55b96a791d1092846b3fc2ab30b4c2345252a88dce019ef18f3273e5852db821[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

resource
55b96a791d1092846b3fc2ab30b4c2345252a88dce019ef18f3273e5852db821.exe

55b96a791d1092846b3fc2ab30b4c2345252a88dce019ef18f3273e5852db821.exe

IMPHASH 573bb7b41bc641bd95c0f5eec13c233b
SHA256 55b96a791d1092846b3fc2ab30b4c2345252a88dce019ef18f3273e5852db821
MD5 f6a2345f0a35a4eb040ec97ddb2da126
SHA1 6c0b3fa962525580766e329c1538958804d7efd8
SHA512 d93286bb17522fb594302f8cfa08360fcb4eda38560d72634f80af6cdb25d276cfc12e3b114b754dd182069113726f1289af926960e13d0d71259e7b30910b57
SSDEEP 24576:0TAjLnngPTgXHKPb/FLqmY8mdGlO4wIsk6EL5:iGrgLhPb/FLqzglO44s
TLSH
T1CB35AFB63B780186FA3DB4B2FB56B17026E3107D556DF02E32B2EB5640217B2154FA6C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5e:83:93:f7:d6:69:ba:5b:fb:49:b8:2e:04:cf:13:ca:65:6b:ed:d4:e2:ac:fc:3f:b5:e1:36:9e:a6:56:e1:2f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Kaffesurrogatfabrikkerne,OU=Ultraugly Babby Tolerates\ ,O=Kaffesurrogatfabrikkerne,C=FR,1.2.840.113549.1.9.1=#0c1f6d657461636172707573405272696e677370756e6b7465726e65732e48656d

Chains

Jul 31, 2026

CN=Kaffesurrogatfabrikkerne,OU=Ultraugly Babby Tolerates\ ,O=Kaffesurrogatfabrikkerne,C=FR,1.2.840.113549.1.9.1=#0c1f6d657461636172707573405272696e677370756e6b7465726e65732e48656d

Minor OS version

0

Major OS version

4

Entry point

13709

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW WriteFile ExitProcess GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject CopyFileW

$PLUGINSDIR/LangDLL.dll

IMPHASH fe3375e7e4529b73ba45ab2246b9269b
SHA256 4cf25411f28f639f72156c24b0f66ea42f5aee5973f6c137d901da6ae42d5b7e
MD5 4b8a750993567ac9a350ba9768fabfa0
SHA1 7ee7a8c313b292d62561b085c9d490c0f8065624
SHA512 c2a06e352815a2f5340e8244cf2c5a4a5cd7e7848ea67e454ab207262cb33130008491e83d053c778bea97720f7387de737bf15355db3cd5477b94f3571107bb
SSDEEP 48:S46+/TTKYKxbWsptIp5tCZ0iVEAWyMEv9v/ft2O2B8mkGofjLl:zxuPbO5tCZBVEAWyMEFv2CmqL
TLSH
T171C1A370B3D248B9D591413778AB33D36612AE746784500FDB6311AA3820AE7AD3EBC2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Beguiles/Galleren.ini

SHA256 7af9606902d6e2b00d966c8b8fb908ff73606d12b9bf4f617a4053d117c8683f
MD5 3677916cb3c6508b69240a84891dd2dd
SHA1 96e67956a4f6fe9835fe8e97efbfc6c803d6fc7d
SHA512 c61160106b889d0f42a6b55999091764775a05bd729534e84f6448743c20716274602fa2ae826bcfe46ce92d04bd9bc91ef0b06c84bdb171bcd3ea9066cd0f67
TLSH
T1C8E0F1D9BD5ED17E87211796E8140E532C5D1C2EC25E0600F6CAD61123C7A48033B16F
MD5 SHA1 SHA512 TLSH

Beguiles/Heterogenous/afstaaelser.jpg

SHA256 7c129eff854f31ca76dcef3b8787c907172b224ac6a860c76cd21c5bd0acdc77
MD5 dece60c496f98244aeb0e0cb94796983
SHA1 d8a576c8995308ea979f87dceba32944e529eb1f
SHA512 313e13b1dda848b684cb7b6ab6a646e76b339c6600721680bec36ed8a259cdeb2d59bb2f04b4d4be355a2b9c0f7ab42ab28a47a2376b8c8bcabd94e4dfae8fb2
SSDEEP 384:xu+17m1gP7rJbaLmHeQG4973JkRfulcFFCdl0I5NaSN:xu+1sgD8Lm+JDRDCEGDN
TLSH
T13172D1B35AB6D3B5C73E674A2607C3DE74660B407F94A936BBE2CC145C54C704356AC8
MD5 SHA1 SHA512 SSDEEP TLSH

Beguiles/Heterogenous/californiers.jpg

SHA256 aa5171381b8a468281dad77e6e73510b028d7fa021bbea810616bb22c5260280
MD5 14153ca395998e87cbb651ee64fdcf47
SHA1 c88b34fc4cb295160588432d6c2234e56940c249
SHA512 ece8bfe3159a7d48b6aef77c1cdfb30758d625514d8bf90a0efe1d95ac5a5b0eb7df98bc68ce406ecd12317ca457879adbb3d1ed71590e2861f943a906e326ab
SSDEEP 768:dswrRt3IxYknTo1sOv1puU7Xq/WIelfo3mAVUudg5g3k:dzHmYk01dv1sxSondg5Gk
TLSH
T185F2F1162F56B30D8AFA733E9D9D456A72ECCF1309ABF17469635A18210057CCD2DE06
MD5 SHA1 SHA512 SSDEEP TLSH

Beguiles/Heterogenous/congressmen.jpg

SHA256 170c2943a261e406fcae7324cc3f85f3923f4427936cad78cc3d2b1f9299cce2
MD5 1b1c73314cf3fcbeb7e0a2500371e1e8
SHA1 10ede57e9c9031689ba9f77137b331e615fbe3cf
SHA512 5176642c80105ff690571c4dc669dacf7b2fcce72aeafea4c844b92a350e81402ec0c213a40054c7dda5dd3bfb8eb5ebebf5bbf37be6937b1351ec194db01b1a
SSDEEP 192:Lg4XU4bxoeH4+rBWxlEHg+2eutz447yFh9po8yXGF35U0OTlKunDm9/Ozy:k4XUjM5rwlEHg+2eutPu1po52F35qKuu
TLSH
T12202BF576F2632719F0FA8B281F252089447019239D0477D33F014234EB6FF9635AE17
MD5 SHA1 SHA512 SSDEEP TLSH

Beguiles/Hovedstrukturs.jpg

SHA256 1929920da342b1544d3fb3eb5f88e7d764e8c4c47e665f651ccac5a86e8d812a
MD5 9afc9a91d3e2f52bf5e402e2196d990a
SHA1 d0f3b6863a461c10303d5f3fd66ad9adef3f49e8
SHA512 2b6d209d485be42c6a90b856e30a1e9c1a849100c95e2a02360987ebbc47c240ab67970012e77b68804750c268ae95d370f1393acc0622b9e19d0a6cfc16bab2
SSDEEP 768:vQv+f8zlwxHkGpKhFF/fykjl+QHO6xIg6nGPreh5ssVnXaL15nA:vK+f8zlwtkGpEdjl+QHO6xnzeIwnXu1q
TLSH
T1EA03E14556F661EAEF500668C6814830531B423CAF4D97F11CB680EF816ACBBECD2BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Beguiles/Skifterammen177.ini

SHA256 769742f9b7524abab4b3182b57f9677f57d501a98cbc88b0cefe1690ededa2e9
MD5 db6ab857062c63775f305e6bbad61a51
SHA1 23713930e061a1496eb3c9c5bda0a3071e4bfdfb
SHA512 1c43296e36c317adf7f46e304f1447bcf370ab335bcae806fa03e54cb0761b9e2cc8549e16882db4ebd5d366e134ef563f59bdc26e9eec987e03ef84b10d4f5b
TLSH
T176E0EB76AC07AF5A1A9B1FC1C8197AD2E85882B0F4808A343CBF81882402D1D33D024C
MD5 SHA1 SHA512 TLSH

Beguiles/Skydebomuldens.txt

SHA256 3b913795b5fe5612c12402e55d78cc5501c8c53dd08e69150b9419e96a6970c5
MD5 17f4047cf11b35e2aad3291d4a7e4b30
SHA1 8aaeb723e3ab9f23a8ece21aa43b028cb9bd35e4
SHA512 89522d9259487fb4013e8bfc32330b5f33240220bcfe06c5a313bd2735c678645bd3ac94a6ade8b324c29429432b1a55a65d5eefe15cc0c1158d9f9862433651
TLSH
T177E0F1A9843766B195D2078DF5101700337D5E65167F122FE98B177E268348D033DEBC
MD5 SHA1 SHA512 TLSH

