d1781f1275264dfa7e866d66d2326942c5d727f7ba09906b3df0d9863f7ab40e

Analysis

max time kernel
151s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
02/02/2024, 18:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

acXessDesktop-2.0.7-windows-installer.exe
Size

317.5MB
MD5

1b2c8cd249bac9319a4bc2c1924c387d
SHA1

6f1870dcc8097ebef94aae4dd7be57a65ad1b5bd
SHA256

d1781f1275264dfa7e866d66d2326942c5d727f7ba09906b3df0d9863f7ab40e
SHA512

9ca6d1770d4ef86b9857c0d3579f22cc08bc711139ae4baa7f9252066f16344ad84bcc1431461413d5b472c6fb9cba6540d7d36a7cf719917d7d187ba133b54e
SSDEEP

6291456:51UeK7G733PtPcZa14nfcmuF9UeFI/WUyMdsnubksFE:5HKi733B0aanhOUeu/WUyasnubkkE

Score

7^/10

discovery evasion trojan

Malware Config

Signatures

Executes dropped EXE 4 IoCs

pid	Process
396	ZK_FIN~1.EXE
2984	ZK_FIN~1.tmp
3752	acXessDesktop.exe
548	acXessDesktop.exe

Loads dropped DLL 64 IoCs

pid	Process
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
1616	rundll32.exe
2304	regsvr32.exe
5092	regsvr32.exe
3384	regsvr32.exe
3384	regsvr32.exe
1684	regsvr32.exe
1684	regsvr32.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
3752	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe
548	acXessDesktop.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	acXessDesktop-2.0.7-windows-installer.exe

Drops file in System32 directory 55 IoCs

description	ioc	Process
File created	C:\Windows\system32\is-OTR76.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\is-URKV5.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-M98U9.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\ZKFPSensors\is-P7D5N.tmp	ZK_FIN~1.tmp
File created	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7A3.tmp	DrvInst.exe
File created	C:\Windows\SysWOW64\ZKFPSensors\is-C5R0O.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\libusb0.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\zkusbdevices.cat	DrvInst.exe
File created	C:\Windows\system32\is-POHSR.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-01B4N.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\is-11LQV.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B4.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B6.tmp	DrvInst.exe
File created	C:\Windows\SysWOW64\is-H12I8.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B3.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\zkusbdevices.inf_amd64_55285d7f78850143\libusb0.dll	DrvInst.exe
File created	C:\Windows\SysWOW64\is-8GKJC.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-EN8JE.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\ZKFPSensors\is-37NCD.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\is-IG43Q.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\ZKFPSensors\is-88NBH.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\zkusbdevices.inf_amd64_55285d7f78850143\zkusbdevices.cat	DrvInst.exe
File created	C:\Windows\system32\is-HHNI3.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\ZKFPSensors\is-IJIF8.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\zkusbdevices.inf_amd64_55285d7f78850143\libusb0_x64.dll	DrvInst.exe
File created	C:\Windows\SysWOW64\is-2E22K.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7A3.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\zkusbdevices.inf_amd64_55285d7f78850143\zkusbdevices.inf	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B4.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B5.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}	DrvInst.exe
File created	C:\Windows\SysWOW64\is-3AQ59.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\ZKFPSensors\is-65NN0.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	DrvInst.exe
File created	C:\Windows\system32\is-DPOU7.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-LTAON.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-N0QIN.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\ZKFPSensors\is-2PV1A.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-8TF4R.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\libusb0_x64.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\zkusbdevices.inf_amd64_55285d7f78850143\libusb0_x64.sys	DrvInst.exe
File created	C:\Windows\SysWOW64\is-RE07F.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\is-2DLC5.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\is-HSHLV.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\is-QQNDI.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B6.tmp	DrvInst.exe
File created	C:\Windows\SysWOW64\is-8S9Q2.tmp	ZK_FIN~1.tmp
File created	C:\Windows\system32\is-OLCMF.tmp	ZK_FIN~1.tmp
File created	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B3.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\libusb0_x64.dll	DrvInst.exe
File created	C:\Windows\SysWOW64\is-TPGJ5.tmp	ZK_FIN~1.tmp
File created	C:\Windows\SysWOW64\ZKFPSensors\is-PD9DT.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\zkusbdevices.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{ac199f7d-f9e2-5842-a70e-bfb2f03d57f3}\SETB7B5.tmp	DrvInst.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\uninstbr.000	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\FPSensor\Biokey\is-CENB1.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Guid.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\printsupport\windowsprintersupportd.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXess.db	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qtiffd.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\sqldrivers\qsqlpsqld.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\FPSensor\Biokey\is-8OF2V.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\libgcc_s_dw2-1.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Scriptd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\script	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\libgcc_s_dw2-1.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\mingwm10.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\iconv.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qicod.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\libpq.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXessFingerprint Empty.ISDB	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\config\decoders.xml	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\data\servertime.dat	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\Identification.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\platforms\qoffscreend.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\install.log	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\importdeps.sh	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\license.lic	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\AbstractDevices.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXessDesktop.db	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\mingwm10.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\libssl-1_1.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\tcl6347.tmp	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.bat	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\config\database-connection-psql.xml	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\WebService.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\install.log	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\libpq.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\zlib.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\data\servertime.dat	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.bat	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\config\database-connection.xml	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\Uninstall acXessDesktop.lnk	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\FPSensor\Biokey\is-R69IP.tmp	ZK_FIN~1.tmp
File created	C:\Program Files (x86)\FPSensor\Biokey\ZKFPSensors\is-QO1DR.tmp	ZK_FIN~1.tmp
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\config\config-acxess-desktop.xml	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\libxml2.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\sqldrivers\qsqlodbcd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\help	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\ssleay32.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Networkd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\sqldrivers\qsqlpsqld.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\acXess.ico	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\FPSensor\unins000.dat	ZK_FIN~1.tmp
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\Util.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qjpegd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\libeay32.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qsvgd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\ssleay32.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\libcrypto-1_1.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\AtlasCore.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Widgetsd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\config\config-acxess-desktop.xml	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\Identification.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Concurrentd.dll	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qicod.dll	acXessDesktop-2.0.7-windows-installer.exe
File created	C:\Program Files (x86)\XETID\acXessDesktop\bin\install.bat	acXessDesktop-2.0.7-windows-installer.exe
File opened for modification	C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXessFingerDesktop.ISDB	acXessDesktop-2.0.7-windows-installer.exe

Drops file in Windows directory 11 IoCs

description	ioc	Process
File created	C:\Windows\zkdrv\is-LF2M1.tmp	ZK_FIN~1.tmp
File created	C:\Windows\zkdrv\is-762EQ.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\INF\setupapi.dev.log	rundll32.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File created	C:\Windows\inf\oem3.inf	DrvInst.exe
File created	C:\Windows\zkdrv\is-S4Q0B.tmp	ZK_FIN~1.tmp
File created	C:\Windows\zkdrv\is-RBLAA.tmp	ZK_FIN~1.tmp
File opened for modification	C:\Windows\INF\setupapi.dev.log	svchost.exe
File opened for modification	C:\Windows\inf\oem3.inf	DrvInst.exe
File created	C:\Windows\zkdrv\is-3I6NF.tmp	ZK_FIN~1.tmp
File created	C:\Windows\zkdrv\is-I2H4N.tmp	ZK_FIN~1.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 42 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	rundll32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	rundll32.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	rundll32.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	acXessDesktop-2.0.7-windows-installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	acXessDesktop-2.0.7-windows-installer.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	acXessDesktop-2.0.7-windows-installer.exe

Modifies data under HKEY_USERS 41 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}\4.0\HELPDIR\ = "C:\\Program Files (x86)\\FPSensor\\Biokey\\"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\Control	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FPCom.FPProcess\Clsid\ = "{253AF648-E194-49D0-95CD-E5071519517E}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}\4.0\0\win32\ = "C:\\Program Files (x86)\\FPSensor\\Biokey\\biokey.ocx"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}\1.0\HELPDIR\ = "C:\\Windows\\SysWow64\\"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}\1.0\0\win32\ = "C:\\Windows\\SysWow64\\FPCom.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\ToolboxBitmap32\ = "C:\\Program Files (x86)\\FPSensor\\Biokey\\biokey.ocx,1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\ = "FPProcess Object"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}\4.0\0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\TypeLib\Version = "4.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ZKFPEngXControl.ZKFPEngX	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\Verb\0\ = "Properties,0,2"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}\1.0\FLAGS	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}\1.0\FLAGS\ = "0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\TypeLib\ = "{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\Verb\	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}\1.0\ = "FPCom Library"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FPCom.FPProcess\Clsid	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\MiscStatus	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}\4.0\ = "ZKSoftware ZKFinger Engine 4.x"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\ = "IZKFPEngX"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\TypeLib\ = "{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\ProgID\ = "ZKFPEngXControl.ZKFPEngX"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FPCom.FPProcess\ = "FPProcess Object"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\ = "IZKFPEngX"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\TypeLib\ = "{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\TypeLib\ = "{1CD59645-9CC5-4C0E-AA37-5E5BADE3AC5D}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\ProgID\ = "FPCom.FPProcess"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\InprocServer32\ = "C:\\Windows\\SysWow64\\FPCom.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\ZKFPEngXControl.ZKFPEngX\Clsid\ = "{CA69969C-2F27-41D3-954D-A48B941C3BA7}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\Verb\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}\4.0\0\win32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\MiscStatus\1	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}\4.0\FLAGS	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\ = "IZKFPEngXEvents"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\TypeLib\ = "{D95CB779-00CB-4B49-97B9-9F0B61CAB3C1}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FPCom.FPProcess	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8AEE2E53-7EBE-4B51-A964-009ADC68D107}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\ZKFPEngXControl.ZKFPEngX\Clsid	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\Version\ = "4.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{253AF648-E194-49D0-95CD-E5071519517E}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{161A8D2D-3DDE-4744-BA38-08F900D10D6D}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CA69969C-2F27-41D3-954D-A48B941C3BA7}\ToolboxBitmap32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{AA46E7A7-1E15-459D-B032-7C3AF6AF167B}\ = "IFPProcess"	regsvr32.exe

