e12cd39fe463913671dfd1d1e2d927f26d50fe6cf5a20f6aaeb7fcc11a42b1b6

resource
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll

resource
e12cd39fe463913671dfd1d1e2d927f26d50fe6cf5a20f6aaeb7fcc11a42b1b6

IMPHASH 9be4f90f50c714bc00cc8beb2e137299
SHA256 e12cd39fe463913671dfd1d1e2d927f26d50fe6cf5a20f6aaeb7fcc11a42b1b6
MD5 536cc9ae048a244e0c2fac3fc5d834b8
SHA1 cd7a7d0776467ff861f11e8a3c452c360eb434a1
SHA512 2423255d4301af02976def58cce3a5ead3f8fa9e2cabfba00d9ace4d9ce3f940df62a7685cce4618018648718fe7cc7d74ed4e85f8eb98c53f76a1c62fe088e0
SSDEEP 12288:sBQEitvu2+Pz/mIoOhdY+o1a7rdBfLfo4F5Cl9kfr:sBet9+b/ldYt47rd5fzu
TLSH
T1B9B41200FF8668E9D8BAC5719AB7A5622431BEDC1829B71F53287E6F3D30D50C93A705
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3a:97:42:9d:67:87:61:63:50:09:d8:e9:f2:ec:ff:3a:dd:30:ca:ed

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Hypolocrian,OU=Dispersionen Komparatorer Outraised\ ,O=Hypolocrian,C=DE,1.2.840.113549.1.9.1=#0c1f41766f6b61646f65726e6540456c656374726f6c79746963616c6c792e536b

Chains

Jul 7, 2026

CN=Hypolocrian,OU=Dispersionen Komparatorer Outraised\ ,O=Hypolocrian,C=DE,1.2.840.113549.1.9.1=#0c1f41766f6b61646f65726e6540456c656374726f6c79746963616c6c792e536b

Minor OS version

1

Major OS version

5

Entry point

17283

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyExW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceExW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetUserDefaultUILanguage GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHCLSIDFromString SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetAsyncKeyState GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongPtrW GetWindowRect InvalidateRect IsDlgButtonChecked IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongPtrW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfW wvsprintfW

Name

.text

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

768KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

32KB

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

$PLUGINSDIR/System.dll

IMPHASH cf8eee620b3371ff06e99c34f39ea84c
SHA256 c7dd8cc8323e295b8821b0e320de208a7e20c068a8be8d03857520451ce9ded7
MD5 4abf19a47044ec746aa8c600f0bc149f
SHA1 69da1e4f654b044d7b3c845c12a07c988bf26eb8
SHA512 65727cbe3f03e0dceba06d206054e60adba321d29159b4bfb690c30b2ccd1a0a05a08c2aa50ac270fcd28557f4b482f492c36b0d7b7b980b477cd8971559610e
SSDEEP 384:jZ2pfUx9eVLwDKO9XYD/isN7lCEjgwMU/ktKi+R45Duwomq8pqdDvH81Q:jr96YIrx7lC7vU/kaG9uLmCdb
TLSH
T1DEB24C07F38398BFC51BC17186EF5772AA32BE211B616F6F1220F5756E24EA0871DA14
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12726

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

916B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$PLUGINSDIR/nsDialogs.dll

IMPHASH 2a21171b63c0ee0261cd54df366503d2
SHA256 a0a6431feb4e09018d99acdc02f2139fbacd68420b0f84d4b22a9e091aaac707
MD5 48452d7f73a0e73b62a16b4c88068a60
SHA1 ef5a3edd25cf3cf664e93c38fbe9034ce652d117
SHA512 83dae4699678c2eb245bb3a5758b9decdae308042bf50a36266222a9c20f197503baad9f58f2522c6bfe32ad62b8af6ab6b8f99f2e51b72383f6c50d4d699274
SSDEEP 192:PZWhF6MuqMgfdPvg/YWkNLiY8vSKXS6Hn5gIIblaks8NHAHPEdeqe4KFz0:hWh4MFv1w/YWCLXASKi6nAlHJAl4KW
TLSH
T13852191B7B42962ACD0AE374D5EF573322F3F4551138370E0669DB49BFE1660DA39288
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8501

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1024B

Virtual Size

576B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

444B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

363B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Banksektoren45.jpg

SHA256 6c1e10daafdf4aa6a2a2c7cc7756a21a328276f940d13d712c906ee6c36ce333
MD5 9c41f2593d00b1c2c30cf314b2c6f5ea
SHA1 3500d186df8264d8460d690fe7b56569d87aca53
SHA512 f8b4a1fc5216d47b4cdc8bfaec18fb5f2fa415e1512a51dc035d0e8559e749ca34a7a101fe54377f52511a729e75c9046a80ea62aa3cdb271ea1b703fa68c3c4
TLSH
T1EC410B0A5B0E8580CB6248EF4C57A272E315CB5336E8773E685749E4C260CB0EC4C7AD
MD5 SHA1 SHA512 TLSH

Concrescive

SHA256 c37539c04a2c722dbbdc01b5f3a907aac5471ae0c52dfe8acc20bcf5d75a4dee
MD5 9eb4b2db66c33599a84a1eff9752a870
SHA1 fc1625ef9fce0f31ef84e3945ea749c2b12055fa
SHA512 c6cc5ac0454bd2fbee393fdef4f023d7a08d2e2ed276c22ef789b4a643ccc7c111c9497ef450fdc28861b432f03faf1f1a32e6f43d75d1f7f798dbc181914096
SSDEEP 768:3U+2CF7tYPn2OY38jUH4RYeQMhDGEdqrDPhV1UDU8OVWLiskfOt57QII3uxjNkcB:wPelGuM0FzXgRjamlB
TLSH
T1E8F25D6075C9CAE0F60A5984EA78FFB201733573AFDA1CD22324F6004ABE5553E4DA5E
MD5 SHA1 SHA512 SSDEEP TLSH

Delagtiggres98.jpg

SHA256 56fa2abe3102b5256c21be5c1cba0e2cab4b4150cccfdf6053a8bd5ca0b4c95a
MD5 ea90fc5b58cad5bab88772558fe20104
SHA1 8fc7869cdb7eabf58de9f4c5aa9fbecd3c2d724e
SHA512 51781c296181b60a314f0033fe1c9887170b79936a62c394f18cf153351ea2acca7cdd73abc6028047cb18c05f6a0867b91b9043ab6248fdbf2cf76e7f765d50
SSDEEP 192:L1fUTv5QV/PestnoqS3Y2/O30Svlj4thPwKI:JMTBu/2stoqSRm3hlj4tNpI
TLSH
T1AFD19D2E1D86940BCF42A6AE70366BD20B57E5562830573A0E7EDCA7F91AFBB4101E41
MD5 SHA1 SHA512 SSDEEP TLSH

Spectrum70.uns

SHA256 8ed98ae0aa9fb0b27d5aaa5d9d3008838b020848f1d8ff5c83f003e73d86813d
MD5 f062ebaf5bc415f62c25a05ef5529be8
SHA1 a480e1889cef504e578d2565ca7de869bdb4f980
SHA512 18bd7f69d3e0a3d91d0af3a295e624d1dd2fbcc384c2bb99fe68016df1fbb53df7bfbe07e7ea741acbed7bd93e898b8f6b14cbf1b37c6d2496accdc2ff7c4606
SSDEEP 1536:SNendcXDxEzm31do/q+qKaKKYpBBAVcFiqOvg06eWlnLy4/NHgnRjsoQbJMbxrfb:a
TLSH
T14E65E185448FED9770F0F4629056B79E5A552A80B7A73028FEE845C1ABEBCB27B045E0
MD5 SHA1 SHA512 SSDEEP TLSH

Tautologize

SHA256 7488dc82580d2e7227c8209ef0fe55a06f4345818930a909e511261cddf5ff13
MD5 6934254ef763259de33dca0d537166b2
SHA1 9f5abe9ca82d15673f0f331df0f1e41b86b3ce1a
SHA512 94b8873c44b2b1a814336d8d030c6febbf45cb7e17c7cbb746be62f817f76ad2e39d8e4cb95f5a64d6a86f290894f449a1351e76a385b9c54774cddd51c32a51
SSDEEP 12288:epP3xGmjZ6ImvQkn5M2eiZiIeYBUtaLUNMz2mZaRp:k5lZ5m4KK2enkUELsmZ+
TLSH
T1F0A4AF3F4732B2EBF0647835F3A40678864D2D959D8BEEB9D0E2F73C442464509DCAA9
MD5 SHA1 SHA512 SSDEEP TLSH

Triazins.txt

SHA256 fa5c5ceafd398a34e2d8f70ec7e61ab5d8b51087f186808f00046a51884b4257
MD5 bfb335237d9b9fbac94a1be30ec58c1f
SHA1 885b35ea498fbf1853eda17884fd52f3e03a693f
SHA512 600698ca45305f08db7b2fbd19f898ec1a478fc5ee867ba99cf31d16dd430ebb4873c334f2f275092cc6081bebcc92c3b8549cf2004f1620b0fe18e3f286db07
TLSH
T1BCE07D4D99234C049F1AD741BCA5BCF2EBAB2258C1B08772741E7BAF91DA14CD29F718
MD5 SHA1 SHA512 TLSH

contest.txt

SHA256 fcc5cc72e0f0139de898100a9f7f2cc27aa7c036e063f9dfa5e1356f9120e102
MD5 7f677f88464285363474e3f39dd813c4
SHA1 c1b125fed2eb40756d958ec262b16485490f9b22
SHA512 44f6cc319c8af08237140347b2129f1f47a68275ded3f972583903645f959dee364225947fbd5337fb571daed03420626aac889086ad940bc97af2283ec41360
TLSH
T16A0199F1F181153988432F71FAD248D6835D8F09C7379274808DAE4C2003468933F90D
MD5 SHA1 SHA512 TLSH

forsvoret.jpg

SHA256 7362c702fa55ed1576b167fd2bd95629876ab60354cdb0914944a90555288174
MD5 67fc5ecb50acc48b52fcbe9c005ab905
SHA1 903c5a01d8790188f80c9331357cebff5b371d85
SHA512 d07155ae7a8415b363679bfb536ae3dd6078f5a24c6feb7dd7b390b0b67a075c229616bb3a19b4bd176534fb19560c3c1e64d644d124fdc73c57597429d15646
TLSH
T1EB715C3BFBA5A1558F1F10AA100913D05049A51BAB26EFF43475DC26DB21DF0AAD809A
MD5 SHA1 SHA512 TLSH

stadsdyrlger.ini

SHA256 cf22296a13dc8fcbc9d9569e81d850a96c71575b29507dc44cfc551dc0bb2f95
MD5 2033714c3120e1c170712b847f74de2d
SHA1 e918b250b97b455473035f9e191b64e8527285cf
SHA512 4af51c7fafbf6abfaab8bdf0f1f94a1255dc604d1355a0200a3c7b7b54c2b548112efaf394e4f386751acf46b6f5d568ea23c89aac579ca4becf866f9c89930b
TLSH
T1ACE0F16DF65A03133ACB48C6150042AC66ACD04C91C20723CD5D114FC990A189637E9F
MD5 SHA1 SHA512 TLSH

violets.ini

SHA256 13b6244115270b5cba3aacb98385e2a1c8e190cdb9be4d4cf859f4b3af0697e8
MD5 749daa6639819e5da5597c9f78ffb89a
SHA1 40026a2923399965a1d328f9adae15549de39e1a
SHA512 4d433bd026ac98d278e05156b42c8ff0d5bc6cd8a74701f78763ad87ec1b2ab2d75158763fd6c5ad7c496788066df08c936ef60beb0177159a8fa68883648e5e
TLSH
T135E0F1B0FD07BC40962BC7ED8FD2C911E5EF003AC6846230B1A8CF8B502B808805520C
MD5 SHA1 SHA512 TLSH