Beguiles/Stimering39.fak

SHA256 23276e25296c6fa29ee8fba6e461b111d52bd5f900fa95797e3affe6de5f08f1
MD5 8f0bd4162c5c066d08b24019ab18d078
SHA1 b6ddffdd9a0b0ecbf322d8cc7699114a9fc35516
SHA512 7e0232d5284d6afb1d14fe0b237fea1d356b804d8d25839f33d51c8e0e96edea1578f208e39aca9cebc74b897f5bc25c8bad6848f14bf1f73e5289f2b4945f3f
SSDEEP 384:DR6uQU3UCndeYJBLNTqriS21XLq7kEtfN4sass9yPwz2qQKmLnpswciNmjI3hDOk:tkaeBd3uHvErI//vYL
TLSH
T1C996120E8A7BB10EC15041724B2106B01D6EF1CD3592E97B3FACAAF423C9A455FD62F9
MD5 SHA1 SHA512 SSDEEP TLSH

Beguiles/Tyndtflydenhedens

SHA256 d6b4fa75104cdc32c6cad904e486571119a224cf6139498988ffbd0ba2150e22
MD5 b2ad7f85ad598f2849e5ad11fec5e882
SHA1 2bfeec7869fb2b16e244f3b2e59d02a814153f11
SHA512 ab1246881a439738b2498dc707e3d9a991f5983334507259cf2a5568024d8bd02d6c47f8bfeb2df90d848934e62694248a4de93d5d820ff06a1181c19a0025ea
SSDEEP 768:8Zl2nH/fbI3GVbw36FEOBDjtfks6Jc1vwAt3Li2fEEHHo5nPA74kLJ0T/42/SQd:8ZQYmy6FEq5kpcLvfEEnYkLCl
TLSH
T194539F99CBA1CCFBCC469538D41F27E6599570168F0FE4BDA13AA915C14B3E263202EE
MD5 SHA1 SHA512 SSDEEP TLSH

Jewelsmith

SHA256 e12ba234f1ccb825765a53cdb63359adc4706c746aa84ec6186d60dda1725db7
MD5 c506d84ae18d3a9c6209b328de37f2f8
SHA1 cc48ff931067a234c72d882c4f4f2a8f1898aa8f
SHA512 0073bcc0bee96b12cb0d0309c9141524b3b5bf76e71931cb9c56fd282d4faaa5f30b4b681902f0ca8a11711776d4fa024893a737959685d941e292c24e3f84f5
SSDEEP 3072:QAVb+0cmTXxesi5ozvIl1pP1m2Ya57P3EKgxjs8u9MqJ3Op5QafAG:QAY5oBefjR1Aa57PmQR9FYBAG
TLSH
T1E844AFDC10A068896BDBE75E028A4E70FA958077B75D0EBC25A5AD05DC03CF7896E7F0
MD5 SHA1 SHA512 SSDEEP TLSH

Telefonhjaelp/Overskueligstes/quadriglandular.jpg

SHA256 4e94a7b45add4e80ae9f41db2b4b77338d66cffa88358cf586e24479dd49cd0c
MD5 4510bd01deded001819ab3c6f1aa1d23
SHA1 a487d8e4ff22c771ae1b6d898b4c74bed6ff8b0f
SHA512 5b9502fc755caf427f1b354c5d9c7d505c246029858bfc755a07c23c4d270ec2cf7d70caadd07f8963d3c4169ff78cb7d2fbae424d905472bfdf7b208132cf3f
SSDEEP 768:2xD+LAaGrPe6+yoaTljhTkGE3sPm9jZAbY:2xiLGrW6+iJ29tF+Y
TLSH
T14CE2D013679ED0473B25287B998A2C8BFF22059637E84434B681656F3712D3C0EEB71E
MD5 SHA1 SHA512 SSDEEP TLSH

Telefonhjaelp/domsfldelsens.jpg

SHA256 145253481b3ac59826dbb572158ea4fe72cc5cdb8dad0c95233e50a3c052edb2
MD5 b51532dd74e8dd332d54635c4d55b56f
SHA1 c5fa4d097de0711825ac43464037f074d2bff969
SHA512 a21b5cfc50b2045b1c3928e458e7579452b27a543e05ef9b377d12319033a53768affe6abad8b2f82dc658b0d77db78038671dd614c1c2f77c2b73d51df200be
SSDEEP 384:tHY0p+oKpwFKBz0ZsEbC6nED3QU3M8u8odcPlyIrBL7E0xYagZG8Zx:tHPMoKpdB4eJ6U3QU88u8DNXrBLfcdx
TLSH
T18A82E10EDF24E1998B2EBEED776460D4D383E9B59A713DBC51F062BB5014E38B484C48
MD5 SHA1 SHA512 SSDEEP TLSH

