b6baf782b24cfe8e36dd991d971daef66c281d9c427bb99d37ae3a5014df89c4[.]exe

resource
b6baf782b24cfe8e36dd991d971daef66c281d9c427bb99d37ae3a5014df89c4.exe

b6baf782b24cfe8e36dd991d971daef66c281d9c427bb99d37ae3a5014df89c4.exe

IMPHASH d4b94e8ee3f620a89d114b9da4b31873
SHA256 b6baf782b24cfe8e36dd991d971daef66c281d9c427bb99d37ae3a5014df89c4
MD5 f11a33a1a5b0fc1e6214a0986d601e49
SHA1 3cd631dc156788e37abb91143ce1344281bb8aa6
SHA512 e16e059a082b5cef5eef9d8e723ac983d2a7d463ffd034436d0b5ec02662ab91d08e1a258118915671e9b90fb4df53be3d242e76c573d081d63874d58dd3f4a6
SSDEEP 12288:oBjHXCrwblvxTS0huCSr3N1pFdUICiJQ05M+xZOcCubqtndGAMz1BU9zKaovP0wy:E3KMvxTSquCSr3N1T43+M+xb0ndjqDEZ
TLSH
T189F412C03B8B9C39EA91B835DC974951C7A93A71E27301F73E34F52CA462A728B1F915
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

25:b8:ee:54:2e:98:ab:b0:68:22:d4:0e:96:0a:3c:33:af:1a:b7:55:5b:33:bb:26:89:35:ee:40:11:bc:20:f3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Timokratier,OU=Hemachrome Annullable Latrially\ ,O=Timokratier,L=Lochhill,ST=Scotland,C=GB,1.2.840.113549.1.9.1=#0c1b4b617465676f7269736572696e677340536172736172732e4e616e

Chains

Aug 21, 2026

CN=Timokratier,OU=Hemachrome Annullable Latrially\ ,O=Timokratier,L=Lochhill,ST=Scotland,C=GB,1.2.840.113549.1.9.1=#0c1b4b617465676f7269736572696e677340536172736172732e4e616e

Minor OS version

0

Major OS version

4

Entry point

12906

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW lstrcpynW CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW LoadLibraryW GetProcAddress GetModuleHandleA ExpandEnvironmentStringsW GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle GlobalFree lstrcmpW GlobalAlloc WaitForSingleObject GlobalUnlock GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW GetDC SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow LoadImageW SetWindowLongW TrackPopupMenu AppendMenuW CreatePopupMenu EndPaint SetTimer FindWindowExW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_Create ImageList_AddMasked ImageList_Destroy ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

Autecisms172/hilleborgs.ini

SHA256 2a22a0170f0c0109c48330c4972afbcc3a27e02316f1166f15aef43226274fa1
MD5 bde14d37c387881eaec34fdb539b88a8
SHA1 9fe773498b4e12d782ffb86da59816b416c49765
SHA512 7c57fccbaf37d8227fab0d6758b68ac7582504d5bd704b81d6a989faafd44476c1d4d35c183f92217415f3cd807c4c25e313caecc894579fd74e3edf10eee626
TLSH
T192E02D46A38124248E29020A28D60F2F4F06142AAC231209B15FC32EE2C28CE33BBD1E
MD5 SHA1 SHA512 TLSH

Autecisms172/klichbaen.txt

SHA256 25759f8cd7ecf78165da03c5c7bab457cec5e4c8262c22a6e151dbb595c6562a
MD5 53551ccac94dc42ead384c052ca8d253
SHA1 7854e5c39a707afa724e72974955e298152684ad
SHA512 8f2e8b151b9345adda30c43d816e0edd03a924166cbd0b9bf1b139bffadd493e1809fad89fc6c09547a7132dd6d6015f7e4a3c1e1e55c689ff75729df0b24f7b
TLSH
T178F0DCB3F7758919642A3B85CC54069E67A8796300F205F877A0231E724AA0CFFDB12C
MD5 SHA1 SHA512 TLSH

