Cytophil[.]exe | Triage™

resource
unpack001/$PLUGINSDIR/System.dll

resource
Cytophil.exe

Cytophil.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 9355412abe08d3781913f925945e2b93713961b95df327b0f153c29dd3483f0d
MD5 dda06dac764df47dfca1fa34900042a4
SHA1 1a03566116122f267b9eae418701679774934f22
SHA512 04aed4ef3f4b51fd2a2f60259e4beb39aee7c988141a76b9af99f6155ccf40a03e4c2f18f5435bdeda53a6a726187cba6f005c46eef429909d0ad49cfe5567b7
SSDEEP 12288:3X42d3t75NkEPa6Cmy3LtqZlaaU/EhXxzGCL1TjjkagBi8/jDv/4XYh:n42dXN3MbqlI0xDLdkagz/jj/4
TLSH
T17CD4238133C5DE07D49696349F2197BB18E2EC354A95A3ABEB603E1DBD302D17E2F241
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b4:f1:33:f9:8e:c5:11:0f:08:f0:db:a2:ce:eb:72:9c:38:db:d6:04:06:f7:ea:bb:74:83:8c:ba:9f:50:c8:dc

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Maledicts,OU=Forelaid Disassociation\ ,O=Maledicts,C=FR

Chains

Aug 26, 2026

CN=Maledicts,OU=Forelaid Disassociation\ ,O=Maledicts,C=FR

PE Signature issue

Digest

4a:e2:07:ae:3a:1e:90:7d:e5:f5:11:13:31:e4:7c:bd:25:de:8c:24

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Maledicts,OU=Forelaid Disassociation\ ,O=Maledicts,C=FR

Chains

Aug 26, 2026

CN=Maledicts,OU=Forelaid Disassociation\ ,O=Maledicts,C=FR

Minor OS version

0

Major OS version

4

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
TLSH
T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Acetatsilkerne.txt

SHA256 c2ded49b78f2509aa864b6cc38e6afb0a6cac5b903b28cd199c21995a2d7c618
MD5 2ea1999e7e39bf4361b3bab320d7b57c
SHA1 e79f9652d41397e6fd6fac72025a7d736b95af85
SHA512 c423179f6f4947b47cac6e5385a0a87fd282ff0455b5e1783415226fc675991b173ccf77ac031bdcf34b2c1fd25c4d3ba96270e85eda97fce48f4d6601533564
TLSH
T17DF0E1905E152B0B4AC1AD89CC745D21C41D2B9EAA1A41782ACD4F1ED0B55E9E33E57C
MD5 SHA1 SHA512 TLSH

Opdyrke/Referenten.jpg

SHA256 7b8e4d4895c1ede86e9dd3bcadff1e4603c5eeb6392440eb81b7fac337e9bfa9
MD5 8eaf08b37dfc1dbc8ca0327ebf79965f
SHA1 3ae02099ffa5ffcf6ae87333e9ee5efef46a4d1d
SHA512 b8da6d96915e88bc6a33a7ca4c8e964b2df8b7c9bca14554797990182df3574e1699781c7bc8d3cd1d945d86232408593d2a227e33e1b3f4dd68872fbaba63ac
SSDEEP 1536:lA4mp+yJd+N9s6mwUeU0108BpIvC7c6d+sSrKQrJ+l6s:ynw9FmwUq1ZBpIK7/dZ/acss
TLSH
T1DE53028A13A62C80DB2C16F70E377A5B2571728F57382BF464734C856BE34B1A217EB5
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Relativstninger

SHA256 a008940eda73701e7ee4de8f1c669569b2aa85fdc9a27c43dbbdb2a1a392746b
MD5 3a2758ab20bf5d211aa8c001f45ff99d
SHA1 01d6154b92ca061add0b0190a04e420787638bb3
SHA512 a58f6406fe861316a58e880568e9f0ca3531869fa9e379520be901be52cca836bce3360b9cdc3ff710ccbec7ad86530b7f79b03e5e721b244ae71255d4165aa9
SSDEEP 3072:BjpQVk+W5yMifPeCjxd7z3ntyRv438lZQO9ltw4x:9pN+WoxfP15wRA38lZQO9XwE
TLSH
T1DCD3BF97D7558DFFCC07C53CC4AA71A54DA470224B0FE0BDE276A915C2872E3A7242BA
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Renested191.ini

