Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    27/07/2024, 23:46

General

  • Target

    02c6de821fc433304ee204d4b930392e_JaffaCakes118.exe

  • Size

    9.3MB

  • MD5

    02c6de821fc433304ee204d4b930392e

  • SHA1

    68b1cc41a9d00e0f7d6dd3fa70b816e158839f45

  • SHA256

    03595be308cd92512645f8f37b6731f372da3c6b5dbf298c4d16a9683a8e4f19

  • SHA512

    c874685a0342e0b0af53630650188f2c3b5e2196ffbb10b74cb1c00e1cae0a35bcfba9d3d096b7d7f9bbe636862a653a85bb353b6308ce323e5ce6d8c51873c7

  • SSDEEP

    196608:9AAkXmjdt4e14FhATdRzWEgOwZYKjm/lKIMaJPxEN0N:me4eyhWddWEhztlK7cPGQ

Malware Config

Signatures

  • Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 4 IoCs
  • Checks BIOS information in registry 2 TTPs 8 IoCs

    BIOS information is often read in order to detect sandboxing environments.

  • Identifies Wine through registry keys 2 TTPs 3 IoCs

    Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Modifies Windows Firewall 2 TTPs 1 IoCs
  • Drops file in System32 directory 64 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 5 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 37 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\02c6de821fc433304ee204d4b930392e_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\02c6de821fc433304ee204d4b930392e_JaffaCakes118.exe"
    1⤵
    • Adds Run key to start application
    • Drops file in Program Files directory
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious use of WriteProcessMemory
    PID:2244
    • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\Any_setup.exe
      Any_setup.exe /E /F
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of WriteProcessMemory
      PID:2212
      • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\certutil.exe
        "C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\..\cert\certutil.exe" -L -n "Hancom Secure Root Authority" -d "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uj06vnfd.default-release"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:2744
      • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\certutil.exe
        "C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\certutil.exe" -A -n "Hancom Secure Root Authority" -t "CT,C,C" -i "C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\..\cert\ca_cert_sh2.crt" -d "C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\uj06vnfd.default-release"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:2344
      • C:\Windows\SysWOW64\netsh.exe
        netsh advfirewall firewall add rule name = "AnySign4PC" dir=in action=allow program="C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PC.exe" enable=yes
        3⤵
        • Modifies Windows Firewall
        • Event Triggered Execution: Netsh Helper DLL
        • System Location Discovery: System Language Discovery
        PID:1660
    • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PC.exe
      AnySign4PC.exe port=10530;port_s=10531;no_shut=1
      2⤵
      • Identifies VirtualBox via ACPI registry values (likely anti-VM)
      • Checks BIOS information in registry
      • Identifies Wine through registry keys
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:1896
    • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PCLauncher.exe
      AnySign4PCLauncher.exe -install
      2⤵
      • Identifies VirtualBox via ACPI registry values (likely anti-VM)
      • Checks BIOS information in registry
      • Identifies Wine through registry keys
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:1172
    • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PCLauncher.exe
      AnySign4PCLauncher.exe -start
      2⤵
      • Identifies VirtualBox via ACPI registry values (likely anti-VM)
      • Checks BIOS information in registry
      • Identifies Wine through registry keys
      • Suspicious use of NtSetInformationThreadHideFromDebugger
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      PID:2340
  • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PCLauncher.exe
    "C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PCLauncher.exe"
    1⤵
    • Identifies VirtualBox via ACPI registry values (likely anti-VM)
    • Checks BIOS information in registry
    • Drops file in System32 directory
    • Suspicious use of NtSetInformationThreadHideFromDebugger
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1496

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\ca_cert_sh2.crt

    Filesize

    1KB

    MD5

    e7bf64956c2ec9b3c330618fa02dbc37

    SHA1

    5e8b43ca40eb5051ac804f1c50589fdae240909b

    SHA256

    1db25f0b2ccccb639b083e309dfeee781a447dee962f6f6bd8ac126a3bed23d1

    SHA512

    954dc837bbf010ef4d0d2cf542d925baf2cb567eafcba4cc49fe305e2bfb77d489c91f7060764dc48f6d25906daf65432d422c9968d28318d87ce4cb4debb919

  • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\certutil.exe

    Filesize

    283KB

    MD5

    e082bd597129b93f8afe414021f7dd30

    SHA1

    d861f0cefd66ed14fde82b0541237e42c5c7c63a

    SHA256

    22c4d27af891ac0d7d1cd511f0aade8c1aa1c1648a3b4ef2828764b0f9daafef

    SHA512

    0f8cf28e99f74326d418a70e36a40fe6e078b78007298416fa17db3fce010fef2857af4eb28eb9e3eaddc7520bb737c85b14f4ad370e5552273c8e113b396f43

  • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\nss3.dll

    Filesize

    1.6MB

    MD5

    37016e05495f1daca0af21f23654203f

    SHA1

    ce75de300b5984a96fbbc561a70c21b6bf7fd02c

    SHA256

    eb609f53bc2d1ca5f771b577f4a160b2974dc42196d82508d84d7767ac2ca6a7

    SHA512

    98a077deb5b13eb74a1a8b105778f923112888339c0482645c481c9ae736622bf1cbf21c830eb18130ba161aebbf5599f0816ad6ed8de1ffea22cec46cbd78c9

  • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PC.exe

    Filesize

    2.3MB

    MD5

    dede7b51dee26b56e94991f33504ba8a

    SHA1

    7715ff2ee133265f94cc77f01e32d00f77b42cd1

    SHA256

    e2333c3dda14fafbcbe1ab29bf433ae89280c7fc4b1f5ce4b3e45943415b7c6a

    SHA512

    dd2181b0a87ac9fd66ffb6a889087584ead7630073eb501e3b357dfc7526dfc24d0a4e67fdb638199ab250f5d008baa085d0a3aeddd46ed5d5721d969101c915

  • C:\Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\AnySign4PCLauncher.exe

    Filesize

    2.2MB

    MD5

    d0d596a7aee7c949d4fb625269ccc4a3

    SHA1

    7f4db9b10ab88273eecfb145fe9a01293ee6c28c

    SHA256

    80ce82de0a6635d47d0fc1be310ebf8e5238d8598f83e7df83be0215f18bb7f9

    SHA512

    1f5cc7c07e6ad5222fef42589a21c31566e6606e202b00bacc0e9b960cb29f26f6c04eefa31b6109844269a4370b4a6b60d92e4577543bc905b0ffc0b7046550

  • C:\Users\Admin\AppData\LocalLow\SoftForum\AnySign\config\xecureweberror.cfg

    Filesize

    93KB

    MD5

    9e0702593906df98923c82a2464f606c

    SHA1

    56a704bc69cc3cd6ef8e3585d70a69a68d4b27d4

    SHA256

    2acbed3b2c5a7f0a6967f1ab2798c5fd4eec335e99993d7828732a43c90f7bd6

    SHA512

    ab3469f534387fa78c6c33aa702e1a5fd24061ba850de9c5488fdcce811a1ebb62ef7b12c4a80a89f19528b7453dc58b7e0865062449c63238ad7c994b7de69c

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert_02.der

    Filesize

    1KB

    MD5

    36e4cf3c664e36b710d0141cea2c3b19

    SHA1

    b82e21063fede690fdadeececabe42ccc892540f

    SHA256

    2bcca8b209ddd583c1967e78862756e282ec697b168700d5ba108494796a1bf8

    SHA512

    d3df430d21ae6c3014b117b5e0a80f07e5ca679053aa9539471e6daf7f542bedf8f63a6ddcf49e681098e379dc8689d21370d2f452e87ecb85e8e0c3e0c7c6fb

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\0678bdd32b2aa0e6126bee8cd323cb5ca0c7ea27\cert_101d.der

    Filesize

    1KB

    MD5

    f2dc536e0578e2c5e8b3a0f514e8e5e2

    SHA1

    5a7121f1c08d9d5596cbdb3df9a57b64b8b6d303

    SHA256

    3b66ef21e303deaabba6820c425ec3433a0504fac52297822477b355938786c6

    SHA512

    1f4001a227f37200448f27a7500bebfd41ff3aa3f783d51c87534e26b4f1831cbcd057e322562c322d34bc5fbc87b5304f8817624aa6315bf2bb4db95d195549

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\132d9ccab674d76a0c1925170730d90cfb8e1e80\cert_101c.der