Autecisms172/lucilia.ini

SHA256 55f00fcb16d7c6c9179273643b5800d2245deb1aaccd2ea9f0d3001fb8265bf4
MD5 9256b82af851bfcb073f458403d1ca72
SHA1 d5d34690aacc1fd9bf9912d5974a75efb81513e5
SHA512 40e17b8d4aef7aa9cc6bb1fb3966086642b845c057f920d76a855c4224762a28a33c84e7769178ab22a008ac8e7bd4d013127d9d1fe3b0e93c10437f18b1c49f
TLSH
T100F0234CB5332D2882190AFB31E11FC44114EA258B3D75DABF56E79AA41F900E3B438C
MD5 SHA1 SHA512 TLSH

Autecisms172/markedsandelen.txt

SHA256 26aaf8fcd83f541fb045328162a7c47bbe38851baa512e38776fa4da6b8552ef
MD5 d30f7b622058f23851c75fbfe2b8201b
SHA1 85bd30507e6aa650afca05c59a5f5d25af9c76b8
SHA512 356325371950e3fa6c8bd998e3395af4e2116af8de424cee0a55feea3a20bc2140fda3060e8a482ba3adf2d62cfe809c08e0a4871f3beaac92295b65390fd487
TLSH
T11ED0230D452B4B474208D378123A4723C85EC43F460F00A18DF7471030500103AFF10C
MD5 SHA1 SHA512 TLSH

Autecisms172/peacelessness.ini

SHA256 127fc00f0a630a46f9d99553255f6e24576026e9c847c193744e3f4fa96dfbf7
MD5 97a300af2dc688c5f6fe45823ea7afc2
SHA1 7de29a7d95bb31d30b13c0872a51c6136cef305e
SHA512 b72a19b78a1b3788b0b3d919844b72341d55bbd6e59be579541a17b24d248e59ae7c8a817fb8219eb5e1bd2e32456d275b8d1aafd9ada47b170291ab95b5d0e2
TLSH
T1E4F0E1B0D1857E0D2B271FCB3673105B00BF9C0AC7826933F9ED2AC9155D85D931B696
MD5 SHA1 SHA512 TLSH

Bevgelsesmngderne.ini

SHA256 08921a3acb362ef994a1764721e230b402d2111f7d6e699bd5ff360c506cff36
MD5 1973f6ad22924784670ba1652624812c
SHA1 bb21e3ff43c8048004a873c9329fc347ba6b96ea
SHA512 74ae79736c609883fd9efff048e8e10d562465f45ab5a070519ee77277ecd5d74d9301c28f152fe54d85fb1911bbc4356e508e51d0cd164a29adc296098cd09c
TLSH
T198E0280CC53151560F5307FCF4245E305C5A485DC02C0120395BC33F7E305556E9745C
MD5 SHA1 SHA512 TLSH

Ochraceous/sknsangene.ini

SHA256 32eb7f52091ad5269554c4159c9206db17cd65edcba5f07879417b6ee6fc2c2f
MD5 c23e3fc7e4c159d500a983294c094cc0
SHA1 493971826afef7a939fca4eb7e1cb26a411449b3
SHA512 e096412c5c1fc4c5609c64c68364a9c4ef60d291ee0de8279d231af01a0df6aa8922f7f97af0b9232d8e59315cfc12fca821d30ced0897c5223aadeef3432a77
TLSH
T12EF09678F324FF5B1F3EBB5D7C2042C8142C820059174234EC90070E9686A36D37EE26
MD5 SHA1 SHA512 TLSH

Ochraceous/teserne.txt

SHA256 b169130e3bb615cd0f47249c9e521d3f9feb5fc1d092e2ff70adfc37a8b8de75
MD5 d2098395a42f1e00198bd1a347226321
SHA1 fba96a1eb6e75b6698b09064d3e175ef572c8e77
SHA512 5e06076154f5383fa7c19e45dbec0959b242fdf62bd5a42dca734c91e57d406d0afe6de5ebcecaaf1a844076b9e0528a159b129d916ed1722204914d4881ee1f
TLSH
T105F0C0C0BA0774DE3C291324A4664D521BB82B01526D6D67FB02530C9E5C8AC57FE75C
MD5 SHA1 SHA512 TLSH