SHA256 26a58912796809eab5826aa7153fd17df826906570c7164192138736f767d11a
MD5 598f3e7e41b674cae369974c1465040f
SHA1 51f5aebc11862ac0a600dd741b4c9d92645182d8
SHA512 9de1fddf2f97867a95cea3d564eec3f5ea749869bb1ae03b4292545dc68f5e674a46767343b88cfd6e5ae39c99537ca536465221c0c562b730cd9cbcaec509d2
TLSH
T1A101D0F0D864483589BB338DE912B9866BDB55919A5402D0F14FA22BA105CDDA36EE22
MD5 SHA1 SHA512 TLSH

Opdyrke/Rigsfyrstestand/anthracites.jpg

SHA256 8d851f984dded3838e470db8356403d9dbaae6015c87680a46abcbcbb0baa498
MD5 7fd2836aa718964533ce071a763721b5
SHA1 e5bec0ef0b7442752f07c7c0f0a1e681bd9eb777
SHA512 359501470ce823aae374ba516818c9ea210b7cfa68e9ab1d2eff9d557831a753bbc326bd5c8f0700921278eae035386b1a466a2d7002fc67d39b5d7db32c5f63
SSDEEP 768:C0mhL7Z2RI9hw/AUWh8uneOpqbzjAJ3xAe8AWPYms:C0ml7MSDbiuYbzItkYms
TLSH
T1E1C2E16ABE8EB4675F9110C80F0D99DAE03688CB73C1F0625B51C25BEA90EBD377E150
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/automaters.txt

SHA256 8efcd6eb6a2249ad5c552604498a9c364f3ca7a32241885411eac8966da04477
MD5 e1062ed8b32492ea1c46c9ffcab2c71c
SHA1 cbd4ed78b733e17bf8710c9be3e2c6963ab877a8
SHA512 717b0210ad64597ee0303165f1da1eceb7ee5bf25852616980447790bfb55b7f80f5a64a99cd18fee9a7dcf7e798c8df40a8068cd397a689c2897c04c437b126
TLSH
T1BEF00C10E85A21031E83C4E6AD0E31E9629D5A4B107E52A2DD880B1E3A61B13E6B7002
MD5 SHA1 SHA512 TLSH

Opdyrke/Rigsfyrstestand/nyhedsinteresse.ini

SHA256 4edb0610d0482b6d9f3e362fa758f977eacee38afd8084f685f359fb1720e0f7
MD5 d95d1fb438b779383262b4b104589288
SHA1 352d6e4abcefdef383319f8497ce8ca1fee11b65
SHA512 b94a49904fe3d996293460be1b586d0de56118fdbeb7ef2a954234d8c9d4dadf40bd5b4e221510cd3d608e9c3612ca7978f2e1acfd3b78b4011fe6d6e7c17169
TLSH
T182E0F14C8648115A5F11FFBD7814F3D04FED5261241331245785135AAC519ACA28370C
MD5 SHA1 SHA512 TLSH

Opdyrke/Rigsfyrstestand/perikummer.jpg

SHA256 aec5ed7cd946346d102e4fcd69933378e58809e9610048b9e1f4fa304f62fb08
MD5 47f76aeac17792fa51def7ef43e98e14
SHA1 ab13b7165efa446d8087b7eee40301fbad453db3
SHA512 af38e7479c88ff3a977f2ed050fe6fa570c58d2a3af9f4aae05ad93c1cd95d3b8de9530d5fc6eeb462bb29e1fcfece4375e1262cf47bdebed7aee1eb66fa6b43
SSDEEP 768:xUfk/h3srUlLtm1eTg4MbwV8jQlmp9ksZAZLo5kE0qaMRSRsJXNu+8cOAMs6l:xUs/h3srUlLtm1Ig4M0VGAmhecaNMNuL
TLSH
T1A703F13B3AE8C2909F6F141818CE9A795CB9D6D0BFF91135A9E69B5086B4CDD2311B03
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/presettable.jpg

