8f1da96e55e6f50d07fb3dc64c12047697ae9128e63d4dbae80c14646d96e192[.]exe

resource
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll

resource
8f1da96e55e6f50d07fb3dc64c12047697ae9128e63d4dbae80c14646d96e192.exe

8f1da96e55e6f50d07fb3dc64c12047697ae9128e63d4dbae80c14646d96e192.exe

IMPHASH b34f154ec913d2d2c435cbd644e91687
SHA256 8f1da96e55e6f50d07fb3dc64c12047697ae9128e63d4dbae80c14646d96e192
MD5 250c8f4f3495c1b05572a48915224aae
SHA1 94ab3db1927d7109f77e1b6c218f9cef5c8da4b0
SHA512 759778a0d450e261aa2b3e9c31c8e3ef66edd3e92d1199c0724ff0790a85e9b9373c112f5ba87b36756d4a96f0eeab8d2095117d36834443f69a1e3bd0c021c8
SSDEEP 24576:gN+O0nv35b7oMXiJ964/NOjzuHG91mRKvZUR:goO0v35b0MXm9RwpXSR
TLSH
T1CA152391A354EB73C4CA6535EC2F87FB9A0D5E11D4B85B0F2680FE08783530B996A3E1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e1:95:f1:44:bc:c0:e1:12:a5:32:a6:fe:58:60:70:b6:c3:48:f6:33:5c:f7:32:e5:98:57:60:1e:92:ff:da:24

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Handelsgartneren,OU=digitalissene Ndudgangs\ ,O=Handelsgartneren,C=FR

Chains

Aug 6, 2026

CN=Handelsgartneren,OU=digitalissene Ndudgangs\ ,O=Handelsgartneren,C=FR

PE Signature issue

Digest

39:de:63:7d:0f:6e:02:b4:a6:b0:62:2d:11:61:e9:14:90:5e:5d:54

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Handelsgartneren,OU=digitalissene Ndudgangs\ ,O=Handelsgartneren,C=FR

Chains

Aug 6, 2026

CN=Handelsgartneren,OU=digitalissene Ndudgangs\ ,O=Handelsgartneren,C=FR

Minor OS version

0

Major OS version

4

Entry point

13171

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEnvironmentVariableW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW SetCurrentDirectoryW GetFileAttributesW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW GetDiskFreeSpaceW ExitProcess GetShortPathNameW CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject lstrcmpiW MoveFileW GetFullPathNameW SetFileTime SearchPathW CompareFileTime lstrcmpW CloseHandle ExpandEnvironmentStringsW GlobalFree GlobalLock GlobalUnlock GlobalAlloc FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose lstrlenA MulDiv MultiByteToWideChar WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW EnableMenuItem IsWindowEnabled SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard ScreenToClient GetWindowRect GetDlgItem GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow GetDC SetTimer SetWindowTextW LoadImageW SetForegroundWindow ShowWindow IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint CreateDialogParamW SendMessageTimeoutW wsprintfW PostQuitMessage

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation ShellExecuteExW SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW

advapi32

AdjustTokenPrivileges RegCreateKeyExW RegOpenKeyExW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW RegEnumValueW RegDeleteKeyW RegDeleteValueW RegCloseKey RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/LangDLL.dll

IMPHASH 3e8d18bb71c7ebbda2ddc2a4bb03547b
SHA256 5bee24fef5c0f643adc7ee02ccb6e80a72a4eb30d9d326023ac03f0ffbc4e624
MD5 376c1b784a3cca9d10ba4ca5d8cb55d2
SHA1 ad12f8ebab5b4b58eb7d5368469e82e2442b089f
SHA512 6f02f0d878c228de114dee6b0df85152745b43893a252b2e9c309ba943ea56ab1ee678e42d9b0a89162e2bda627d396c2933c02e1c42d0169ac6e05ff3af4bbb
SSDEEP 48:S46+/pTKYKxbWsptIpBtWZ0iV8jAWiAJCvxft2O2B8mzofjLl:zfuPbOBtWZBV8jAWiAJCdv2CmmL
TLSH
T160C18374B3C248B9C491513768A733D36612AE746784600F9B6711AA38209E7AD3EBC3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5439

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 f004c568d305cd95edbd704166fcd2849d395b595dff814bcc2012693527ac37
MD5 8b3830b9dbf87f84ddd3b26645fed3a0
SHA1 223bef1f19e644a610a0877d01eadc9e28299509
SHA512 d13cfd98db5ca8dc9c15723eee0e7454975078a776bce26247228be4603a0217e166058ebadc68090afe988862b7514cb8cb84de13b3de35737412a6f0a8ac03
SSDEEP 192:ex24sihno00Wfl97nH6BenXwWobpWBTtvShJ5omi7dJWjOlESlS:h8QIl972eXqlWBFSt273YOlEz
TLSH
T10D325D06235081F3E1914138846B3E175B7A15069BF58E97DFD38646BE30BE7BD79503
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10178

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Comid187.spr

SHA256 d4fca48d6f1947ea56eef40504bf882d02530d341df68efdcb8eda494300853f
MD5 b8749f3ad12a7890cd32e05d8609e9ca
SHA1 504bcfcaa195cba97dfb57c871d95e8e66a4db21
SHA512 20f804d9a8a83b71f531c705e62e885db51519dadff9bcc4c8bf3f6cf04783893a6b0cbf4fd4fa4487db02193fd3297eb21089727cfad505cee5ceb1a13a337b
SSDEEP 192:ThvyBQVMbXzf6RovqwkS1sPhT4pAvds6zcEsHeQElYEseruDjhJT+M2mK5J78haz:mQakJPuEJcEgulxseCJ5eX7oStT
TLSH
T12A15F170147782AB34453B280AD24B167DA07D2FB5810A28A09F71D32FF528F7B893CB
MD5 SHA1 SHA512 SSDEEP TLSH

Delggendes.bid

SHA256 dc4a0c1b7d90c6102e1627891b353fbb275d204a872713861e47f5afcdc14da6
MD5 709e3d26bfa17c2e648dabc19c19e1f0
SHA1 4c2ea6222d088937cc83116bc3a0b83f033fa617
SHA512 c20f5aaa7eb28eebc3855feed914959673f8613722cfb08855be4443af4ccb38e6bb6a305dde048246126051161274fc9ce77e722832ed0be1a3d41f4aa37982
SSDEEP 384:+9b848Xfa16qJU1cpv/usPxnvFCIEVv+77Qujzm0HGQ:+Z8pCHJ9pvWsvFxm+77be0HGQ
TLSH
T1A244AF2144343182596E860C2F653BE34D0E8514F7CB64DEB14D716BCF582574CDF9AE
MD5 SHA1 SHA512 SSDEEP TLSH

Knnest.Gen

SHA256 40e0c2baf5b9c2e26018d1b3d7a6f7061a5a0e8b99c0ea50ff1676453cbe0514
MD5 4908c28c92cd946063c37c4c8ab55f65
SHA1 702aea67b53246a61f286ffcbe0bfc77204e7e58
SHA512 641763b60675a0c78fd0cd93b7e1203f00c0a9f0c6d0e4ee0a35385a5fd66745f0d5ae1d9a6431c62105e199b08c7c82d36efd9dda777eeb870e5065a6aed268
SSDEEP 3072:UPAnwtN69a/uZ4CEITf1/InB0PwbctuV6ZMpvzObcOjWpyaqoOIFUaxFi2NVQK/W:Y5r69aGFEID1/InBigc9ZaGxICiDviKW
TLSH
T14D44F103E09D56B2E0F45EB21CC95EA64A59E4EA120874BCF7D29C664F4F33C61B50A7
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Delmetallet.jpg

SHA256 5e46ebdce36a9aaa7cf2a16ad7bbb33ff1cca3365e0b9bc32d2aa82b0b60afae
MD5 4df91cd7a15bef084e1d2cfed91c0f42
SHA1 8110fcd72b261424c0886769825374083a87f715
SHA512 a1de9c626584d63c8cc3bfa0322266bfe3f833d88a0db949220b6e071759c809e34ada21e7511bdc7fb4d21dea01cd186822d052d1eaffbf33b36d11c039cb71
TLSH
T104717D0EE9067124AF2974B3A25751A264D72CC2AABCA3363C627DB41738DF34B4080A
MD5 SHA1 SHA512 TLSH

Skamferinger/Dgninstitutionerne.por

SHA256 deba738dbb4770250bf12874415aa062063dc04ca91c8d9135a0dc965b6100ec
MD5 a3cb8651d50c4757730a8055e6af30a5
SHA1 a882d74ced2b3e8a34fb9e6b443b42c952a260ce
SHA512 690d547ad1c0d2cccf30960ee958348219199f33c49cbcbd17f9824384ee2a4bca07458d55f61f2a1b68d09e072a823845dc3e1bef43ff8dcd2327780ad137e4
SSDEEP 12:pwewLjyKwFBdR4xpC9sQ9xAkCvo1g/PiwfM/YpXTmojnjFbvrA:y7LWKk4Ks4CvoWKaM/YpjmcjpjA
TLSH
T1A932F86B69ABA925F181C94229E608B63AA55A43309ACDBF2240C00D3926302000D113
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Dksmands.lim

SHA256 e085f444816705e2e8ecf7631ce0416c759276fe6e500c09516208d27b505ca2
MD5 b4acabe83b36a15533d5a81b1b753b9b
SHA1 d06d2e199edef3373b9a8b72920875f6f03673fd
SHA512 6ecbf7023d1f8fd37e0e19ea2735fe9bbc4ac6548916979160f052a8afb68d1145518c2b2ac7791f7f4d95f7f2eeafe5a6ef630d02f8263bf686fd9edc614356
SSDEEP 384:ZJ58xdLBDuMNDFAulCnhbzsBCF8aSUnTeVjoncbORIwo6/WwfE60JeT4mUg0t:vaxdprABnNABAeFon51z10TmUL
TLSH
T1C594CFADD6A443D895CA75E4CC640309F0B20445E94EFD1D704E38296D497F391B35EF
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Finansieringsselskabets.rhe