Opdelingernes.Fis

SHA256 4a5e66b11247f9decbbd66aea0af558a4ca70c2771b38b8ef012d8563ddc7cad
MD5 105bab47403f1de895bd2ec0ce4dd31c
SHA1 a1fe5434b34d7c21303d5827c49a5ee59c0565a5
SHA512 af0d1634aa17a085abf3767a82f6d6a07608288ebdabd9511cbd82fb799ef1c3ded90f9d9f564d8b8ce2d4905ca66dfcfbcf779fab45b31d788ed88a192f2647
SSDEEP 6144:0jYn5Roybf4zIYcIuXLP6m1igHB9hy+VeZCme5HKKQaPWjUxlvIQwrmS2:B5TWI+yP6m1igh9YuWEHQaPsqIQwrR2
TLSH
T12564022D247B95B7C51C10BEE83A3D0DF8EDB026D36A11CB94F4E0E29944DAD9B278D4
MD5 SHA1 SHA512 SSDEEP TLSH

Skihoppets.tip

SHA256 87cb09035d25c08a14041d6c748ad285e2174c9654992cc2d2c3f06f1204a4f6
MD5 f7e48849648822ff75a23316a151639a
SHA1 a7d2c439531e5471c43cfcc2e4019a6ba6f4ea22
SHA512 4d7392e03d7362c0bd4bf852d81c0e2cef544678c29d1683ce5bbde3e8d53aedad15e282b642846ec82731a92f712c21a214927c40a1b65558bcd6ce5122251e
SSDEEP 3072:PhzBvjAOPRxwNzFG4yi13xZ3GNkaQnkdgkEOmLRJaSI54uJa4SDfK2gdKLJYPJ3W:S
TLSH
T1CB5623F0E0BA6F9023956A592B77B95AFD037F732C4613E1649E3397114483A4EB34D8
MD5 SHA1 SHA512 SSDEEP TLSH

Unfrenchified232.aud

SHA256 413bc9f7169aa6d648d0ce2f30bd3148e550fedfc0d30b963aa87152a7b14a1a
MD5 c9a28ce60b5282b2144d17495888a554
SHA1 d7027d313341fa7daa8c087716fb0a57c02186eb
SHA512 7416759ae26e501d8ea4e243f29ec43cb435331b8c7b105a857b00d36e78dc849ebb8f6022f897cd5974c5befb6dc32dca891e4492e3188cc799c807835be471
SSDEEP 3072:ow1l+SWa30lVzaKquG3BcxI/llUa3QSfKbjIUGEgjIMvq7LoUcdnDFgkS0L88Zsp:w
TLSH
T1E2C5028821A878FED3E63B658C770C0074D4E9399A27D4C58A5FD95F7E7A00A30F4E29
MD5 SHA1 SHA512 SSDEEP TLSH

Zanthoxylum62.txt

SHA256 5ee831430ab5cb25c0ddf28f159ff6434ab4b1821207297b2c5a415f908d28d2
MD5 8981ecd97c5c8055922650368a5021e5
SHA1 6ced69cff4d5620dcc4a02c3a0dd85ee20300b2d
SHA512 8ae3dd3da5aa0eb492e5ce0dc649e325cb5b7db62f70932617a55b38e8df1ebdfd45bf2af3eec1ba5179cf9880dbefaed144600ae960bf0e1823e4b09a506b68
TLSH
T17FF00550FADC21874CAF52D8FE58716580D4C437819851CD44DA0B4F7072EAAE3ED74C
MD5 SHA1 SHA512 TLSH