    Filesize

    1KB

    MD5

    81c4f67c10ffbd8cde9d4adf7ad8e966

    SHA1

    68da4b11028b97c10aa34df09f28988141837f14

    SHA256

    e66c3bb08eda523bf040e3df90b6706d805067d4c3cacfb24793dd2812fe8d35

    SHA512

    f05173ca2542040978a19367d3210d5bb889e1eb3ee4e769e810a7e72c5981d2b906928be1db2667b80b4b24d0a4f380ae4dd4428a78fff36f6ba12876fb3bf7

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\23cc091fa9604fe1ee13589f69f7f9082345d911\cert_1004.der

    Filesize

    1KB

    MD5

    ec746254751b75cc482da57c8a3ead02

    SHA1

    1c019ff4294187cae3986e6d3474b7e39e1ea4de

    SHA256

    e54153845de915701251e84af58a6f2b88fd3456a0a4655861f33c334b936da5

    SHA512

    4d1148f0518b1fcdd126a4ce5a9407bfaaf107a64f55f34c099038b7314e1cb5906213e1a5a5ee713fa4d78856a2a15b92ce7e825b399f638cbfac610be99443

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\30c538d409e70d253249ccc9e99079732f03c88a\cert_1009.der

    Filesize

    1KB

    MD5

    913113a4e0ae839cca81c060475cd91f

    SHA1

    c43536a391aaa12de143843e624bb5fde1c36cc5

    SHA256

    16afc10a401db5c68a50eaedc76198757fd677ca20aa3f2fe6791c89f2c9b07f

    SHA512

    ad557ca865f048c20490536f780dd72c2a10c1690163ceb2d469bd2412aec5dbeae1555d242d9cdf624f449215219eb189022c351d02f649b6ca2237c407b95f

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert_2764.der

    Filesize

    1KB

    MD5

    c2e0273d364b8629744d6b9f5ab50126

    SHA1

    a0cd6a6da47b7315f58acb1fc6fdc214c93b5dbe

    SHA256

    88c274840638cc0b2c8acfdad6f9594eca423c197a39032a40c45f603c69f04a

    SHA512

    a9394878d2e7e05360d8ed8d764de9f3bd0ad27f6705072331169f78d711386d6da92d152b28e8dde7312cd0f7def805a69eecc8f14beb36babc22777f8f353c

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\420eeba3c13b048d6b8ea07e0a92046bafaaf437\cert_1003.der

    Filesize

    1KB

    MD5

    1d68b4509a9a9d30af715857af94eb6e

    SHA1

    f76a329251374464355ae2cc46bae71d3866dd54

    SHA256

    e9eeaa943822c4e03ad01f3326c04734ce7595d5aac797de6dfd81ef51e820b3

    SHA512

    7c358cfd9d277bf98f7901c6ab034a3f10c8d038d04dbe312a8acb3b796f10a7e610407af65b54231b0f450333e1e582ddafe06e9ee0369bec947a8c16367af9

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert_275f.der

    Filesize

    1KB

    MD5

    0d73df95d76e0d1ed2dd7af493a9583a

    SHA1

    ae27611ee7725c640fc8e429c29ecebdfd31eedc

    SHA256

    6b24a73eb6d7725cd9cfa74d038f3295d33867f86a7efe5746f998450da9a318

    SHA512

    86f91ce99a2890c542686b803abd124c1b019bea32c56c3b0cfe1d472de94f43ad3495e747c4d5b41b16d1f3b065f7caea6d800334854bcfe92021b061b16eff

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\52bdebb8f1d906dcc6775f5109572db5d4db69eb\cert_1002.der

    Filesize

    1KB

    MD5

    0d3dd8492da7764424902c30346a4eef

    SHA1

    25a44654187f7b4701860f2d571f528d3cd4d6f3

    SHA256

    efb2bac7fdb49528b0ed679dbef8c323fd42b472095192ebd94a9c3ca3ad54b6

    SHA512

    232b85d5b3ba0b25f57e325ad5eb882e047fa813007a84c4a9cd50d6d5135a5059cc2cd31c0831f5252dbecc586a0a00bd66ffa909e99f08f2a8fe422136c43e

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert_2760.der

    Filesize

    1KB

    MD5

    3c358d13a20a45f6e879030550e35844

    SHA1

    33293585459110c968e85c8b464afdeea02bc58d

    SHA256

    7c48fd35f6aba2b1980e0dc0c041befa56a01d805a45a27df44eecf182f4d881

    SHA512

    19661e2cece14b24b4a4b2fbd49cac4f902ed5d353544f0b9c3cac6b0c6e5fa7c144430133b817872ec605c9c132a453cb5f4fa011e07cbaf5aeb9e1b7f570a3