SHA256 0eca0bf96ba1a51eb6d675c3ace270499130aa4254c88516a120273617e96961
MD5 2fd21b1ddbff170bf9a927e5a73d9c73
SHA1 0637fb4417a5e00f76df23a34d8f10a6d2c5afc9
SHA512 2d7ca11f679b45fbd3e4b58816532b65dbe404ab3a7a19cac20323afe01ff7dbb0e2b1cdaded2a406dcad5e70bc9c2702e4db238c2a3a94a97266510741e87a3
SSDEEP 96:zgImTfq4uP+KoVmbj+FdGi5ceXEayMK9ccHbcPZjDqu9sMk4HwOZTLUvw:VoS/aQZ3yX5Sw
TLSH
T125449D4FB8F1B573BC0D57105904A4AF9709782663EC7F6262796B006846CBDE60C8B9
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Forsikringsaftalelov117.tan

SHA256 1287cbb3fd262c1fd9e2d65159de91f954b6ccaf99f4e7972505297dc0a700d5
MD5 72dda81e42de27d4b4e9725b7cb5da0a
SHA1 c3f7a8202919d4a49a2c882a8c11752897087ca1
SHA512 c747a26fb3313495d9d553180674ce4bef2638236a2f30a6d2ac0d1dc5cb7775ecaa35d234730d99f97de915f41a60a65a1e22c636385f093b00423022206c43
SSDEEP 1536:WIwal393s5GW2T4DcbL1eBQe446rgKL9FLykSpHDc:v
TLSH
T1A1F4F12EF0E17EC2F85A5E06953929C6201493A4C4751128A697CFF9D2D7F79C19C4CC
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/Unfledgedness/skalkningerne.fre

SHA256 5f050ebe4618399fefa2b6997f77277999a504c8b35a8d15d1ce50520863a8ac
MD5 7b0c35ad53ebe2f2763fc9c2a8de4904
SHA1 8724babdb920ab460eee486d4998c23321fdd893
SHA512 7a260e9e7c2ec52e199b2adf34dd5bc816d92e1279c1f859b6bd92eef7a316d6829249a8f314cabd53d75e63ed506d14a2ee8c2fda21b7c1ecd276ed33d89136
SSDEEP 384:HXPq6xH08dSoJdk+ZrIt1iPlAGqpPLbGc3dEiiYMh4p/uHKhITz/3wX7HRC1iclz:/Pzd3hGZOg5i06ef7np9GdAEzPyk
TLSH
T16415F1C3B8C07E84FDB27600196B2A716A3F701B4DFF589E99016013F8AB650BB9E705
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/Unfledgedness/spidsnset.jpg

SHA256 008d3c452e82688b108186c4fbcdd6ffe78cb8b024ec233543894cf20a3590a8
MD5 4b4813d9f9e3e9d634c971fe7ce51f3b
SHA1 40e8f76bb090a06d7b5896574ddb373f79917853
SHA512 2dff054c6f677d8d93586fb32146f4397769890d9e7795dd21a51d3b3d516d80d91c91d6138c6533cfecf019e35d5131a632436ed7082735a7f6bbbf194b4147
TLSH
T167512B923E4B5920CF6610FF1D1223D2428E76E57A9191758A594734F820CF4899F78F
MD5 SHA1 SHA512 TLSH

Skamferinger/Waxer/Eskorter/Unfledgedness/trifocals.ton

SHA256 ac0e7bd2566d66e67d508bd5e743a19d2359e34ab58f5f71f26a36b4bbf9d4aa
MD5 11f49954e9128fc5f0189750489cf709
SHA1 b6a871b0ea3cec37943f66dd36f1d5e28d0aa0b6
SHA512 925e93113212137424903169511ef13bdd80374ed76651d1148bd4ac54161312be06232f7af3d3cb9bd4616df2e9f557ba2d16bf091bae8ef06f6ff3b9a5f492
SSDEEP 192:OoY/XhoOgbOHvmYQqMLtfe37RvbexDt487gsMbtX3mkXZ5vQUKTLBBiHcbbAffMh:7GXuOpmYQqcf8cptKxpUI8bg8T
TLSH
T1E0B4D080FDBA866D84805746610A465FEF49B6BFFA4697F0121CFE60D3ADC9C092938C
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/Unfledgedness/uansvarlighedens.pat

SHA256 037f3290acb153cb62f227bdc7cbcbb11acb0e1024862722f1122bb80ef913d4
MD5 efbb1c7739591c02e16c86cbca2c981d
SHA1 f3e132d4a1c1277535ff5fe3533bab69e04986b5
SHA512 b325838c912dd17c7ee075ca99858cdb96934d3dca0c68f35a05d404a62928d56c05a7b045695b5cfaf2ef6a7d53ec11166b6d1e73441bdc43f629140657cb2c
SSDEEP 384:lpjVXFaRyjHuAcf5dUGlMmK3ey5yQsA6gGpCzOH+tqOWaLJtzfN/:HJERyj2fcM6whhFH+tCaFtR
TLSH
T19C64CF62B0E6374542FF272A11D95529E509B5C25C39DDC7AD623880E3043641EF6BC6
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/Unfledgedness/uimodtageligheden.hur