Suspicious behavior: AddClipboardFormatListener 2 IoCs

pid	Process
3752	acXessDesktop.exe
548	acXessDesktop.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe
2976	acXessDesktop-2.0.7-windows-installer.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
3752	acXessDesktop.exe
548	acXessDesktop.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeAuditPrivilege	2876	svchost.exe
Token: SeSecurityPrivilege	2876	svchost.exe
Token: SeIncreaseQuotaPrivilege	4376	wmic.exe
Token: SeSecurityPrivilege	4376	wmic.exe
Token: SeTakeOwnershipPrivilege	4376	wmic.exe
Token: SeLoadDriverPrivilege	4376	wmic.exe
Token: SeSystemProfilePrivilege	4376	wmic.exe
Token: SeSystemtimePrivilege	4376	wmic.exe
Token: SeProfSingleProcessPrivilege	4376	wmic.exe
Token: SeIncBasePriorityPrivilege	4376	wmic.exe
Token: SeCreatePagefilePrivilege	4376	wmic.exe
Token: SeBackupPrivilege	4376	wmic.exe
Token: SeRestorePrivilege	4376	wmic.exe
Token: SeShutdownPrivilege	4376	wmic.exe
Token: SeDebugPrivilege	4376	wmic.exe
Token: SeSystemEnvironmentPrivilege	4376	wmic.exe
Token: SeRemoteShutdownPrivilege	4376	wmic.exe
Token: SeUndockPrivilege	4376	wmic.exe
Token: SeManageVolumePrivilege	4376	wmic.exe
Token: 33	4376	wmic.exe
Token: 34	4376	wmic.exe
Token: 35	4376	wmic.exe
Token: 36	4376	wmic.exe
Token: SeIncreaseQuotaPrivilege	4376	wmic.exe
Token: SeSecurityPrivilege	4376	wmic.exe
Token: SeTakeOwnershipPrivilege	4376	wmic.exe
Token: SeLoadDriverPrivilege	4376	wmic.exe
Token: SeSystemProfilePrivilege	4376	wmic.exe
Token: SeSystemtimePrivilege	4376	wmic.exe
Token: SeProfSingleProcessPrivilege	4376	wmic.exe
Token: SeIncBasePriorityPrivilege	4376	wmic.exe
Token: SeCreatePagefilePrivilege	4376	wmic.exe
Token: SeBackupPrivilege	4376	wmic.exe
Token: SeRestorePrivilege	4376	wmic.exe
Token: SeShutdownPrivilege	4376	wmic.exe
Token: SeDebugPrivilege	4376	wmic.exe
Token: SeSystemEnvironmentPrivilege	4376	wmic.exe
Token: SeRemoteShutdownPrivilege	4376	wmic.exe
Token: SeUndockPrivilege	4376	wmic.exe
Token: SeManageVolumePrivilege	4376	wmic.exe
Token: 33	4376	wmic.exe
Token: 34	4376	wmic.exe
Token: 35	4376	wmic.exe
Token: 36	4376	wmic.exe
Token: SeIncreaseQuotaPrivilege	4792	wmic.exe
Token: SeSecurityPrivilege	4792	wmic.exe
Token: SeTakeOwnershipPrivilege	4792	wmic.exe
Token: SeLoadDriverPrivilege	4792	wmic.exe
Token: SeSystemProfilePrivilege	4792	wmic.exe
Token: SeSystemtimePrivilege	4792	wmic.exe
Token: SeProfSingleProcessPrivilege	4792	wmic.exe
Token: SeIncBasePriorityPrivilege	4792	wmic.exe
Token: SeCreatePagefilePrivilege	4792	wmic.exe
Token: SeBackupPrivilege	4792	wmic.exe
Token: SeRestorePrivilege	4792	wmic.exe
Token: SeShutdownPrivilege	4792	wmic.exe
Token: SeDebugPrivilege	4792	wmic.exe
Token: SeSystemEnvironmentPrivilege	4792	wmic.exe
Token: SeRemoteShutdownPrivilege	4792	wmic.exe
Token: SeUndockPrivilege	4792	wmic.exe
Token: SeManageVolumePrivilege	4792	wmic.exe
Token: 33	4792	wmic.exe
Token: 34	4792	wmic.exe
Token: 35	4792	wmic.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2984	ZK_FIN~1.tmp

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3752	acXessDesktop.exe
548	acXessDesktop.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 4952	2976	acXessDesktop-2.0.7-windows-installer.exe	95
PID 2976 wrote to memory of 4952	2976	acXessDesktop-2.0.7-windows-installer.exe	95
PID 2976 wrote to memory of 4952	2976	acXessDesktop-2.0.7-windows-installer.exe	95
PID 2976 wrote to memory of 396	2976	acXessDesktop-2.0.7-windows-installer.exe	98
PID 2976 wrote to memory of 396	2976	acXessDesktop-2.0.7-windows-installer.exe	98
PID 2976 wrote to memory of 396	2976	acXessDesktop-2.0.7-windows-installer.exe	98
PID 396 wrote to memory of 2984	396	ZK_FIN~1.EXE	99
PID 396 wrote to memory of 2984	396	ZK_FIN~1.EXE	99
PID 396 wrote to memory of 2984	396	ZK_FIN~1.EXE	99
PID 2984 wrote to memory of 1616	2984	ZK_FIN~1.tmp	100
PID 2984 wrote to memory of 1616	2984	ZK_FIN~1.tmp	100
PID 2876 wrote to memory of 748	2876	svchost.exe	102
PID 2876 wrote to memory of 748	2876	svchost.exe	102
PID 2984 wrote to memory of 2304	2984	ZK_FIN~1.tmp	103
PID 2984 wrote to memory of 2304	2984	ZK_FIN~1.tmp	103
PID 2984 wrote to memory of 2304	2984	ZK_FIN~1.tmp	103
PID 2984 wrote to memory of 5092	2984	ZK_FIN~1.tmp	104
PID 2984 wrote to memory of 5092	2984	ZK_FIN~1.tmp	104
PID 2984 wrote to memory of 5092	2984	ZK_FIN~1.tmp	104
PID 2984 wrote to memory of 3384	2984	ZK_FIN~1.tmp	105
PID 2984 wrote to memory of 3384	2984	ZK_FIN~1.tmp	105
PID 2984 wrote to memory of 3384	2984	ZK_FIN~1.tmp	105
PID 2984 wrote to memory of 1684	2984	ZK_FIN~1.tmp	106
PID 2984 wrote to memory of 1684	2984	ZK_FIN~1.tmp	106
PID 2984 wrote to memory of 1684	2984	ZK_FIN~1.tmp	106
PID 2976 wrote to memory of 1420	2976	acXessDesktop-2.0.7-windows-installer.exe	108
PID 2976 wrote to memory of 1420	2976	acXessDesktop-2.0.7-windows-installer.exe	108
PID 1420 wrote to memory of 3752	1420	cmd.exe	109
PID 1420 wrote to memory of 3752	1420	cmd.exe	109
PID 1420 wrote to memory of 3752	1420	cmd.exe	109
PID 3752 wrote to memory of 4376	3752	acXessDesktop.exe	112
PID 3752 wrote to memory of 4376	3752	acXessDesktop.exe	112
PID 3752 wrote to memory of 4376	3752	acXessDesktop.exe	112
PID 3752 wrote to memory of 4792	3752	acXessDesktop.exe	113
PID 3752 wrote to memory of 4792	3752	acXessDesktop.exe	113
PID 3752 wrote to memory of 4792	3752	acXessDesktop.exe	113

C:\Users\Admin\AppData\Local\Temp\acXessDesktop-2.0.7-windows-installer.exe
"C:\Users\Admin\AppData\Local\Temp\acXessDesktop-2.0.7-windows-installer.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- Drops file in Program Files directory
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /s /c ""C:\PROGRA~2\XETID\ACXESS~1\bin\install.bat" C:\Program Files "(x86)\XETID\acXessDesktop" 2.0.7 acXessDesktop "'Sistema" Integral de Control de "Acceso'""
  2⤵
  PID:4952
- C:\PROGRA~2\XETID\ACXESS~1\ZK_FIN~1.EXE
  "C:\PROGRA~2\XETID\ACXESS~1\ZK_FIN~1.EXE"
  2⤵
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:396
- - C:\Users\Admin\AppData\Local\Temp\is-D7BUM.tmp\ZK_FIN~1.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-D7BUM.tmp\ZK_FIN~1.tmp" /SL5="$202C0,10261767,55808,C:\PROGRA~2\XETID\ACXESS~1\ZK_FIN~1.EXE"
    3⤵
    - Executes dropped EXE
    - Drops file in System32 directory
    - Drops file in Program Files directory
    - Drops file in Windows directory
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:2984
  - - C:\Windows\system32\rundll32.exe
      "C:\Windows\system32\rundll32.exe" libusb0.dll,usb_install_driver_np_rundll C:\Windows\zkdrv\zkusbdevices.inf
      4⤵
      Loads dropped DLL
      Drops file in Windows directory
      Checks SCSI registry key(s)
      PID:1616
  - - C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s /u "C:\Program Files (x86)\FPSensor\Biokey\biokey.ocx"
      4⤵
      Loads dropped DLL
      PID:2304
  - - C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\FPSensor\Biokey\biokey.ocx"
      4⤵
      Loads dropped DLL
      Modifies registry class
      PID:5092
  - - C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s /u "FPCom.dll"
      4⤵
      Loads dropped DLL
      PID:3384
  - - C:\Windows\SysWOW64\regsvr32.exe
      "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\FPCom.dll"
      4⤵
      Loads dropped DLL
      Modifies registry class
      PID:1684
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /s /c ""C:\PROGRA~2\XETID\ACXESS~1\bin\ACXESS~1.BAT""
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1420
- - C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.exe
    acXessDesktop
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3752
  - - C:\Windows\SysWOW64\Wbem\wmic.exe
      wmic diskdrive get Index,SerialNumber
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4376
  - - C:\Windows\SysWOW64\Wbem\wmic.exe
      wmic csproduct get vendor
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:4792

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{c0eb2a39-f464-a14f-bb0c-221a05f98273}\zkusbdevices.inf" "9" "44d1b8fef" "000000000000014C" "WinSta0\Default" "000000000000015C" "208" "C:\Windows\zkdrv"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:748

C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.exe
"C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.exe" &
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:548

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\PROGRA~2\XETID\ACXESS~1\ZK_FIN~1.EXE

Filesize
2.4MB

MD5
d5fbbc25b260eba51b43341ea9acc093

SHA1
76296cbb7996c62b827c4f2b91554c18973a5ea3

SHA256
76f526ce0b953f520181864670f81206bafdd81a88fd245febe28ec04b832e96

SHA512
8d80c306b65972e539045c79a04d1af921f2aa72c5a96db3d190bd51618d9413238015b237dd52ea8861d617495f3159c9f7f2dd5b92e35d4d3b695b9d828a23

Download Submit
C:\Program Files (x86)\FPSensor\Biokey\biokey.ocx

Filesize
877KB

MD5
4fd19fdd4eff2725f91d613d1a61f242

SHA1
ef687334d66107e8f76e229d579d5227951e9b3a

SHA256
005d304b40568eb191c9a2c68f4d2d24ace6f7533b3d53c357e7be6d00d9b864

SHA512
548be3422c73660cd0f03e3eec2d12499420a23287411b7a9478fbfea7bbd8ffcf235ca050de7b72c413b6a92997088f6aa8d020d180a545ca78fddb4b8ddaf7

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\Uninstall acXessDesktop.lnk

Filesize
1KB

MD5
444ddda7e7bd69638db0583151315e6e

SHA1
60e0c36c21c9cb97b5c3532e2e6e96d55b72cf65

SHA256
5d9a9bb9190488db667f9cabd9a58b8ddc52ba3925434cdff9a782506bdf7239

SHA512
1c05efaa6add29c85c97e70ed12bfdba0717b82e97680bef5ae45a144a2b0313c648e1326f3ce340ffd2e981d71d2781a3ea5c7cccc6a9b71c61511000ab0a0c

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\ZK_Fingerprint_Reader_Driver.exe

Filesize
2.4MB

MD5
6d577258f3d82b812010d72a9ef795d4

SHA1
2787372168d785bee81205c96b9ae5ac0740a045

SHA256
92378cae3c740f332c95d796f017faa26c4c38e35fb3c8cd7bbdeafbb7afef0c

SHA512
d7ad9d2cc74d37ffb0179135d65c391e8576d3ea883389058d7b015b7a4710892a53fb709305562547aecb6ebbd2881216c155a0666a2e0f630a338d406e7854

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\ZK_Fingerprint_Reader_Driver.exe