anskuelses.jpg

SHA256 c9bb72e607b7e6f05c3a60843a50f4c210e502e608685e52f23f27767c83af90
MD5 16f19f6d9502043337e1f8730592aa6f
SHA1 b9948f15ccc3347597ad1a2aee3040a5befd64ec
SHA512 a6e9855dfb2395eb54034a1573bd07461b883db5e84586d062f73fa40db296390b55d1e8c36ea557508c1f5b92045785cf0f0c39c204e5a9915cc97fec7cead0
SSDEEP 384:FRxU6b/NkOiX0Cbbh5o94IAb+9+gY0gSIILrFBKIRXvDfOLln2GZ4QBWHLv:FzbSOQ9R5o9K4adILrFwQfg2GZvBWL
TLSH
T1F0A2D0804A9A969C3BF982DA218DFDE04484B509A845CE753F2342FEED3DCF1174664F
MD5 SHA1 SHA512 SSDEEP TLSH

balldress.jpg

SHA256 2345b5f30c6c7a2be06041528e1f2782a255489a496b25743bf0a843ed9855ae
MD5 3b5e011eeea6226f14803c54e1ce5166
SHA1 c5ef5c991e700c5b00a9aa11c422a3b863ae6309
SHA512 fa469952a71caada29f5abd1b495ecf03092c2b4f0a5aa222b1bd65c835f91ddcdc83f4002a6aeb5051416ae48a0c32b28596b4998212792208c23a01f78e83e
SSDEEP 768:KooaqiU6RL9R27lTixHX2zA9DHxBxfg+I9jYzQyLYdbld44LVwoUIH8:KoX5NGRTiIzIDHUjZ9dbld4odk
TLSH
T1BC03023292E54BD3AAE52D128D6F43E6475B968871CC27316D23F7CA1404CBC7D1E0EA
MD5 SHA1 SHA512 SSDEEP TLSH

biphenol.ini

SHA256 e0316b6a44597541307435c2ada1228fa8b1a49df987415705b5afa640f81d67
MD5 af94f21765df869d40838c74971425fc
SHA1 32290529c9bedf7397fd6b84ee50dc84c22d15e1
SHA512 291f01281eb7a1293f56ccfb6c8423cf9ab6e9b4e6e5cb9241bce72e146bdd62705c2a620389a00be9debb95d353aede59db056e7c9b3ecabb58796cbb242690
TLSH
T1A7E0C0B0DCA82C574483B66BBD132973C67DC03D407841B9B56EC2DED1CE4443884361
MD5 SHA1 SHA512 TLSH

camoufleur.Can

SHA256 e62f19191cb29b46c368b153ae8d7f413cf88eea1f538260939db7f11833d74b
MD5 1b62d55fbfc1481850db5156f354f284
SHA1 1969109f1b296054a89c53e0cc8172018671b2cb
SHA512 d6fe2092a0c6c7eb95b9d9ff54681cbaf5726401654a5dce6d8dca491e2755861a49c2a3bd9e5b2485bbf1b91e65d944ad36a32dd3c10aefe15468d78dd56e00
SSDEEP 768:PVNyHxhQ9nxpL9x5MH82RTZIHbrloF4l+qtugolmSiX4xeFwzAbmgN+asKbfIvIB:PVNyHW9xGH82g2qfoloX4oeALRbf/
TLSH
T18C33D080BF6B556D884122B86B994D312FB94D79C6E6C471CA3B32EF30C1056167DACA
MD5 SHA1 SHA512 SSDEEP TLSH

genopbygger.txt

SHA256 589995ea8f4c36be2e3e0b5d481a1cc9dd9ea309617f838ee516648dcd31f3ba
MD5 15287aabb4ccc8e33517eb987939b796
SHA1 ae69211a906054d949d2721266c38d2988ddedd5
SHA512 6ac7d5510976e57db64a6e154fc589a6ab81903472096b83e92270ebaeb2d4897a6a77539f15272f23cf52f00f88196034619c5a76a184c4afc78991ba96d5cf
TLSH
T1E9F02651848845665E679E06FC11506801F5C6F60120B5BC95CC4F9FA087EFCC5B9528
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer