc1d301bd336a
MD5 66bcb7718ca49b1faadd1e7ef11c7e96
SHA1 5cd3f8493746a7ddb171353accea7b6f02ba16ac
SHA512 e0145f44862e1cad0233ffa54f9ad1c3aa10cab9fe65d9e7ea5f46d4a2a1a81f90ac87149b9a1dc42242474e0bb44249a3152ee9e4a149be83a739a8a4150468
SSDEEP 48:rLfwIddMBYnkLAYtrk1Fbc4qWHq+Su5EIAsnAfp5GlrSQ/wlt3pe0w8adK7CjN8z:vw4yBYd1F7BSI/AQKGjNO2KP
TLSH
T110134C80403DAA89D1D93969353514E50FD69B13682C09A39CCF74A4E9B225696C5222
MD5 SHA1 SHA512 SSDEEP TLSH

Corkline/thumbscrew.cab

SHA256 7f5a2b203174f7ff94e1821c6c0a531b92cd98e50f8b31313be7bf1726b2e94b
MD5 0c4be43c2d6a65523f32d9da46a6b919
SHA1 93de3ee556a52f22f03a698278f2414fd9787553
SHA512 d2c6781a38ee0ec80533eb7308489f4bcdfa90da88792b860343aa4f3ef2f5953ed2b35fc0d35ac87598568a59007fcb60c6b24a46d4ba34880fa0903de579a0
SSDEEP 96:toHkV0HEZO3OujnJpGH2W31N31Hfi73pC8EDShNZfm41qIvJ0yoitI+Vn1Ke9Hv1:tnEMuDC2WFN3N20uNfNJ0ypKMTr1TH
TLSH
T17F733CFC8B63C3CC22B71BC44547238A7413969985AE8BC6ECEB74487570F617635CA1
MD5 SHA1 SHA512 SSDEEP TLSH

Corkline/thymelici.aug

SHA256 058ccef5e3b405da2b71e2b3c565cdc7f1d091f29f5d94666ebab66ac8db6e14
MD5 4c6af6f721fcbf93cff8163d08870908
SHA1 500fe0ce868a633aad820ad6646405ad1843ca20
SHA512 9263a48ab76665fcc4af911fbe5c60dfc7486b4f4653b95696ea2bccaf6e0bef4a57d5d65a7f774a927934702fcb7bb7c89434a97e94639f55700cd7e6484eb6
SSDEEP 96:faa+XYYywIpqBVP5UHdru3hn3Q0vf0kXHrXYQA4ZcamCaHdiBFLqcO1EqcPA+OEM:faa0Py3A5UKfvM0OaFwiCcOuj5qBl
TLSH
T142333B56C64E5341BAE8AC13FF8D30D12EEA9DCA66AE0101116F3B41C2A80C0365EE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Exigenter82.lep

SHA256 c68af56c75cfa7001ee59e0a87e2bdf3a4b28dec082e54ece7f62ac4fdf3a0e3
MD5 5d493a103329a5aa331cd80b813805f3
SHA1 8846138cea8082389ff5cf71802c4adbd7341c92
SHA512 b82e0bf14a17af2cfcc69284894a54c044513a19466ad076e386fb6e9fea038b2840a9a55afd9bfe1ba3f88d0ccfe180f4bb4d8c22fe8826f108251ce8774b38
SSDEEP 192:N5kB0zaPtmbRjWPEJ5N6SFqdgs32sipjXsMwLw:N5dz2a6Jgs3GBB
TLSH
T154737FC450516FFBD195DEE3C696727D05DB545359657221ACF3BB81F93474000DC8C6
MD5 SHA1 SHA512 SSDEEP TLSH

Hawaiiblomstens200.gar

SHA256 646034261f419d7ffbb34e884ce3514b5966e7d0de1868e7316dcbf7a2781ecc
MD5 e87a1bce00c47a9f9d86bf9f5112df48
SHA1 29c91201aee7d67c69b04df8df1fa63f8eee801b
SHA512 69d82c41240108aead7677ff1704347ac2868d597b48aa3c40a9754797fea4564ae739476e20e8fcde92fff1be6dbac1742ad0e03ca1bf29f10cc4989f18b01f
SSDEEP 96:UWLvUgVKRs6p7cs/c98JGkB0zELk4liTqM35xi:UKUgVKRVtcyJ1uOkmiN3q
TLSH
T1CFD2B61E2DB471C86E9CFC85AE45DDA2F9AA8E1D0D3680D7A4A28AC910893082D05886
MD5 SHA1 SHA512 SSDEEP TLSH