SHA256 8e7933106599cffde5a3039674d0bced2a0e3cb987f46647849efb425232c6fd
MD5 22330b2b2940ba543d127609f1d7fc4c
SHA1 0d6770c51711d4aaf8187a8ad2414b60df055ebe
SHA512 769a6358493ae91eff310ef5b58d7cba60ff3c2665bc99b305bd8c80916de67deed7f8c257e2cf5e2d27e392a883c5763cf2b9d1e93873497c9d77c0a31df6e6
SSDEEP 384:k8vfacfv9wDN08kG82+ozitgDvI6pwWgjZwg:3M5y
TLSH
T10905E1C94113ADB08DA93DCFD46723A95DCB1268CE49C7899C3E5E8F208F35F6999221
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/aplacental.sle

SHA256 3618b13fd177cee251405cafad72f35f2adaeaa94bb7f5d815312757daa07d92
MD5 ffffa2cb11211fe0b9b19c01d15c144d
SHA1 71d3ed4aef5ad225b89a6c7ddb9c1b196423d964
SHA512 636e3cec096e1114ebdb463fc52c7496984ec98ac5d8c54146b61f61e0feabdf87375545c70e1b93ba8f517747cff8ff829f126a680909d29e8ca35872af0b14
SSDEEP 192:EOybW5xT7+piz+g32fouu3lUf/5/ewuoAdQjvropl7hWZsJjyz5/cJWipD3+zVZZ:HASloRWO72XHcivVq
TLSH
T157C4C0810CBAA365B6A5E0FB7BA9D706DB01359C43D140445F312D5A18DD3BBF34E12B
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/bjergbestigeren.lan

SHA256 8159ea03475c1b03065138f1d63dca505ec571f98ca71b28af2faeb369b7d62e
MD5 a8d5d202e9a2516e8226a0e092f83d23
SHA1 7e53a965f42fe9d631be377cc191a3bf0273fdd1
SHA512 9855de63d0d2370bde72fd56c6ac73e969642e613cbffc88bada5f4250abcb0c2bd50068172a3c1f5a0685055d09572e5775213c423f5268269e13510098f4dc
SSDEEP 48:VOq7jgIZlUECHRpJQlIcoUN50xt0Gy/O1Ebitwe7OKbhQgstV/mZ0HHWSsjg8J4F:KzDHpUitVfDtFPa5V/vgjg5o0
TLSH
T1DC734C1790CD7D5399002F297BB6D73D95622163901431B0C478CE8E115DA4DBDB14DE
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/burrower.rol

SHA256 a66a188bd76e551e4ab0f32e67a81be87f9722a72b12521338ebf4f687e70624
MD5 3ef6b74eb39b70f20f482af9644b158e
SHA1 f58cdb847b403138f36a9641eff5f50013b17c7a
SHA512 b30570e54481d73aa30515b9bef06cb1f281c21f6401419d968513c3cf95982602b3fc9351862ed96a5dffa65c37399dbd567b62b9df0dac45cfaa188e6707e4
SSDEEP 48:xb6YB+7ZNiNxbHUIepfozt8ei/yPpLDSr2zNjLZvug1:xH0WNLiwSfyPPBAg1
TLSH
T16B833BF650304EC5EF4523621D7429CE45F32C18E23FBA2CFA6057D668B33973AA5020
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/checked.jpg

SHA256 22dfa7d90996ce8c9f8d7463528e6b353efbe442f24dec3b01928da79a4e3cdf
MD5 97afbba71d099a6b560fcf4f82c93f7d
SHA1 c12c888355ac4ddf2efa6bd37d2f09f5851ce808
SHA512 e6082fa7ad7ef3055cd915831019f69d2b93f64aef3e0b23c7995d8e3df1f7a242275e2c4c688f91e5138f34d92a8485a182c1bc29d4fa0815428131e445f873
SSDEEP 768:4EsZFaRrw3O/8YWcYXHyNT36HfQRixQt2vi75nuNhEVUUtZm:4EsZe78EQ836/QR0Qtm
TLSH
T1A1E2E261165A61417B53B193F79E2DCEEA138F2CCE1E24F797C97F1B1468D60B88408B
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/chrysanthemin.wor

SHA256 cef6882bc2f66ea1473a4d33238c5ca536f2c0daf43b0eaf4e9ebe06b72e74cc
MD5 34e97f412708e97cc881acafea9f2ed4
SHA1 483d4aee3d3c44f57d8e5312355dd1ede3cd3d14
SHA512 9d8963aa6cf5a52c268e546f007141f5d51c0e9d5fc35e0964964d5644c742bc8375a31df036a94b0a644d3977c1170c00d061edc4a38e9a789c29a490b95050
SSDEEP 384:NKMXfgURlaqY1k3gMw57MbRIeQ4MNX9ZmRb+B98cox7t78bQ:NKMvgURlaqY1rM+7uR246ZKbW6cy7ys
TLSH
T18E74BFAF9093B2342E6A3442C55F48F87CAB463838467026991C39D9C9750F66B48E3F
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/despond.beh