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert_2762.der

    Filesize

    1KB

    MD5

    dc3eb7c59490b93396b34cba7e7d4e9b

    SHA1

    5f891b17b86ed8ed985ac85f6c86dfdbb3786557

    SHA256

    d5d1fd46eda10892db7fed42f4285ba6238e5cb7ace6971430352a5fac1f4ce5

    SHA512

    308330e7962a15ccf10f974fc052b3c0f46a58d9238f99640badba03a1c2dc7579aa46ae4ce8d5313a7e32fcbfd65473ac5b2be7e2a73180e1e740a5a3692ca7

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\68c0ed51a6f6e4d41ba0da0c6ac1f517dc18567e\cert_100a.der

    Filesize

    1KB

    MD5

    1d7a6ecdeab591ae7628f7beb53f3dd4

    SHA1

    0849ebdb49eebdded35c4a339188f5977d4d20d5

    SHA256

    87e8d328c77923a2479932278725933d4674e2755b15a9ae8a014979b677bf34

    SHA512

    91ce4cc1bda7e33461c9f1e445de5f69145b814d57f2d7efe4f6b5972094388064603997f4f35bc69f0dfde71df17de9cce30300e2250967f5768fdbe367f18f

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\a2a1039f746597eb7775c96e0bff8313630e9fc8\cert_101e.der

    Filesize

    1KB

    MD5

    78d9211607e40e4529a4ebd8950a5d65

    SHA1

    572ae5e999792bb7bf3d556e9fbbd0c2a3e8eb6a

    SHA256

    1a37a4bb6a65e2e06466a250779d22da2e90cd0c305fb057e78bd32a0111d237

    SHA512

    df847072fa6dc50069924b7d98150c651f7746608a25e97ea0b66cdc08fc0acb3d2fcfc2e7cbdd90bd0a5744afeb759d6f885788943241f31ef0b543f731a1b5

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert_275e.der

    Filesize

    1KB

    MD5

    61747c43532e687facf06de42565cb87

    SHA1

    dd32236484312abf140a88942936ebd496dabc1e

    SHA256

    880febb841584f86c4bcc6c9fb54e6b4476605ad13a55f4532857621835b283d

    SHA512

    c0afae8e05d9bc62f5a57110e6f9ea83dc21766403c98e596fa455a1baa25f66b992ad4028ceb86224ca8c0df468f182864b7a8bfa7d6393462a1c378afd1eb8

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\cf8d89dc72cd3304a7e89c5982863b589b0168ee\cert_101f.der

    Filesize

    1KB

    MD5

    7fa865b6927bba7be2e2aa4ce6cf3152

    SHA1

    c618ec220aa010ff35c643b621d56856e9004c8f

    SHA256

    df545cdef6bc70a461534f15e9588af2578ea41cfbaf2d0d5dff6ab91866bd6e

    SHA512

    9ca60c82b76382f4118281ba866df994ea1463890fb0330112d29bc32457938c8cd2bddfe230c515af15a6f73929a7f3cac91cefac47bc3fe3295ab0ea03a9b7

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert_2761.der

    Filesize

    1KB

    MD5

    e84b8b1d46bf4c78b2a0534f0bbb10d1

    SHA1

    239822a12b84418517251e98bdb8fd5fcae89409

    SHA256

    1fccbd01edfc39a9d0a17695d8f7f5bc66a5c75ec05278c06f91ba5dce321f62

    SHA512

    26c43e8f18d475bf7ba7b1c1f1300c89e37659f388520bee429f298daa4dd729551f77081200fbe5f080c627700dfff1fc09c16c0e0e30c8c100cd3ba042d8bd

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\ca\ef57983243311fb938c9b9f4dd66e2321acdd95c\cert_1020.der

    Filesize

    1KB

    MD5

    5bfe0c9f3cb29500f663b4b7f836aa64

    SHA1

    8bb9174b8d83693aadf9db3376c1bf334a21283a

    SHA256

    f3f56cd450922c6e770996af7a7ef733d5a0ed2bcb451488b85025164c9a9492

    SHA512

    8ef1894473a74193bcc0a62ac09de5f11d649f14df6054140bac49cb686f343bd766bdbce68f768af1d06d144f65b0c48878de48bc9eef7f52938a3a018ae803

