93167308d1bcb862d1641f6540edb36cd1be5d2767c3c0a4534ae462f11101b1

resource
93167308d1bcb862d1641f6540edb36cd1be5d2767c3c0a4534ae462f11101b1

resource
unpack001/$PLUGINSDIR/System.dll

IMPHASH 6e7f9a29f2c85394521a08b9f31f6275
SHA256 93167308d1bcb862d1641f6540edb36cd1be5d2767c3c0a4534ae462f11101b1
MD5 33538874297978c58d4621ecacd4c07a
SHA1 f998931a843497b49b5594414f3b3844b9416aa0
SHA512 f4239aef96037ea4a052f767bc08001c10ba302fae0b20263311a01a21335c68befac31824ab0133a746f6cb313365284200551f180407d90e8ba00cee1af927
SSDEEP 24576:6MwYlEZLYz1DBMgfpyED9WDHvBMg/Hv3Avr3I/SUiEW:6MweEKz1GgND9W9PovKWEW
TLSH
T1B3F412E11F58CCA3E35105BAEAE4E3F885F5EE46F24C8A4393203F953AB975AD805351
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

07:15:e8:61:b2:88:32:62:aa:bd:6c:70:37:cf:b2:68:91:48:96:22:0e:f0:ca:76:02:87:4b:e1:5b:49:d8:46

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Forelskelses Propublication\ ,O=Branddr,L=Saint-Andeux,ST=Bourgogne-Franche-Comté,C=FR

Chains

Sep 15, 2026

CN=Forelskelses Propublication\ ,O=Branddr,L=Saint-Andeux,ST=Bourgogne-Franche-Comté,C=FR

Minor OS version

0

Major OS version

4

Entry point

13455

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegCreateKeyExW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken SetFileSecurityW RegOpenKeyExW RegEnumValueW

shell32

SHGetSpecialFolderLocation SHFileOperationW SHBrowseForFolderW SHGetPathFromIDListW ShellExecuteExW SHGetFileInfoW

ole32

OleInitialize OleUninitialize CoCreateInstance IIDFromString CoTaskMemFree

comctl32

ord17 ImageList_Create ImageList_Destroy ImageList_AddMasked

user32

GetClientRect EndPaint DrawTextW IsWindowEnabled DispatchMessageW wsprintfA CharNextA CharPrevW MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW GetSystemMetrics FillRect AppendMenuW TrackPopupMenu OpenClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetWindowLongW GetSysColor SetWindowPos PeekMessageW SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint EmptyClipboard CreatePopupMenu

gdi32

SetBkMode SetBkColor GetDeviceCaps CreateFontIndirectW CreateBrushIndirect DeleteObject SetTextColor SelectObject

kernel32

GetExitCodeProcess WaitForSingleObject GetModuleHandleA GetProcAddress GetSystemDirectoryW lstrcatW Sleep lstrcpyA WriteFile GetTempFileNameW CreateFileW lstrcmpiA RemoveDirectoryW CreateProcessW CreateDirectoryW GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersion GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW ExitProcess CopyFileW GetCurrentProcess GetModuleFileNameW GetFileSize GetTickCount MulDiv SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW MoveFileExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW

$PLUGINSDIR/System.dll

IMPHASH fc0224e99e736751432961db63a41b76
SHA256 7a9ddee34562cd3703f1502b5c70e99cd5bba15de2b6845a3555033d7f6cb2a5
MD5 564bb0373067e1785cba7e4c24aab4bf
SHA1 7c9416a01d821b10b2eef97b80899d24014d6fc1
SHA512 22c61a323cb9293d7ec5c7e7e60674d0e2f7b29d55be25eb3c128ea2cd7440a1400cee17c43896b996278007c0d247f331a9b8964e3a40a0eb1404a9596c4472
SSDEEP 192:nenY0qWTlt70IAj/lQ0sEWc/wtYbBH2aDybC7y+XBDIwL:n8+Qlt70Fj/lQRY/9VjjfL
TLSH
T1F6427D1193B089F2F590593805A67F2A6FBEAC5C27E44963CFE345853D702DFA47A243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10719

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Accelerationsbaner.Doc

SHA256 84e3b3b94d2a070961b4d7ece917274765f0a725fa4721d2414c9af8162a5d57
MD5 4aa4c10ecf80317631b3ac10592d5ba3
SHA1 5a99a20551269be3c472ec1e6dfe1d93f79391ea
SHA512 a80cb051591d85b472e1ea32b53dd84b90f3aab718946e5afb56fe63fabb6e7f3a90d93fdef7a003a7aca94b19ad65bd89ec067c4011904f29ab4f7fe24f6fe0
SSDEEP 1536:dMYzqdOlEsBsZtdheQVNPpO/HriDX8Xj1DASrI05each6v3:dMYzWOlEesZb0axpqODoASrIvrov3
TLSH
T1F3C3AE46D7654CFACC07853CD9BE21D64C5830169B0FE4BE6176B819C2A72E363386EB
MD5 SHA1 SHA512 SSDEEP TLSH

