8fd94a0d9730a5a696e1056495b28ef5ca118f94c92c18f6b757369bd3de5ada[.]exe

resource
unpack001/$PLUGINSDIR/nsExec.dll

resource
8fd94a0d9730a5a696e1056495b28ef5ca118f94c92c18f6b757369bd3de5ada.exe

8fd94a0d9730a5a696e1056495b28ef5ca118f94c92c18f6b757369bd3de5ada.exe

IMPHASH 4ea4df5d94204fc550be1874e1b77ea7
SHA256 8fd94a0d9730a5a696e1056495b28ef5ca118f94c92c18f6b757369bd3de5ada
MD5 fa0818e29653113c8fbfb4dea361e1e4
SHA1 f60675fddda599a476806cc9142761a30775c243
SHA512 5e3d970d7b612fbe9a4cd479cd10fd588d90899af26e206d6e7d2e66daaf181f65dcb6bbb35f6738c6bc337cb899b438af1fe6e1d580ab7ba617a84e9d7e20f4
SSDEEP 24576:N6MWueoFnMQYFK7ghQigf+Rlf8Cgki/BpC6T4WP:7moFnMQdkx9P1gL/lTpP
TLSH
T19605238239E04877D46B8233A9118E83A876ED1A4477554F36107D9ABFB22D19F0B7B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

cd:57:f5:3e:16:31:fb:ae:ee:63:64:a5:a9:e7:de:b7:09:30:d4:ac:bc:b0:2a:1a:15:fb:2c:ee:16:36:08:44

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Overcomplicating,OU=Snurpenotenes Bicyclical hangared\ ,O=Overcomplicating,L=Geisenheim,ST=Hessen,C=DE

Chains

Jul 31, 2026

CN=Overcomplicating,OU=Snurpenotenes Bicyclical hangared\ ,O=Overcomplicating,L=Geisenheim,ST=Hessen,C=DE

Minor OS version

0

Major OS version

4

Entry point

13238

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount CreateFileW GetFileSize MoveFileW SetFileAttributesW GetModuleFileNameW CopyFileW ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode WaitForSingleObject GetCurrentProcess CompareFileTime GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GetDiskFreeSpaceW lstrlenW lstrcpynW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/nsExec.dll

IMPHASH 0b75f1007d3cc8e457970ae3e3fd53c3
SHA256 7b51372117960e84d6f5eb3a26810cc044ff02283b3d656a0a456b0ab5cb8ea7
MD5 c5b9fe538654a5a259cf64c2455c5426
SHA1 db45505fa041af025de53a0580758f3694b9444a
SHA512 f0f8a5570c01b16e54f47502e867ffbaf162b44a847c0ffc8062d20e9492114229de5d9d2a836da256fd3f9fb493536bdbf148d5308695b16c0e98d20d8926aa
SSDEEP 96:xr7fhfKaGgchPzxK6bq+pKX6D8ZLidGgmkNL38:xxbGgGPzxeX6D8ZyGgmkN
TLSH
T185D1E8B932C10DF3D44D46743F22381717BDD476177542A1CB972AD61EA2AE2FE21B41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Crissa/strengningerne.jpg

SHA256 8f2c420841d0b5e651a13822b5f152d34a96d1ec13b3318aa38c090f5df7f049
MD5 1e8e928510ce2a4674cdc47665e9369e
SHA1 db7c101abd30c6ac5785caf0e168689393fd026b
SHA512 e81a0ca6bc36633fcf79e1f1627d65aff5c6da542a1434db703366899c95b2494abd41c3b81dfd7212cd2330447aa40292e904efc76d3b7a7023201d2387fc37
SSDEEP 384:TZIksbpFNRMEGoR68LW0WHXmbQegc7m1F2c0vgirWUe5vBF3:TZsVFIvoR6k1Sm32Mc0YIe5v
TLSH
T1F792F10922703991DFA7875299A62B7E758433987CD13FD91BB416EA9350BB204A70B0
MD5 SHA1 SHA512 SSDEEP TLSH

Crissa/umaua.jpg

SHA256 999a00ee3fa63797ab01882373c23bff618d66f1caeaaa0e031d55160190fecb
MD5 c1ed43eecf11c2f467f52217315f42ae
SHA1 e687264ba33a893cd56c642b205a5d532e8a8d07
SHA512 fa426decb4b60108958d585fa4ee1cab5ab27ef31c52ead54933e5871fd6bc03443ffb0b9e80e9f9d1ed7bbd5b661ad4f7631fa974207d4042d2b2cf894505b0
TLSH
T17421B627637672C0CF2346B2494A5972A1EF9CD23AA0263AED2094B0C750CF68408B58
MD5 SHA1 SHA512 TLSH