Telefonhjaelp/genetablerede.jpg

SHA256 3ccc9393039bac47df2081799240b649d5b9502a0968d1d974f1a89a5470279f
MD5 0a25d193a3c0742c4641b104c03257aa
SHA1 100782b9643644bbb6c88e4a2f24e38e18ef54e2
SHA512 d2304605ba21f9d3f052ca67a481f6ba4064287d3954e02a5fad3fe45291b76f63d8f724cce50e874a52ddd048130b9d67d8176e3fddfb12b1d6ab975d2abcf8
SSDEEP 96:RhwESuuz8k0FvNZwGuyqV5j8ZcpNl/QFkUHOAdvTNnCeFEpTOXdds6F:LwJteLwCqrBpJUucTNCeyTed+6F
TLSH
T11EE16F039948DF82972883D9BE471E99AF472F08A9A13DFB14514ECB7F24D3208CC91E
MD5 SHA1 SHA512 SSDEEP TLSH

Telefonhjaelp/hostiley.jpg

SHA256 8162e36e7b6d250fe9de479a4a1d61318da4bb0b40794ed3380fa1837a6157ad
MD5 47b1b32bf50147c9b2bd1f6462fe2585
SHA1 e73bcff72a45836deb2cc250f4eb161b68ea89ac
SHA512 781541021b5d542bcd91d82b3af7a66d64da6e33817cda344100d8bc1a92bd21a7ab6d3eadcb79d70c18c837507b23391fb39f71bcd23f1e4b42761f53966407
SSDEEP 1536:BfHy94jgpnEfuPkdr1DJWtOgS3Ogj8A5fG/kAhvA87BB2in3UAws4nVp6gun7pY7:tHrUpnE2PE1NWtCjoWfGMk32in3L2nVz
TLSH
T1AE93128A0429434C035EA3B4E55986F2C917FF167EB0926A587FEACC4866CFDE1181D7
MD5 SHA1 SHA512 SSDEEP TLSH

Telefonhjaelp/indsbningerne.ini

SHA256 bb19718a67262871249b90ced89c4b5be6cf70807aff836ba4c8ebef3c49ff72
MD5 8bf8bdb5a706c8fb1568a10a71b161b1
SHA1 7e936210a682e56aa8cf1763622c0620c187fb72
SHA512 eb09936c72da26005a59a753da899a5ddee046244ee5cd7bfbde25526bf6d7daa8e4cd21d619bcc06edec3efee039efb219fa5e4eb91174f87ca776f8eaec5da
TLSH
T1F9F02388C32A169F51164E48CD030F730C6CCC10D2562D6530998F9B5CF46DC077869E
MD5 SHA1 SHA512 TLSH

Telefonhjaelp/interdentally.jpg

SHA256 2ff8245e819a454019cfa3c7194e281e69d8d64672c2bbd13e482b94e3a4447b
MD5 a9c70ab09a9e293b622985291f3affc2
SHA1 495a118b8cf4904a0519d9f8e668464cba348e9a
SHA512 f881d809af27ac7ec9166cbeeaae3a7f5ebb03f1fe4722c47806f26abb70a3707a645b5c1dbdc3d64585ac1a77583ddf5c79c87015c67580f020618745130cb8
SSDEEP 96:Rh92ErqyToO4NzCKD1ZY0/tRo7fsYXWXEMq8mK6AO187Fba7rn:L92WsDzCQrYUvqL6GL7rn
TLSH
T11EA18D010B6DE5BCDB9304B7472B4A190CA50ADCFB606B747FA8430755C8EB81AFEA90
MD5 SHA1 SHA512 SSDEEP TLSH

Telefonhjaelp/kirkerottes.ini

SHA256 09fee8d7e40a809522a585e74446242a2366b0c402c4b6e5c5a114d96fb2f091
MD5 e91c1c72a7e198a85d6716ee8009ef7d
SHA1 2729258948393287d6547e0975812bc11d327e55
SHA512 1efecf69d30937a5b953e809f63de37010705bb9ee05370feba9906738eb1fbef88c78413bb56e692d58dc6f8cd9592fbf245b4f10eac9689b1b35907dd39bb4
TLSH
T102D023B9DF8A548D0784D7D3451135955D1479785D0106014062DF78EC9109DF5A511C
MD5 SHA1 SHA512 TLSH