SHA256 93a08fb33f3f3c36a4af3a58147fb11c22c0c1bb4ac242dcb4a0260563841d37
MD5 c0fc6f5e5ac4c9e6202fa563bc42c7c3
SHA1 70191a58772708f8215db4583bbd2c910190100b
SHA512 e0e52a37b049e347d13fab6bf1e43ab443bfa449158083ed0cffba76382cd745c76958dfa4cd801aca02dfa1f244b1d930367832f0a89e80062b64ec113bf342
SSDEEP 768:bSQNxTkOrrPOMH/xwjWpzhRzEgO6GJ1g3LZEg4ojSfJ8xi9arX:uQYOeg3Hiv1iOgT2h8xnX
TLSH
T1FFE4E0947B396822230D8B770E61767886E28E556EB0C3BD71C5A97F7C378A540C2BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/dvaletilstandens.ace

SHA256 3e28270b289d8f3cdd697e5749341f39dd5e47b969c438b5f7cf57e7911e1708
MD5 94e385aff01fa614e4229d2b47554eae
SHA1 9f897bedcffd45bd9483ad1f803288f3a6e68ade
SHA512 dcbe42c8c8bb2cffebd59e8159e9dff78e30c1631a5a18dd57c2611e26faa258b62a7f7d7468f4571c5d044826efffbf190b78dc3675a25f05337e71564644bd
SSDEEP 24:amQwpZfBixId2vwMEJzLuM+0KpUO/HssThI7hQ:1pZfBxdQoZuM+vUO/A+
TLSH
T105D2EB88DE3DD499D14BFCD71502C034780F333962D211973E7750395254239728B155
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/enam.mas

SHA256 e244a0ef1670b484a34a4a836e2497d9a6c5901c791ee2eb24cc4d72241e68c2
MD5 542fa1cc7c373fb746ad796c64ca404d
SHA1 d2b72a8719c59182d55859f241f232825907115e
SHA512 ea8c667fa32e191495001b92a2bbacccc7c85e515348980062c502f250ad06c3e9ba4335935263aecbf88d1fb099d68b86ff57899c2d9c3e0b99ce6bd6aab3f1
SSDEEP 96:BAjpMxBb4rFPwqNdtuKrZ9UFduBRcykuzQXKl+yVi:ycBcOyZawrYXWg
TLSH
T134934CA071764A1F308C14A1CF41F863A1EBF38166B9B520D99D66A2019ED98D4A5401
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/freudianismen.ini

SHA256 bce93cd4b72ee4507a53adeb657932555bca6899bae585fb4516da8db2c60b80
MD5 9a9b7a48ef32ae7864f767ea42fd8b60
SHA1 f96c6e22f866072b0d6064bb93aeb7a13a8fc5f4
SHA512 5a6f3bb2a1d7ff3eeaebd4f639cdbd872caa7f2a0014b4f7d3f315e0a6b632034df5f853ebd38032566bf2dc69de3814fc4f82a0a9b7fb85f81183ba32b9d1de
TLSH
T1D3F0265E898777550BFB038C3814687053506726F2535D3DB31D07A9000329C137563F
MD5 SHA1 SHA512 TLSH

Skamferinger/Waxer/Eskorter/gratuitous.txt

SHA256 9914d6fec5e4cf7b3b188fd6feda04fa99e40159bd6a314d434ab45adebdd70f
MD5 548034719fb8aca9e120c24d3aceeeaa
SHA1 ebaea07c7f7d135c4dcfe2f43697c3285ae12ed4
SHA512 6e6d1bb4bcf7f6940f92a3e980412307eb21056fc2a8ccf25c1ebc7c8dbd1cd841ba228b84d0cbf30d62a838913d423d572da7991e72ab561867d7f4202862c4
TLSH
T11BF04798E0C3593C6E057709FC916D44EF147220E11D80AE3CF4D248B04132DD7EF6AA
MD5 SHA1 SHA512 TLSH

Skamferinger/Waxer/Eskorter/homothety.fdu

SHA256 3b453ee8dae8c3e00fbf5f416c306007a91746f4ba83ea15906fd8e21bc2de24
MD5 33719d6f52a9707bbc2e5b173bfb8204
SHA1 7b03df01bd6d305cdf43e8fa2d3d26cd91a23ff1
SHA512 f082f6d88d765073f6b99b0079d8d81272700550ded470b9ba45075ab6acb8c3673c614906ad5e20f2aecb72f2c5851a1435032f89fe7af6d1d1335f28ce152a
SSDEEP 96:YmZP6TXpRti5fOI8eS3aAiC+LIZIEwR6VfMIy6Ks2c+Ot:Ym0XwlYqAi8ZxC6Vfw5i
TLSH
T153D36C5C864A1630D3590231FA10C98BAE2380B536094FF56EF9B782656D3CD9B408FD
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/kimbolton.gra

SHA256 203c7dd2e8d35127e401b3d759b96b8d51dc87f492901689c2e1eaa3b7a990b4
MD5 6dba984c95e3f1e9dd981290966be095
SHA1 24c8b5548c7e2a22d6a4a84c714dcdbe844303a0
SHA512 4da9c69e25084976b0cb74462da6559e0ddeaa266b0f20aa78990392476bb9bc18fce487e1f052a78139f77b83b67d88379e22eb8e0f8f24be4d4a1a7f5ba49d
SSDEEP 384:AI4HxeE66tWKTzyGoMISiK/m/REXeTJyt/r4Xv1d+PUX1KulP4sOP:AI4HoE5tQoNvmueTJyt/r4f3+PUXnP36
TLSH
T1A1B4AE03E48EF43DAC781292E3F0212CDD8E5610EA827571A77A9CD9C91EE01FA27472
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/luers.pin