Crissa/vaginotome.ven

SHA256 c9efc32aad7bfdbf503ce3047c2cf25efe013588c5a73546bfc6291a154f597d
MD5 01b38fccc41289b31ce7020988486952
SHA1 61a00db7f7eda29354f784412a346e612c1f82cf
SHA512 f593f7520ab45b0986402a4956702394e8b6bffa8c738348751a7be38a88caa306845501c4572ed118776dc6433684758e98b3caa883b7c4e8079a4acb5e3a34
SSDEEP 3072:WcQf/ldkRixqormmbPldduYGzxPcboyfkrAneEr9UtTSH+H04:F
TLSH
T1FC650297E391EED1D9EB2F42762D8E5C38FB0795D9F269FBCD4131A2649B1A04050824
MD5 SHA1 SHA512 SSDEEP TLSH

Crissa/valensernes.ini

SHA256 3dc38e5514a36589548bfc4b26bf8baf2d4c0df169824666cdc78559369e24bc
MD5 07013fc24352cae166b28958acb1a5bb
SHA1 0a0059b9e0a291bf489a328a2467ac95ca39b76d
SHA512 b659ada60ade4e530a253df06619fd78619294aa92d85fcdb5b15916627f35584adbc69683c87326fff0a02416d84c1eb06b150f38f54fe345248dc68f2bbcfa
TLSH
T1ABF07590EC080B61180196FA6CE33A4D728DDB398BFA2307F4C0862BC40EE6DD323544
MD5 SHA1 SHA512 TLSH

Genindlsninger.jpg

SHA256 6215b66ca42c8cbc5d21f5f199e16c862ee6f1d22c2aba3122f0cd07a632fa06
MD5 863392d96af1e70affdde894efd1321c
SHA1 aedde0c826a6fd762096c5fec01a3cf011b65ac2
SHA512 4ac7d8295bd1606d6115d303ec793d377efa68f6bd045a3f065ce1c7492147dcf785d7877ec96ed4734ee3e39c7a978abd1b4f9209b103680954c68b71b4a537
SSDEEP 768:KH4v8ceMLaJIHCzDrfWUjrKdekjGno4TawOif0/4iTGNBPkJo8lc:KY0c5LaPfWUjSjGo4M4iskJBlc
TLSH
T11BF2F10528039D33BE1AF651123186277B70DA0EB9652F71B9A0CE8F4544DFFCC66E4A
MD5 SHA1 SHA512 SSDEEP TLSH

Pretangible.Kuv

SHA256 314383aea943ca5f5700c4071e830587fcb6a63b6e374b87c1b6f71376e1b55f
MD5 a44b8d7da3b00d8024e89ce4052e8ef3
SHA1 3a917dd7e85c772ad1b078ffb1f57deb92851a84
SHA512 388782448474dfedb2887a964cab4ba5dd2dcd494740243cd4278fd4b10eb284089a054673aedaf30fe756c002dbee998d9a7cb0064434500a50a855330dedbd
SSDEEP 768:Cmnp5dy0K7CK34zZjtAd3QY4VlMtsQI8Iy+7cYcxsTzkHzNBNw5t3:Cmp5dy0CoBad38xQIOEVY1E3
TLSH
T1EC338EFFB59075416AFC454E9E2283DC85936CBD1B6ED4384EA9C58B04B02F64F3A836
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/Grizzler.jpg

SHA256 73159829956ff52b5419540c57e28cf196a69ea6ee6bab8ed0241b2337c0b978
MD5 eba9b87431cfbfac3099d4b2825b631a
SHA1 2afaa60e3f1f66cf937312ad83fd0d3d2239db15
SHA512 5af5f6dea2ba1f000a3136967c12ad0fbd02ff6b199565c974c9eb6a868693a265c6d36a99ce775f391b59eb6d56134b42e3533006e8c11bebcbd16a0abc550f
SSDEEP 768:3ScN14dY/ba7AhyLUZ8wth76NUxBW39pdhZD1V9OiUFH/K3KOpwNJB93YQxMo+oB:3ScXyOachFRth76iwFzxOi4/K3KjNJLB
TLSH
T12523020810958D1797BD17096CAA170F8ED92AE86E0CAA3E28732F1ED4B3D76D50B706
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/Kapitalvrdiernes/Lagr/postcoital.txt

