24a45d0b7b4fe778fe67729da5b9577b79bd42a847004110406fd57efec03ecc[.]exe

resource
24a45d0b7b4fe778fe67729da5b9577b79bd42a847004110406fd57efec03ecc.exe
unpack001/$PLUGINSDIR/System.dll

24a45d0b7b4fe778fe67729da5b9577b79bd42a847004110406fd57efec03ecc.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 24a45d0b7b4fe778fe67729da5b9577b79bd42a847004110406fd57efec03ecc
MD5 a92a21c80c95af7ae84d08aa680dcecf
SHA1 c73220c2be8e13b6b559fa40e8a1601645de2c57
SHA512 c48f86cf59bb3738a2332239ec3ebc50ee2ba88c0fbc5b319201628da57bcb95c51d41b2a4f5864d0e704a93699f11c0adcb8afa2b2ea12fbc012757b4c609ed
SSDEEP 6144:nwq3NpGrARiuIAMBW4bdmaJeYei3IBkiHOLW3D8SC0N3Snb8RvDTTL6Q+vR:nzSiibrI0Iki8W3ooBSnb85vveZ
TLSH
T129941225B593C84EC92219701DF6E57DF5A8ED992A218613B7E0F70EB8332119A1D3F2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

13386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 bd046e6497b304e4ea4ab102cab2b1f94ce09bde0eebba4c59942a732679e4eb
MD5 17ed1c86bd67e78ade4712be48a7d2bd
SHA1 1cc9fe86d6d6030b4dae45ecddce5907991c01a0
SHA512 0cbed521e7d6d1f85977b3f7d3ca7ac34e1b5495b69fd8c7bfa1a846baf53b0ecd06fe1ad02a3599082ffacaf8c71a3bb4e32dec05f8e24859d736b828092cd5
SSDEEP 192:eY24sihno00Wfl97nH6T2enXwWobpWBTU4VtHT7dmN35Ol+Sl:E8QIl975eXqlWBrz7YLOl+
TLSH
T1E3325C12135081F3E4918138C86B3A276B6A15029BF98E57DFD39546BE31BE3BD7D603
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Absurditetsflelse/Antidiphtheria.txt

SHA256 ed8be259f7a791688778566c4620862d14db00faa55c7e1be5281d665c70fa13
MD5 392ca973918cdf910ab366ee51473650
SHA1 bd6defbb8bb458669ed89d1ebd3f97568d7583f0
SHA512 0b2c893697541cd896a8e11be94174522a0bcc0a672434c45f33f5effc2d1e8352b44fd602ffa9b37a549efcfa1526f747b01fd5bb9a6979f77f530d9d686cbb
TLSH
T1C7F0057585F44B347C6617E5A44754D6C46C83C1C92B370CC759430D41107FCC26A5F4
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/Bronkitiserne76.txt

SHA256 15cd09a6030ecd2ac9be8dc35d8336d34537fecb62c6ae7d05ca1c0377effdd8
MD5 5f89a2c145b48fd0e86b64aa6d74cfc3
SHA1 ad5aac0cd1fe74d8985a38b9d5d6a8e594580c5b
SHA512 92d5ca84d7ce2648bbad1ee5ae562d13d5f649e0cfdb24745ead8e6358cb5f8e2c8223e0e23e32ed48d8f792d577100677952735ee93434f20ef150424f2c3fe
TLSH
T190F0C06CEE15802B4ECAA6B367308860530CFA058E324B6AED21670E80C4C5DB27903C
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/Dyeable

SHA256 9ffd1f00982cccf58e1500e2685509c5b0fcfb9417ce4e0343689e9999ca2611
MD5 2953c63d542cdb312f4c36e232036637
SHA1 1f3029b12ebf3e2749cc32c09e52a2a8d25f7b2b
SHA512 15be9b21446299d9d675cb14d992365b71b0157e2b6fdda9bb9fa38d0057c5f3e60a6068a315e96729f5be20596f0da1020ca34466c92ef576d7938361e8e9b4
SSDEEP 1536:lZncB8748ge0a7M//wgprELiobru/84Z+yGGsXPYL5D5XW59bX+Eb9IuvjtHSl3p:lZ17hTi400brufs6FXoV+Eb9BjtHSz
TLSH
T18BE3AF4797568CFFCC0BC038D56D61E64DA8B0115B4EE4FDA23AB818C2975E273346EA
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/Narkotikumet.txt

SHA256 60260aa0448e536341724cdf6e8d9ef5868e35f6abc0cb3fcae9e50a92161d2b
MD5 275d0dc5f2f39eead9580ffc18fdb772
SHA1 52bc56d01502d0c01040a4a08eba0149f7faffed
SHA512 f89e0e0a79ff71a8eb537ef8c9f4cde07f05832e8d25d11acba7d031daf52308bc3b3b99c3237f69d181a45149c886311118ee17ef1e7ce4de86899890f2a075
TLSH
T18CE0C02CC9590A506F95216D29064014B8CC2C644034F40DD9DB1E5864DE07CA57A190
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/Sautree.luf

SHA256 c3ec8e85b60115d44742a44b9a4e1e5cd125c78600540f8c30fea71d57ebc7eb
MD5 ac7e90981d61c88e279eeb2fa8881865
SHA1 712fb58e9c4da7458625709e37aa380caed7fb08
SHA512 7bcff9b0750202f62452c69012c2017d903c9543c6d0fd09e63fa400ca50b447c7e8a32fcd29d4fd1d5164508bebd5b9519c01c6da3ca39eed88c31dc9376131
SSDEEP 48:PvmhozXAO1E1eG9iQqvu2ZGvWw9gf/nvsLPEm+tWLR6L3oR7aRy:PvmC31E1rqzZJf/v6szARHaQ
TLSH
T16123E99D3368C9879799960A8C2EAF547920D16906C683F499D703251941C3DEEE9C19
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/Shutterbugs

SHA256 742301d948a37f3a3e3d8bdc292262b0aa85b1cdd1cc9bf7348a508407a8bd71
MD5 bd0728d081b0a1749acf9943abfd8644
SHA1 bc8776d88f86764fc906d9e03bdcda79656a364e
SHA512 b0fde7a0214bcfee19d7ca10e985ca0f917182b252aa4505f5ee0e9ee84793196f1302959ba7dbf845b2c85b2208f4db25d0da9f8b2a69e6f33637b5cdabf48e
SSDEEP 3072:7qPUPCKjT5A4Gp54kvLDmJCtuiI0v8VYg+XGKf2wKn/j5gwm:IUPCcW4khvLDDuv0kx+XGxT/j5gwm
TLSH
T1BA14DF694DE0FCD7C84EF97DADAA208C83A6558017FC81E5AFA743C68BC7B115292D43
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/abreact.jpg

SHA256 e79fcf9b659185b93d3655eae7c95da05dcb4771e7afb861208787a7e61ffca7
MD5 1d7c38cf23c563c737e4e6ce92f222a3
SHA1 5aff5e752a03800a2c6cf9dc33b7871c9b111899
SHA512 e113cdefd799c3edd9506b4467cc8133ebea1b8354b08abc5d6449b56d06868f1b520f7b093b7c8f8ae98979a42c8d57ba693ce0489fdb39ea75e1355f784b02
SSDEEP 384:655TYg/2T+AQSmYRYzhglFHYqdPmrkYoGKEIKKcmMk6:655ExzQ7YMhYFHYAGZKcbk6
TLSH
T13382C016460731BE83F7ACAA0E26775A44848A34795998F03D93B9938930DBCFE8D643
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/adjurers.txt

SHA256 b2edc6265b28d5387966339aa6310fe054c1058812d3c62a92690cc281dcba8f
MD5 2ab07efadb2ee47edc73b4869aa44dbd
SHA1 1c99e08f9fbe55a9ca5108beff33574bad8954df
SHA512 e6017821eadeeda33690916537c2e728bfe1150f2fe04b623c198e55fc46035bed43efe2f614e7bf424801848b61c2df3a75f666cbb8fb1bd1eeafa79ff331f3
TLSH
T1F4D02B19B00A22837E508A457A56B89451451806FF14DE1976E372680971404123DBDE
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/ayu.txt

