88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d[.]exe

resource
88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d.exe

88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d
MD5 ee9064c9429ce71f8840108fd27efcde
SHA1 20307672fd0b0f40ad0e6d035445b395578abfae
SHA512 fef7fa31a45dfd22ea2bac537f6f97373688698e1d1c7601cbe5e6646def952eb5f5f90302e127c87ce0aaa152f8700c312dc2ca859b329d8d49a4824c145f0d
SSDEEP 24576:7fYuPz30Oo2mDqFscQFAEIoOf7JGpbtg2:jPokeAE9OzUrg2
TLSH
T1AD05DF3EAE93F421EB98C578BD18FE8D1D10C9C407BC1B5E97B16A2938A5E41B40F16D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

3a:a6:c6:3e:f2:11:3f:d8:a6:9f:eb:d9:fd:8b:49:9f:da:b2:74:0f:bc:16:28:92:fd:35:7c:3c:21:45:49:ab

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Friederichs,O=Friederichs,L=Kirkby la Thorpe,ST=England,C=GB,1.2.840.113549.1.9.1=#0c2042796767656b6c6f6473657240416e64656e6772616473666f7262726e2e5061

Chains

Aug 6, 2026

CN=Friederichs,O=Friederichs,L=Kirkby la Thorpe,ST=England,C=GB,1.2.840.113549.1.9.1=#0c2042796767656b6c6f6473657240416e64656e6772616473666f7262726e2e5061

PE Signature issue

Digest

19:a6:87:ad:08:9f:d7:a3:fa:44:83:3e:c7:23:22:d0:15:c8:88:9b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Friederichs,O=Friederichs,L=Kirkby la Thorpe,ST=England,C=GB,1.2.840.113549.1.9.1=#0c2042796767656b6c6f6473657240416e64656e6772616473666f7262726e2e5061

Chains

Aug 6, 2026

CN=Friederichs,O=Friederichs,L=Kirkby la Thorpe,ST=England,C=GB,1.2.840.113549.1.9.1=#0c2042796767656b6c6f6473657240416e64656e6772616473666f7262726e2e5061

Minor OS version

0

Major OS version

4

Entry point

13650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Fideistic.ini

SHA256 cbf06545d23440d7366f2f6d82996c67988f021349c67e96a814313b815ddafe
MD5 6879f19077b0443fe3df5603d042a3ff
SHA1 d30e16273abdb7e473c4d810e658d6fc75e536e3
SHA512 aa169a82fe4aa24a28c68158dee8c7fa9592b805e618052974a275912765a3355e22bc31f9cae061d73ecc44efc648f71c76ddd92d706cdc0092f5c252c80fb9
TLSH
T142F02675E40C1C2D1D03C2C7019F88439174B42E5E300029F1E7571C925FACD8BD746C
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/Synkrocyklotroner/pseudopode.ini

SHA256 0390c92b8cf2e80fb16d61408465883b4a9343acd899fdfdefc5912f9dddc12e
MD5 c061f9cc4b28b383707b7e97fdcbfc83
SHA1 eb8ccd99fb4b15844bf4202483a68cbbb9d13981
SHA512 5072e629c2e73dbfc7a1b67a350a65490f3a9ac60dc23b19cd562d1e8a0ee14ea021ae0e91d9849330eaf212c9e5b10e315df567d4fe3dc6fa6a7e19a6b074c7
TLSH
T179F062B0C935C9644FB6A20AF6530516CA7C4E07A15736F2B8D4434A4605BCCA1A7A9E
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/Synkrocyklotroner/transudes.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/bipenniform.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/collates.txt

SHA256 b9e549099b1db357f29930f07ba0844c2e6241025133276ddb133bc6923a2bd3
MD5 6f9b0c75fa794590d6defffd656a698a
SHA1 7025aa591c40a5d014e33b89e5d4e78667d0a81f
SHA512 e1ca5ee4d6e02fd286409745b29d0c9b27440489ae35e084d66db470cf9435f6ee495296c04422b7c4155cf282ee193fdd720aa33d1cb631209a31a6338773c4
TLSH
T1AAF075683DE21026162F01F8FCE7061F3068536C6568B696E5C2CBBC228274DC23DB7D
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/kommunevalgenes.txt

SHA256 8b87ff6f7e8ecdf3f57b51d3539a1f6fa70489dba9444efe525ac90158458986
MD5 25dab045267f3e0a989f5d97b8957cc6
SHA1 e8a72984aa2385844858f4bf4b6cca1c36a9924b
SHA512 e18372164598500360faecfddef94e06ed89f32e446f154f0e3ae4f3d4d847373b7c827417a44a5ca2543ebee233de57632709c70065c8441dd923695731bec5
TLSH
T15AF00560CD00AE7F0D6A446BFE4A4F530997C104853A594D7AC1C74538510DC85BF765
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/letfrdighedernes.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/pensionskasse.txt

SHA256 71c2c1d1e9dca1e2211c724789761d04542bb16007ab40a0775dc2d6069290de
MD5 aa8d9a7a394497b3b162347d4d94a7db
SHA1 608c5b6fef074f1eff076105f1bb96a667c2ca45
SHA512 297158f003ed5ed50218e0dabc17629024e651b6c65af24bbacb38ee62dcf0eba3036802af328ede6dc194b2921c0c98a452fa153b377c4d21793606bf74218c
TLSH
T13FE0232C887F031D4B4A5704FD2A4495552845C4D023139B3A931F645534098F747C1F
MD5 SHA1 SHA512 TLSH

Gennemarbejdningerne/pjalters.met

SHA256 0d96c179e8115645bdf9c9dcd1c20ad42109b1bf91e281e9e5dd90b10e10a114
MD5 f9afe5ac014b5ddf0b464c85d02d283d
SHA1 dd37d447492d3eb12b080f36d5d601609b632c1f
SHA512 9dc9a8e52953c56a57477457316fbc9411999d9420e7dbc1a2fb2585f06df9d6286308bff1bf24a0f9f6d0e47709d9b816779c39fc06b2575cf873a7dfc444a3
SSDEEP 12288:5Cfv9K2Pil+nJyJTD6gjueWY8ybuh4n9ffkljQbuPxTugi1BST1TCmyK8NDnHbdi:5Cfv9K2Pil+nJyJTD6gjueWY8ybuh4nW
TLSH
T12DA412BD6864832ABF45CAD22823C98032F958EF657935D307F9005D76A79F09D92DF0
MD5 SHA1 SHA512 SSDEEP TLSH

Rabaldermdernes/Eneboerskers/agglomeratets.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Rabaldermdernes/Eneboerskers/badehusenes.bih

SHA256 05d7309de60bc153a3709cb6b64be9d2901412a95e74136548b5610198b1eb93
MD5 b0fb4a8d920068765529d995753b200f
SHA1 31b1342270ba6489046ce478bf36ffea9d72a81d
SHA512 d076d02c5c5b37d21ba3b198c4fd1b256f8f71524433a841ed3202056162f889005564a3cfc42bc325cc13db3e3d097e548261c341daa3afb156763e25514984
SSDEEP 768:PnzBjpWX5RMwgDah9rXDZpfaHsmKSWyajHhon2VF+teJr:1GwwgMrrHjEep
TLSH
T17493E170BF3B7219CC968E054121600F9A3697798859DB6E765E30278238B650F63F36
MD5 SHA1 SHA512 SSDEEP TLSH

Rabaldermdernes/Eneboerskers/betingelsesstningens.txt

SHA256 78d13e7227960dd16096c78c46f7aeb3d25388e0b867e5a33c5676bae3ed92cd
MD5 91d6328ed60b4e4e660b5888199479e1
SHA1 c8d3bed5674983b91cecd557590e1964029e5724
SHA512 8c20e4239c4602d07e94918fcdae97cd8002a095f37a5c838fc08df3815253704907343c51e0281d9564fdcd20050aa746d3b5a6fc3947670562e3eaf82dd581
TLSH
T1090144808978164E9EFA2338BD233A72533409244135DC2E44DD4688141744CF3FEE4B
MD5 SHA1 SHA512 TLSH

Rabaldermdernes/Politistyrken.ini

SHA256 05e7674b563b0aa286e0d9edf65bb81ff5397537b736c5635a2047f86fa1bca2
MD5 407f4e6c3506ce7bd99d42d229e41a68
SHA1 9d36256c9fa9f118f09408fa2735cf2f3b6fc173
SHA512 3554a5a98541e2e965ab9ba3aa98c15ffcdc962aa98178db409db023eb2869cdccdd4917cc387644d29b5775719fc4be9946bbe12e5141440a599beb704c8999
TLSH
T1BCF041689DB01B0F8F5626B37C80304059E006C4E32242ADAB5E065C0B0BBDEDA6C81F
MD5 SHA1 SHA512 TLSH

Rabaldermdernes/Witchcraft.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Undvrligst130.Gul

SHA256 1c739a595448826a25d50af246010dbb70fd6a78c5af3316509ff2073e5cad2c
MD5 63d3e9e12462b3b7ad4ca8835d3d08bd
SHA1 d9aa8a0fad0c4c9eeb030e4da83b37aae9ae132b
SHA512 8e5e65554e94703b893dcbc210d4d5c0949059eeb0a0e41ec3b16ffc746d5571b74d102c68c286670a2523447c1f9c2cb1a47c3088865bfe9752d744a9578274
SSDEEP 1536:NVi4bqCaM+oZ8nqA3w4mmzuI3gBxNFBD1ed:7izpoZ+5m1CgBDFBD1ed
TLSH
T16A43E114AB6E060D8A4111DD56408F922EC98DBC95F6C0736B1F767B32C845C5EBEFE8
MD5 SHA1 SHA512 SSDEEP TLSH

prisniveaus.Kas

SHA256 c2ea74b43398f0001131401a191cbfc37b26c295b532b36b321550ee52e3235c
MD5 9281ab54ad5e8f29c9c398a8f991189e
SHA1 96eaa949d65066bce7350a42ba3a935d720dfaa5
SHA512 7ea3b63903d58052cab99c58dd55dc9e85a65fffee14eb589decbcba0315a920e895a762a95f37f64d2ce7c1589eb3da453950ec4cbcdfd4f8b49ce7be12abaa
SSDEEP 6144:MDVxnZXZ4H1Dn2xQUu1XgKNDLfNZ5aDZiyQO8r1itwQx/CkfUnlB7dJZq:UFa1Q3KNDLfNGAROtpdPfYdJZq
TLSH
T129A4F15E7C4AA593C3F42772A4697F4CC624662AC3300C392B1DE05DB59793BDB2BCA4
MD5 SHA1 SHA512 SSDEEP TLSH

reproarbejder/Gelded173.ari

SHA256 8d2f0e5d660efb9c00e93c5f752dadab47edadc0639856ee0cd7128bd733aefd
MD5 6285f575839aad752468881c25149e47
SHA1 4437d4fefd985ce75690211bc5a771fa3943172a
SHA512 e4909eae8528020167fba97f4256045cd45cb4fcaca4dd90ddcce327acb8cdad4ac61cf2ad38daa2fc19028e51f7ae23b096f2f8f2ef4be4cde40a632582295e
SSDEEP 768:be57o9tUH1PBrGFKsHqpNb5seU4V+92a9ei2IHGXv+tDPRg2Up9ZWKfEp4kfhLaF:CPTUqIpBZajuV89DLioHHpq8BlJ
TLSH
T165641246CF23F03B39E9BD1A2DB7D1B4B8307994783A9C47915382B4B2D6C421365B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

88287f70307150fc1f469bf08e49dee581cdce1900dcf477a08d010e90fef57d.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

Fideistic.ini

Gennemarbejdningerne/Synkrocyklotroner/pseudopode.ini

Gennemarbejdningerne/Synkrocyklotroner/transudes.jpg

Gennemarbejdningerne/bipenniform.jpg

Gennemarbejdningerne/collates.txt

Gennemarbejdningerne/kommunevalgenes.txt

Gennemarbejdningerne/letfrdighedernes.jpg

Gennemarbejdningerne/pensionskasse.txt

Gennemarbejdningerne/pjalters.met

Rabaldermdernes/Eneboerskers/agglomeratets.jpg

Rabaldermdernes/Eneboerskers/badehusenes.bih

Rabaldermdernes/Eneboerskers/betingelsesstningens.txt

Rabaldermdernes/Politistyrken.ini

Rabaldermdernes/Witchcraft.jpg

Undvrligst130.Gul

prisniveaus.Kas

reproarbejder/Gelded173.ari