SHA256 250b99dd99722a08abdb77d6412586177a2f99d46397e45de82fefd5ab489aa3
MD5 8d49d6a0c4465a5799387c8a6788471d
SHA1 71ebf5704090d56c66f9ebc8273da6f1ca55d42c
SHA512 e863c2eaa1481a6b4d5a0ad59bdb2e02f1cf6d9ed626e802decbbc9f7d0e83303cf01bb0130f74f93fb8ca35d9216c27f3d842b2bed31d557109ab2939a78808
SSDEEP 6144:LPpBc5gNvptG0RPcmPSyQdkfZBIe1taRRkeqzvu:0
TLSH
T16015E117F2F01B6BB2AE0E93B7E6775040B00EDF2AA40526588975C206D163722E9CDA
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/opslmningernes.jpg

SHA256 814ffe1478ad801107bba1358557b7d6b0f214dbd58d2e5181a50d1d0d6744f7
MD5 f52582d07961941eaaaade726c2abdf9
SHA1 ad0495a2d1463eef6c55a9d75b5c8255ec02e393
SHA512 39063dae73e77e77a1806957e9b378d0ce2d30c4c35ba4b09dc22a659852328a127d40cf12b0f68a903ac80d51854df224d8ee36d774fb52786e9ccc988b44cd
SSDEEP 384:K4LaUUqxwLy6DirtWWa9TgztAg2m4qwXrtv1FhTu4PuKtni5a2loXRPvcnmNNBya:KGUJDi5XcTgzTaqw7tdbuogUknmNNPe6
TLSH
T1ECB2D0954F562A34EB6D67F4F01ABF20902C9008F392B9B26F72E6639474F15A4C05F4
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/postmaster.ise

SHA256 86e8e501e6bed68b1395e072a475ad5dc81d369670a8c829e0a2b6638b300b76
MD5 5bbb108c41f4fecb0616aaa5cbf32f07
SHA1 6ceeeeae42be5037d1d941b98032b1e0b6ac0b4c
SHA512 994efd66be07e3107be212427ee4d7e333ed4eda165fc6124ebbd75d3324ffe4facaa69af477fd4d06bcc0ba257ae50d9ee08706d46d07e872c76555dcfdbf61
SSDEEP 192:LJ+T/9sXARuChiW/ygCd2f6R9Kwfe+8jkqy7uFN0tT843nYeLPmwOqSJok0qTg+j:l/gv
TLSH
T1E005E1096BD557A6C7F0A9E1475562252A1F1D358FEA42ECF286BC03B4FA0E3EDE0109
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/reasonal.bun

SHA256 4da1e85dcbccd76aa87eff376510825ce9501d374ded0377995edac969ba2aa8
MD5 0700dbd031c00d420eac83936696f764
SHA1 d29651e17c108aa9fa7c25bc07f7825c26cb5cf3
SHA512 d2380592a6726abfb4c29ef9a9a65ed82886576e6b9390dd8e8aafcf56a4e509478c5b3ac1f3f25e76313d281a68cd4f650af063d7127268bf3734a2446ba498
SSDEEP 192:rw9++sUCaJGVqeYChA7aV1DVCYEz5nGBGWiTj3sqTm6qpd3iFv0vHmY5EIodXgfi:HPbX6/31qK0mIVcABQz7E0FbF7d59
TLSH
T14DE4E1FAFA7900CDBBF6B80815B4C44E219AF0F5299E5705DCC84C51886594EF725FCA
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/recuperation.dat

SHA256 4402887e5b6f5857b190e64ee51f6592ad14115ea1105fbc5de2860e2d13bda0
MD5 1da0133a12cfa247cd9eae66171b647d
SHA1 d703a9d63bb4ab5943a3ff0e45939743a0f74d79
SHA512 9027e1dab21eeb5a96d993b71b6e12c315b124641b85ee6a69269dffc906676b8f4d9430ac8cd05eaf12ba9fd5a8694d905ad9833aab468ad9fd05019d9a5c6f
SSDEEP 96:EiHDUPX9BE0NwmWJC6xbVxbsgZmQrt34eXPS6IWjRFjn5fstXie0q/a++oHly+SD:lDIM5XsgfRdPXnQkEm5
TLSH
T171B4C0A3D15E7B9D0EB90FD0C5211DC5167AF0B4D34AEAB94A01BBD0E6F9294910E3CC
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Eskorter/respiratoriske.txt

SHA256 be743726e3c784aeb1d8e65f9c5fa5524353eb060ad55b53b8b1990c2af6fa0e
MD5 1c7312acaf5544055265924be21b07a1
SHA1 d630fa1ea16536c06712ae3f6ee0cd0c192569ea
SHA512 b5969f547675446812ed081f9dc03c2f71fc5f686d358db8002622244bb9addb5b65519e6738ee86562ab926493ff1e68710525fc49aeb030bd5dde02722a9e5
TLSH
T1AAF02650800D2E0A6B6F45F5F9B040C3400DC4A04D191D3361CD759FD1434CC41BE61F
MD5 SHA1 SHA512 TLSH

