701d6201778829a7149cd5eff49fb69471b5597fb39885c7460828415437a0e0[.]exe

resource
701d6201778829a7149cd5eff49fb69471b5597fb39885c7460828415437a0e0.exe

701d6201778829a7149cd5eff49fb69471b5597fb39885c7460828415437a0e0.exe

IMPHASH f4639a0b3116c2cfc71144b88a929cfd
SHA256 701d6201778829a7149cd5eff49fb69471b5597fb39885c7460828415437a0e0
MD5 b7901fba0abd559e0ff4b069f045c1a6
SHA1 58450800eeff3e3c5e1982211b8d2f521c238fca
SHA512 54e54e2f252581b8c28750aaee66febd4276e17e1c0d31cf37d91b9053de07581a2035ef355ae5ee77391a9418fdd59541fb3b62878b8dad6a9633fc7c7ca72c
SSDEEP 24576:FfYutccJqNs2YAora8Z4aLlHQu7JZtZOf7JGpbP:xAdNvYu8Z43u7JZtZOzUB
TLSH
T144F4CE3DAE93F422EBD8C979BC49FA4E1D10C9D007BC0B5E93B06E6974A5A51B10F16C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

f3:ba:ce:a0:a6:2c:67:3b:4b:7a:66:53:b8:05:e6:ad:6c:c6:1d:a1:e2:30:a9:be:66:9c:9b:8c:0c:91:1c:41

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Champine,O=Champine,L=Mouterre-sur-Blourde,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1e5564676976656c7365737669726b736f6d686564734042616e62612e436f

Chains

Aug 26, 2026

CN=Champine,O=Champine,L=Mouterre-sur-Blourde,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1e5564676976656c7365737669726b736f6d686564734042616e62612e436f

PE Signature issue

Digest

ea:74:7f:6a:ca:e0:33:e3:29:2a:a6:cf:ff:d3:bf:38:ac:c0:1e:cd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Champine,O=Champine,L=Mouterre-sur-Blourde,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1e5564676976656c7365737669726b736f6d686564734042616e62612e436f

Chains

Aug 26, 2026

CN=Champine,O=Champine,L=Mouterre-sur-Blourde,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1e5564676976656c7365737669726b736f6d686564734042616e62612e436f

Minor OS version

0

Major OS version

4

Entry point

13650

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

lstrcmpiA CreateFileW GetTempFileNameW RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW WriteFile CopyFileW ExitProcess GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject SetEnvironmentVariableW

Fortaetteren/Afbraend67.Dem

SHA256 cd859f041e3f4906b0435ce71e2c9259eca4e46bd49ec3bcd91b748aea400dde
MD5 c09379ec13c75cc460cd2857ad77ef40
SHA1 2c111c42a2ded748456af2060bb859fab07762b3
SHA512 539c8801192c98076411e077c944dfa83106d14b1d8e25c429854f84591a9735367c736a7916092474836c20c3a75868e45dbd61fc7ca5814b04851d46f5cd6c
SSDEEP 6144:AKZtkIt4aX44qw/ULmy9wQmEk7XqGN1qPBFGssvbvhNOT8VyPieiYQCADTnbHcu:JjkRK7umy91U7NqZFlKvhNk8VyqeidTh
TLSH
T1439401CC8E298DDFD62A5AB771C3506CEF85BDD0A9CC36858421FE255489F085062BEF
MD5 SHA1 SHA512 SSDEEP TLSH

Fortaetteren/Fideistic.ini

SHA256 cbf06545d23440d7366f2f6d82996c67988f021349c67e96a814313b815ddafe
MD5 6879f19077b0443fe3df5603d042a3ff
SHA1 d30e16273abdb7e473c4d810e658d6fc75e536e3
SHA512 aa169a82fe4aa24a28c68158dee8c7fa9592b805e618052974a275912765a3355e22bc31f9cae061d73ecc44efc648f71c76ddd92d706cdc0092f5c252c80fb9
TLSH
T142F02675E40C1C2D1D03C2C7019F88439174B42E5E300029F1E7571C925FACD8BD746C
MD5 SHA1 SHA512 TLSH

Fortaetteren/Gelded173.ari

SHA256 8d2f0e5d660efb9c00e93c5f752dadab47edadc0639856ee0cd7128bd733aefd
MD5 6285f575839aad752468881c25149e47
SHA1 4437d4fefd985ce75690211bc5a771fa3943172a
SHA512 e4909eae8528020167fba97f4256045cd45cb4fcaca4dd90ddcce327acb8cdad4ac61cf2ad38daa2fc19028e51f7ae23b096f2f8f2ef4be4cde40a632582295e
SSDEEP 768:be57o9tUH1PBrGFKsHqpNb5seU4V+92a9ei2IHGXv+tDPRg2Up9ZWKfEp4kfhLaF:CPTUqIpBZajuV89DLioHHpq8BlJ
TLSH
T165641246CF23F03B39E9BD1A2DB7D1B4B8307994783A9C47915382B4B2D6C421365B9C
MD5 SHA1 SHA512 SSDEEP TLSH