SHA256 5fabc7739a23185077aeda49722c049282d2b882859ee7105016559b1483a9aa
MD5 9e63056ac959bad51ec16ff7b126e4ea
SHA1 4b1aa0cee7de8a617d0930a8fb0d26ffb887569c
SHA512 6b9c88fe31717d2d1072b90b30061035e4f9ea6f4bc8cec0df0be33942db2b0a265030baf60accb904e8c49c84708aa29c5acb02b05394ca7ccdef9e93a6e29d
SSDEEP 384:0/7PA18RKm7HMaVXb2d0tnpmPuF9+AamjbUXAFqndSjYcD4bd+aUYCRWkOL8KKRZ:0zPlKwHTXb2GppmPSXv+kra5EWkOQ7RZ
TLSH
T168D2E1532604F3A386D8D859F92D1327B4714A807E9BD2B25EC800CD65DAF7638FAE84
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/pseudophenanthroline.jpg

SHA256 6602f8a9f8906e4d19d56ebd321cdd5085b83a47cc9a4390124a495755673e91
MD5 f49c9d066c0861960028ac8004a06b2c
SHA1 3b609307531e225502cd300dda2817ac9a03cf53
SHA512 322626e350d3e1a8ca07fb55aab83e3875515a5bfca433f9ec9c26b98d7b6399f40a99233f4cac68557e1ca0ad286ab6345951adf332500011b689acd7ffc3a2
SSDEEP 96:RhXoEXkaff4439uuYjeseh2HG6ApMlwIs7ZyX6:LYNaDYuYCV8G1
TLSH
T1DC916DE973A1E3E46F0366F7426615C95919C3220F2185772CF83CC5D171DF0916A39E
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/rehearser.jpg

SHA256 d50326d6c157d321dde1c6abbc68883b2980936b2c80ed1b3afc8051f9725e06
MD5 7c4b6460fc6b1708366adf1a20a2120e
SHA1 4020926caa858b2f165c4ffefc635d7aa81f89a4
SHA512 f8d3ea8f62cbb2c34a3575bec4c245fdea11ea8f9d542ce67207a414a6ea4be049a9d92bfe191a329b31ecb611e97445c15aeb5169ec7d11229321e16b98bde9
SSDEEP 96:RhAEqu/1oGTxqZ2YahDTPqbSGQFLlF8J5920JvNlw3UJF3uQ:LAc9pwbahuXwS20Tljfv
TLSH
T16FA16B47A50BA613873298A7FA4B0932E4F496007E287336419BDFF7D828EB41B15236
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/strandpibere.jpg

SHA256 0c031103cebdd879d74ff2b68f3ab94d97a5e267d036c30ea27bbc54e8cce68f
MD5 6828495eb1be02403e94929b1a05a292
SHA1 b064d71e7c3a8a8351163457bf8e63d21c4f245e
SHA512 229d7be9923d9f45c9bb2360c3bf72cee13548a58682539919a228a62ce75a502d9d3796a125f36cd374246c91524ca115414fc472879e74255fa015ee8683c2
SSDEEP 96:RhxEDnzHpwPKhS7G3Ys0nqf7a+rX9gpqn5RoMxtS/1NNGInij52nP+7:LxMnzHpwPKKFs0nM7Rr+85RRO/jVnijB
TLSH
T103A17D1EF55F8200DF6A67AC10D321539357A0797C1813B6B8BB915AD160CFA8B61B24
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/teglvrksskorstenene.txt

SHA256 31625b7af551cabf3d44d41f35adb60058111402b4bdbb1fec6a3d40fafc982e
MD5 382edfc1a1ae33babd060459b85c33b5
SHA1 2bc2dabd95876ab57fa6a5e98adc3e6d5130b50c
SHA512 621567e643532ec1dceb8ab018cfa8457b987be6721d62916727024387f8f01cc7be7bd24236105a73f51fbbefa12de34f7d2db8f803f44b1e9791da76700735
TLSH
T149E0283BCEC5C3E05DDD91F24118B542951CC05C085213C6E399832F0109C4F8E2D7BC
MD5 SHA1 SHA512 TLSH

Opdyrke/Rigsfyrstestand/tripl.txt

SHA256 26ce9c426e4088fd3d481aaff0809aa163cb04311ebe81ab774a1bab6fbe9633
MD5 06e8238edd0579bc2454dd091c5c214a
SHA1 b540a7c07e0c054d4d0a6b35699569d71cf2119f
SHA512 dea09a513bd2f0f241bcec432d3de8b7db34f23e9c1e136cff1235cf2aed23869e1e0997795d6ac53e52263d2750ab5861257d85fe56c0235f354c53be070ec6
TLSH
T199F06201DBAE380208238B2BF82D0A92C31E0643CADDC0B3D5E8D30E848915C421A0AE
MD5 SHA1 SHA512 TLSH

Opdyrke/Rigsfyrstestand/ulvetimers.jpg

SHA256 8197602da1baa90bf4933ee7d5ee10f0bf09129cf07d1392c239e2808e1f3879
MD5 b9b954c96e51fc08537d87792c9b3b80
SHA1 fde0b58ebf1e46836a5d650f6d778545055fead0
SHA512 8f9f9a0f9d85c4deb968736232e25fc15391bae4b724264ac469b9e558cb96e97338f8203710c904f1c5b1d3beef1a3cbbdd29618a10d39303593894bbc39f33
SSDEEP 768:CPsV5pNahPDB5CaxpupR4Xn5bIs7LNbcoCAIUm06Tsta0DDClGiVQeIOO328L:CPaDY9Uuop4TBm06ADmlGVeIO4
TLSH
T1D723020FC5258BE1E30A75BA8FB8D9F541B897393E84590C4DD0594E1178FBD1AE8862
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Rigsfyrstestand/vaerdiloese.ter

SHA256 faa5394d7a553e870f0cfa6adbcf227c17c1d629eecb002797a1a958f6b671a4
MD5 b25edea89ac69b448bba8546fabe5f1b
SHA1 d1b95aafe62140c99bd780d7dd75d248e1c45d1c
SHA512 0c96f56416ad6d4967185a246217afaee365f55742f9638bc4879559615726dff6ed768eb6879575a7c4d3de376607aa415cf53507baa0ee41b97cabbf77c9d1
SSDEEP 768:1ZFNpRPJdFCuxSUr2wuCtbqQKQgWAN6hOYZmjrlueIcR:4
TLSH
T1874502DFD3397D18A1768066704D0EE91FB1EEF853A18BD465E4B3136AB88B1038893C
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/Unpenuriousness.jpg

SHA256 bb6d15d61d7f9732b5a1dab44103c2dce39ecfd5ee00f1332efa9b6499181d56
MD5 a70e96fd133dc0d413abb278d229a6bf
SHA1 f50d93027ea6a211bfd25f018881f13d677083e2
SHA512 228d2a447e43af81225edd24f85eddf8dc4cf04b95a3926b47f50b3bba3679ff1bb1ba0befffc7007f2e88c779f98f5d5140507fd0f7b2f5bf96c907f24b3aec
SSDEEP 1536:Pm3D+7zrHKUzaFApoBg1+p8uZ/UYBgMY5QwutIwFulv8+jxhgmuQ2X:+36PrHK/PsDMY0iagU+jUmu5X
TLSH
T14B83121550A23FD22744F7E5A7528CDCA4C105C27E4A9F2827E85DD3E2DF037B260AB6
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/addability.jpg

SHA256 834792975013afe262d815ffb60dbe1b28446d0ace6f27ec4a2cdad3edf447a5
MD5 61ce31778c6d5554263c60aa18205d70
SHA1 c26602e136e12b62c7de331d2a806f59d2b4a82a
SHA512 8c61e1a47600354cd47e9dcccdcd859a6a802ede14686dc0efb6a443564ed72ba7fbddc9d679c686e0c792f58cda4ef591944e5d4f1a838c8909769a8ad43e53
SSDEEP 768:6Va5QiVC3DjqzlAN74VOQxaNYfAP2sw62toPumQF5Jmk8:6VtXDGzlAN74gQxa5wK
TLSH
T1AD03F19460830F09FFADB7010092BE77E6A9832C851869B66BB6734D4259C76C5C4FD9
MD5 SHA1 SHA512 SSDEEP TLSH