SHA256 ca9fab714c1e4d40d6c8c5effa9ab431abbccfc7487f778a7dc4b6a411a74b43
MD5 8bede06fc5190bde9668be339fe49b19
SHA1 3ee61e38ed3c8160e1c01b0a8d7c1efdc418d91c
SHA512 6a81d954388a372240adb3642bbb37bfca4383929ec81d69cefed7a8a7d0d63ed67d99428275c471752c7af780db01ffa7030e7389409d4e4d15303601358b93
TLSH
T1B3F0DC14DE5A19464BAB7FAD9DD09D283AC801D24312308835A013D2351F4BDEFB860A
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/chromolithography.txt

SHA256 77bb09cfcf6082e7a6d7f8651ba862cc7575b5b2659293ce460ab8f2a6a03dc0
MD5 0e6fc00ac0dddfbd067bc8518f84ae61
SHA1 491e95b378acf49f01aad124fcb11b555b8978c4
SHA512 c73ea31fc3b4087df6b7f3eae292fe1b60cc05a17eb5d34af21c433183ecafa7e990c26174b1f577fd83b321a1bd9da3d9696f07a3e1c1490ac8703c09922de1
TLSH
T175014491EC0D64622E1637B0FC931886EAE9C4298F090834D984430C431E4AFD37C371
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/festivaludbud.ini

SHA256 2690fbfed7754dc480f1f2420d2b77f184ffcc4f8771ba39f1c1e7d3d71abfcd
MD5 3f872cb3acf58e588a34feca7bf87eb5
SHA1 cb923fec4a00b826312aa871ac0316688338e303
SHA512 26c89a135bd6023aa86bcde55f2c380e65c628a3855c06fe58cd67dbfcf1156187ce5de7551212509501f246c1615be233f6a8ccd00c8b9e82815499ccd2829e
TLSH
T141E0F1C08F00C92C96D643CD89221F45F9F4DE74C65B9A8C12D3470C374219CDA38296
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/hydrocharis.cyn

SHA256 71bc4df135f96a536bab3d62d89653b7ece84eabda00a2e1243d0dd99e383116
MD5 c90edddc9a184f78ec0bbfda1d0bbbb5
SHA1 5afdb930057bd324fb11dbbb9721b86ded8d184e
SHA512 cdc1a690a0ef23df6047fdc0dd3a1feb0e80c9868974660072bc52929c153b63a6378f2121dd390e8ff8427bbc571cd138ac2fccece9e0fe836dfe9b35ab8663
SSDEEP 48:aFEGtRhxpqTIc9btz0gB3cEAWU9AEq7eEsaza4z:tAhCTIcRFTVcjWUKqfaJz
TLSH
T109C2CA9BEFAF8880D05F71C9405E9637DD16A255BC3999545347682DC3943801CF1D55
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/kolesterol.jpg

SHA256 6f63dc88a76f777915283c82262b0a3c654db003de34d9181399476c9c22f5f0
MD5 8fce676a66376aed3500024767525152
SHA1 2365f4e3b28528f963121d69f794ce1e7b08d604
SHA512 438c805cce1507fe1d390076f8a122b5b38dc17653aa8bfae6bab6adb228a8675a874c6a6c04361146b16363f90bc2aa54cf81098ed6cd385abdb4bceb5a813d
SSDEEP 768:zwUWCeFtMZUuZ0SdPGDOpkCfJRBNIiAUzALYHi5wj43BR:zwUUmT0SduDoko4izALVwE3BR
TLSH
T110D2F12065CD5E9BDBF907B80919A57A4CDE2D52BBFB30920F224FCC6248F70240A0E9
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/regnekraft.txt

SHA256 4282149fc50b7719d706c200808cbb7841381cba5320ea33af92f5c341cab0f0
MD5 557f9a3ac3cc38c2b8656b83c87e5308
SHA1 17c66b071c6080d3cc52d445ddc3486454c94618
SHA512 a6026d4374f65213ee948b87759164b65199968ed036f94ff513271a420bc560edb0abf771820402ee96d83ef3592cc04288a383518144473a94abcc7dba6ea1
TLSH
T156014474EE060B4B85C31305EC04C986C63E43518A7E5305F7D8F34ED082DAE8368153
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/retuderes.tor

