213eeeb4dc9ca1f995f7860beba3f55e5666ac4600229a68d7f1b6e3cd0b1183[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

resource
213eeeb4dc9ca1f995f7860beba3f55e5666ac4600229a68d7f1b6e3cd0b1183.exe

213eeeb4dc9ca1f995f7860beba3f55e5666ac4600229a68d7f1b6e3cd0b1183.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 213eeeb4dc9ca1f995f7860beba3f55e5666ac4600229a68d7f1b6e3cd0b1183
MD5 1edb30e9b9d5f2e82fc0678e332cc07c
SHA1 ec4303b4675968203c1639d4f4b7b7ca8676b983
SHA512 8e5c2b2938334809e456217721ebbf67525ac84114f7a65eb3f80575008476a150e2b6e38a1da5027291674987e3eea522eccd0c2e04880aa4bb739e24972848
SSDEEP 24576:1TAjLCLUw4ni+kLqmY8mdGlO4wIsk6ELx:BGNhkLqzglO44Y
TLSH
T16545AEB63B780186FA3DB4B2FB56B17026E3107D556DF02E32B2EB5640217B2154FA6C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

87:74:49:1a:3a:8f:dc:ec:03:3c:7f:de:0b:97:0d:44:e2:6c:c6:c4:72:8f:15:4e:52:90:aa:ac:e9:39:cf:d2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Heldagsregn,OU=Swayingly Renaissances\ ,O=Heldagsregn,C=FR,1.2.840.113549.1.9.1=#0c1b446964756e63756c696e61654042616e65766f6c64656e2e4e6f6e

Chains

Jul 10, 2026

CN=Heldagsregn,OU=Swayingly Renaissances\ ,O=Heldagsregn,C=FR,1.2.840.113549.1.9.1=#0c1b446964756e63756c696e61654042616e65766f6c64656e2e4e6f6e

Minor OS version

0

Major OS version

4

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
MD5 4b8a750993567ac9a350ba9768fabfa0
SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
TLSH
T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Galleren.ini

SHA256 7af9606902d6e2b00d966c8b8fb908ff73606d12b9bf4f617a4053d117c8683f
MD5 3677916cb3c6508b69240a84891dd2dd
SHA1 96e67956a4f6fe9835fe8e97efbfc6c803d6fc7d
SHA512 c61160106b889d0f42a6b55999091764775a05bd729534e84f6448743c20716274602fa2ae826bcfe46ce92d04bd9bc91ef0b06c84bdb171bcd3ea9066cd0f67
TLSH
T1C8E0F1D9BD5ED17E87211796E8140E532C5D1C2EC25E0600F6CAD61123C7A48033B16F
MD5 SHA1 SHA512 TLSH

Hovedstrukturs.jpg

SHA256 1929920da342b1544d3fb3eb5f88e7d764e8c4c47e665f651ccac5a86e8d812a
MD5 9afc9a91d3e2f52bf5e402e2196d990a
SHA1 d0f3b6863a461c10303d5f3fd66ad9adef3f49e8
SHA512 2b6d209d485be42c6a90b856e30a1e9c1a849100c95e2a02360987ebbc47c240ab67970012e77b68804750c268ae95d370f1393acc0622b9e19d0a6cfc16bab2
SSDEEP 768:vQv+f8zlwxHkGpKhFF/fykjl+QHO6xIg6nGPreh5ssVnXaL15nA:vK+f8zlwtkGpEdjl+QHO6xnzeIwnXu1q
TLSH
T1EA03E14556F661EAEF500668C6814830531B423CAF4D97F11CB680EF816ACBBECD2BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Skifterammen177.ini

SHA256 769742f9b7524abab4b3182b57f9677f57d501a98cbc88b0cefe1690ededa2e9
MD5 db6ab857062c63775f305e6bbad61a51
SHA1 23713930e061a1496eb3c9c5bda0a3071e4bfdfb
SHA512 1c43296e36c317adf7f46e304f1447bcf370ab335bcae806fa03e54cb0761b9e2cc8549e16882db4ebd5d366e134ef563f59bdc26e9eec987e03ef84b10d4f5b
TLSH
T176E0EB76AC07AF5A1A9B1FC1C8197AD2E85882B0F4808A343CBF81882402D1D33D024C
MD5 SHA1 SHA512 TLSH