Skamferinger/Waxer/Gudsdyrkelse.apt

SHA256 977b437df65cb7951c0da90852529b512bb3d1628b97d661272c574a1c8a50f2
MD5 f703f7eecd7cac77a22e6e7772b8e895
SHA1 ed54472bf3cf7df65754df5eb41c48690036feca
SHA512 946b9583aa97bcdf5459a09b6d2a9e89705ac7b8d2d56ccb46f2b2bb95d7548b7d7d86e78fd8016624a0c074696329e093c6385a1361207f9fb35e3518344fce
SSDEEP 6144:KEZ/cKGBhJsQ7bL9mzGWoqm+hpWK9lWReRvhy85awPLjZUEbCPSo3fPt:r4B0Q7Hyk/+hpWK9l8cJy8byXt
TLSH
T12A05D1B02985EDF4FE29F491C5E5F681C5308C54A930F899DA0F2E06694A7D09E761FC
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Libidinized.unm

SHA256 a006426fd7c99ec4817cc7805fb52e2ecdbed698ce9da2afb3481dcedf43048a
MD5 0196a68c5de3b5a4dc2a9b59c5eb2d34
SHA1 a1627b3cda42a552f39fa15eee52e7fc40ad969a
SHA512 61c901456f404035e096bfc0e02305a98036115e5d90c4675bd551daddf22483b1e3318716524a41f4b359e08fc05a5a6b8d1bbdc3c3bf3285938fab48ece824
SSDEEP 192:tqeMQBgncflLdNpf2Upt7f0Yfmmc4lq8zRzXmA8:tqeMQGnKTNpf2Upt7f0YfmmcQJRzXmA8
TLSH
T15BB37DB8CA23C459B19D446F0A5FFE47C6CF86D62C07D21EEE40D1639013F9A628CD11
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Lithuresis.kon

SHA256 37ff6ee25b02389455c84268df1442dec9c402c455000b976e9deda117480433
MD5 da2441d84f7937f86150d7e1a05cd16f
SHA1 198ab3a3680de2c604e2774d23415d479c942387
SHA512 0536eabe5ab597df0b67c0c8b4395a2458a918ea868e1ed8dc49a133747f6cfd1cdda57130e97aed0e762cc27426111b436133ef8da0863c1b724afa19c841d4
SSDEEP 384:feLhkM3EHnZEfiTkJx1rcP/BR8mtQhfxL68zUFXa3EFwrDqSIhKnjY5iG2QfitbZ:GAiiQf1A5RjqfxL6WUFbwC7OM5ib8H72
TLSH
T182D4D1D70FBA293AEEA17EAC3512755E296297144FDB19B63E813282DF6C04BA47110C
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Nightlike.ove

SHA256 816ed28e7c44151e29691265d0fe6926c1a95749a82a89cf9990b9c62bab3671
MD5 128cf16464b96d0dad65321ac04383a2
SHA1 005bfe235b3c2453e3016a4f5edf9b2ee191dc53
SHA512 69f5d5f2effddda9370fb9abed5af745a9547a3eac662c634f6f8f6a7c769f522a05e87847d232c819f93e2f5aadecb12a6228f4621b97706896152ea25f8e58
SSDEEP 768:iOMdUwynoMsC4bAf/NbZ8BQtURg1msshrCLDhW9zDLbC+87Hs:IdYrf/N1ttmsshrCHk9uHs
TLSH
T1E1C4D1347942A06F8321F8D243B46CE8616554535A92F9E4387575B3E1EB32C973CE35
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Stereotyp.jpg

SHA256 e271a995ad1c4274ff7efe617078684c74822dff7ff4bccdcad5a52f114dddd3
MD5 0c7184a5d3b8aaad2909d1da6ba448eb
SHA1 eecd05ee5130a3acdfa01c24f6928f45a3aa7e4d
SHA512 b41e5d94d6a655b7ac0ff54b5a4a71b7e4a2238b9f4ef60e2775b9e5d924b37953e42074c598e4715d9f1c5b8f70133fa6ce5f86a4acd72d567e2381d23e5d46
SSDEEP 1536:uJ5TRIrSvQiNNI263uIUAyw/H9XW0XmgOuYvBf6:STeSVTwubCH9G0XcuM0
TLSH
T1C7530212AD5DCDC85CCA8E3B474182CB3142790B73A3AAF03D78D997DD2CEC9DA91499
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/Ugric134.txt

SHA256 2849e917b599b9a4391dc9406eb407df42fd70f550792627efdf12a84c0168f0
MD5 7d4ced122cb5f057c8cce005643bd938
SHA1 a9a6c364e22536d5d987911e1bea831ce60ecb66
SHA512 8bc60e66028a082a67c27a4deae165fee34b787f4b054c747602c85efc80ae45c6852af9908bc92709a548c0208cbb706cc6e1f0900b3805b660975775a63a36
TLSH
T1B9D095E40E033555B9C2F3E3F9C30C1011D50655C81313D4790167085059C75CC2456D
MD5 SHA1 SHA512 TLSH