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert.der

    Filesize

    975B

    MD5

    515aa6edba665d0c48214c6634ab7981

    SHA1

    7660d8c1c5afa1edbea38c458074f07917769672

    SHA256

    b0126f356207d51a10aa543d47db73e5ac0b819ffd4874d49b329be0d584d7cf

    SHA512

    85694f4f6cd1c8e5a58736ee645f9b50213bc26dc2d9ac3ea70349abf51f541961db00d9e66eae7b2b44ee49d4d4dfbd22d89479426d1fcdf8e147fe0ca74066

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert.der

    Filesize

    952B

    MD5

    f3e6c93347568ef0a945382abc44a5f4

    SHA1

    0a73c8dc9d6a74aa5d2600825a4c414bd7c5dbb8

    SHA256

    8fdc6317d53f9cc5bd254d16249c38ec3d5b73ae13dea06c04c6d24a9dcf7086

    SHA512

    a7a89ca8e9ed7e90e31994f50fb431cb9d078f9a3e7749141418d5aea1f71bbd8d48bbeed324489b49dd87362689745359b44def0ac55a86af21a3d0471aca02

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\root\cc22a24b26870ae00fcada35ed6904bcc43c68d2\cert_01.der

    Filesize

    889B

    MD5

    322b7c6659e177c6b2254060ca188d27

    SHA1

    977e396f0de154423a471700918ea8e594405bf1

    SHA256

    a002ff556c601863b08b9aa33a8e6666e97e72bbe552f66eb9f2395c68c7bc98

    SHA512

    2623071fafd689c6fe43c2ddff33c617337330d3f3ed05c33d9a8c9d5c53768926b317900a4a2c22c2ee047de56dc2596182e786d468674f185542dd251a58ac

  • C:\Users\Admin\AppData\LocalLow\SoftForum\certstorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert_04.der

    Filesize

    887B

    MD5

    689b17c654e0e0e099551642f75a86d8

    SHA1

    027268293e5f5d17aaa4b3c3e6361e1f92575eaa

    SHA256

    6fdb3f76c8b801a75338d8a50a7c02879f6198b57e594d318d3832900fedcd79

    SHA512

    f141729ae13b8d8cab109695be307c14d519a594da07a12f0f9f2157d171dbe0c8cdff26a22d9ab36d392543f3694bd4ce4b7878722dd0dec6b99b299ce2e8fe

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\AnySign\config\issuer.tbl

    Filesize

    679B

    MD5

    fdc7c531b17d9b58542b39ad64740f86

    SHA1

    62d5c44105fba527026c44e6b4491fe03287ff1e

    SHA256

    0741d0f4b342a50296baae3e10c4fc19ab088efe905cf9a5346f2a843d5dc5b7

    SHA512

    45dc42759b12e55644e4c160992d5be818ba41d938832d688f79624e4972eb431f8ebf429992d929c71ce73c03fba23e05be7ed7831a1874d4a6d6775583c48e

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\AnySign\config\policy.tbl

    Filesize

    4KB

    MD5

    5f7327e4921502f6f2f48afda9b67f75

    SHA1

    148fb27e4a7fcd9aeb6179a98fff4d4daa5e8329

    SHA256

    ff92e725b5d01e66bebc88e7a2ee8b79db2b024ce2cdd25c2bba32b457b8307a

    SHA512

    1afc540c21341123241a74e55a71b9970b28b17d1f9a0cbfd6107af7dd0e0c922b97daa9f0450c041c225fda24fb9f54b2f054965bc38ed5826b3f9fdd07c78f

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\AnySign\config\policy_en.tbl

    Filesize

    3KB

    MD5

    1c972d9de79662f582197d8f377d4728

    SHA1

    d1b6008f4b0d40d9dc358e66813adae0018d09a0

    SHA256

    7c1f094ad5701113473771bb02e79b34714c763ec822be62d09d950b449a5a8d

    SHA512

    d1dcb33929f6c9c3b533d1a8af2be3e15f3a543a9b722b9cc6e95766e16c7a84bb36a1473092b50761eb99977ce16a5133c9d63a760057639f5f8f1ea3ed4b59

