6b96861ec0c5008ad140faf3e95ccf3a0f6b6b3a07820a0d50af329e2547996e

resource
unpack001/$PLUGINSDIR/System.dll

resource
6b96861ec0c5008ad140faf3e95ccf3a0f6b6b3a07820a0d50af329e2547996e

IMPHASH 9be4f90f50c714bc00cc8beb2e137299
SHA256 6b96861ec0c5008ad140faf3e95ccf3a0f6b6b3a07820a0d50af329e2547996e
MD5 7696e3e95d840df5d761b823d7869916
SHA1 b8ddfa16c60644426e7cd2fee841e6237457cc2f
SHA512 2199bb0414e988e7457b0fc4acdd4db5b7d76de39f91dd4a048518663f834a9a244ec7317887b3f5abf43ad28eb299328b4a9c95e00c110fd2b0431606bc6082
SSDEEP 12288:JtgFBTuBDtSy5XMvAyckPxftLcCC5WnJoGJtOrAwQ:JUtuBDkyd0AyckPfLpVWGJtOrAwQ
TLSH
T16FC41205EFC798EDE476467059F785539821BEFD1A30A31F9228BA2BBC71A91C937340
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b8:6d:99:7c:86:bf:bb:52:c7:f8:c8:f1:0a:02:2e:12:93:48:0e:45

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Tavsernes,OU=Roughhoused Unceasingly Indlnding\ ,O=Tavsernes,C=DE

Chains

Jul 10, 2026

CN=Tavsernes,OU=Roughhoused Unceasingly Indlnding\ ,O=Tavsernes,C=DE

Minor OS version

1

Major OS version

5

Entry point

17760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegCloseKey RegCreateKeyExW RegDeleteKeyExW RegDeleteValueW RegEnumKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

comctl32

ImageList_AddMasked ImageList_Create ImageList_Destroy InitCommonControls

gdi32

CreateBrushIndirect CreateFontIndirectW DeleteObject GetDeviceCaps SelectObject SetBkColor SetBkMode SetTextColor

kernel32

CloseHandle CompareFileTime CopyFileW CreateDirectoryW CreateFileW CreateProcessW CreateThread DeleteFileW ExitProcess ExpandEnvironmentStringsW FindClose FindFirstFileW FindNextFileW FreeLibrary GetCommandLineW GetCurrentProcess GetDiskFreeSpaceExW GetExitCodeProcess GetFileAttributesW GetFileSize GetFullPathNameW GetLastError GetLocalTime GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetPrivateProfileStringW GetProcAddress GetShortPathNameW GetSystemDirectoryW GetTempFileNameW GetTempPathW GetTickCount GetUserDefaultUILanguage GetVersionExW GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalUnlock LoadLibraryExW MoveFileExW MoveFileW MulDiv MultiByteToWideChar ReadFile RemoveDirectoryW SearchPathW SetCurrentDirectoryW SetEnvironmentVariableW SetErrorMode SetFileAttributesW SetFilePointer SetFileTime Sleep WaitForSingleObject WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcatW lstrcmpW lstrcmpiA lstrcmpiW lstrcpynW lstrlenA lstrlenW

ole32

CoCreateInstance CoTaskMemFree OleInitialize OleUninitialize

shell32

SHBrowseForFolderW SHCLSIDFromString SHFileOperationW SHGetFileInfoW SHGetPathFromIDListW ShellExecuteExW

user32

AppendMenuW BeginPaint CallWindowProcW CharNextA CharNextW CharPrevW CheckDlgButton CloseClipboard CreateDialogParamW CreatePopupMenu CreateWindowExW DefWindowProcW DestroyWindow DialogBoxParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint ExitWindowsEx FillRect FindWindowExW GetAsyncKeyState GetClassInfoW GetClientRect GetDC GetDlgItem GetDlgItemTextW GetMessagePos GetSysColor GetSystemMenu GetSystemMetrics GetWindowLongPtrW GetWindowRect InvalidateRect IsDlgButtonChecked IsWindow IsWindowEnabled IsWindowVisible LoadCursorW LoadImageW MessageBoxIndirectW OpenClipboard PeekMessageW PostQuitMessage RegisterClassW ReleaseDC ScreenToClient SendMessageTimeoutW SendMessageW SetClassLongPtrW SetClipboardData SetCursor SetDlgItemTextW SetForegroundWindow SetTimer SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu wsprintfW wvsprintfW