Fortaetteren/Kvilibrismens.Ort202

SHA256 f4883510e451e8c5c9bb5b6bbe2d31faa86811721da8a6dca01c55136c3e5b19
MD5 70b59f340d06488ed0118b9ab1e9ef83
SHA1 89dbe620198ad8c897e3e80a2e79218763b26418
SHA512 cc3a59e1aa6068f317ccf2444be281159577b5ca8df06941656eb31f0b50f8b55e87e36a31cdfb5f4df206adbf3cf83830af5e0d248be0bfd824ac5e60ad132a
SSDEEP 1536:YJ7UClvNg6YbQm/d59nHFraKH6kF4McWIIC:YqYlg6YZ/d59lm06kFYWIX
TLSH
T1F933BF08F7294B5CC384139CA9FA051D1F78CEB886B1D6E2CA5B72F731C11995A6C9E8
MD5 SHA1 SHA512 SSDEEP TLSH

Fortaetteren/Politistyrken.ini

SHA256 05e7674b563b0aa286e0d9edf65bb81ff5397537b736c5635a2047f86fa1bca2
MD5 407f4e6c3506ce7bd99d42d229e41a68
SHA1 9d36256c9fa9f118f09408fa2735cf2f3b6fc173
SHA512 3554a5a98541e2e965ab9ba3aa98c15ffcdc962aa98178db409db023eb2869cdccdd4917cc387644d29b5775719fc4be9946bbe12e5141440a599beb704c8999
TLSH
T1BCF041689DB01B0F8F5626B37C80304059E006C4E32242ADAB5E065C0B0BBDEDA6C81F
MD5 SHA1 SHA512 TLSH

Fortaetteren/Witchcraft.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Fortaetteren/agglomeratets.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Fortaetteren/badehusenes.bih

SHA256 05d7309de60bc153a3709cb6b64be9d2901412a95e74136548b5610198b1eb93
MD5 b0fb4a8d920068765529d995753b200f
SHA1 31b1342270ba6489046ce478bf36ffea9d72a81d
SHA512 d076d02c5c5b37d21ba3b198c4fd1b256f8f71524433a841ed3202056162f889005564a3cfc42bc325cc13db3e3d097e548261c341daa3afb156763e25514984
SSDEEP 768:PnzBjpWX5RMwgDah9rXDZpfaHsmKSWyajHhon2VF+teJr:1GwwgMrrHjEep
TLSH
T17493E170BF3B7219CC968E054121600F9A3697798859DB6E765E30278238B650F63F36
MD5 SHA1 SHA512 SSDEEP TLSH

Omnicompetent/betingelsesstningens.txt

SHA256 78d13e7227960dd16096c78c46f7aeb3d25388e0b867e5a33c5676bae3ed92cd
MD5 91d6328ed60b4e4e660b5888199479e1
SHA1 c8d3bed5674983b91cecd557590e1964029e5724
SHA512 8c20e4239c4602d07e94918fcdae97cd8002a095f37a5c838fc08df3815253704907343c51e0281d9564fdcd20050aa746d3b5a6fc3947670562e3eaf82dd581
TLSH
T1090144808978164E9EFA2338BD233A72533409244135DC2E44DD4688141744CF3FEE4B
MD5 SHA1 SHA512 TLSH

Omnicompetent/bipenniform.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Omnicompetent/collates.txt

SHA256 b9e549099b1db357f29930f07ba0844c2e6241025133276ddb133bc6923a2bd3
MD5 6f9b0c75fa794590d6defffd656a698a
SHA1 7025aa591c40a5d014e33b89e5d4e78667d0a81f
SHA512 e1ca5ee4d6e02fd286409745b29d0c9b27440489ae35e084d66db470cf9435f6ee495296c04422b7c4155cf282ee193fdd720aa33d1cb631209a31a6338773c4
TLSH
T1AAF075683DE21026162F01F8FCE7061F3068536C6568B696E5C2CBBC228274DC23DB7D
MD5 SHA1 SHA512 TLSH

Omnicompetent/kommunevalgenes.txt

SHA256 8b87ff6f7e8ecdf3f57b51d3539a1f6fa70489dba9444efe525ac90158458986
MD5 25dab045267f3e0a989f5d97b8957cc6
SHA1 e8a72984aa2385844858f4bf4b6cca1c36a9924b
SHA512 e18372164598500360faecfddef94e06ed89f32e446f154f0e3ae4f3d4d847373b7c827417a44a5ca2543ebee233de57632709c70065c8441dd923695731bec5
TLSH
T15AF00560CD00AE7F0D6A446BFE4A4F530997C104853A594D7AC1C74538510DC85BF765
MD5 SHA1 SHA512 TLSH

Omnicompetent/letfrdighedernes.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Omnicompetent/pensionskasse.txt

SHA256 71c2c1d1e9dca1e2211c724789761d04542bb16007ab40a0775dc2d6069290de
MD5 aa8d9a7a394497b3b162347d4d94a7db
SHA1 608c5b6fef074f1eff076105f1bb96a667c2ca45
SHA512 297158f003ed5ed50218e0dabc17629024e651b6c65af24bbacb38ee62dcf0eba3036802af328ede6dc194b2921c0c98a452fa153b377c4d21793606bf74218c
TLSH
T13FE0232C887F031D4B4A5704FD2A4495552845C4D023139B3A931F645534098F747C1F
MD5 SHA1 SHA512 TLSH

Omnicompetent/pjalters.met

SHA256 0d96c179e8115645bdf9c9dcd1c20ad42109b1bf91e281e9e5dd90b10e10a114
MD5 f9afe5ac014b5ddf0b464c85d02d283d
SHA1 dd37d447492d3eb12b080f36d5d601609b632c1f
SHA512 9dc9a8e52953c56a57477457316fbc9411999d9420e7dbc1a2fb2585f06df9d6286308bff1bf24a0f9f6d0e47709d9b816779c39fc06b2575cf873a7dfc444a3
SSDEEP 12288:5Cfv9K2Pil+nJyJTD6gjueWY8ybuh4n9ffkljQbuPxTugi1BST1TCmyK8NDnHbdi:5Cfv9K2Pil+nJyJTD6gjueWY8ybuh4nW
TLSH
T12DA412BD6864832ABF45CAD22823C98032F958EF657935D307F9005D76A79F09D92DF0
MD5 SHA1 SHA512 SSDEEP TLSH

Omnicompetent/pseudopode.ini

SHA256 0390c92b8cf2e80fb16d61408465883b4a9343acd899fdfdefc5912f9dddc12e
MD5 c061f9cc4b28b383707b7e97fdcbfc83
SHA1 eb8ccd99fb4b15844bf4202483a68cbbb9d13981
SHA512 5072e629c2e73dbfc7a1b67a350a65490f3a9ac60dc23b19cd562d1e8a0ee14ea021ae0e91d9849330eaf212c9e5b10e315df567d4fe3dc6fa6a7e19a6b074c7
TLSH
T179F062B0C935C9644FB6A20AF6530516CA7C4E07A15736F2B8D4434A4605BCCA1A7A9E
MD5 SHA1 SHA512 TLSH

Omnicompetent/transudes.jpg

SHA256 994252c8960cf2a4008c57bb64c39a18937638230293db1ca2cbc7bc63fc8ba5
MD5 1f48026df6e9e4aebc2867cb2a07a07d
SHA1 8098b69100ff43d1df93d7d42fead7a6aebe7638
SHA512 4edb34ee05c85efa311df528adc8954273fdfd6ad563aea480befee9e100e79f9492de3f26fd69ebd4bc510096866092dc24213835281d91bf8a9c536a725149
TLSH
T106A022230F20A00F802202E238C300802A2CAAC033380C0820C0030002CBA3EBE38300
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

701d6201778829a7149cd5eff49fb69471b5597fb39885c7460828415437a0e0.exe

PE Signature issue

PE Signature issue

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

Fortaetteren/Afbraend67.Dem

Fortaetteren/Fideistic.ini

Fortaetteren/Gelded173.ari

Fortaetteren/Kvilibrismens.Ort202

Fortaetteren/Politistyrken.ini

Fortaetteren/Witchcraft.jpg

Fortaetteren/agglomeratets.jpg

Fortaetteren/badehusenes.bih

Omnicompetent/betingelsesstningens.txt

Omnicompetent/bipenniform.jpg

Omnicompetent/collates.txt

Omnicompetent/kommunevalgenes.txt

Omnicompetent/letfrdighedernes.jpg

Omnicompetent/pensionskasse.txt

Omnicompetent/pjalters.met

Omnicompetent/pseudopode.ini

Omnicompetent/transudes.jpg