Filesize
7.6MB

MD5
92fec4c0553b451374986a99ed5ff7c8

SHA1
696ab5ce31baf9e96731f50882746ffb7e49a87d

SHA256
5f1ebade3c050ea8265e1d0c77cc952808bf99178b470dcb3ed6262d0d79eab2

SHA512
269aa9acbb114dd722bb13f3e325465255e604a990e94b6d9034d11cd56d6ac6f75cda26c1bcffeef640c93e367ea3f3270d13ec2e1e538ecd71c14a8528b246

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\acXess.ico

Filesize
77KB

MD5
770e0b1a690bd9c1585645d15a9f57ad

SHA1
69472d1086e1e4ec40f779029c591afcefe26aee

SHA256
9ec05ea38d37780cfb38ea0bfffc489b2b6d3d58137591d00606b7320ba7c015

SHA512
1930daa5903b8de66a697738ad7e18c1d643ac1701e2f8b1fcbf4d1ffe150d37e8f6a5546046c53e404ab0bd16cc66680b8bb993cb2dcff5fc714c553cd57dc0

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\AbstractDevices.dll

Filesize
821KB

MD5
aba781c5cc6cb1c002e3c770b47b98c1

SHA1
3b05d2bccebaf7a2c5aeabf07557763edc6bc798

SHA256
d704aadb40b48d05c03a56c48a4a8fe946a8ec5fb7367d991bcda7f87597d0ee

SHA512
2848ec6fe7b4f04f0c47f554ea88e98e64f02a0f958914fef598fcf60ffef893b724f989208233e8a76352f803a633a690f439319ed16ad09e4f2f04dd4dfd32

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\AtlasCore.dll

Filesize
681KB

MD5
2e764729b3b51ed29b448796bf182962

SHA1
ef4bfd86cb17c0da6771adc3e0393e70ced12fb8

SHA256
c6d401d02eb82d0cc2e1cbcccf5a9547ee45701d679a917da04202a1ae481d10

SHA512
e36575977813cc11f2e180bf27363308236b86acf8eb7587cc7f65c0c320aefff4b2d9c90475226f5bdafda5e69a86b4bbf5f0156439e61330531a029d091f43

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\AtlasUI.dll

Filesize
1.4MB

MD5
14176193bf3a9113268a61d4a00dfd97

SHA1
5ce136a49c8debfeb9c1deb2e50176ca60da6f45

SHA256
cce29bea67b56929deba8b75db8ff05a5a965268aab9f5d0846365b6af68a4b2

SHA512
9a50a33eaf3bd337e7046a2b92f6d8942b5e849cd5bbcb4be42ba7c356232ce92f7aa46e8abd1aa1c39868765349d1933545497942d70b2566b472764d4c644c

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\AtlasUI.dll

Filesize
1.1MB

MD5
393b1847739b103657244db1b39e28e5

SHA1
4f46eef6a7eab6d7b219793c54b14fd89758d90e

SHA256
c235aec8010a649e5c107ee40a2f5a7699067c1921f5f14cf10564b07c4d052b

SHA512
c518a38cb24b64e9dcf03c5d024c85c7bf654d5cee22dba05ed2d745b5687571225040ac409bc27969d43c07ed31843bf9b7868cc86f61da299c600da5a24574

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Common.dll

Filesize
2.6MB

MD5
7082fe420c82525986f9bcbfb45ba1f3

SHA1
b15abe2c999ee6336730ca13c9f637ab1ad2edb5

SHA256
a44dd1dd4d0ffc4dec676adf02580967fad06bbe8bfac35335ea90d43d5b9493

SHA512
922f145c1dc00d8d6742339dcaafe2030fb11744b3f5d2ed99c4428a7242c4911e429c14e2ba0421e33184ab9262ac261a80ae334a1bb20d1b99a20379946619

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Common.dll

Filesize
1.2MB

MD5
d90e82bb525f31e2a4e6c05f52ae1e1b

SHA1
b2e061d78806e7559f2f9e5e365b3c9b99f7f219

SHA256
54d5c6a57bff04c305eb44043e84a8f6401a8c6ecb36c25cec22a0c9b5fb47f2

SHA512
19016197ff998a46aac56edf70552f1c88e2c7a71ad980d6243ba3f8e5e8371006404e3b39e4b7ee3cb21124c440bb65cda6c216d6459f3de95c4944ec019225

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Common.dll

Filesize
1.1MB

MD5
80ff78ccd4115f6d61e22aba2e5ffa69

SHA1
6daa22fe4e14c436e3bcf4fe250a46c5661a4194

SHA256
cdb1e72a4bc7ff14f58291aca854135c41501bd08d7e7dbcad4c5cc9f6d9c535

SHA512
615b12361914a9c2ad9d1567cf0e12c75acfeb2c2d33560eb0858c1d209e1226904724cbcbe1d9be9af3d1a501add3732036fa1f168d9b4c157a3bcc1bd13569

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Horas_Trabajadas-27-9-2023.xls

Filesize
19KB

MD5
bb5bd5ffabd4956ececab4d5d189b79b

SHA1
77ee66fcb483bb80fae1b35afc90b30a507d4249

SHA256
9923e556802c2d393822436fbeb57b2e05ff12a3ac65e43b00ae5cb23a828e3b

SHA512
418f19e4f025404c6334a103bd179c84e76624c8c85f10f4c97c57a41c201df71b4d3a8fb31ac5e9e86e710203f1a8ea103506d48fd25e4d91d74bd135e5368f

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Identification.dll

Filesize
404KB

MD5
80510da356a09ad417ee1d6d93c792fa

SHA1
4846a74cda273b39e37afc5fae7df7b3733aace5

SHA256
24251d487fea1252e8f802680e5a19d680bd14cf3b017e0e166e007817d0839d

SHA512
26b37d49a7fd05907451b44ed8c728bd9e79fb12cc95cc473623d8237d5fdb7014b2b531ceeed9ccaf8c41d887b18b99d6dc6716f2060e2b7b3ff418268e0dd4

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Integration3Party.dll

Filesize
343KB

MD5
ae2271bb69a48824a000feab91e28062

SHA1
164648cfb48b89b633c1acd535be287e50ffcc7f

SHA256
e2feb8237dd3a9b8f876c1df30eda7eb12ac67daad39bb25780f5c26cd8df24d

SHA512
0b49a3188abaaabe11557447360d4fb8241d4ba83dd10edbe5433aca331207633bfbcb1273b9045c0030979fbdef38b4bb8afd5cb51b1e03a0a71cfe057b2786

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Concurrentd.dll

Filesize
572KB

MD5
879db733e42d2e4d2d9aa55783372f7b

SHA1
4c2e8afaa9e7839ce8c66ca5c2c93fb80739d06b

SHA256
913fc1e84ba4b73199bad14651b918c162fe1967a3bcdf088619a355f5fc950d

SHA512
34eb5eab3cc4f9b63c4468f2cc5dacc7c1109a58432bb07d7dc4129ef0f62b7c4eed1a7f3e721b28688eb42a353a5badcd9da5a862b6f5bb2227849a8d3d6b48

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Cored.dll

Filesize
75KB

MD5
a48758bde488521fb01c1bae1ac432a5

SHA1
ad34cea17616f1c244d839d4a1f6ce27ec080337

SHA256
2f1fcd456c6457c0ebd95b192c5bf5b792f0b4beb1f37d3065032dd772e403cb

SHA512
d45303fb34252e87b2baa9b386aaaac2cf818e86f48b6eacc1fc369875446035c8e90540019f95370244845c39a4a2537afa663ad772943e26c19dfa40f4d864

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Guid.dll

Filesize
852KB

MD5
25577defc7e9f7fce3f3318910506c50

SHA1
b46c06ff31eca33a5b84da1c2e46f8327f19b229

SHA256
afd85bc444e757fae792e1266faed926ac3638e74fa06b87c7ccba94ebbc92d7

SHA512
c1ce2736844a76477cd76eb01474472956afda364bdd6ee03e680c1e57a0ddb744d9448e6a30342ec85cbbcb400e1e21fcaffca59135b142754b81a3c342d2ef

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Networkd.dll

Filesize
10.9MB

MD5
173299f166a0f3211b9c19b9b93a9f6d

SHA1
c0cb02f9e5eb1057266ce01f22f305547adbf0c3

SHA256
bab00b14b666c6a5d6afdebcdbe96cd79dbb985591cd13d53f7825cac2a64072

SHA512
8dfa536c015bbd329ec0f692b1709457713811033d60b447ad1db9eac4d335777174125e6ef042dbc968f11e4cf743d61e034d66d86f915d79fa6f8fe7f9c79d

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5PrintSupportd.dll

Filesize
3.7MB

MD5
e431aa90e79226b4ac0008bc0fab2682

SHA1
e7788ffa0e34914a56c85eee5c7aee839577142f

SHA256
0761fb318fb4fabeea2667f7730b5758fb354bce98a29f44a9102c0331afce05

SHA512
d685dcda13f67028ba39a84f0477f6ae42f45644ba348cf5f5bf8cb42f5dd09d0bb55c0805bcd3708f06ca3ff609106c0aa81c53f8b4524d80f38aff74b82b23

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Scriptd.dll

Filesize
2.8MB

MD5
f6b6f43fc6a7e3b2b517f85c5a11aa26

SHA1
b716f312c56151a227cb7b9c30234b010e0638fc

SHA256
5c873ea48d4f69f084c6f493ff0e05fad585fe7599d280b925d7934be154de80

SHA512
a69e5a6c6db01b79a344dd08a7a55b4be46ae17507ffad7c690e94bff22a4f08b834ff3232f8b4b8fb9f062a39d56c4d7a429e18524b0ec02d5c9e7793d2243b

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Sqld.dll

Filesize
2.3MB

MD5
093abad7d15c4cc10f691227f79f5ba5

SHA1
f154d87e9b26b2f6cd6f34b25190382b4ce5f5cb

SHA256
fdaf65d59d2260ab31ef834b660937e644981be1f367079e0674948fd5a56b32

SHA512
690b74ec3cef99d8e1e7efae051aab7af9814237825d8a14d959b021e2431c60e437bd5f9583f485d6f824fe5ea50187d2adca67bee5f8f39071251d3e10697c

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Widgetsd.dll

Filesize
1.9MB

MD5
dda9595416a0415e46bf932d1a44116b

SHA1
69da1a7ae66f3296691e16aae27b1ae217915fbb

SHA256
92bd191108365e07c8cdd588a2230385bc2269d277e83f2e545f454346c4a5b4

SHA512
1cd1bdf7fd49772eb41f443acacbd3cce328abe29eb2db67d35325c48a850cf78deab3d9a5422af59e44e9c00c8a05dd40e9bc2815069f9ce1b3a6bf70a12dc5

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Qt5Xmld.dll

Filesize
873KB

MD5
10c8217415e8e0089e9a5e74ea66c75c

SHA1
d15b303884e5cead3528a1a35b0ec6c11e0615ec

SHA256
26110ecb390b9e11134fa2d791862bf14e47a804db901e1ff179fd9b5ea943ed

SHA512
b6cf90b10ecb968222dbf6fca0429b5942c89188c7191b6eb65d4fef7bd70a81a377c62285b8d756bbe3e26c7e091c1c31125d02a779dfd5d78cfa9b8eeaddf3