Name

.text

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

35KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

240KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

512B

Virtual Size

712KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

30KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

$PLUGINSDIR/System.dll

IMPHASH cf8eee620b3371ff06e99c34f39ea84c
SHA256 c7dd8cc8323e295b8821b0e320de208a7e20c068a8be8d03857520451ce9ded7
MD5 4abf19a47044ec746aa8c600f0bc149f
SHA1 69da1e4f654b044d7b3c845c12a07c988bf26eb8
SHA512 65727cbe3f03e0dceba06d206054e60adba321d29159b4bfb690c30b2ccd1a0a05a08c2aa50ac270fcd28557f4b482f492c36b0d7b7b980b477cd8971559610e
SSDEEP 384:jZ2pfUx9eVLwDKO9XYD/isN7lCEjgwMU/ktKi+R45Duwomq8pqdDvH81Q:jr96YIrx7lC7vU/kaG9uLmCdb
TLSH
T1DEB24C07F38398BFC51BC17186EF5772AA32BE211B616F6F1220F5756E24EA0871DA14
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12726

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

916B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

179B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Calci/Thits.ini

SHA256 87a8039bf25194828599a170ec64548894c35e9f0c8a32956510b07f4c655901
MD5 f9f7fcb0de31dffebd1b4420e0e21aee
SHA1 a6cbc3e77fd5ac953fc964345e5f1ade3387a329
SHA512 5f37d0f7a7edc0ceee74a89f23979d5605fdb61a50aedb89574b44467a88874ca48987c1f25cc82ac57a8a6ab4e9fa130561deaa6e40b37a97860ba44a862dfd
TLSH
T109F0D450C8D98198691BE7B794074DE0652CD5FC8B1010F5BE3AB3ED0120413977A618
MD5 SHA1 SHA512 TLSH

Calci/chortlers.sum

SHA256 596dda78e35ea1e6e6b51b30f1410b04b7bfe3078b1ceb7877457717382ea720
MD5 55c4e7512e6355e79d35ee9e4b1413e4
SHA1 698739dee483d96c24c9353039c65439a0d8fa41
SHA512 de18e3c253e601d1b9ac8fa7d9f94b7ca978a5dc6592bda6380601b9cfd7dd1d463e2afd0554fc93a2f3dfbf017a10f294a208a0414184de134db664e00c2c1e
SSDEEP 6144:rxaJE69kf6uKtTfg6P58ojqTLcTgyEF0qTC4sA5DBs+5U4g6lRd0lxD8a:w
TLSH
T10885021898CCFD1CBE9C493DE300F2A708FC4673C27A957E19B06DC877AE64215D4284
MD5 SHA1 SHA512 SSDEEP TLSH

Calci/fladeindholdets.jpg

SHA256 3565779819bb4d7b8e7b076603cc922798c273d22d6148aa8128e8451281e287
MD5 6d2a1e0a5079b0f51e909fb3f4e471d9
SHA1 4f0fccce21ae18aceb99065801892cc7d4c48b18
SHA512 9c0fdcf48ddd6d204a1c797206699442724c9329874793750b6b1815e0e2ee91c606357d28567fa835eb5ca05d78519ff282c4bf352fd349bc869d60ced5f4b8
SSDEEP 768:tSRI7iGCAQ6JRxq8PB3/i2Xv0dXV7O0MFa248CuPIf6wf6QTDto3HFT8:tiOidAQ6JBU2XvM7ME8jPEF1teFT8
TLSH
T1C003F07752204AB0A74F63E1C43930CD51ED9BF0ADA52736A9D0A1EF48B8DA29759F0C
MD5 SHA1 SHA512 SSDEEP TLSH

Calci/klogskabens.txt

SHA256 d000e3d6146bc882a384331d2a3a7c4f0fe1b40fce2c6273ae34d7b72aa0cd29
MD5 af504f432d36f8659d5656d59547ea43
SHA1 ac722e13029117b26a071e1e92c65b45c2860f55
SHA512 1c3bf105dbd42b4436349a29d0d051c3980c52281fbdbac16f96f4817644b137d18f0f27907df126d20aea8c3691d41fcd35f2c58518cee1b425a838726f4c6f
TLSH
T1E8F02001ECD129AC0A5B9F66F80429D8A9BEC6A7657C0241F993434C8040A0CFA6D99C
MD5 SHA1 SHA512 TLSH

Calci/legemliggjordes.jpg

SHA256 e1b20dcc8a4f87b16ebad005dd0f3e0df851b1f0d740dc389236493433212cf3
MD5 fa248b757a42ff95863f7f6307845de0
SHA1 7c75512450796aff4cf4cd0e803fa93323664733
SHA512 fbf8590b40579157f541bf28cf590cfa35cdea7412a7848e35baf117528f4c78e10cd8bdd574d8fc6deffba7fd06751f3fa848c5570deb3a2b5b9f23aeb3948d
SSDEEP 384:27eeMBaAdl2iWIEor1OOp8iD+hp58BlVf4qJFGkwZdjPWRUinKS+DJ3:2mBadMEYZqa+C56wr+F3
TLSH
T13892E0C4B81C0EB39BB1BB1B520B94AED11BD45E5F5BB772C1024B508EB1EB9746C1B8
MD5 SHA1 SHA512 SSDEEP TLSH

Frogginess/Degraderende/Reverenss160.ini

SHA256 0c4082073243f6c1a128bf29c9516f92b04157340890e47b80a56991bbf7b823
MD5 ca60a5704b9ff7d76adc3fadded62ac6
SHA1 9957c02c1919e52fe292f303ff1fc70ee46743e2
SHA512 d256a661f9f7c17928b7f84e44f5b10c4eaada5b813379ce6af77bbf8e1ef47fc71ff56c57d48b17fda26cd954f2edf03ad49f58fcffa9083ae9aed830a019d9
TLSH
T16DF0A3921E2B6679CADB1B16F484778B45784C071B111103C46017EEB1E5D84D1BF629
MD5 SHA1 SHA512 TLSH

Frogginess/Degraderende/Unenlivening

SHA256 f83f5e46f743dfe73a5e42a317617c4e68a5c995d4a3c9dfb0b6d0a6711fd51e
MD5 473ad63b36718fe3b837bf41f1cf8a3b
SHA1 84a2bf744f7658d3a0ce53f817bc038e7c542192
SHA512 ebad0fc6292b9956ed48e35a954b4fe99ae455f943d01b74d656a9ce30cde0f5598b77d831b38f0347ef3a7fc1183f097ab36067fa70664e2228b7cffedee71d
SSDEEP 768:DCGNiuUSnoXKI8iyX5kIuxALqxXxTXAiPxkEJiePJ+4sfk:usqj8IZa+TXAokBk44s8
TLSH
T1CDF29F5071CE8AE0F6195984EA78FFB201733973AFCA1DD22324F5018ABE5513A4DA5F
MD5 SHA1 SHA512 SSDEEP TLSH

Frogginess/Impedibility

SHA256 81946b854935d85a99c4c0536630348196e9cce7b1cf697e3e0aed867e7e97c7
MD5 5edb0e7513949892e5a3c15a633be0e5
SHA1 071ae6741717131af81711b336c56cbbf557de19
SHA512 626de536c9cfa73da879bf70c977d495c068388c0d2019f937685d0e0fd64b8c4c03fe55bb3e7ba14dcad75a4b80108847ee34bd9d4531929953fc9ad1684bdb
SSDEEP 6144:bI6PWdH2cuQdvuwx+Wjj20+wZvZ8OdNs1XnmM2Q/dPdfjJu/7AlON3WIQEG:bI6O9vD5J+82samM2Q1Ph127AYNm9EG
TLSH
T1F994AEAE1DEED741C87AAF7AB431524038A8540FE7A761321FA5AD1CEC7D5BC2207E14
MD5 SHA1 SHA512 SSDEEP TLSH

Kinfolks/snorkede.txt

SHA256 4255be950e76e80815a613fc3fd0309a55797f58495d32a72e2c7e7bd4665551
MD5 86e40e09eca7cc796ecbb5817fc397fd
SHA1 388349e1b9b843c40f5fa4f33093e87cbd6f0df7
SHA512 b7dd3e81fcb15ab3d1a579d22e46d1bba5869de143de60af0428673c3dcfa5ee733bf8bf3b9d3c38e3210bd5c218256f36c0b740c5742aea1cf30c453938bda9
TLSH
T145E02B2D5F06E96E3F2233A87D1068AA577FC46EA8D20102FD982A8C968280C177914C
MD5 SHA1 SHA512 TLSH