Skydebomuldens.txt

SHA256 3b913795b5fe5612c12402e55d78cc5501c8c53dd08e69150b9419e96a6970c5
MD5 17f4047cf11b35e2aad3291d4a7e4b30
SHA1 8aaeb723e3ab9f23a8ece21aa43b028cb9bd35e4
SHA512 89522d9259487fb4013e8bfc32330b5f33240220bcfe06c5a313bd2735c678645bd3ac94a6ade8b324c29429432b1a55a65d5eefe15cc0c1158d9f9862433651
TLSH
T177E0F1A9843766B195D2078DF5101700337D5E65167F122FE98B177E268348D033DEBC
MD5 SHA1 SHA512 TLSH

Stimering39.fak

SHA256 23276e25296c6fa29ee8fba6e461b111d52bd5f900fa95797e3affe6de5f08f1
MD5 8f0bd4162c5c066d08b24019ab18d078
SHA1 b6ddffdd9a0b0ecbf322d8cc7699114a9fc35516
SHA512 7e0232d5284d6afb1d14fe0b237fea1d356b804d8d25839f33d51c8e0e96edea1578f208e39aca9cebc74b897f5bc25c8bad6848f14bf1f73e5289f2b4945f3f
SSDEEP 384:DR6uQU3UCndeYJBLNTqriS21XLq7kEtfN4sass9yPwz2qQKmLnpswciNmjI3hDOk:tkaeBd3uHvErI//vYL
TLSH
T1C996120E8A7BB10EC15041724B2106B01D6EF1CD3592E97B3FACAAF423C9A455FD62F9
MD5 SHA1 SHA512 SSDEEP TLSH

Tuscanism

SHA256 b4c4641ca0574ca3e6cf756fe0e28db3063dc899994c6927e2b25b7c50d1cc83
MD5 f4c8e4c4ee0b2e6e537c36b87b017abf
SHA1 b7683d84cff7b8ce9f07f9334c71089eb5e99013
SHA512 aee3540ee4af1b04fe357d007f7388cb3239c4dfbed0291eac97bc36fdbfd203cb20052f11eee5126f93c58d130b743c110986d813b329d2213f78324b58fb63
SSDEEP 1536:XJyevaG77+MnKavaXzwYYSrXZl/6I0RZj:559vzp6YSrZl/O
TLSH
T18973A092D759CCBBCD178138D06EB1E94C69B0118B4ED5BEB036AD14C1972E262287FF
MD5 SHA1 SHA512 SSDEEP TLSH

afstaaelser.jpg

SHA256 7c129eff854f31ca76dcef3b8787c907172b224ac6a860c76cd21c5bd0acdc77
MD5 dece60c496f98244aeb0e0cb94796983
SHA1 d8a576c8995308ea979f87dceba32944e529eb1f
SHA512 313e13b1dda848b684cb7b6ab6a646e76b339c6600721680bec36ed8a259cdeb2d59bb2f04b4d4be355a2b9c0f7ab42ab28a47a2376b8c8bcabd94e4dfae8fb2
SSDEEP 384:xu+17m1gP7rJbaLmHeQG4973JkRfulcFFCdl0I5NaSN:xu+1sgD8Lm+JDRDCEGDN
TLSH
T13172D1B35AB6D3B5C73E674A2607C3DE74660B407F94A936BBE2CC145C54C704356AC8
MD5 SHA1 SHA512 SSDEEP TLSH

californiers.jpg

SHA256 aa5171381b8a468281dad77e6e73510b028d7fa021bbea810616bb22c5260280
MD5 14153ca395998e87cbb651ee64fdcf47
SHA1 c88b34fc4cb295160588432d6c2234e56940c249
SHA512 ece8bfe3159a7d48b6aef77c1cdfb30758d625514d8bf90a0efe1d95ac5a5b0eb7df98bc68ce406ecd12317ca457879adbb3d1ed71590e2861f943a906e326ab
SSDEEP 768:dswrRt3IxYknTo1sOv1puU7Xq/WIelfo3mAVUudg5g3k:dzHmYk01dv1sxSondg5Gk
TLSH
T185F2F1162F56B30D8AFA733E9D9D456A72ECCF1309ABF17469635A18210057CCD2DE06
MD5 SHA1 SHA512 SSDEEP TLSH

congressmen.jpg

SHA256 170c2943a261e406fcae7324cc3f85f3923f4427936cad78cc3d2b1f9299cce2
MD5 1b1c73314cf3fcbeb7e0a2500371e1e8
SHA1 10ede57e9c9031689ba9f77137b331e615fbe3cf
SHA512 5176642c80105ff690571c4dc669dacf7b2fcce72aeafea4c844b92a350e81402ec0c213a40054c7dda5dd3bfb8eb5ebebf5bbf37be6937b1351ec194db01b1a
SSDEEP 192:Lg4XU4bxoeH4+rBWxlEHg+2eutz447yFh9po8yXGF35U0OTlKunDm9/Ozy:k4XUjM5rwlEHg+2eutPu1po52F35qKuu
TLSH
T12202BF576F2632719F0FA8B281F252089447019239D0477D33F014234EB6FF9635AE17
MD5 SHA1 SHA512 SSDEEP TLSH

domsfldelsens.jpg

SHA256 145253481b3ac59826dbb572158ea4fe72cc5cdb8dad0c95233e50a3c052edb2
MD5 b51532dd74e8dd332d54635c4d55b56f
SHA1 c5fa4d097de0711825ac43464037f074d2bff969
SHA512 a21b5cfc50b2045b1c3928e458e7579452b27a543e05ef9b377d12319033a53768affe6abad8b2f82dc658b0d77db78038671dd614c1c2f77c2b73d51df200be
SSDEEP 384:tHY0p+oKpwFKBz0ZsEbC6nED3QU3M8u8odcPlyIrBL7E0xYagZG8Zx:tHPMoKpdB4eJ6U3QU88u8DNXrBLfcdx
TLSH
T18A82E10EDF24E1998B2EBEED776460D4D383E9B59A713DBC51F062BB5014E38B484C48
MD5 SHA1 SHA512 SSDEEP TLSH

electrosurgery

SHA256 a4b62a53c566fc3a35a3ef5acd21321067541f399993e523194ed8199300f75a
MD5 baa753d1544169054bed3139dab5a963
SHA1 d57e07d8d23e12e18c95b0a74cf42f072c1c4d40
SHA512 a02c0a134351cffc9630bb4f8061c7eec5516ed1f54fe25c813f5fcb7578491745262a6220cbbd91938649bef6cf3e7caf801031f9c920d99a2380227f55f961
SSDEEP 3072:ySh8oe8uF4Ntew+42M72qxKcN6qeYP5RvIeLFgOBL98O2YVEcmG5BUQ8XFYjTr:y6e8ObslxKcNqunRgOV98dCZ6ITr
TLSH
T1C144BEFA6B4F18099C8DC61DB80A10A18614083D4D275B79FAFCCDE84D79A992F5CC7B
MD5 SHA1 SHA512 SSDEEP TLSH

genetablerede.jpg

SHA256 3ccc9393039bac47df2081799240b649d5b9502a0968d1d974f1a89a5470279f
MD5 0a25d193a3c0742c4641b104c03257aa
SHA1 100782b9643644bbb6c88e4a2f24e38e18ef54e2
SHA512 d2304605ba21f9d3f052ca67a481f6ba4064287d3954e02a5fad3fe45291b76f63d8f724cce50e874a52ddd048130b9d67d8176e3fddfb12b1d6ab975d2abcf8
SSDEEP 96:RhwESuuz8k0FvNZwGuyqV5j8ZcpNl/QFkUHOAdvTNnCeFEpTOXdds6F:LwJteLwCqrBpJUucTNCeyTed+6F
TLSH
T11EE16F039948DF82972883D9BE471E99AF472F08A9A13DFB14514ECB7F24D3208CC91E
MD5 SHA1 SHA512 SSDEEP TLSH

hostiley.jpg

SHA256 8162e36e7b6d250fe9de479a4a1d61318da4bb0b40794ed3380fa1837a6157ad
MD5 47b1b32bf50147c9b2bd1f6462fe2585
SHA1 e73bcff72a45836deb2cc250f4eb161b68ea89ac
SHA512 781541021b5d542bcd91d82b3af7a66d64da6e33817cda344100d8bc1a92bd21a7ab6d3eadcb79d70c18c837507b23391fb39f71bcd23f1e4b42761f53966407
SSDEEP 1536:BfHy94jgpnEfuPkdr1DJWtOgS3Ogj8A5fG/kAhvA87BB2in3UAws4nVp6gun7pY7:tHrUpnE2PE1NWtCjoWfGMk32in3L2nVz
TLSH
T1AE93128A0429434C035EA3B4E55986F2C917FF167EB0926A587FEACC4866CFDE1181D7
MD5 SHA1 SHA512 SSDEEP TLSH

indsbningerne.ini

SHA256 bb19718a67262871249b90ced89c4b5be6cf70807aff836ba4c8ebef3c49ff72
MD5 8bf8bdb5a706c8fb1568a10a71b161b1
SHA1 7e936210a682e56aa8cf1763622c0620c187fb72
SHA512 eb09936c72da26005a59a753da899a5ddee046244ee5cd7bfbde25526bf6d7daa8e4cd21d619bcc06edec3efee039efb219fa5e4eb91174f87ca776f8eaec5da
TLSH
T1F9F02388C32A169F51164E48CD030F730C6CCC10D2562D6530998F9B5CF46DC077869E
MD5 SHA1 SHA512 TLSH

interdentally.jpg

SHA256 2ff8245e819a454019cfa3c7194e281e69d8d64672c2bbd13e482b94e3a4447b
MD5 a9c70ab09a9e293b622985291f3affc2
SHA1 495a118b8cf4904a0519d9f8e668464cba348e9a
SHA512 f881d809af27ac7ec9166cbeeaae3a7f5ebb03f1fe4722c47806f26abb70a3707a645b5c1dbdc3d64585ac1a77583ddf5c79c87015c67580f020618745130cb8
SSDEEP 96:Rh92ErqyToO4NzCKD1ZY0/tRo7fsYXWXEMq8mK6AO187Fba7rn:L92WsDzCQrYUvqL6GL7rn
TLSH
T11EA18D010B6DE5BCDB9304B7472B4A190CA50ADCFB606B747FA8430755C8EB81AFEA90
MD5 SHA1 SHA512 SSDEEP TLSH

kirkerottes.ini

SHA256 09fee8d7e40a809522a585e74446242a2366b0c402c4b6e5c5a114d96fb2f091
MD5 e91c1c72a7e198a85d6716ee8009ef7d
SHA1 2729258948393287d6547e0975812bc11d327e55
SHA512 1efecf69d30937a5b953e809f63de37010705bb9ee05370feba9906738eb1fbef88c78413bb56e692d58dc6f8cd9592fbf245b4f10eac9689b1b35907dd39bb4
TLSH
T102D023B9DF8A548D0784D7D3451135955D1479785D0106014062DF78EC9109DF5A511C
MD5 SHA1 SHA512 TLSH