SHA256 7c5eab2746b358c2e161e610332cdeedd5610d186e351d062ada66539f95bb5d
MD5 b5cad50fcd83c3a04bd6736191fb87dd
SHA1 54404baca81d5b88a38056c609babbf310a558c1
SHA512 9d5b94d1de422a57975a704403873a664eef360838ea9f6dcdcccbf2ed1047b9fe791899e023cb7d71f97b6f0d147410ba59f923fda53cd82111af45a2139413
SSDEEP 24:igcB7h0QoF+CFdCS4VD//WH/LG5uQnhp/yhMwBT5jiBaMaVgJqhaUWqdgl:igctmQoTDCL//pbhchM+iBxaVFhaU3do
TLSH
T1E8D2B7662CC47A9417E5D4028C8EA61644230F16DEF25705E0A5CBF2010D0192998AED
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/reverberantly.ini

SHA256 1d00dc1c5385d5bbe06c033ea905683f908e4e956f31e793046a7d9c6ccc93d8
MD5 6c00249f238dd6c0a7fc8b2c596d0024
SHA1 83f884c236b08acde5db9a8a7e08c2ef0656666a
SHA512 4cd6aeee338fc85ae2f352e22f2b17b9fc123fb022f78e65da56e95d6d7cd0dab8dfcad70de270ac20caf80ed6b70b4fe14b627bcc7497df2209e1d7989fd392
TLSH
T1D4F0DC40FA194C1C909D0FCEB425740C349DA241A168B781D2E8E30F340CC8EC74FF05
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/trykkeriarbejderne.jpg

SHA256 d0eb3db729c8765879217d258c21f27d58d4d902db53f43929d045bdb1e856ac
MD5 60d997c829716039c31a0e47ee9928d8
SHA1 873d9b2f0cb6d43980ca516772951c48edd1fb02
SHA512 35624b50e72506b5a6a533e7919d198374d3306f3c3ca88a9307eb0f1d3aeb5a01e4eaab1c5f2d6f253dc291a6697087fde85cf95698b7e4ff3312d88806e623
TLSH
T1E841F83DAB994501AFA3FC6BF825625282DA8FD23B907E30A380015C9B10CFCA60566D
MD5 SHA1 SHA512 TLSH

Absurditetsflelse/tumlepladsen.sla

SHA256 7ae5f2b5c012b6d3d1ba8ab2e0e7fb218b0b3b175c7958d6576faee87b3d81bd
MD5 71552e362c92d0585de8ed65e2c1993a
SHA1 b5acef06f11ff8f3a60229866dfd69b792d21bbf
SHA512 d381c8e4de150a45dc28ee7642675cfa0facc98bba68f0f9f89137b3c99458daaf81a208b87abfb319a95385840aadc131245cd70bde82ee1374281fd04e22cf
SSDEEP 48:n8BrlqQ3i/koxwN24rbBtNj+8ffYcdVhU8HaoIczBMnQ:nir1ihxwN2ibBrj+8ffYEP6onzBMnQ
TLSH
T1C2332AA86623AAFE172906ED1C9235903068CE308DEC070F1191AF70F786F348C80791
MD5 SHA1 SHA512 SSDEEP TLSH

Absurditetsflelse/tursejlers.ini

SHA256 b4da30b0c1351a1cf26f181c2b041d9e41df667fc5972c364fd27c676f743295
MD5 1309009398566d790340040ac8501dba
SHA1 edbdca25ceb2bf64c80bb8d38a5af1fba9711766
SHA512 d73f3b83b01811c67b2e3d97f5ecd09bced1822ef40fc498dab44e7b94e5b6fb56af85c0e0d7dd1bf1407b0e043ec05a52bd7201e8e4ee7d4729ee6720a8330a
TLSH
T1E1F0DC42CC64341042D01256C7252C40E1DC1B945274E99B22EE532D22BC0CCC69AB3C
MD5 SHA1 SHA512 TLSH