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\AnySign\config\xecureweb.cfg

    Filesize

    257B

    MD5

    fdd1972d19a09acd9830dc0abc987619

    SHA1

    0b1930643d8ed64ce4336e2c00b35fb697a7aabe

    SHA256

    5656de5fd79f01c3e3cd35ec7ce45ba3265393a68625030608d62ce51ff35e5b

    SHA512

    4a3bd0a5e17d818b629bd56c05bb05e8402fa4c95c8717b993696bfb9db77192c8c705a70d9ab4595f478dccc66645489dc3246ef3995cb85ca64c6ba18f6400

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\AnySign\preference.cfg

    Filesize

    97B

    MD5

    3e40d1210d833f998f60b1ced70130e1

    SHA1

    502ed70b0cd8700178771312ff1903cd889158e2

    SHA256

    3bb855b23d138622ad3a12c24e2fcb1e4a5812c54a289f4396e70ac669452e83

    SHA512

    a3f73b5ecdc740cd876e01197acf2e496c881c46a615a61bbd9ea430b140051471f845016bea701148cd7cfac0557f43ab0dc0e171de9d2ada7759c43d514c7a

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\certstorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert.der

    Filesize

    1KB

    MD5

    2fa4b237e32df463593e9b5340ef4744

    SHA1

    eb9aa64c4395ed7847dde917e9208f51641cd8d6

    SHA256

    cdddca4ea35f5c12cb00bccd842212acb93801f547853bc37398b4337d42dccb

    SHA512

    c452a0f2fc92642f016c4531cefc4e4f749b9d7a2ee8380cbab3af24a8a00e6e9747743358dfa5bc51c8e85ef5a15cea897986ffddf6cef137356c2078cdea44

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\certstorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert.der

    Filesize

    1KB

    MD5

    b3cf0b23a27739ec0b32b848f13e52b3

    SHA1

    2e3550f44cc4f1919c38303b0220f7a9aa63f5ab

    SHA256

    35bf3f9f71aa5f76c0fb7581ff087b87b76933140a30efc5e0e79dc3471e70fd

    SHA512

    832b9a537103c6c42e67b2ec2ef640890abdb82e329597bbe63454ab2840d7ba91e4b6edaaf28587cc4b77fd3a92ebac7270ced4baf3114a080e5abddd2cc2bd

  • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\SoftForum\certstorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert.der

    Filesize

    925B

    MD5

    762017a124745b0b9a09f8a339c1f4dc

    SHA1

    b9cd0cf69835eabf3f137f2049e4c924878477db

    SHA256

    e5c01cb4093279faa19fcfa24ea43eb1b26d07a615adf7240184a1e716b761c9

    SHA512

    639b66452340ccd9b699dd9d01e885d1f2d0331f8a37c477449c80dd9bc97534730df5b42ec5ce3f447a8c81fbd360b3424c7fded196c1b5f90d01355a732f4c

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\libnspr4.dll

    Filesize

    204KB

    MD5

    7957e822b5e67afe2cb64e1fbfc923db

    SHA1

    49e065f2ebc213c445e8c637b32f101674ca4dc8

    SHA256

    480c54abd5c555520ee38069d9233b1c2739286471376a56ee66bd756a37fde2

    SHA512

    ed44cc693175c01e1d1a7b856ca800e3cd641a3f434ffecd1532324111aa55010601c1aa92ce069133c012d6e89d5b99bd9526283da9b972b53f788a820e63bb

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\libplc4.dll

    Filesize

    28KB

    MD5

    c3700234160aeea85be0be637744f8a1

    SHA1

    27b86964b29ffb287180cc2875e4467e7b092084

    SHA256

    b6a12653b2b8024f64bc581e67dc10a469edcfdabdad3da405ef7b709eb34805

    SHA512

    2ff671c0633f78d3e6736bcc445b72de1d81a74dbae29673f4c88d57485ff3a0f2de2a60a137113091a55feca7c5dd1fa7816b0d630fe5f5fbd0af70667da4e0