SHA256 6e361261669838574ea374775201050d79830853a85dc4de66110ea8fa42a3f0
MD5 dbe03e0edc083ffec2215b26ae833082
SHA1 be9227db787f91f78a03ce8547df0263b7b1109b
SHA512 b1ace1e72ae098dad8957cfdca90f8b41c4d289e892c49b1c12a7b03e694742adf5215fffc3d5e77a1235f24187b197533446554d602960288c1f8afac3549fd
TLSH
T18DF09630C0E4175652176357DF71E8EF9CB01498CB80B0A0B2C1C574C58102D06FE310
MD5 SHA1 SHA512 TLSH

Revisorforeningers/Kapitalvrdiernes/Lagr/rechain.jpg

SHA256 ebef42d91d65d66c1b71573c375712dda9be30ac2fd367427beb1089a13dbd1d
MD5 00a95622999eaaf27a4a989dea07a9d5
SHA1 1ff97bec23586b35af91e081156e74c2a751c8aa
SHA512 c92796bb39f6de988c1e0c036934380120826e115f5443ae888e2e8896c51c184a8818eb000ee02d11ba0e8f22a34956301e84b78f425338caf25b611f2e6966
SSDEEP 192:Lp/+8cuktGN2SsAAbExSQTxaV/XR9mmJ8RXpWL+fkhlYZVslOgYVj:V/WuktGOwSxn9mmJ8dpI+fMWZal0Vj
TLSH
T15722C0B7B30C06A363226EB095DD304193DA185C379F17706461E67A8981EF4B31DFB9
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/Kapitalvrdiernes/Lagr/solitrringe.txt

SHA256 1c9dab1a8353cfa8dc4a0fc56aa39623a9cc0e1af8d919e85a393e85022ede5e
MD5 9d155d4cca4ff0a79d44ffd12b75c663
SHA1 69fa0b08741c3ebd6c533aed8b3c7796fd15d30d
SHA512 47a56af0dba5c73f01d52cf8b20289e47edf0422f2121e4b57446654de1240877149d9b4bdeb2133913017bc7d9948bf14ae9215519cbace7de2ec6815df694a
TLSH
T1920110D5E85466355A8B27D379B102402AB8848B213106C66D91D788720C926E77E65D
MD5 SHA1 SHA512 TLSH

Revisorforeningers/Kapitalvrdiernes/intetknsord.wit

SHA256 4468b13eff52cc064805a4c7267ef49d929dfd9f0e24e8705f75eeeb4ff6dd55
MD5 ea9a4481062988f613d26b61a60e1543
SHA1 8c6f84469596f1bd9ac73713c055080aad2aeb44
SHA512 f19edbd63f66fb375a9eae1678ebec4004058a0f150a7dbd39a82189023577af61782739920e18e45655d956b54b85d22d94c9542b0a9612586a10b603fc0438
SSDEEP 192:JvRC9Q4KJlQnOZqqw/fTK4TiMNPsk/Xy3VNaN0a6X45XnJJl6sTFh2X1f4NIC7tg:HRsN9ogHF3IFlzuBlMccULSfo3Y
TLSH
T1894613BE07F502C80B1C6EEBE69C5CE7A18F07BBA10B65CA72B71D51E0A5D114311E8B
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/Kapitalvrdiernes/markedstallene.txt

SHA256 e3b7c042eb14f909f71f13cfc6c268c400da15f48d40127519a6c2c0f9b3f09a
MD5 568c928f3fcc750a46bb6cd890dc7481
SHA1 b0c95ce77a26763af42d0077f467fc5a557b6cc9
SHA512 5d08e8c49f00791693ab284bd5c7692ae44d7583188d483e4d798f74b6617d0acd96d1596e961f178ca0e6e6b7aa8809bf8dc12f3f36345b44222083e35e23a6
TLSH
T1B6D0EB0982464E27C68A24CD8D002C90200B88C04F0A065CC06B06BE7B21A40F3BEE2C
MD5 SHA1 SHA512 TLSH

Revisorforeningers/Kapitalvrdiernes/nvningeret.ini

SHA256 5deec60a0ffa6e4f254dfb5e9c3001b81b445d6c30eecfe6c515f902d5e2d4f6
MD5 2840ca54c89c13873f76687dc4b149f9
SHA1 c3ce20d2efde07a2c20b70bad23816f949fa67ef
SHA512 6f41b2addfe2091d1d0d7fd9305e42011ad9d502532f8b3fac3ea600b5fdd3311a84803612707d1c7fa59a698233a36ec9ca809ff4dab0b787c178167fed6f5a
TLSH
T155F005F5879D04181F87568476A51A41AFD7370A5435E5F5D45E171E6001E8CA6E1054
MD5 SHA1 SHA512 TLSH

Revisorforeningers/Ladningers83.ini

SHA256 ff3938f7574734e6c7e75bcea78e2222b1848220faba5ce8c90387cbfe66b939
MD5 bf15eccf6200f550e978e12a9768587a
SHA1 db61960395a44e921bb9f453499a7e95e3a5d9db
SHA512 f1de6e031e46122b1858cf19c6682f4a84c7f9e0c5f1e59e3b42549874dfa00b5906a6d5e87734caa1a89a8e07285eca004c2b20b50654fa83758c12262fa7ba
TLSH
T163F0D3A26A102B34C917728E786B90CE08FCC5574E0A657139F7561AA18D5FCD279145
MD5 SHA1 SHA512 TLSH

Revisorforeningers/Oiticica5.jpg

SHA256 89c0d16bfcfc43dcbcf01758613de3a0147b08bfc1da463d9b1e15b0f18af43d
MD5 ab945ea0beb67aa6f6bfef7cccc4fbea
SHA1 ba7010a72f89146c1d8f94cec1cf881a73e281cc
SHA512 66880cb4f3d4e96b341b70a64352738013acdf4ca3c4ba70fa843df83cdc0ed3ce73e2debc268b9cb6be72a376648c46d8973d52928126e44b593f2b9ae92eec
SSDEEP 384:v7GUsO6t2z5b9VihPCwxgjnaAiac+sm+3UWj7t694NJf3DEmFE8w8glPjs7GwmUf:v6Sptq9Vxgr7Vs294To2WKCPUvEB1GwE
TLSH
T1A4A2E1AC810580DBDF25D0AAE63813B4D08C25EB5116677818797D0EFDA7DF0AA0E7DD
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/Onza.jpg

SHA256 095099fa43c6810bce4d34997de41a8952fe9a888c3723421045a4d8d98ba78c
MD5 8d1a31772d356f28bf98eda704569201
SHA1 b91f63932d2149bb40bad31d5d56e5008ba4dffd
SHA512 4545ab2fef34d2fe037db060adb95dc6d613d25ef04efe50e43ea5d8dd5446017846f16f21926d334b80673f76ce9c8a7d2a326178e328db9533e32b1697ad56
SSDEEP 384:c9kIznB91ZJN8BZskDU7FaxrlQMJM4Lk2LZwYv:ciGZ4Ro2KE8wZw0
TLSH
T1A172D0C35F66CD01DB169A3DFE212923269C44B2E956DEB43B517792902CEF20E0C757
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/Unswaddle.txt

SHA256 9108f3d54650e80ada6d9d2576d77ce9dba2b8bc6298342deb9858cdc838f763
MD5 9011757dc82974f26c5f0d311b5f45e6
SHA1 62c3fd66b1f75e149c29121ecf2e1a04eaba3546
SHA512 59f81fac92951a83cbe99d8626c8fb998631293cceb2a1d9d6cca3d299e18f671b2a6f40ec11cf3187e2343effda015d6597dcab4976b3ec972aa4da9c169100
TLSH
T1B5F020919E04C8AD1D9CC3E75E36DE4F828C477120AD5D09A6912B79295E94D820E725
MD5 SHA1 SHA512 TLSH

Revisorforeningers/aflsserne.ini

SHA256 dae5523f197e8363a332ec3a68c9613339f31153422178572aba488199b91464
MD5 16a7415b3d668fca23fc79c99397cf5c
SHA1 b339346aa64657ca83bd461ec0f9f53eae62d44f
SHA512 65d1b1156fe6be6e9fc07b88d5a82a46e788ec047f0090acd723a7ee98b4d6a7fdfe0c45cf934e2997e81200fb718c78c75e30f496be61f0996a742f8350a8da
TLSH
T1EAF09E28C7271E8E0B6746BD6CE4029610355AA3CB138EBF715D0B181101749C69F519
MD5 SHA1 SHA512 TLSH

Revisorforeningers/fljtisterne.jpg

SHA256 03d547244afbef9c3034778f2cdf395bd31733730927a8ceabc287137d7d35c9
MD5 20732fe28e61a85ed4fe86417b106288
SHA1 233c1907692fcba9e8f74cb8a67542ef6765733f
SHA512 06c5b33e0e291c9c1f3fa60b0786be27ca2d2f54c824c8eaae519eec27685415de4c4512ad0733ca238378b6f64367e2cd5e0f8f91b58b3a4e9d1bd647e09d71
SSDEEP 768:4Iy67muUmMNbTA/m5oqlO0RLxaDWkiFl7YzYpMpWK5YG/mhk:407m5jVTA/m5oqI0RsWk6azl
TLSH
T17923F160DAD52B898B377DCE9C18E3603BA40B7C5BC700FC66198B69ED64EF45D588C4
MD5 SHA1 SHA512 SSDEEP TLSH

Revisorforeningers/glemt.ini

SHA256 66a61c47df63b679aa9361a0d62533727e4d654d15519a176af0e5fa85f8f3b7
MD5 6c7dbf42fafde1a6948a3c8296c7d4f2
SHA1 41f17253226b30063ad38786be26d585388732fd
SHA512 e8ac1971d4ad4d49fec0cd9ba3bff8e0297bcf920523376d23d66c16d7958a4ae1d0b698def6c1d7429cfada3d62d17351f9cd770487b05e0db2a38b7b9d4c42
TLSH
T14FE0C083894B805753EB984E7E825922A9CF6242EF1E91C8E6683F0501084DDC21C1A9
MD5 SHA1 SHA512 TLSH

Terminational.gen

SHA256 efd76a1da68d117d785dd4080397a152b023b24c081924eca8d287ad88205a6a
MD5 32ae5f88a942203bb20899aa033cb767
SHA1 0545b4bcc2962a8ad5a4116c18ea5e3a5805eed8
SHA512 8cc540a2b3023c9c9c654c5811762cdc178c10d17e9d7c67affd3636e06f4350d7cf6ab1a3ef15804a8a9f09c225f74b638f5c022ba882c65bd5ac236b17dfef
SSDEEP 12288:aSv/yHhiAewt8tAufoICndLYbfMQP57YofR:aIAewt8mugdLYbfHPus
TLSH
T19E9401C75BC34E88CC082A75735A98CC1A25F3C5D9EE6FAB939E35E33B0515B19C9809
MD5 SHA1 SHA512 SSDEEP TLSH

8fd94a0d9730a5a696e1056495b28ef5ca118f94c92c18f6b757369bd3de5ada.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

Crissa/strengningerne.jpg

Crissa/umaua.jpg

Crissa/vaginotome.ven

Crissa/valensernes.ini

Genindlsninger.jpg

Pretangible.Kuv

Revisorforeningers/Grizzler.jpg

Revisorforeningers/Kapitalvrdiernes/Lagr/postcoital.txt

Revisorforeningers/Kapitalvrdiernes/Lagr/rechain.jpg

Revisorforeningers/Kapitalvrdiernes/Lagr/solitrringe.txt

Revisorforeningers/Kapitalvrdiernes/intetknsord.wit

Revisorforeningers/Kapitalvrdiernes/markedstallene.txt

Revisorforeningers/Kapitalvrdiernes/nvningeret.ini

Revisorforeningers/Ladningers83.ini

Revisorforeningers/Oiticica5.jpg

Revisorforeningers/Onza.jpg

Revisorforeningers/Unswaddle.txt

Revisorforeningers/aflsserne.ini

Revisorforeningers/fljtisterne.jpg

Revisorforeningers/glemt.ini

Terminational.gen

Sharing

General

Malware Config

Signatures

File Explorer

8fd94a0d9730a5a696e1056495b28ef5ca118f94c92c18f6b757369bd3de5ada.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/nsExec.dll

kernel32

user32

advapi32

generic

Crissa/strengningerne.jpg

Crissa/umaua.jpg

Crissa/vaginotome.ven

Crissa/valensernes.ini

Genindlsninger.jpg

Pretangible.Kuv

Revisorforeningers/Grizzler.jpg

Revisorforeningers/Kapitalvrdiernes/Lagr/postcoital.txt

Revisorforeningers/Kapitalvrdiernes/Lagr/rechain.jpg

Revisorforeningers/Kapitalvrdiernes/Lagr/solitrringe.txt

Revisorforeningers/Kapitalvrdiernes/intetknsord.wit

Revisorforeningers/Kapitalvrdiernes/markedstallene.txt

Revisorforeningers/Kapitalvrdiernes/nvningeret.ini

Revisorforeningers/Ladningers83.ini

Revisorforeningers/Oiticica5.jpg

Revisorforeningers/Onza.jpg

Revisorforeningers/Unswaddle.txt

Revisorforeningers/aflsserne.ini

Revisorforeningers/fljtisterne.jpg

Revisorforeningers/glemt.ini

Terminational.gen