plsefabrikant.txt

SHA256 b4a50539c18d2f9d86c10438d1c1034351a2683ac45560d7dfe35b82f6100e1d
MD5 fd9838ec35eb6700c306d9013a142160
SHA1 72bb0fa4316074657fd34d262076c78e14ed8068
SHA512 0577a1b122e3bc42657d57b1e31177605c6d47c28dccf378d919490d2ac5d4dabedb39e78ecd499a7ef21a85442f763a199c6ca252e1cfb2279ccb6c0649a21d
TLSH
T191C02BD48C7314010D4EE648D0B797F400425000002A831BC180100E1AB02DF422CC7F
MD5 SHA1 SHA512 TLSH

quadriglandular.jpg

SHA256 4e94a7b45add4e80ae9f41db2b4b77338d66cffa88358cf586e24479dd49cd0c
MD5 4510bd01deded001819ab3c6f1aa1d23
SHA1 a487d8e4ff22c771ae1b6d898b4c74bed6ff8b0f
SHA512 5b9502fc755caf427f1b354c5d9c7d505c246029858bfc755a07c23c4d270ec2cf7d70caadd07f8963d3c4169ff78cb7d2fbae424d905472bfdf7b208132cf3f
SSDEEP 768:2xD+LAaGrPe6+yoaTljhTkGE3sPm9jZAbY:2xiLGrW6+iJ29tF+Y
TLSH
T14CE2D013679ED0473B25287B998A2C8BFF22059637E84434B681656F3712D3C0EEB71E
MD5 SHA1 SHA512 SSDEEP TLSH

tankelseres.txt

SHA256 3b4578f74a735e0f7a8d21a2634fd510e4fceab54b2ba74a5a25b3a357e2c556
MD5 7ba5bc8edb2ed35390751dd81132b60c
SHA1 71a8e409309f6390ca60c8ff8bdf592c8b1c6ba7
SHA512 2fc5fe1e2569e3b8d4c847822a37982953322cec79b3385901e4c25273ab7e7fb17deb492fc6f226b87068a21561d48525f14a1b70b7772b59a3a75e145e9165
TLSH
T1B20165308CBE43285647D0853C902573C3AEC35C410602D2FDA223BB924D70CDDBA500
MD5 SHA1 SHA512 TLSH

vakia.txt

SHA256 b1eb5192e31258d5d4c2b7343e28365feeba6149a9eb0ea0d86011992bfd75c4
MD5 88eb7fec8b92ec440ec3fbe7a313f933
SHA1 9e58b5e9e935f909ebdca746ce057031dcc34c7d
SHA512 9e5e1c5febc0b4366ae3c1609876fa9b8ee2f607debf0a37df4439b78495e176c9d93b56d4f859a5761b8f160db187c932d9b355c46500cfe16f107db8d29ef9
TLSH
T14BF005D5E84930D59C6A43F15452813814BD4E93E00E9554DEDB831F000B4DCAB7F770
MD5 SHA1 SHA512 TLSH

213eeeb4dc9ca1f995f7860beba3f55e5666ac4600229a68d7f1b6e3cd0b1183.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Galleren.ini

Hovedstrukturs.jpg

Skifterammen177.ini

Skydebomuldens.txt

Stimering39.fak

Tuscanism

afstaaelser.jpg

californiers.jpg

congressmen.jpg

domsfldelsens.jpg

electrosurgery

genetablerede.jpg

hostiley.jpg

indsbningerne.ini

interdentally.jpg

kirkerottes.ini

plsefabrikant.txt

quadriglandular.jpg

tankelseres.txt

vakia.txt

Sharing

General

Malware Config

Signatures

File Explorer

213eeeb4dc9ca1f995f7860beba3f55e5666ac4600229a68d7f1b6e3cd0b1183.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Galleren.ini

Hovedstrukturs.jpg

Skifterammen177.ini

Skydebomuldens.txt

Stimering39.fak

Tuscanism

afstaaelser.jpg

californiers.jpg

congressmen.jpg

domsfldelsens.jpg

electrosurgery

genetablerede.jpg

hostiley.jpg

indsbningerne.ini

interdentally.jpg

kirkerottes.ini

plsefabrikant.txt

quadriglandular.jpg

tankelseres.txt

vakia.txt