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\Util.dll

Filesize
418KB

MD5
4d754bb86d20090759caad79660b4ae0

SHA1
b38d06ac6a3d07ab0d6cd5f8b181b18261dc5ff5

SHA256
15c5a77130d5ec20deeca89c225ab8115ed7452611d2350a72bf23809270a0c0

SHA512
a4f486c099f3b85d392154d2e9c37c6d35fb464f4b64c4bbbb9313794332241413211a6fb96af823b94470fe97d7b8b18563d7989d43d42e7d51fa695f66cc23

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\WebService.dll

Filesize
1018KB

MD5
5dfb406fb530e337e48b3635c5305965

SHA1
0787482284205e25618c286a16f0f084ca0d4a5c

SHA256
b4d05a36cb8cff3e3e360d82fa63acfc5febf7d3a30bff75e2e7ed2241e1743a

SHA512
d2c2ab2bded725820a812280b1b98c36c1a7ebe161c9c911b3205b2be8e421a5d61d2f80e70399dc9d0053ab9a9596905dbe00db6f0fe0d69d3a3feee627113e

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\WebService.dll

Filesize
910KB

MD5
b673711bf796e5e3f40a0e478968d39b

SHA1
42f3c26575b3a5ef16d8d873d535988d2e3bfa9c

SHA256
9628ccb979a7a395c4d8002362c57ed99d32547f6ae9e173f68aec40aac33981

SHA512
452134eaa38f7b2344a4dbd4f083d87dbea37c43c5a829fa8584ade2793de169572d82e125804a5b69807221eb7aae6e65d0e2008a13448f537ff9fa8aa2aa84

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\WebService.dll

Filesize
829KB

MD5
61241c7d2ea80e1217ad396b1e315f6e

SHA1
f16f990948bb79100e8d77c26a04233331157139

SHA256
6b59ec0a420d7130dc54e7970d8685904a9bac6d0aff5da68192a3b44bb3598e

SHA512
107ce5aad6b562a593758835014e9e8ced32af37b8669fcbed484b2d5d056ec553c070569a12194e65887d1b3a90e3a742603c0d088871d39c015ad0400a652e

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.bat

Filesize
233B

MD5
99416aa30d5bc08232fec6abb9b96ab1

SHA1
3e6e4c3e8af34e3ccce2f1eee05f37c88be1233b

SHA256
0b54db16c1d7423d2eaf891a2aaec6090627b54c4fe504c32cb9b50002e3593d

SHA512
e81aaa6918b27692ca9c0053dc86f41c7c03c6bc84d08471f7c9a39f4856e5495e21b9e37c057fc27b8e653a49ca3477c3fce8516964501f72537da6957091d5

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.exe

Filesize
3.0MB

MD5
e20a423a9c843cf450e089162e38ec0a

SHA1
83e9672bd3915630845dc6fa8becebd0afec309f

SHA256
cc55bcdb878ad210d1b221d15dc9f0b4103252707367d1c00a2129e4eff45157

SHA512
38da19efa2bc51daffa88c7916abddf97377d5b33fd6c882b5691cd39a6f875a41722ade3d6e5317780da1430e05ca2f185ef7162928e182ea4d7c66c48010b4

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.exe

Filesize
800KB

MD5
9caeb240201c86722e5325138257fbdf

SHA1
004e185e7d6fac24af68005f0f78adb079631df1

SHA256
983852824b27f7c130b0a745fc310ec86e582c18762bd352f46290f38454a704

SHA512
eb739c40bf24b79cdd855b35c209137f78cd1531d994c99394a762e6908fa011669631873041fbdba8034265e2a28e8029b77a8a312299daeb88f1202c0d0f94

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\acXessDesktop.exe

Filesize
3.5MB

MD5
7da5905138f0761b4f92a22b4e37f3fb

SHA1
db011f065513e526433744301740679f694bb469

SHA256
e63add5be6865be471720d68c704481ae50263568c4144b7fb359cd3640ad660

SHA512
9708dbba75d6cd5b7c9db27e7c5ec92f66629aaaca859d41476c87b2ff6a7cdddaa1f34723e414b596a63e4b5f039268441126263fa66008e53ab307701f44ed

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\build

Filesize
23B

MD5
20078d9656025a1b3b7009b4829745de

SHA1
c50b5cbb9ab58b69301d53c69674702944780b83

SHA256
2f2364de152a3d9f143b782ea19ad5e25439c45969c33780f91303df9eb5ac60

SHA512
dd5f055c0d29103d782b29c3411f3824d70244fec492243d18d0142ce02675457a21fc0b27f5efc6afe0f3bc1a136171df85e5222e8883aab2be0b98a3732b39

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\build

Filesize
13B

MD5
db5e4052fef186febee6929f125c2874

SHA1
f4d14bb0dc9922b1f5d2fd2839a803f9645caa4d

SHA256
dbe7c3e07aba9aca8b918854d43dd5896220502259eae80a8b3c3db7ab93d473

SHA512
8e0c534cb002ac857a52d9a321acc94f5971d89603da1bd1232f4be48008f4bfda3f7672f15a852f4b550e09abd4b24611ff48597df03c7d769cd3168d0ef239

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\analitic_server_conf.ini

Filesize
64B

MD5
fa4816e23d668c9843a2bad6708c794e

SHA1
7c131700fb1c36917bb3272b65d62ac3c13172b7

SHA256
14b7494afa3c27e87dfc622c8b2214c4198c92635dfa84aa341b30f7b5c71802

SHA512
cb28fe3f5c16b801c80d9e5a052f805c849149dd2c2e6f75bdb5d3fed27ebdcc9a704fbcfb8bb3f09b6ebaef2d9624f24319fbf55d3f23dfd7dc122998d4e801

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\config-acxess-desktop.xml

Filesize
5KB

MD5
19fde6ad77cdf32c6790f6fa4cbdb2e4

SHA1
d715829ed66ba13e4cee2e4e74cf2e2256db953d

SHA256
6862737d32d1dd994096f46c53e0530ffd5689f6950698dba8549f184e638b72

SHA512
381c8aaae26a7dc806fae99850abf053100e3a85406c8c85682693956fd5537cc16e7963e3c7fc396501d8e25bc9099a0f76cadf3b3df0000cdb829220969bed

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\config.xml

Filesize
3KB

MD5
7d3646275c328b1e5b82cef375b31a47

SHA1
85f3dfc073b887bb3c9b92cad2ca954ea787ca5f

SHA256
b109a7eba193e8e7a3b9d97bb8b8094779a9948193f18135a6be36a9cbebae14

SHA512
f4b02a3e050659e9a74e411e6b40e5f768ab5cb3a56a08d187ba4c6850aadbfc3bd77440b197ff5dc578c60eb5032f3d52258169672b5f678c1ab6f5128e5500

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\config_client_socket.ini

Filesize
68B

MD5
01e74ebcc3716281f79267804bf0b82b

SHA1
0a181e0b6ab35738a11bc24aa9dc31096cf5027a

SHA256
1cccde771d382450ac79b3f591500c727842da5f50ba8920e52aa013f67b35bd

SHA512
5ca144a731bb66e96a76dd9dc9638c1978da9bb2c157242ad055c7fe80cb026a469910cc6e43a70b6d9c540c5643f93716aff1d532ab7dda4eac0a93d2e9346f

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\database-connection-psql.xml

Filesize
149B

MD5
73a52762daabf77ba7cfca3bc98174bb

SHA1
b3529d355e7f5b0680134169de59bad4760a3385

SHA256
d540292dcea54982a1ffa4aa7fbaf4187b3c7f91fd15c07b8dbb2df3d0d07abc

SHA512
c3fc0ef41ae7dc5ff17d3addaf389c936a0b8dd685293936449093053340f6b99b251ce19f1db841a9ed70caeb2a52e0b736ddc64df9de6fcfd92c6324036530

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\database-connection.xml

Filesize
110B

MD5
a267bc3b74eee76d95dff076f92d9253

SHA1
f324ed2d36f72bc2fbb49d5b6029de4015d63e91

SHA256
6640d0d71158f63c84f83c2e41dcb06936e20e22b32ca9172eff3c009e22482e

SHA512
19c59bc3d9068471f0f91443ba9692ba22e6705514c8523488fe980b031da09f95ccdcbbde4bc9b1b404b57c57d3569dcdd97b5d345c9e86b46df392931d19c9

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\db-desktop-sqlite.xml

Filesize
247B

MD5
7e6e77153e1b6caaa428b61b3d3a66b6

SHA1
e14ba2edf09f017258d523e98eb25c11a19e96c2

SHA256
cd50be6d363477c9b75fe03845e2b28329dcd5c3f9d21a8217ef9acc963e09d1

SHA512
d20aceac3d1db8862bfbebbd8ccef150d7ddd5ad205d8a580ce2ebcd518265a5c27190287395cbd8ba6319454b0e22c897ac40f1209eef8a04c697ed6324af6f

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\db-fingerserver-psql.xml

Filesize
168B

MD5
303ee48d586efcc387a28960b845e75c

SHA1
54b4344251638d43f4cfe42d9fceac36d9651154

SHA256
b482066441573a3622ba850d5a6fd686431a0ba96805fccded1365d25c6568e6

SHA512
ffe198f33e89d0cc946eeca24f40aac8069f245debbd34e982260d8904467e0c4be6dbe68d7f3d6f9d7de0b3e847c2050851323da8f3c5eafa19aee1f236c2aa

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\db-fingerserver-sqlite.xml

Filesize
122B

MD5
a961cc337d09ca74770e1058e30cf011

SHA1
505e36fb2bf00d08041d5f681313ead257e92e16

SHA256
d6fab273ba3fe4ce1bbbee76c94dbbd9cc5199c44ac200600c36ee833b8b468f

SHA512
ab6aeff89b6431464334d9ca1069cece288831066414c3727796d7da7d012cfe6429480cc932ff6c03ea0bbf6311eb7015f46d47ebbd82a25915fc8d341601af

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\decoders.xml

Filesize
635B

MD5
71fabb629b264957a23ea7aabf659f46

SHA1
bcd04adea9156f07f2597d85efd644b5c9c5930f

SHA256
eef42362d47cd5b10310d0ec9c28239357cf47db4f9a1cbc6adc9fa284dee882

SHA512
95b79b4d66c2b46cd05e2ad6a824713155a6199df28a001f6cceabdc91358289d431050002e2187a2a7ff5d17df199a4b78a7c8f37f5a084095ed2395c2238dd

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\pins.xml

Filesize
4KB

MD5
795638bf0cd014370670b0b135bb5bd6

SHA1
4015fa54ec3bd3da72e3cdc8cd07e8a09a004fb2

SHA256
c1fa81d4eb0a03c6c1fb55a8df29cd19d58d4f2a4930950bcfd50ca78b951555

SHA512
5e121e8f63b6835203f70a75c3270262b03ebbce4a69ca35160ca4d82f4021a712514d140c2d600bc1b2ad87d0a7fefa761376c61b5221306f8f0adb417f739f

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\config\rest.xml

Filesize
226B

MD5
d74c46a62b263582443ec1a7b1bf1d90

SHA1
10038b812e0698418d17b10be8ebc882baac1f50

SHA256
14fe88984062aba2f2904f76360d98bcd0f4446b1d3a77c2ec3da55141621d6d

SHA512
c7ec12611be6918ca5fe77bb2f6e310e34774bacfc23b1ec32ad774b4a5fef729766daa11136259e7e7167a80288879ee7cc0f9e036ef15906586ca4a167e3c3

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\create_csv.py

Filesize
998B

MD5
56598e1b242a16a5932d26a9dc065276

SHA1
e722325311d957cd77fee642d0f6e4c4960929a4

SHA256
4ceef6275ec7532b599453059b8f8ec580a2a2c970918320b91804be21041bcb

SHA512
829b93e2d0e8e9a51bf9e9c905937c1d4c1d2d84020cdf641344e5474ccad3c737b9288fbc61deec7ed5307ea2a6464cba9bf422fe16866f0dfa0813840e9a61

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXess.db

Filesize
396KB

MD5
e5ba7a4384aa4c6d191e15cf453b8f70

SHA1
9db1da8c893d4f456247bb6d16c95bfde526175c

SHA256
4c25c49b7c55b8a765551c303c9f079ff0e121c04652a1687ba826457eaead2a

SHA512
02382464b1eccac6ef0a9835102d81f72608c9231c5fdfc5f644f35529d03f4593358b1cba47eb5b5fbc76e52698173b8364d1abc3e7d039208430c164dcc79a

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXessDesktop.db

Filesize
217KB

MD5
9f0d18469221406f46fdfdc4833fd644

SHA1
6b1b3650b71eb8566fa99377366be789a9e5d869

SHA256
777618825b989fadb6224343d26b49c1bdd73a0596213d3c230f73dd93d319b8

SHA512
55e692166a0b8c91741b3c3c6f84a946b527a41fd8417219955317641d5f1c2af2c0789d124f7cf6c35b38059a09514cb6ac4698e483c0bf5c0a4642b7ea979a

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXessFingerDesktop.ISDB

Filesize
8B

MD5
33cdeccccebe80329f1fdbee7f5874cb

SHA1
3da89ee273be13437e7ecf760f3fbd4dc0e8d1fe

SHA256
7c9fa136d4413fa6173637e883b6998d32e1d675f88cddff9dcbcf331820f4b8

SHA512
991294f43425a5b80f8a5907ca7cdbb611401282585a58bb415077005428e3b4c0f661fc07ba5c45f627bd8bdcb172389ce2fda461c029b837abc70f0abbea20

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\data\acXessFingerServer.db

Filesize
3KB

MD5
cc01ab2a0fb570d5599eb135abd374ce

SHA1
1e57be0dbc6554fcbef21c990b0acb0bf2ae7521

SHA256
dc33a650456bb5a19e37ab568bf912bf01f5182e73a6eb6022bda4b98b4ed5a8

SHA512
6c112c37a3ee9e9bcceb54481cfc88fd245065d3bb227d3e860c5b9cfc9face6c59862241274a1a90ccdf99e19f6d8d8de93951737fe6aff98038741e8981963

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\data\servertime.dat

Filesize
99B

MD5
00f9b84a16badcc4342451e424a9a2bf

SHA1
83a3a52881249439c1a4967bbfb7d8cd8e00bd10

SHA256
9fe547e368c9af7fdb124641a275b30a361f55e8e89c235e0d8e69d72e2e104d

SHA512
2e55729dc142d89d59dbaa0a02ed83d13ef335ffba57ba25c00293fe885644ddec782846e7e6e8259de10ea2662c5e0dc16e399fa0841a4655115fb9956c8369

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\help\manual.pdf

Filesize
582KB

MD5
c4f6cac65117809123f71f7a440e78dd

SHA1
8f80c036161bb8bc6855099d5bf125ed16b7388f

SHA256
997285acfd3a28b7ad6bffd3bfb97146baa2d4a42c45ef91f80ccf2f7a39924a

SHA512
d72aea56bbbeec54ba769da635472c190e4a403bef71541336f4948929c434a09a4f283c78feaac5722d01b25018252fd773f595d37ac016063c5be4d7ff8fd9

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\iconv.dll

Filesize
868KB

MD5
73af5773bf5627fe771bf6809ec839f9

SHA1
69d9597991dd0d1c6b478174aaa85b0e8175d0a7

SHA256
6cd69191469bf13f0cea70837bac9b1e7871c116f5f6f18bef5a6a9575c020c9

SHA512
64b631454d1d16709ae96cca95e8e3dd6049841c53ef6c4643b1a5b28a32fe6bfacb86337e93b5f9f2abf43d0233b094646b8065d3c1fafeaab7c3d6e371b864

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\importdeps.sh

Filesize
1000B

MD5
f28aa26b7821003fcb6dae9c0e46d5d8

SHA1
0cdfad27cf23144e62ae7785d85b350603287bc1

SHA256
568fa99ab73d81251eae5c917f4c346f444db9131f563ae340f6cbccf580be60

SHA512
2cdf6a150a81677b9049d7ca1ed9e50d3b805ec3e8177947f4a21ee90d3624169510444fa8d5421baf84b915b929b243718ff5c450cc50177793f68e4a4eadb5

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\install.bat

Filesize
1KB

MD5
5ae3f90f320c66bdc36ca121447e241a

SHA1
58ca61ca303b0926153de92d505824c277c61fdd

SHA256
f6e32a41d167eb60e85988c8983460afd884d6a7912517c19b01e6797cb5273d

SHA512
92f06a20c57c9a8d2ebcfc5a48bfe0304473e03f5bfe2f1790883066efbaf8818c89e439f5c27d8db9aa82c3a1f0c37b066cc742a869a3e5f6debf3b1c2cc372

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libcrypto-1_1.dll

Filesize
778KB

MD5
d69a3564b02275d354b62685697f9a2c

SHA1
7430b7eb3df5a370bd7ef9327e37cebb95399e35

SHA256
3c7bb1639b276904f460aeea40e139971ae2a9e215b5d0a246bb5a30aa9c6a00

SHA512
3935d0458dae0ce078c643a5c3dd6252c35539bb4d9522fcfdd1e3abf05f75b61b14f828dec9e5df9f594850fb67414f707c294717778d280736aea98bb055e9

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libeay32.dll

Filesize
707KB

MD5
0a95d2a9799af22c139adb312259b3ed

SHA1
81547fc553845569e8a7ad6b9fd493466803ea54

SHA256
97891882612d442c5b898f95ea0cc7ca215aed5c18f864af8fe019067adf0a7d

SHA512
e9826feb325350ac067173de2710eb5339f399f3d6e3c4eab6c9d759f8c1e425c126da4712d3c537d600567ac5e8ea295784df2407360a1717cc827e9e98d902

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libgcc_s_dw2-1.dll

Filesize
105KB

MD5
c81c2063954800835adc179294cea84f

SHA1
4d42d9cbc5e4e34ad11b9d8560ff5ece6c4a6e4f

SHA256
a46d1688b40cf546234c816c2385978a7ecc8b3f97ae8c29aae5a42c7ce2d3dd

SHA512
8db68f576e8b32eb94d5839c47e10cdb59c1e281644ff7053fd33b6c9e4408f81a99acc9e91ab527da49fa579f9d28b0718476074275594f8d52de71f5b65d93

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libiconv-2.dll

Filesize
733KB

MD5
396702c77c2d3d104fe96b467d8ce6df

SHA1
d383ff839a934418c76056c6f309d80fb7a571c0

SHA256
2282a1ae6672df8529ef0e0fdb7bc8e8c2d754591540a5fb551c2a4b7a46be60

SHA512
f4a28a6a8aa342c28a0d3e97373e32f727ac233ad34176c0f4945fb0a26b5693a5b0451aa49384565ef2cbb168f6da1da17e5f841f6c9a9bfdb24d5ccaa85d42

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libintl-8.dll

Filesize
81KB

MD5
2e7938bffda0b32a45900d8281163a30

SHA1
ad19cce12f2175c1fd1160f8cbb464f2f3dc5fca

SHA256
6c6fad457ec838247273b837370a37aa271191ec0058121ec376238ef85dfd0b

SHA512
6b9ac2e7143ca7ae5ea266864c110e50fb16b42feb87714305980da16ef6bfb86c61d50a737d88c85b986906907bc63a8158b6ffab2f2b367a443f3e0fecbc61

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libpq.dll

Filesize
164KB

MD5
1ff8ce621694819bf7918fdaf450dcca

SHA1
85e03b03e00bc8cf7cf2fd77e50fa4641e820cb3

SHA256
e441c3702820c5c87f262631661748f50bcfcea26a449c8984f61beaa72f5447

SHA512
c7d44bf24f99386c64e0048dd8358e215bf2d31df34939151b34a844bec2b1adafcb55bbf8cddbd533fad0ee68e132b2e4dcaf0ccdcacae214290b54b400aba7

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libqrencode.dll

Filesize
51KB

MD5
f78c32f83b81475f53d388596f70418d

SHA1
67067dd5e4cb75b9ae83eb277bba0b7593d1fe95

SHA256
fe3e1415e63809a421580d3bee92023e156940d10e4d01f3da660b18e95b7822

SHA512
b7212f3b9c5d2fda2b6e00add8192850806999f7cb32f30303b7f81a765f4a18e965d44841714286b4f98ded9ad125f89dafd166159ce1ac181f9c82144dd0c5

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libssl-1_1.dll

Filesize
488KB

MD5
27b4afb2b31287d57914550684c39615

SHA1
77a3df1ca5ca217b0d86b70f18d9268daeae55fe

SHA256
6f17818b3256574af01ecb4c2341e31b8eb4144fcf12e51972b7238358131744

SHA512
691ec69624dc3000174c7cf6032f65fa3d763d7c1248ae0583cd163143a757163b1470dad9d5b88a95b1275c6fd8aad8763b9109cf36eb0a43be6a18576daeaa

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libssp-0.dll

Filesize
18KB

MD5
29e9023bf214f1095f6b6fb7c071e809

SHA1
f1926f47e6007551291ba197c90d51890f836d87

SHA256
4664a1606c4f1ad0707322a0bff1dceaf6982b6fa865cc3b483ca2d20b08865b

SHA512
d795d1bbdbf68c95c65859cb7fbeb47d3223e50461a81f55d35482561f27864fe22de1d38f748b3ce404b40bc892e374fe723f413e4fe0d8f2e5082cdd41f3b0

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libstdc++-6.dll

Filesize
1.5MB

MD5
dff338824edea7e20c7f7b2690045090

SHA1
f822aa16fb0911f663753afd6540a715231bc00a

SHA256
79622396dc4c7afbbceca03e69f727bf1862735ee3ad671aa3ee7ada8aa446c3

SHA512
7bb718ef44a0184ea0108954ba8a5c771b71905acea27b900032ec3b7448bab977b0889eb5a2465f7a4e4cfa5c53140f9c9daadddeca768f220d652eb708c1b2

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libwinpthread-1.dll

Filesize
77KB

MD5
1f4411c1f66c9cdf96ca9d7f9caf52d9

SHA1
ea04be653df7335483c7c8f46367d75d4ad9224e

SHA256
b5fe4d6408ef2baabdd168f4c7250900606468e9aeb24c71e0c833d3d715ae65

SHA512
8b95d0533773c5424733862cf60ed0f0d2ed5c7016b602a71dc4ce4a90ef0946de605f46c94fb0f6c3135447f60a00d3476e8b91a61e079885aa764bc1407b8a

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libxl.dll

Filesize
420KB

MD5
50cb0838b1923fc7b16cc8ff2a0b75c6

SHA1
547f36db9d3f4892f5075f54a56f7979e6b34567

SHA256
b267dae829cb9f5acb9fc699a06557237a69a3c98be5c72c81d66d8fc312b5e8

SHA512
1ec191970fcd61473f2e1d8660f1cc0926d7cd477ff68f32e78841b0ddf0451714a88a02eba3eed982d0df41192f5fba79fbf8688306562524f0680cf7ee94b0

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libxml2.dll

Filesize
284KB

MD5
9e7ac4843642add593eff4a337857537

SHA1
4825dac584285a07f8db837c4f36d8e017ff78e6

SHA256
838887621a71f9f01adb24b316059b881628634e66565ddc0cc216a3d2119664

SHA512
b30aea7cd64781e8d69d55b23a24a8753831d5ef812bce59e6e98cb42a91a44e5e22f6b2e85b52eb34280c4de811cc0b6bf2b8b0692db2e1230856cc13cb9c63

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\libxslt.dll

Filesize
163KB

MD5
7884afa5b63cca9f2fb2effc1a0a3c9d

SHA1
4e6e49a55edf7e344e757c24e63354a92527e198

SHA256
9a8d25ed78d1e93db8a24af760cac092d83a8f2deb21879ca564406c7d0c843e

SHA512
1158e61079abc6f10b7e7a15647c9bf0b4aa2e8c76112434458e9653d27064dcd411622e2e6c1255a5fcbb39483a0e9169e7a79f0f616c729de91d020ed83a03

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\license.lic

Filesize
512B

MD5
4a4af96aa94789ccdca62d92885aa6f5

SHA1
b11f476e0da332e2c2d26d5fd936c77ff6b2736e

SHA256
0a605c0935ffd9e3e0c7806133657ac447a7d2933e2cf384242ed6f5fc515418

SHA512
6161b7aa4f26d9d597df5853964d92664472f2a83cf3121410000b8cd18595409a820c31883ba8b64297e7a9c291fe747ee4648d5e09c1e1ba57f466efe7feba

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\mingwm10.dll

Filesize
11KB

MD5
dbda60d92e774b4acb3b1cd71f909426

SHA1
66bfe06a16025f574323a0ce64dcc7c8216eb56c

SHA256
56a59dae638d9bb45ce729a5d6fdfb0ecbe88b37047e4d6d20dbdef1fc90bd72

SHA512
993a1f4af21cd5e13c3b8059cf483b10a58beb0d1777703ea07e9dcb5e7f681fa774e770abe9b6b4ca66b348997da0218d0ff67f18fcca1b3ca1ece2551d965a

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qgifd.dll

Filesize
640KB

MD5
294a0a24819116c5f47a788078d6f223

SHA1
3d3937901479561bd0d83161273b15670311e028

SHA256
1f43db0e2df5a581b8d960598084e78094e559e1ff37b3eab6965c937ada1119

SHA512
ebcf6bb12903f1e2ef4c86c428c74736c06391809954cd25eac28abecf6aea473ce4ae53b97c31361f7f275bf932cbe16b5a34993a88e57409507d7f2bfd5d1a

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qicnsd.dll

Filesize
718KB

MD5
79e309d5c3c2da7abe3383ecaa88127b

SHA1
251ce20665c2cc7a68fce47820701a637e4eaabb

SHA256
f140bfaf73671866d27db1da2daeb8a47cf57032c6a05b4b1f867d63e12ab331

SHA512
d2a3a13953b312e535e5ae791ac4b98ad804f6e825b8a3939cb79fd44b49506c37a7ee0159c3da8c0592d6b5c0b775c130bec902f1fba90fb05ad64def645622

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qicod.dll

Filesize
490KB

MD5
3908b93fd9fc2eb2f906addb21aa905d

SHA1
972ad4c2bcd9c76bca6729094062754242c6496d

SHA256
1a2cc25cc7241c320ee98561bcf4821fbfcec45cca084627474b81fa8dbffacb

SHA512
4676ba4c0617530f836dc17b9ed471cebdb760630118cd4ec98fd065900df8529ae4919f8a184566b186879ff0502674f1dbc256479c12391675b6e59f14ccb8

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qjpegd.dll

Filesize
762KB

MD5
d589a1e0ae2fef0bf09359ab830dc761

SHA1
df42ef762a1b7f0f9d8421aaf75a49ecbcb3bde4

SHA256
508bc5fd4aaac7b3e009464daf68041d5833a0c62ff7d38b4f9815ccb15cb095

SHA512
834b68a706f9b1606feb9ec596d38e8de720c139953171648081b0fddf849724a960d7226331480c01a7d32d28a34fb999aacc8622d51ca1d6876ceac926d3bd

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qsvgd.dll

Filesize
780KB

MD5
764d909eeb2a97f1214be826dac363b8

SHA1
98fb5d459f7d99ccfffac151ff36f7f7990db051

SHA256
98f660b87b5b1f09344764dcba8e838127c2725041b22590385ab07f6a0f648c

SHA512
174fd263fdbec2f559bb2cebbd56b06f931417c91c609db36c45ee77a112847c3e348bbefd3f8fd6b3e845db6cf982d61a46fe2fbe2a48ccfcec145954e288e3

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qtgad.dll

Filesize
801KB

MD5
d201636134ee7c15bcce2057b67f25bd

SHA1
e99ff9c701d4e012ac437fcaab4c87f9c8e924d7

SHA256
62eb30ae353a7d617b8bc663ccf897834bac885df71759b1a18381e178d15a5c

SHA512
4e1a36015599782b29d0991920cb755f8094ed7b6979c9c448b5cbdc71fbf74663474e15c541c81b63bb6be2802c2a214716a7edd3143197ff4e6bfd2e963fff

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qtiffd.dll

Filesize
951KB

MD5
dcf5bd2c23b557fafe50dc17352096bb

SHA1
665cf5a01238202269f19e8ae30eefc102fa17c8

SHA256
a3d7325f71de4d1e7e2507f56b12f99c7149f9089beaf03676b246ea6b312d3a

SHA512
ec8ea19d16094e544ea5a62bf18e1c6988a68c37b4aa80c65352d54b85f683feb486bb153f2a83961799f2013d7ff37862c65cccc4fd9c3687bcccee5cae4252

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qwbmpd.dll

Filesize
846KB

MD5
5588d14b5da8df9c1a91e277de6fbb17

SHA1
03d5467ec0ad87fa368eb68feff387f85b42ea9a

SHA256
76f1a90067da915029f7b00638d9e2dc13b13990f519c8aee8ed4b2541b6ff8f

SHA512
84fae556c1a21682b36e7bdbb2466a5b079772d3442b8d956ebbe604c4bb3df4aeed7d27f483c00f603287d443d8a7a0dec1151f8f3b6a414fa8559ebe63a6ce

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\imageformats\qwebpd.dll

Filesize
1.1MB

MD5
ac29b2e4fa498aa1c2e3ac49a45c1b27

SHA1
5c4353d3eb1adf34f689cf364985a7859e883ba0

SHA256
4c36aa39d5c960982abdce9f9c459fa2071adee43dcb71d8a09524171b4ca0a8

SHA512
759252311c8ccb97262d08ad51eeace6e32c2e4791863605eac2ff2d194670468e52ed1f4597d7ada21f87928c21b246e4eabc5c74e93a089f0bd3c3d653a8d7

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\platforms\qdirect2dd.dll

Filesize
801KB

MD5
63a1f65c46debe720e0a86552c8d8afa

SHA1
7b606b765a34095144fc8d984fd13df465352e27

SHA256
076490513bec4bdfb50853b2cff32407714aa33d17d90f2b142a7cb4f575830c

SHA512
81f464faf649be381162be19398d462ed79effd5b14d08bc4dd39a834ef240b8599db3221d0e9a750a6c1c38349260e3e694415eaeb63f14f8dccf210663bc10

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\platforms\qminimald.dll

Filesize
193KB

MD5
09c7a649b1d1e02138e061425b6fabae

SHA1
1e20523552cf1fdd0f49a59028e7d33f6101b14c

SHA256
385251d2304ddcd109eb8ac1d89e961ee6299e3c9948e74ceaa059c15ed9fe98

SHA512
da7fb765939acbd32fc58ec80a0c300cd98bb612c143c9992b9f7612f6d220fcf088b42d8ab626025e28b636d7e687b74901debd10b425120be7d106c621364f

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\platforms\qoffscreend.dll

Filesize
549KB

MD5
23e45baf8935da843062093e1312a97c

SHA1
e4e4ac03e14b485cf9cfafc316e12a8acf4e2edc

SHA256
080083cf2279d2324abef5f5803a1a234cd0c49eb82eeec92191f12f4233233c

SHA512
39750d95ad19d6f9e222a36f8bd23ccdaf7f14d3bd7c561d30182c645e6aff5fa5bd7bf5d00b650c0fc8a0efc19791b253b9e0c56ba245bf86c70fb7da68cdc6

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\platforms\qwindowsd.dll

Filesize
488KB

MD5
a7ad888a11eeaf86d13f89014a34a0cc

SHA1
491e5524dcd05779ee275989d1ba8e26afde75c4

SHA256
19a8a6b7529641c9d980eb9af9dd367f401697cdf0d4fb49b547d388ffcbf943

SHA512
f4419fd22286d490383c4d1c92ab0c3fd437ca9a6de5ae2b9d0e20f6a222edea39bcb3dba78261bdafbe2e9379c6e9b488a41f0e6817d2a073be7596a15b9357

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\printsupport\windowsprintersupportd.dll

Filesize
1.2MB

MD5
5f2e3ed90c74c3467df8504ee07218b2

SHA1
f9c19f390f093af598536c66003e07b8fe247c9d

SHA256
05f5c66d4e1db5e78f2a359d1d5ef0121147338e516dfaeb28efb107be25af87

SHA512
41be0ebcfe7270e1e9c043f2a5589ebd165804545fa0ebabccd305984daa530dbc16ea59c21940a3ae4c490f10e99175c7749e434419f6d57780594fc3905de5

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\sqldrivers\qsqlited.dll

Filesize
1.2MB

MD5
4e7636b80adebd1e1a32d1ae0401ac10

SHA1
532aaf1b0b47c5ceb5ea6b489eeac87b0c98cc48

SHA256
80a1c1e833781a99920668f375983ce251bc18bbb13fd2c7691c8c061e543c5b

SHA512
c23ba7290a9a729bdb47e91371d9ee8153080d36d9f4d1dac6deccaf893e3d72883713bd05c6c97377384d40cef20b8d6db5333a2af57b91063fcf6ec349b3fb

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\sqldrivers\qsqlodbcd.dll

Filesize
1.5MB

MD5
095b96fec0e9d19aa84826239c49c525

SHA1
1a9fa7c18ab4dfa2e3086a2b8a24d7cebb0ad2cb

SHA256
f3cb07585b84a4a537bfb4a1c1bbdd04dac8adb25a64148d92b6215c3acf3f5d

SHA512
a802f9aaa07af0e641e0fce1283b6738d66bd046d34174a0ba636101acc46edfe04dcdfbc3c5909c3746e745b589d873cc76e7b7598fce95130d1f3061ce7859

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\sqldrivers\qsqlpsqld.dll

Filesize
1.8MB

MD5
d13dd863b6866c43600fc6da8ac3a12b

SHA1
dc236b202ce6062ca95a77c3b1d572da906f9444

SHA256
f5d9006da031bb64f1e62ba4055e7649a6899800ac9ad377920cff9de8fb86d0

SHA512
b09b6a871ea616d020ed9110655bbfc65d35b4500222c4598c2e40f79774629105644ba54c008e2286842ab1d8d6abc5e3b8bac1159b78f6e8b0773db30224ee

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\plugins\styles\qwindowsvistastyled.dll

Filesize
2.3MB

MD5
522497a1dc948c7545eb04a1c2e88d9d

SHA1
e66aae8cd1eb69c5f66da99ec021c398560bf40c

SHA256
1de11bc7dfa5d12fb29f8833d614a397c0744d58c5d6a6c8bef68d9d84b0ad7c

SHA512
bad26f9d624fb7684a90dc25c12f713a3adb12aca414330dbb7a370b78f28d241ab4041a5a14958c0050addeb10f45e3bd9604455222b17fcc56783abbe124a5

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\qt.conf

Filesize
28B

MD5
896019999139b866a9e923fd12d49818

SHA1
f1fc1145aa2808500ac842e91d588916a40cb09b

SHA256
20e76495ab66be7a2ff95cc9f2405ce5fbbee9b84ccc3e5c55aa7796e3b917c9

SHA512
6c8f6790bf81472b5b81eef42c420ddccffb00fc99d572daeb54f8c8e557d1e31ed7af5c45211ddec82077e0cb47e64b978a3a8e8039c9b2ebaa2829ef885095

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\script\post-install.sh

Filesize
31B

MD5
9a2703907fc3d9e7f80fab03204c67b8

SHA1
d683232af2d90509ae99b1c3a16d4d5220fa66cc

SHA256
a04ecf071e57a6aa9da781b479ee533e511a65f6f3bbbf5f50733818691984ab

SHA512
908dab8d18e35feb2c5208a0f4113932c5ddcfa4501fae849e1eb1b2948c548e3e0b834b788b72a9522fd7c37b1ad6a46a6bae4e12ede39ee21038f8be9674ab

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\ssleay32.dll

Filesize
231KB

MD5
e1f3b02f7670b6f92cf05ac7628297aa

SHA1
f6eee4c41027ded239023a7fe8ad9c0f81adf947

SHA256
df2b13a01eb0d14032c0b21c51c1c6a166a68dcf6f4e4569ae4e74be2dfece6b

SHA512
536732d9544c83b25d79da8ab0cbeaa6fb5370329a8c7e05247f8410ecfbbc11739e05b1119176c9e1494420fc41e319bfad41f4652e7478f8c97d2d9df03423

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\bin\zlib.dll

Filesize
72KB

MD5
a91f020a124ba32a4e477daf50ab80dc

SHA1
1b8bdbae0e7c057a61ecfffd01a5c9d67718c040

SHA256
1bee26926a4c6e597c21b6cdea26180418d578f8a39fe39dae5123402fd3b371

SHA512
3eed5bda33f42685ce81ed981fe61921a159a73145e1fc4f543d688de32dc65dda6c3c38a92660d8d86fdc0dacd3be1b5ee189e70094b393c4cfed271e6274bd

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\changelog.txt

Filesize
39KB

MD5
24f4f06bf2172cbc1adf2cdc2b176219

SHA1
2ff03c255f859e4ad382c2ec1e5faed830e7df44

SHA256
d158b0eb5f3b67c7b788bd475b036b5cc9dde40200643ac84afc18988e18290d

SHA512
ad3a074060ff881c450a65ac3f8982691b4d8512fa1d6b37f3c555a315e456e8b2fc554196aeb83dcdb9a7fb203bc3e2a0f54be231468956567fa25bba7cb4e2

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\install.log

Filesize
9KB

MD5
2f1635d210e08a8950c87147a2098587

SHA1
2102cb20bb817221d03f8c97ff839d3e3bdc3229

SHA256
80aef8e53c74a2adf90c8afe2326de2cb3501f7b1289e3a827488e06003efb41

SHA512
046afb2111680c00a2b9a6e0785defea49ab8b9851f77edd07f02432f026253f72295df95ae531912f4ddf36105430b6c477488ccd0d3059c8ab1b91b7e91b77

Download Submit
C:\Program Files (x86)\XETID\acXessDesktop\uninstbr.000

Filesize
408KB

MD5
e1f9d4c993f3bab83957da6aed0ca7f4

SHA1
b78833db3ef9fe43b845744ae23f83d4556dc43e

SHA256
9c198c9003fb4b198d65518970fc60e0cc8ff0d00b8e2127cd80b632ecbf4c9b

SHA512
7f806202e066bad6b19c8ddf5cfa6c45c44a8dfca06346630f98d3b7a0521ab3f6c0752eeac89c2c57ea88690d47a88272f0ad31c31845d2e1440f327ecbcfa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC573.tmp

Filesize
43KB

MD5
680365c3a3ea99a7b10cc9e23cef1edd

SHA1
5de3f7b829323292e60585e5490e95d9510574d2

SHA256
a0e0ed16ae5f37d864bccd7b61b5795cd26782ab38e3ad963ca30bfbdac95364

SHA512
cf4c18af2db49a4b70c7e79f9e0fc2a3b9b796c012c45c7f2b10f73685c8091694b234109f8c75cf5450cba193802b942638e8ed70357fc1eeb8b35666fa03d6

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC63F.tmp

Filesize
288KB

MD5
122a3741699fb5c0950273245c9dea15

SHA1
811f9149e3310a8e6521da156f92f3aaab012145

SHA256
f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab

SHA512
567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC73A.tmp

Filesize
35KB

MD5
08ad4cd2a940379f1dcdbdb9884a1375

SHA1
c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac

SHA256
78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8

SHA512
f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC779.tmp

Filesize
121KB

MD5
8a34fa3d595165111a9c79f7c21080b4

SHA1
d7303c9d6ee9ddee780ac28e9d83a1ef4f77db8d

SHA256
a60879833bfe406793b4e5875b93429b658625630d752169aa93a3c151997428

SHA512
5a1c0a88ec41251f6ab1db8d1ab1ce86f24ba185987546456c396cf97d5ccfa2f9d7d750783f012b6eb0adb5cf49f18270fb7585de88b5b02a25093e61ae28c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC79A.tmp

Filesize
532KB

MD5
a6f7a08b0676f0564a51b5c47973e635

SHA1
d56f5f9e2580b81717317da6582da9d379426d5b

SHA256
5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c

SHA512
1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC818.tmp

Filesize
72KB

MD5
c04970b55bcf614f24ca75b1de641ae2

SHA1
52b182caef513ed1c36f28eb45cedb257fa8ce40

SHA256
5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80

SHA512
a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC847.tmp

Filesize
14KB

MD5
bd9e34f243594918c5f08ebff1516819

SHA1
8746ac537712548ccec433a44228346e82f10d12

SHA256
4d37dd420003afb8b5284af4e4c613dfd7e6e3e314fff51e570aff298a5deb87

SHA512
98f2b7a6f5d724a6c8746ffa4d5fdd6b939bf67727d4ba331faaec327b7b6b466113cef9af74f34f065ff3ff758afe45f04532069b21bbcbefb9406d18f87d18

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRC952.tmp

Filesize
14KB

MD5
d74aadd701bfacc474c431acab7b9265

SHA1
8a2b424d1f949430ddc1faddee3e9ccb79c95de2

SHA256
f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d

SHA512
0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRCBD4.tmp

Filesize
74KB

MD5
924b90c3d9e645dfad53f61ea4e91942

SHA1
65d397199ff191e5078095036e49f08376f9ae4e

SHA256
41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322

SHA512
76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRCBF4.tmp

Filesize
102KB

MD5
e1f1af67e45d6009779a3e73d14bf27f

SHA1
ea28a3b3abccb3c6ef03439fd46f5ea2f980f99b

SHA256
baad1fc5d9a16eb5226943c2a8b1571581c45da7aa00c1d0a5d12f2040cdabd7

SHA512
ccb501b69ba65396dc7c1bb5077dcd0feea1e297c188e5b82160cab971242599f8a49357c4309d264e705e95e98709b98d31944c4e95f695035e87bc67896eb7

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRCC91.tmp

Filesize
24KB

MD5
4cf27e0747e5719a5478aa2624f6b996

SHA1
13df901e34f77e5ea11f36c0afedda7f86a2c003

SHA256
e69a9d06f2c17cc021ebf9b62ca110548facdc147b67dea4846e09865043d2d9

SHA512
4b0ddcbd7321128f977e1dbbe18cc76c7e489d4ee84b7775989e99778b5a60daa683c6063c5b700794b7f2070ae381fef20b19b3cb35c1babef9be79ff264941

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRCD0F.tmp

Filesize
24KB

MD5
124e89d0fcc409ede3595a253b788708

SHA1
bc88e037c3edea02dd20aeff10818105be9f4033

SHA256
27ea1b57a3024aec4a03188e80fdb2aa301fa5179c19be9c8b0dfc2aac73a114

SHA512
7cd0ca268a5dbd2aa22dbce1f253a2d067ca30c5195e059c3f431d546a20d1811592f8bd8fe88b6ad9cb5c6fdd6a4666ff451b84a5e790a9d5058865d48790b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRCD2F.tmp

Filesize
100KB

MD5
606f13d4d580b1f322b3f3d3df423bba

SHA1
02cb375e13b415edc8b5360dffdba531e47827ed

SHA256
c71a16b1056e522cd0365449448116d06f37a3273d77694d170340064511dd25

SHA512
867a45dc15e99148f24fc528fbc9255582e5534bb4696700292b70163fddb15f35ddf2acd0536a9cd78b4d8f9d827bf7530d2303bfd7e428f11573b381a0986c

Download Submit
C:\Users\Admin\AppData\Local\Temp\BRL00000ba0\BRCD5F.tmp

Filesize
56KB

MD5
145d5c49fe34a44662beaffe641d58c7

SHA1
95d5e92523990b614125d66fa3fa395170a73bfe

SHA256
59182f092b59a3005ada6b2f2855c7e860e53e8adf6e41cd8cd515578ae7815a

SHA512
48cb0048f4fcf460e791a5b0beca40dbf2399b70f1784236b6d1f17835201d70dfa64c498814b872f57e527793c58a5959230fe40ddf5ebdcb0b1de57e9c53ef

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-D7BUM.tmp\ZK_FIN~1.tmp

Filesize
712KB

MD5
a0935e4a8284be443de9e256b4474776

SHA1
3c9fc3d4f47175815cce4865c44fd6d34ba5cf4f

SHA256
216440c8650c211c018c1fd1a32e82ae1623a71805665f21659623197e6b561f

SHA512
2a086f9d68517256da37f7c2457993a77ddcb38784dd960fb80309decfbd2b631664a5a6f40fc4408e96d6416c6a9cbd2f5a9f7df086da5d5d20387859e8c666

Download Submit
C:\Windows\SysWOW64\FPCom.dll

Filesize
148KB

MD5
98aebb9c04f2d52cc9d337ed5f7df53f

SHA1
5caa9349e563143928aa5bed297dc4bf985c462c

SHA256
11631af793cbb232f9de96c16bca6e13b8c4cd3f5c37abf5cf91a7a2345671ed

SHA512
8bbf8f4b07bfdca4b3a67767e09b277224d1c682ae09b65a37ec36dc4e3ebd97f311aaddbbd8542f1fab278fd17e2b38c25f3ac8ecede3258eb5f19eb7b3ca3c

Download Submit
C:\Windows\SysWOW64\ZKFPSensors\libidfprcap.dll

Filesize
80KB

MD5
21c075715f6915c0c45bcab857d05eeb

SHA1
c83e54903b916d52813fe1f46b9a903e47fe6a8a

SHA256
7fecb8e864d6f605ca55da497daf1d5b5d1fd455935e4b9ca13373c1d97e1291

SHA512
25ece867f02220d9a388e600fae3c8dfab9c0fc5574b847a2d4000557d2dbc0b9bf8c0f92c85e2d349e84a78d62721f350a44c89f75b519c33b28bef77ce499d

Download Submit
C:\Windows\SysWOW64\ZKFPSensors\libsilkidcap.dll

Filesize
147KB

MD5
d0e4e2dce06a8da1ba041be06141f86e

SHA1
0a007fba4f77e7329ccf9fdef0921cd0456fcbf9

SHA256
086f964048640eb7f35a99e5e1c6dd85df87953607413d12a2795e95d6f70e4a

SHA512
2c1b9c0c466b01c065eb456182b80cdcaf121b2c76384b6e82a90aae8b3723ec6875f2b8a654bfafa5f026ee1729d68f6985b9bfa132df7f7fa35e5ad717c7ec

Download Submit
C:\Windows\SysWOW64\ZKFPSensors\libzkfpmodulecap.dll

Filesize
74KB

MD5
b3f12897c74305a357c1ba1d3d6f3e98

SHA1
b8dbfa6c7c87573109098f9c30879a3fc8cd128b

SHA256
860eca7ba41b9be9b1f1e56b9a4fa9cc09d600a9710955b4c05c215a9f0bef4e

SHA512
9edb3f103d0ff7890cca345ebafa853f6016988852fd07edd4b2a11229adf7b9a7d19a5318fbc47b3b2c35f4bad4ab26da837b308e7e921532527e3fe28a381a

Download Submit
C:\Windows\SysWOW64\ZKFPSensors\libzklibcap.dll

Filesize
222KB

MD5
32c1435915b16740b809039c4fc37b7e

SHA1
13101350778ca83d152661e5382db9965b223f18

SHA256
b641118e739a8b187c7942ab295f42a7f25a31d2af3dc0a9a60e97cbd2af3f73

SHA512
4d1cdccbb56788bef6a79b9a7d4041449a5ede12f3b61b48ecb885c0e4d36565cc64436b57afea91d0a4d9bde102a22dfaa6e5b2cc812f737b269f2092099df9

Download Submit
C:\Windows\SysWOW64\libcorrect.dll

Filesize
80KB

MD5
85e3a627614b7e879e6d31d468aa8156

SHA1
349e8dfeaf05a33667f3dee189e489b4fcb3ede2

SHA256
e63179cd95d0f567f1f72e5902b53374b5c657f0d86aa177e3fb7a39cbeeffb5

SHA512
6956207b3201cae62a4f9b60599542d00c22288ea53ba206975c70e471a5732907ae1bfc62d227b17630e77ab3bd7824b6e3e3a026a6fda74d469ef86fe7317f

Download Submit
C:\Windows\SysWOW64\libsilkid.dll

Filesize
77KB

MD5
c8e62a04d12909eefcbb63465c5de408

SHA1
166ac4721b873ca7ec67874276eb10499ba49a8c

SHA256
90bdb72a981f159a2693c0e77f9f58c55fdec7c56ff53e55deda8e514227f247

SHA512
b222149e154d8d150dd229765d108fa0e3b67b01e91bb234affda1d919ee6aa8e5e5245123d7e8f18ca9560bb62c4563abb50c1a89ce818cfe53bb68f1d27f2a

Download Submit
C:\Windows\SysWOW64\libusb0.dll

Filesize
83KB

MD5
e3bf1f7fe53db68df0199c80a35c801d

SHA1
8e985a434556ac5c158675580e2206d9186cf44f

SHA256
0114e9c8bcd3d32e5489185d240278b729c1c0a2d677a633a645744ccdd7d1af

SHA512
726645d4b13c1f97f43fce11cfe8570747fe46f711b668544859af4bcb30ff8889224e73cab9647b82c5558c082bf20af438ac5e3af6ff855fa683b0447b28bb

Download Submit
C:\Windows\SysWOW64\zkfinger10.dll

Filesize
672KB

MD5
4a8aa2cb879ddeae2d8e5bab5bf310b2

SHA1
ff956c8593f55cab33bc087b2f624b14b710e603

SHA256
6626b4ca32408bcdb4cfd5e3e84faf7d1c6c49c4674b9b319cf68286575f416d

SHA512
192bd3134910d92778d2dd9eaa4cb2d8a19140b00469b373626162148986ca91d4df36488a90e8064e2a7684b1261eb56420aeed4612ee9c56c59991e01c94f8

Download Submit
C:\Windows\system32\libusb0.dll

Filesize
91KB

MD5
7460fb3ad40994737898dde36379c5e2

SHA1
3a12aaacfdda1b3791e51e6e75b34a4ef2cfce87

SHA256
47d2817910c69700d26d965e62ca42df3fa926180a1731e61b4887a0b4264bf4

SHA512
f904d3ddfa262d7a4ba448ad90d2dabbdb72693e7112ad5f4ad767b0820ea1aab624c05a9afbb2b7acecfed30ca87aba04e7ffa8ed04e45dfd47180a13338d78

Download Submit
C:\Windows\zkdrv\libusb0_x64.sys

Filesize
68KB

MD5
f535ef421d4ef0169e72c0571532a621

SHA1
ee7a66232e1afad226a70db9f4e6901f38303c50

SHA256
c89d727906521024edb9845fdd25e8a98dbdc05e396adedb1c3f13cd2cfc5c92

SHA512
f18fbb375c1bde30fca2889ace8aa4f2e690f4be21231e54122f1fb95f7b37e68a47a5b4e32f6faabedfd07127bd07a8380a259873258a348863bed1bd64cf8b

Download Submit
C:\Windows\zkdrv\zkusbdevices.cat

Filesize
13KB

MD5
3fd9d5ebba997b376e13d13e189fb232

SHA1
251afdff306387ba79142a171133fee31e9f50af

SHA256
4d4af862de40cf503dd1e7bb39134826e21b60892cf1708c751088d2defe049b

SHA512
71ae0c83633c048885cb9b1bb85f85a7af120c4e4d9f0012555ccecfec54862029be19aa87d7e1f58290da5cb379155a7b0ffa34c55a9c4e54b430a53b977366

Download Submit
C:\Windows\zkdrv\zkusbdevices.inf

Filesize
31KB

MD5
cae537aa87b8b9cbb95e47c7b91b2929

SHA1
859a58af9fd9ae8085f91a2fd0bcd62f1d78ee05

SHA256
691b14d078bb1f4d9d35e2bf3a803e471492334851033c0db086d973f55886ef

SHA512
18baeefa2221d37c60edc30375b7cf660141fefc8ceeb08f8929f19c403e203b0c552dcdb6731e64cee94f83b6b5c5a5219a59b18b71b3a57d35221431aa5cb7

Download Submit
memory/396-1556-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/396-1561-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/396-1313-0x0000000000400000-0x0000000000414000-memory.dmp

Filesize
80KB

Download
memory/548-1752-0x0000000000400000-0x0000000000C95000-memory.dmp

Filesize
8.6MB

Download
memory/548-1881-0x0000000000400000-0x0000000000C95000-memory.dmp

Filesize
8.6MB

Download
memory/548-1877-0x000000006F140000-0x000000006F179000-memory.dmp

Filesize
228KB

Download
memory/548-1874-0x0000000069A80000-0x0000000069AAF000-memory.dmp

Filesize
188KB

Download
memory/548-1872-0x0000000070080000-0x00000000700E5000-memory.dmp

Filesize
404KB

Download
memory/548-1750-0x0000000069A80000-0x0000000069AAF000-memory.dmp

Filesize
188KB

Download
memory/548-1751-0x000000006F140000-0x000000006F179000-memory.dmp

Filesize
228KB

Download
memory/548-1670-0x0000000070080000-0x00000000700E5000-memory.dmp

Filesize
404KB

Download
memory/1684-1555-0x00000000006F0000-0x0000000000716000-memory.dmp

Filesize
152KB

Download
memory/2976-1303-0x0000000067C80000-0x0000000067D0C000-memory.dmp

Filesize
560KB

Download
memory/2976-677-0x0000000066C00000-0x0000000066C14000-memory.dmp

Filesize
80KB

Download
memory/2976-88-0x0000000067E00000-0x0000000067E1B000-memory.dmp

Filesize
108KB

Download
memory/2976-611-0x0000000000940000-0x0000000000C13000-memory.dmp

Filesize
2.8MB

Download
memory/2976-1306-0x0000000066C00000-0x0000000066C14000-memory.dmp

Filesize
80KB

Download
memory/2976-1299-0x0000000000940000-0x0000000000C13000-memory.dmp

Filesize
2.8MB

Download
memory/2976-618-0x0000000066C00000-0x0000000066C14000-memory.dmp

Filesize
80KB

Download
memory/2976-87-0x0000000066C00000-0x0000000066C14000-memory.dmp

Filesize
80KB

Download
memory/2976-1285-0x0000000066C00000-0x0000000066C14000-memory.dmp

Filesize
80KB

Download
memory/2976-1278-0x0000000000940000-0x0000000000C13000-memory.dmp

Filesize
2.8MB

Download
memory/2976-69-0x00000000031A0000-0x00000000031B9000-memory.dmp

Filesize
100KB

Download
memory/2976-77-0x00000000031C0000-0x00000000031CE000-memory.dmp

Filesize
56KB

Download
memory/2976-80-0x0000000000940000-0x0000000000C13000-memory.dmp

Filesize
2.8MB

Download
memory/2976-81-0x0000000075780000-0x000000007578E000-memory.dmp

Filesize
56KB

Download
memory/2976-82-0x0000000066680000-0x000000006668E000-memory.dmp

Filesize
56KB

Download
memory/2976-1321-0x0000000000940000-0x0000000000C13000-memory.dmp

Filesize
2.8MB

Download
memory/2976-83-0x00000000710C0000-0x00000000710DF000-memory.dmp

Filesize
124KB

Download
memory/2976-86-0x0000000066C40000-0x0000000066C4B000-memory.dmp

Filesize
44KB

Download
memory/2976-85-0x0000000075440000-0x000000007544C000-memory.dmp

Filesize
48KB

Download
memory/2976-84-0x0000000067C80000-0x0000000067D0C000-memory.dmp

Filesize
560KB

Download
memory/2976-665-0x0000000000940000-0x0000000000C13000-memory.dmp

Filesize
2.8MB

Download
memory/2984-1560-0x0000000000400000-0x00000000004C2000-memory.dmp

Filesize
776KB

Download
memory/2984-1557-0x0000000000400000-0x00000000004C2000-memory.dmp

Filesize
776KB

Download
memory/2984-1319-0x0000000000770000-0x0000000000771000-memory.dmp

Filesize
4KB

Download
memory/3384-1552-0x00000000007E0000-0x0000000000806000-memory.dmp

Filesize
152KB

Download
memory/3752-1666-0x0000000000400000-0x0000000000C95000-memory.dmp

Filesize
8.6MB

Download
memory/3752-1663-0x0000000069A80000-0x0000000069AAF000-memory.dmp

Filesize
188KB

Download
memory/3752-1664-0x000000006F140000-0x000000006F179000-memory.dmp

Filesize
228KB

Download
memory/3752-1657-0x0000000070080000-0x00000000700E5000-memory.dmp

Filesize
404KB

Download
memory/3752-1916-0x0000000000400000-0x0000000000C95000-memory.dmp

Filesize
8.6MB

Download