Telefonhjaelp/plsefabrikant.txt

SHA256 b4a50539c18d2f9d86c10438d1c1034351a2683ac45560d7dfe35b82f6100e1d
MD5 fd9838ec35eb6700c306d9013a142160
SHA1 72bb0fa4316074657fd34d262076c78e14ed8068
SHA512 0577a1b122e3bc42657d57b1e31177605c6d47c28dccf378d919490d2ac5d4dabedb39e78ecd499a7ef21a85442f763a199c6ca252e1cfb2279ccb6c0649a21d
TLSH
T191C02BD48C7314010D4EE648D0B797F400425000002A831BC180100E1AB02DF422CC7F
MD5 SHA1 SHA512 TLSH

brsnoteringers/tankelseres.txt

SHA256 3b4578f74a735e0f7a8d21a2634fd510e4fceab54b2ba74a5a25b3a357e2c556
MD5 7ba5bc8edb2ed35390751dd81132b60c
SHA1 71a8e409309f6390ca60c8ff8bdf592c8b1c6ba7
SHA512 2fc5fe1e2569e3b8d4c847822a37982953322cec79b3385901e4c25273ab7e7fb17deb492fc6f226b87068a21561d48525f14a1b70b7772b59a3a75e145e9165
TLSH
T1B20165308CBE43285647D0853C902573C3AEC35C410602D2FDA223BB924D70CDDBA500
MD5 SHA1 SHA512 TLSH

brsnoteringers/vakia.txt

SHA256 b1eb5192e31258d5d4c2b7343e28365feeba6149a9eb0ea0d86011992bfd75c4
MD5 88eb7fec8b92ec440ec3fbe7a313f933
SHA1 9e58b5e9e935f909ebdca746ce057031dcc34c7d
SHA512 9e5e1c5febc0b4366ae3c1609876fa9b8ee2f607debf0a37df4439b78495e176c9d93b56d4f859a5761b8f160db187c932d9b355c46500cfe16f107db8d29ef9
TLSH
T14BF005D5E84930D59C6A43F15452813814BD4E93E00E9554DEDB831F000B4DCAB7F770
MD5 SHA1 SHA512 TLSH

55b96a791d1092846b3fc2ab30b4c2345252a88dce019ef18f3273e5852db821.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Beguiles/Galleren.ini

Beguiles/Heterogenous/afstaaelser.jpg

Beguiles/Heterogenous/californiers.jpg

Beguiles/Heterogenous/congressmen.jpg

Beguiles/Hovedstrukturs.jpg

Beguiles/Skifterammen177.ini

Beguiles/Skydebomuldens.txt

Beguiles/Stimering39.fak

Beguiles/Tyndtflydenhedens

Jewelsmith

Telefonhjaelp/Overskueligstes/quadriglandular.jpg

Telefonhjaelp/domsfldelsens.jpg

Telefonhjaelp/genetablerede.jpg

Telefonhjaelp/hostiley.jpg

Telefonhjaelp/indsbningerne.ini

Telefonhjaelp/interdentally.jpg

Telefonhjaelp/kirkerottes.ini

Telefonhjaelp/plsefabrikant.txt

brsnoteringers/tankelseres.txt

brsnoteringers/vakia.txt

Sharing

General

Malware Config

Signatures

File Explorer

55b96a791d1092846b3fc2ab30b4c2345252a88dce019ef18f3273e5852db821.exe

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Beguiles/Galleren.ini

Beguiles/Heterogenous/afstaaelser.jpg

Beguiles/Heterogenous/californiers.jpg

Beguiles/Heterogenous/congressmen.jpg

Beguiles/Hovedstrukturs.jpg

Beguiles/Skifterammen177.ini

Beguiles/Skydebomuldens.txt

Beguiles/Stimering39.fak

Beguiles/Tyndtflydenhedens

Jewelsmith

Telefonhjaelp/Overskueligstes/quadriglandular.jpg

Telefonhjaelp/domsfldelsens.jpg

Telefonhjaelp/genetablerede.jpg

Telefonhjaelp/hostiley.jpg

Telefonhjaelp/indsbningerne.ini

Telefonhjaelp/interdentally.jpg

Telefonhjaelp/kirkerottes.ini

Telefonhjaelp/plsefabrikant.txt

brsnoteringers/tankelseres.txt

brsnoteringers/vakia.txt