Kantebaand.Hop

SHA256 bfedec62d2ac6d1cd3c2fc0dd646e91f18cc83b0f71b2e2043137a5091fd7ede
MD5 8e7cc34e0c2cea1c83be41c3c30fb85f
SHA1 766b4c30568fe27eda94f98b3c018d7038355bdb
SHA512 eb1117729bb6a84145dd962ab3d03c058657fa0d440f2579f523172652e425220d525eb4165b8698702746629449cf29029c1a16ae954f1b3a314679d6e342f5
SSDEEP 6144:UT5cZ+tTO0+Jz3fBwHnMf2goFff09YRxRJ0P/:ZiTOHxInfgGff0mRTCn
TLSH
T19754DFE0D40BE51BFB1368781225A3FFDD662DE8D6410078E079FA8477B2FA13498A75
MD5 SHA1 SHA512 SSDEEP TLSH

Tyndtarmene.sde

SHA256 b960e49d3d73694ababdad0d3a1efac84dd6d1d706044d2b3bd7cfa601bf6c15
MD5 8698f488823c6caabc826f846b6eeea4
SHA1 b78daf6f1471df7825cef0cbfdf6d45b0977814d
SHA512 df1d6374176b736995fef55e469ac279ab60fe48352cafb2d69e2d307b54bcf5d78b9dd7373c098b28d4559b7db12a52f863ff9ecef54b84e0d6ec42c2efca1c
SSDEEP 768:o8hIq4YDD+K9NSYWxExp78DUc7rsC3RtRi49YNc4oSHpdbDq638IysuQ0w+79gvS:5SARuSbd3+lYGJn172K5b3wYVGEWUD
TLSH
T1917401CE920D290EE1D6B9354243BBA23EBC9080FC16CB4D94B9B7D63D09CDD6E29C54
MD5 SHA1 SHA512 SSDEEP TLSH

referensgruppens.txt

SHA256 06cc4d019d5371f6f0267933191e7bea10bbc27596b5524468b9be1b6c100046
MD5 ca5c35f4574a49a65302dee5453e781b
SHA1 fff42937783ec88c2e5f62f04e20d50133264c42
SHA512 3e6fa41f9f678a54d927aef27695443fc276650606f3ba6af41089c8db14ceca95d734c4da6908b74af3b19b4315c9b49269a91c01e74ac32dde378a6023de91
TLSH
T13CE0AB56CD902C1A815F4372BE43134504B898894735949DFE5F674C5172814C30B22B
MD5 SHA1 SHA512 TLSH

suzie.dem

SHA256 7ce543608c8445da86082ab4b873ee26a39c5aafca5a81df2eed05faf8b34ffc
MD5 105ff52975bbdfd6c950bc6905aed53a
SHA1 69f6a8cb3cc4de8b43d89bbe8b1d6a201837d886
SHA512 af63f25d32e3cb1286a978c41fddc34325eee88e9ffd94768a495c04f2c692788089392d36a7626b8df1dfed40aef1db57db73ea8ec37c50b44f9319318930f3
SSDEEP 768:Q2hTUo/f0EdE0k3FkgUR8MmabFnO1F87KSwhneyV1LjewJJfbkWd0WjCqD5xFqno:j5L+LRe4Cb+9DbeARq3q+I
TLSH
T1745412B11A5AFE1BF0D2A335EA771F4E8429D3C5620525070B4BF7682E743408677A56
MD5 SHA1 SHA512 SSDEEP TLSH

tamkattene.str

SHA256 3b0799eb66adfa44fea54cdb6ef88038e4438690b263cd86eade5cfc1a385628
MD5 67f897c5ebfe5708d45e33c822259f31
SHA1 6b6e8cc21b4d49894cec591169913f43e829bd59
SHA512 ea3054b6846a62fdbfa6e072573c0831ce882f65c2933e82dba6c7ce292007ae4ddf6360a3194b43fb5139478de1712795dde38b6cf60c656cde952cbddff6e3
SSDEEP 1536:RUXCENiBHeZq4FMfiEGxE0RoAetAtSEcF0mpYp:ciehCiEGKftAS3F06A
TLSH
T18F9412875EB48137C06F42F7DE24A1E3446062345E7AC5622EF6D82F28A75AFA142D0B
MD5 SHA1 SHA512 SSDEEP TLSH