Skamferinger/Waxer/abbedierne.tes

SHA256 ada3d2f2e8e684d714b6f3d212de2d47897d872081f7b926836f47a54bced215
MD5 e933a882c21bf9b16535a87a6fca45ab
SHA1 7819e319125f0f78dffe6ba97097b30809cdf939
SHA512 7f925a6c986bcb9942cd7ec2fe01adef5a855d5dcc294c239593e259c250876c43c2798ce541925208099ac9ad3dbc23a7a2202817a10e9c5ad93a99623e75b4
SSDEEP 192:13OhkCQWer802iDxphaTp7lVHukCt/4IzpWUDKvb2zy7W5leQj059x:GQCCqj5E/4IzpVub2oWaW059x
TLSH
T1F164AF04BE7D971136A6E58D70A46DA2F227CB68F10BF4F5C6604C0E48D89BA5C40E17
MD5 SHA1 SHA512 SSDEEP TLSH

Skamferinger/Waxer/annonceres.unp

SHA256 024fbb5427d9134084c5a711a872c0dc161180d3e6094d0f9aa22202dad04ccb
MD5 223d1c7797d342cd654de8df2dcfb273
SHA1 af4decf8b3a9723d089ccedbbaeefd9c2e088475
SHA512 d85f16a1872eae77a0a8437371f9b7ca35d27afab0794b28eb400a9cc485ea27cf2f479c84ed5e8278c4e18cc1f0b7dcc5a7095b008f07a304a681a4bd2da7c6
SSDEEP 96:7SGQj1mqROAOqmwNRe0Z+69LvAmInumk55zQ2xG3yt8/PMrkMhc0OBm1YqxXHGcg:G0Gm0ZahknzL5yBm2qobj
TLSH
T11DF36D3CA40F85B543B25041F542A8F0366FBE86172CCD3336E6F8D29F55E3A1297261
MD5 SHA1 SHA512 SSDEEP TLSH

Transferor.Cou

SHA256 8c490dad46a16f8f881ff6500bfbcb3e3190e2396011f0aa7f48966c7fa73d45
MD5 b812c9b3922e05f1191e9b6f7595cff2
SHA1 9feb4b714b7b7bf4bbcf9695c7d97479d3b96ce5
SHA512 277cdffb7ea41d68276744168fc4cf406252833d00523930f68da58c7b1010f00758eb3d05efec79010fcad5384fb4db150059ba17a532501bb3951241b786e8
SSDEEP 384:0OmzHpoEEFvvYEEJnAIoIYRkFLxM7Ii5pTX2LSEEslX:0OmzHeEEFvAEEJnAIoImuLxMEinTX2L9
TLSH
T1D0B22D6071C989E4F61A9984FA78FF7202733563EFCA1CD22324F6004BBE5553A8D95E
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer

8f1da96e55e6f50d07fb3dc64c12047697ae9128e63d4dbae80c14646d96e192.exe

PE Signature issue

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/LangDLL.dll

kernel32

user32

gdi32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Comid187.spr

Delggendes.bid

Knnest.Gen

Skamferinger/Delmetallet.jpg

Skamferinger/Dgninstitutionerne.por

Skamferinger/Dksmands.lim

Skamferinger/Finansieringsselskabets.rhe

Skamferinger/Forsikringsaftalelov117.tan

Skamferinger/Waxer/Eskorter/Unfledgedness/skalkningerne.fre

Skamferinger/Waxer/Eskorter/Unfledgedness/spidsnset.jpg

Skamferinger/Waxer/Eskorter/Unfledgedness/trifocals.ton

Skamferinger/Waxer/Eskorter/Unfledgedness/uansvarlighedens.pat

Skamferinger/Waxer/Eskorter/Unfledgedness/uimodtageligheden.hur

Skamferinger/Waxer/Eskorter/aplacental.sle

Skamferinger/Waxer/Eskorter/bjergbestigeren.lan

Skamferinger/Waxer/Eskorter/burrower.rol

Skamferinger/Waxer/Eskorter/checked.jpg

Skamferinger/Waxer/Eskorter/chrysanthemin.wor

Skamferinger/Waxer/Eskorter/despond.beh

Skamferinger/Waxer/Eskorter/dvaletilstandens.ace

Skamferinger/Waxer/Eskorter/enam.mas

Skamferinger/Waxer/Eskorter/freudianismen.ini

Skamferinger/Waxer/Eskorter/gratuitous.txt

Skamferinger/Waxer/Eskorter/homothety.fdu

Skamferinger/Waxer/Eskorter/kimbolton.gra

Skamferinger/Waxer/Eskorter/luers.pin

Skamferinger/Waxer/Eskorter/opslmningernes.jpg

Skamferinger/Waxer/Eskorter/postmaster.ise

Skamferinger/Waxer/Eskorter/reasonal.bun

Skamferinger/Waxer/Eskorter/recuperation.dat

Skamferinger/Waxer/Eskorter/respiratoriske.txt

Skamferinger/Waxer/Gudsdyrkelse.apt

Skamferinger/Waxer/Libidinized.unm

Skamferinger/Waxer/Lithuresis.kon

Skamferinger/Waxer/Nightlike.ove

Skamferinger/Waxer/Stereotyp.jpg

Skamferinger/Waxer/Ugric134.txt

Skamferinger/Waxer/abbedierne.tes

Skamferinger/Waxer/annonceres.unp

Transferor.Cou