Opdyrke/amningens.ini

SHA256 4b382fdf2e73b035864c278f953f123a4b97d693740c42439cb44bcd8aa837e5
MD5 acd7f93a792cd375b0fe3f23d303bf4d
SHA1 9127aeae439b316a800fc05b949260dd6cab67bc
SHA512 91216ea0d42092c43b5347f2bf1fd620ce265ffd508a2be95489b84b32772ce85967e5253e6b66796e465316c03c578f2643ad897aee0c9b5b8ba052ef6bed0b
TLSH
T180F02050CA1720530B43A6BEE85932C1194F240280030A80B0994BFC19656E2F27B41D
MD5 SHA1 SHA512 TLSH

Pocketless

SHA256 81e08da02b1496d32146e9fe311ed41a4ba39a7b0b16d8f15e4db15fe652986e
MD5 b9720203109ee2f65774a90f0a6c3fa4
SHA1 70fa696a8e7ca6b26e46dcbe99608c2362fa1f1c
SHA512 d42f253dff8c869b26ec493716df9dfa697bd6dc711bfed269f562f210312594563dbfaecb77a870b3a1aa854f5178eae87213bcc41d667f28b1882ed36c55fb
SSDEEP 3072:bLurq9X21TCYAK0j5fioCrbekhThjci2vWS58GQ:bLurq921TVAK0jSRFR2vWp
TLSH
T105C30114B1F6B570E5A9E7FD8B839E5D521AC298F33C12109002F922B757235B22EDBD
MD5 SHA1 SHA512 SSDEEP TLSH

Cytophil.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Acetatsilkerne.txt

Opdyrke/Referenten.jpg

Opdyrke/Relativstninger

Opdyrke/Renested191.ini

Opdyrke/Rigsfyrstestand/anthracites.jpg

Opdyrke/Rigsfyrstestand/automaters.txt

Opdyrke/Rigsfyrstestand/nyhedsinteresse.ini

Opdyrke/Rigsfyrstestand/perikummer.jpg

Opdyrke/Rigsfyrstestand/presettable.jpg

Opdyrke/Rigsfyrstestand/pseudophenanthroline.jpg

Opdyrke/Rigsfyrstestand/rehearser.jpg

Opdyrke/Rigsfyrstestand/strandpibere.jpg

Opdyrke/Rigsfyrstestand/teglvrksskorstenene.txt

Opdyrke/Rigsfyrstestand/tripl.txt

Opdyrke/Rigsfyrstestand/ulvetimers.jpg

Opdyrke/Rigsfyrstestand/vaerdiloese.ter

Opdyrke/Unpenuriousness.jpg

Opdyrke/addability.jpg

Opdyrke/amningens.ini

Pocketless

Sharing

General

Malware Config

Signatures

File Explorer

Cytophil.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

Acetatsilkerne.txt

Opdyrke/Referenten.jpg

Opdyrke/Relativstninger

Opdyrke/Renested191.ini

Opdyrke/Rigsfyrstestand/anthracites.jpg

Opdyrke/Rigsfyrstestand/automaters.txt

Opdyrke/Rigsfyrstestand/nyhedsinteresse.ini

Opdyrke/Rigsfyrstestand/perikummer.jpg

Opdyrke/Rigsfyrstestand/presettable.jpg

Opdyrke/Rigsfyrstestand/pseudophenanthroline.jpg

Opdyrke/Rigsfyrstestand/rehearser.jpg

Opdyrke/Rigsfyrstestand/strandpibere.jpg

Opdyrke/Rigsfyrstestand/teglvrksskorstenene.txt

Opdyrke/Rigsfyrstestand/tripl.txt

Opdyrke/Rigsfyrstestand/ulvetimers.jpg

Opdyrke/Rigsfyrstestand/vaerdiloese.ter

Opdyrke/Unpenuriousness.jpg

Opdyrke/addability.jpg

Opdyrke/amningens.ini

Pocketless