Hematitic.bil

SHA256 0e0c9c21ec2d2f117900d8ba78502b60a72a1f662d7e79073bec96a5e176b2b3
MD5 8dae115767ceed7ebcd7fa7fe602684c
SHA1 8f9d297c552c63d48c78eb137c3d76e413a7965c
SHA512 991965c8625f161632395c4f66eaac74f5c1605b6c5dfac55265865c982392cf75e32ad928bc4022e50b9115b7cf23057ba344c48b6c7a83161238463e9b852c
SSDEEP 96:mh6QKY7x/2Qxs+bBsWmogOmQ7T5mJ0oe1DJ+dbD/w+E7vLiBVXKJupU6lBIXGL2:mshyF2QxbFsYg/Q5mXc1+LBVxHD2
TLSH
T11C333CC5C8D4F83D8EF4202EC1D565AFBD50B8AD017814C5AA1F69CB437358D68A4BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Jersey.dvn

SHA256 3f7cd065788b871a72a71a52debb9d05f2a2978863dfd8f718e5cb3c005223e7
MD5 02c38cfc517085067c9e685a61db8809
SHA1 a28b7681b72d7fc1f7d01fbbc70a4c8df4f2e007
SHA512 513268ff1124cb7060f065864a2d8bd92e7c780764f7a7e24097c08013673e03691b6c46eba37d2ef9a2ad199b5f1a67b443404b322c456ac2f43c2eac90f716
SSDEEP 192:Mj60oSz7lyij9wwJrVPadzQSHgxS9frNm:MjHoSz7lTjGwJdyz/sS9c
TLSH
T1D9837DE04284B282E6073A5A51CAAAAD60B93073D2CF5C947ED5F8D57920F5B489EF60
MD5 SHA1 SHA512 SSDEEP TLSH

Murchy.Dag

SHA256 dc11582ec6019f0cf6c721304f4ae0c0a35411cb1db0d6f2d939004c91fe3502
MD5 d905a0de3604c304d5bfdbdbad666b32
SHA1 4728495470b09b00956c8bae68167e12cfb9f16e
SHA512 0ff69a41535cccad4d81ba83eed3c4b54b08d6fdedd2d59dda34ea15cfd5aae87a1f6f2b85a4ec3170e298fb64e9bdb0d7b6f1cfca1d8a79877ddc33556ab342
SSDEEP 6144:OBdf9iE8MKq9JafienOMRzBM8zzmzJxziMaE+9Rd7GKsbimM3XGkFi8TV3LprXI:OP1inMKBON8WjuM6ndhsbiNndA8B3LpE
TLSH
T11C840196FE859729FBCE947F42E5EC1A1EC495905BBC0DCD3EBB32548312172602A336
MD5 SHA1 SHA512 SSDEEP TLSH

Privatdozent.lak

SHA256 c137725d9605c5ae8fcc662395332739a2ec1526821cf9ecba63b7b54b1afba6
MD5 75e2cc5ffa57c426bc836e298b805016
SHA1 98c25f2f53edabdd536e79f0119ccd66d7f595e4
SHA512 7cd4c16b9d7b823edcc5d1e2d9fbac00f9df0fa45a3665d1c3e05454b10cb9238b3b8d173837122151071f56c33381261b2fbced603c3b3fc72412fe1c0e72f1
SSDEEP 192:e5QQ6k6psN06hlUnIsLdNoN8ADsjdLNzogqJ3x/Mr08GKBpUcBg+VFLLj:eWQuc/UnIsLLDLNzXqlNMrGK/95VJ3
TLSH
T1C7737F9217A4C988C20EF585B22F91F6C9616D3DDB83C743D14362DFECC6C08852C41E
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/Logroller/nedskrivende.hei

SHA256 b3e7404bbed6b5d47f6a3c5b49bd7c1fe4508417cf39ec1cd0d7292b268c4fdb
MD5 923a5e099de9ae05d59d246df28fae9c
SHA1 d3caa0005eca7fd16dcb23bacfba5a7f64f1c278
SHA512 1433af4cfb936c59315c01f24a67b288bf3ed7eb69a3cd94acb630c8c521491802e8906a0db83f1d658e5e345995b8ccd34ea3b2fbae189993c30f96d9c39924
SSDEEP 192:fcsmuYS+TZ2wHG8ISgq8G3M9uu4DIspZiJSAn9/oaI:fYJ3Dn/ZcgR
TLSH
T151333B892B845F7E878F20179D013983C91C441678344EA38FEDE7D4882B56E3B03165
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/Logroller/pervaded.sec

SHA256 39c3666c1841ca15b2dee7e76e912e397e79855d52956fe9de6cc3773f652143
MD5 40cec82217166e6f21ae9bb049f6de2d
SHA1 dabb3e5b3ec352da6d90789b6b5f71776a6e964e
SHA512 29e8de26a6c7f68c1212c8ce39b471f5f1d9233a8927ef15c259a90baa98218129a8831afa7c6e9d7acf730f45cc2f4fab79aa81aa944a6a6e7e7331c7c234f8
SSDEEP 96:ao6ycT+CsS83s17gqlARj8X+WZaj7oeu/Hzb6oJ/3k693EkYxgUb5zueVMjQf8f3:6suXOR23/J/06pTkbTMtrp1
TLSH
T1C0835D4D981E1D1284388B0CEF0DBFC63550854F7535DE9C09BA34D276AE9ABF2A5464
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/Logroller/preexperienced.fot

SHA256 d69c66f5517d7a0314244b6cede5425d58b0ec90dc8bae0b81fc0c614c71565c
MD5 a65f36278512d025e0a9a4938ff02f08
SHA1 6bd86d08d85cb509eb6a4dfd222a7c541e574805
SHA512 cb27a4921fdc36ffc01d2a72cb1f74fa7d46a1fcc8e3c7904f51b1b6ef4457e4d61a9ccd180cd762d0725cb8b474fb834f5c1a82a84c4abe50ad5ae5dcc17f96
TLSH
T1DC21029701BE8A159C7F15032700A62D004402D6FAB968AC43958C025501C5CEC10587
MD5 SHA1 SHA512 TLSH

Rustbehandler/Logroller/siserskite.udg

SHA256 2df6e8d4806488d99b4e49dbbc27aad42d41007ad3f9ab99495cb24b16ab8921
MD5 755eef23ae79821d439d89cf8624b8c3
SHA1 10a4a0d0661fe4ecba0d46dc4bd1032b9c7be46b
SHA512 8de7bd8a8f23320f55a2e58c509e1d855fed794b4e61530114148c933a0970ebc2a824fc7de464f8c812b2d12645c95dc83746b941314c44987a8e88d389b2fc
SSDEEP 96:8uCXQRVSoDotZ0HR+Fe79ShX6AiphUGvSmABXUyMt9Eo0gBvbjbmqtVCEcYMRc7Z:ziNGsqhblSQB
TLSH
T147638F18A86D071E5A3F102C214987A260B6427F2CA05F01A23FAF51AB19C7EB4B187F
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/exportations.reg

SHA256 5181eb4aef08c436677c5329b20aa2c878d53e316b9a5aa814651b58fad57658
MD5 c8ef6eaff467437c6c967c5b57adc82a
SHA1 9aa6681424ead386f3d27f996a438a01599dbee6
SHA512 16364e1ae70e4c5fd8c8584ba14b76bbbc16af6d17541c5200e72beff3fccd6bd0c717fe0ae6c4fbe70a022a1af47782cd01c632f95fef90592349122b253018
SSDEEP 24:QuhhW1xgFIjZh2ve4Vae5wIp/FgL7xuxaIkEIbt6CBk95YKGxFjF:Thu2YDQ5wSuLRIkVbYuKUxF
TLSH
T18E92C5900B96F531026FADA25960D3CC2F662C0D64B23B04AE4A47144F4EAB3E24E60E
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/forprvers.civ

SHA256 efcb250c5f45c7abdc802c631b5cd78b341c4612e5feee23e4844867b43cf855
MD5 303a9bb57e9b9a33f076b777a19f2f6e
SHA1 8211120477434b661467d3e61603761a6605f037
SHA512 11a78d947db8810e91b380898bdeb0ebdab2d285c9822e9de07b2105d275d00e1b06e6d1395bd0d092f732359abc938d4b7373809469a0a16f207d3fb0727bbe
MD5 SHA1 SHA512

Rustbehandler/indtjeningens.non

SHA256 ce85f86a6ae0043a2e9b903ed1252a35c78d2cb8a7d471ecd370a6f8f16d5bb6
MD5 4b3d8772bd8a9577947997afa7963e92
SHA1 f009fa1bf79c541b2e18f9de9916e0d5e232d167
SHA512 4e9480d9273a28f27e9ca92aef819106838b628e933e8ad0cc6fd98e4323b6c2cd8a7c2a8b3776f8a67db33e186b11f7165f214ce1532a2a96f7c6c9b9a09020
SSDEEP 12:AEnUoHN75LIIcH4Y4H4wPMi8FzAUceYQjCH+bmHuO4okaSsH:rnNFcIF4O8J4OVUr4SH
TLSH
T16DD1A3950027174D5574EC1B3D33497B6CA4447A6F04BCFA01785774850598B5454626
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/injurantens.opn

SHA256 440aa627a3d887496154ac5bcff8fd4553e5f8361167cb02092c2240c0b51e26
MD5 a51ebd4506a7f44c927567724ad538df
SHA1 510a12b8e24655d4222aede5fc35f96eaa0693ed
SHA512 c77643f58b5d66593f49472525c6e0d3b8008bbf3f21927adca0d05454adcc9b4a574fe219250ac6b1a27d29c9887e3b587d107c63e6daff30afda0e63b2b182
SSDEEP 96:KYDOQkFYV/sJpN4Rw+jI5IPkQDInzAAcmwvteq5lch7kEkwXvyIh86H+o2iSj8HF:KY6FU/GT4KRMnUzAlh5ljwXvnqhtj8l
TLSH
T14A637C64280282BD2B5605325EFB1FC2986FBA95E0BB0C3AA6821D3318CF41D0209F5A
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/klassers.dup

SHA256 cc2a221937deb771a786c6a32c235562843d9d19e31807850dfaad2b70e6c60b
MD5 a83c938578d78e37323534ffca14b27a
SHA1 6a03c4e18ea7bfc709d744b26369971ab4a15880
SHA512 db95417b0ec4978ed8bbaf0d25c9052261e1c88b8e93e06a5c7d2d1214cf891ddd7472870e5c10417720f102a45795d4cafab544d198c2118d68fbb7029ec102
SSDEEP 48:ODR2hZuUL3qZX9N1GymHtUsbDT1SAFpeyOrMEtCBtE5D:yC+d9nLgusP5SMsfMEABu1
TLSH
T1C8436EB5E3152D6B2C9AD7034CEE26D8527CA50F90936E0D2392C93C1123B73059AAAF
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/kneel.hex

SHA256 e4944dfa15055fca5c0bedb5a678e0d02a982d3d78d1f1aaf25e05c0ade8f165
MD5 adbb900bbec6de722a58a3adcd530ec3
SHA1 ecd6846bb4f6cc0db5f4f7cd4e4d4db3ea13ff00
SHA512 f20b4d332bf2d0c7a96630c389fed25fa9be4a2f988c36f2e92524b35933f5d9c3e9b8f1fc506039ed1d84d0bfe5018872e16ab26f663241393a98e8e2834478
SSDEEP 48:4AI+Yx04FK+fvwe7qmuCiu83Ex8YVU9n2mgj5i9gXiixli4W7SX5OgKVpmTEH0Ey:vq04waRqZB3oVU9n2Ki+FgWxFKz9ALpM
TLSH
T18F533C19DDA3932A4CE11CF29AC46729CC0325C91F5811A1C7633737B5C619A3B07A86
MD5 SHA1 SHA512 SSDEEP TLSH

Rustbehandler/konomisk.uns

SHA256 2d41c1617df9a4b9b6658c7e136aa81cb09d1e2d6029cbb04a035a8d73999ea1
MD5 892f1dba397849d28fb93db9abeb4a43
SHA1 e8712420c2a555b86f05d23aab190a32a2136c39
SHA512 69568e876a9352e470dabecb9a774e4c9e154fa49dc04b88fe50ca0351cdc4f24f6d2c95d2c6b70c1daa1cf976eaa949defcba47182fbade653ea5032b386045
SSDEEP 192:bIcXhNYm3e9nCuR7bQ4ycQM3xIipOV2AnZnypLwuG:kqXe9CuR7bLOAqnyi
TLSH
T1B2938DE3B626712C75B95B22604CFD05B6A73B7D6ACA6039062735488C41E9277092DF
MD5 SHA1 SHA512 SSDEEP TLSH

Smelling.ynd

SHA256 cbc7d0c5c122d624320abc68252293fb0bc61c9f38ba5c76ba2094778702fe9d
MD5 05014f638b272abe10822c05780418e1
SHA1 63da70a483d5669219bae767f9a9d40f2342f07e
SHA512 8c3522a75042a47013f8cfea6b428faa3a6da95bb4f258861f90c523ea259ea22f3c85a853f0469731c06424844d0ebb3a27de19f7c90406ef8c599af48d09ee
SSDEEP 384:T+NUmufdAbrQmQnhKJCB5vuPo1oM/1pGr28t:aNURqbrQJhiCB5GPoGM/1AS4
TLSH
T12F838E62026F5BB861493B033CC3458012E6349E80DB4CF41D64EDC677EE6A34B1627B
MD5 SHA1 SHA512 SSDEEP TLSH

Stordrifts/tjenestemandssystemernes.rus

SHA256 3972c6d495e85073475bd34764427850fc838508eb314741ed491baba24b7be0
MD5 f6296ed17fe0d5bc630dc95247e284a1
SHA1 1cf46846c804a47fbe8bb9fad1f595838a6180f1
SHA512 ec408f92a5e8a2e6f12ddf247b0991da8cd897dfd1e3adb6b7feecd5349d531cbad8dc869741dfb16b30a25671431ad08713f9910c3f7867a93711f77e7fda20
SSDEEP 96:/V/mMi4o0a6Sq3CF+s6ytNbOe7urqZs4Xe8bSVXAjXI5Gt+sWa:/VeMiySdFs4Ye5s4AAI8t+sWa
TLSH
T1DC235C9AB526386C5664FBC5DCFA06F15B0203668702143BD675670F95015CB8F3B219
MD5 SHA1 SHA512 SSDEEP TLSH

Tennisketsjers171.for

SHA256 dc78a33adae6395e6922a3da68c02ce2f06bb644aee386ae9576c579da8cbd15
MD5 203ea0fc287dda9ed37214a14a0d6997
SHA1 6ad72c3298d077edcb1ebfa5b27a541d60f2d119
SHA512 d3e7ab302415e97a6641d4688fb5bd62ab346740951490928bb991085937cdcf70910f1a1cb9eb0b20564a3dfb45c84edd7aeeeea64604b42c06a4ddae508c45
SSDEEP 12:roDrdKuLV9ARfS60Ub4SrtHrGnCSwsO/Yc:ro3d99hUb4WBNXpgc
TLSH
T1C9C1C094F530C2C89F89A587FCFC5C19D97AB5D8F2429876F97A005C39362D29E80166
MD5 SHA1 SHA512 SSDEEP TLSH

adjudantsnoren.reo

SHA256 bd30a3d8279b1c320279c4b447426d8d08dad75fc0d3767fe22da54ef9e9de5a
MD5 b283839678fca48f7e0b602de705909b
SHA1 c98ffdc17f26fea1f8dda5ecc9d154a1ceb8a9fd
SHA512 10868dd47a39ee80f7aa368eb83558cd75f166fb6a13f9ae9e26c60c926f29cd0f126fc8133683ddc67fc7fd8c9453fe6cce5d8e5a04eb4c2b8cb3f7e4b4042b
SSDEEP 192:eDE3AGydxz+K12z9OdcDsx1dELN5wAHeTTBZ2:eDE3AGydxz+G2Bzsx1dkNeAHeTTBZ2
TLSH
T14E736C2D233D1BD09485CCCC4A2196CE84D8966DDAA70A3B2068A9BFE3DF410961B4E5
MD5 SHA1 SHA512 SSDEEP TLSH

ambivalent.sim

SHA256 a65a2189667b4f5cf2d8cc7e4f746fae32b9ce369f02944c7a1071f6a0cb0622
MD5 c3f0df75701d393849af3565e7b2ae67
SHA1 524bdfc5e9898027cc435325d2204f09e913c5ba
SHA512 44be6dd37e03b84e771665951e65e671a035509cee273a15a914f09e876459da0ce6a87740fee734424453c8359b79c3583a40e5dcc83a3c43f14180b1cb3ce7
SSDEEP 48:3YPvpI88CB6wDK/SYWjOQbr/7Zbwv428MM85EcfSi1kFss/MiCOWsc7xF5ZZ/yGV:mBhmYH112vjrUeR/yYnqQyN9E2g
TLSH
T111535D1D759AA3A9B3CADF7033F4EE04D3C6831ADA31DB6B0637032175699E5A08515C
MD5 SHA1 SHA512 SSDEEP TLSH

brneflokken.spu

SHA256 3d52ab0824c93d9ffe9394f3dc6d9b93f526746a606e98b5e7e63409e531b5fc
MD5 8a5a969badec28f05310a10db5308d9d
SHA1 3fef81dcd940789261c9574eabaf42195432b2b1
SHA512 a0e7277814b314b778a07048a75871cd4c7c258725e750e1b532f2a57f936a87516c16e08a484ae0c8526b174865244fd78ea850c9e5acd6f2c23b160f2abccb
SSDEEP 48:qiGMrLiw7gx7Vo7aasSy4JjesZ8NDo4i2s+FtVHD21dLkg7TTBd09hNfRvBikx//:j/U9WG4JjJciJ+FTDkLz7n4nkNy7
TLSH
T102F23ABE45249E75189A05F0639FF35C439D1892D620B4E02CEB8F224549A412AC43A4
MD5 SHA1 SHA512 SSDEEP TLSH

bverlamspelsen.str

SHA256 e67f6a9fee553c6e8a28535b0eeaa44d46ad039ac654e071b7ff81576a94d3ed
MD5 c60f8c6f6f00563b6cc466f01c98b8b4
SHA1 9c9a67b4c381601c7f2794ff2789344a96a99fe9
SHA512 828f7e01d12a40bc8507839389b055a17287ad3a89447fc7066c76ccda31d0aff88dd8ecc4ad507fd20d61032c902272e60d51bb436b770c49d49d7a459c2fe7
SSDEEP 96:BGpO8WihkEncUB9mLxH6hDTyHiBY6K95H+He+0:BtRVYdxK9P
TLSH
T184D24AA1AB70059814D91E0B09CB988050B3F23CB79FB53615E189D508F5F0DC73E0D1
MD5 SHA1 SHA512 SSDEEP TLSH

clearances.ind

SHA256 c2f12dbb9975f723ebafd75e532b3d6b2394a465362417794356f42d6009fad0
MD5 6bb1a9dc0b359996b3805a633c0de803
SHA1 c326fbadf2e642ee91d033d02ede99c959e78667
SHA512 6aabf2c3398c3a6d8942ef81470649e142d561a874d102f2188349a2640bd1d7387632e0d02cf52a3ba20c235b78fc72cc1a7f389d551eb51749c52532c6fec1
SSDEEP 48:+oHNn5/g9tV2a+70dLhLY97sqy4fpm0m3evRQI7AZEqHFEsoxAlH2:+eNnyf0kLhLYZnRm0Pn7AZEs/oGM
TLSH
T1A1A20882C8858FA7874CB46B428560C50D5CE5E57BBEB1228221CF442EA389E0F5E673
MD5 SHA1 SHA512 SSDEEP TLSH

cuboides.bev

SHA256 9eafefc5068774d2991ba4b42ab516568b47b55f57990c54cce602ae158192ff
MD5 31846faa558754eccf1ba996a1d97855
SHA1 aaf9dd081b53f4693c324f8d6876da3b2fbcc934
SHA512 e768b675d817e50694fa83ecccc5807dfb9feb8360b76d1710e0c85ca88cec08d5ed0e6fe83bcb07c35720ca46c9417186c641486b02a431183ba079834894e2
SSDEEP 192:VjAFZpxuRahaLea0f9wAzyFtxNvAjhssiUv9E:VsF/xMahaLe/f9XzYvAjhshUva
TLSH
T1AA838C5A430484898092F2F77988E41F69C31469F133F58BA7F8B8925FF32F45524A2D
MD5 SHA1 SHA512 SSDEEP TLSH

decimalvgte.san

SHA256 8252ddd584578b6a7ca3261b8becb6709527edddb2210d3f969efaab73974fcb
MD5 93cf013d9c02977a6f956593a1e18a8c
SHA1 5792909edc2bbb673f93fe9611036cae9514a573
SHA512 533e9e7960bcca51e5d041a59ba63a3999c9ea5d8a1224b854f95eda1e8e634d461eccb5da168ef12a9ee91b23465e0121d5588c06f1f6e48204b2a9baaedb47
SSDEEP 96:Je3Ub6xissoMPsE10WZzQ5B9RenSDm3brdEYn3s5xzg/iyOSY3Xkey1P8xMuDSIy:k32xNZzQLLlGvdE4621OPXsOOIS4/s
TLSH
T125837C3FB4DA295B97F1468CF9A195EF3189433CC69701271FAD8251853E1D06EC7812
MD5 SHA1 SHA512 SSDEEP TLSH

nationaliserings.Oxa

SHA256 3222b6a194f9dd6725258ab86066079cce6de63beaa9602e2d9759fb1cc898db
MD5 a54fbbe18e1811f2a870ba8ece82de23
SHA1 c69c2538c011a8c36c2c346635ca5603f926e9ae
SHA512 acd188a85de7f17002ac08e9bbf83dd0a2fc132015ca81353858ac7b594919f0ab4a246d0d76f9e7e85fdda5b755be97bfc7192b71bb9e4964820540619da59c
SSDEEP 384:g+xf75I/WHba8eJFyLznWv3iW13LGzlFg37vmD:LFlY3cwyG7vmD
TLSH
T1FEA2AF12EFA6DCB2DE528434547E5263CCD4E042FE0FA479F0AE9544C2562F353287B9
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

1f8097ccc932fecf1b0ba2997ac3ef35b5d99d2d58408a6a0b45131fcedfc599.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Afraknings88.bra

Corkline/skrfningerne.lak

Corkline/stil.bru

Corkline/syrligst.sma

Corkline/thumbscrew.cab

Corkline/thymelici.aug

Exigenter82.lep

Hawaiiblomstens200.gar

Hematitic.bil

Jersey.dvn

Murchy.Dag

Privatdozent.lak

Rustbehandler/Logroller/nedskrivende.hei

Rustbehandler/Logroller/pervaded.sec

Rustbehandler/Logroller/preexperienced.fot

Rustbehandler/Logroller/siserskite.udg

Rustbehandler/exportations.reg

Rustbehandler/forprvers.civ

Rustbehandler/indtjeningens.non

Rustbehandler/injurantens.opn

Rustbehandler/klassers.dup

Rustbehandler/kneel.hex

Rustbehandler/konomisk.uns

Smelling.ynd

Stordrifts/tjenestemandssystemernes.rus

Tennisketsjers171.for

adjudantsnoren.reo

ambivalent.sim

brneflokken.spu

bverlamspelsen.str

clearances.ind

cuboides.bev

decimalvgte.san

nationaliserings.Oxa