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\libplds4.dll

    Filesize

    24KB

    MD5

    a4f672b53c53e322d8f474e7980f432e

    SHA1

    5359b8ac02d98801edc6c2eb46e223c39ce42ee3

    SHA256

    6b8d5ecd92b9705d54ad48c873226991de558e57c36effeefbea63e006aae75f

    SHA512

    b25d18403a586b03588ddc6b283b09bd431c71d3cb548d4fe59628ab3431fef7c7c2364ee05bf1e3983379f11e7c442f21bdcdc6df191c4f08379ba15a10cc43

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\smime3.dll

    Filesize

    558KB

    MD5

    5264e5d087b395e91b739778e8e76933

    SHA1

    67f216749c1a8ca7194dcb7a2cceb47fc6457f59

    SHA256

    4a846a28573048cad28714b7623e7c5f03001b66d55092aada3da7a3c397b26e

    SHA512

    a1f9f95fc35642f6cf0104a0ab277e10359ec836977b8d2da2812ff26aaaea2d11b2e0dce18712c9296a62c51e6c2a114c9bc85634fa342aac384661cfe73e35

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\cert\softokn3.dll

    Filesize

    1.2MB

    MD5

    aba9a1d88c35d1e380054a18d2087291

    SHA1

    51ae68d6efd42bb51653a3dd0733a1c36ed5c632

    SHA256

    178dac494dc58ff2a2874d54cd2fc96364a12fec2b5bd25d5bcefea187a8979e

    SHA512

    ecef7bc477ab3819cc5d266af57cbe4722daf106fdc5dbf663ee700fd487194607fe541248bd00e69bddfc39ad31810c1c768eb510fae10bed89b3e9fa361256

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\Any_setup.exe

    Filesize

    144KB

    MD5

    894222e8962b46263c26aa9ea08c2050

    SHA1

    9778d5e7d4cd15717f3240cae4255934ccd5231c

    SHA256

    e5c6a460471e5f1d37c083c1069e95e253ad80c25e42f5624f6824bb1f4ce826

    SHA512

    472787c8827cb5df1c527caee6bb0766429a096f3931f30d7a435d891a0741b333c16000ae53cf1bb2398ba77187c5ae240145b30f51899bff074232e7f900b5

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\KEBSFSC_WR.dll

    Filesize

    14KB

    MD5

    cf95ac23bf29820858daa738a45c666f

    SHA1

    baec586aaa13cbc4623a0371065fb523f7d8ec3c

    SHA256

    d28631be5c2a582fab6c47d5348fb7ff058c2f72c312e816f6106d1c9ee2c3ef

    SHA512

    451d4323132c5dd0f622226a04b739b1145f13501675b5733d7b69c6be861c350ca2aa21f2ecd916ef398a1d519e41f5e5fdcbf7aa68b7b45e01048c3e869ea2

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\NativeMng.dll

    Filesize

    388KB

    MD5

    abcff5d047d6c23b6902ca5e163e372b

    SHA1

    1c567d7f01934f86d7d18f7d580fcfa48c369a89

    SHA256

    c5caf3852aa1560622672ff46394156982027b525448cc9ed0e5bcdb8031bb5f

    SHA512

    7e95cccf1046ba9b605e6f79e4ecf7ef48c8d5e541373c94971c7ac8208ae46e37bb69c1d5d86dd98a14ee1781a5b7373af859842aab3cf79f51887d87cf4c7c

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\NativeMngUAC.dll

    Filesize

    332KB

    MD5

    fc3d8d8d0e798c3d538ee61a9534e77e

    SHA1

    1bfa5253236d992d6be87f3edc197a159304d725

    SHA256

    998ae57117e9da50dd69d5c4127d878554ee7e3e3f6a1e5757d135a2e2f6bf30

    SHA512

    3cb40d2fb6fb80c5ebb7d2e5ed29cbc152db66a4f47409abb09fa595888c6d424c633633c230ee76ab5d6c5756f45f37eb7b3e885e99c56b9bd2cb82e8984587

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XWMSmartCard.dll

    Filesize

    152KB

    MD5

    c4ecea701f20212a2edfdd3048e80fcf

    SHA1

    c9437b1112ce79e77adfd2502432200e9c22a2d2

    SHA256

    1334d018d994c0237354a0caf2e88c0c146599e844de6d9b3e045b70e2f98296

    SHA512

    9aaff55557b02e9758eb2ad32bf5bcfdd638e031387dcd1fbdc8163bf6206ba3d807c1bcb84839b8bbaa333dacead5aa6c385d4059af4c554cf035f4959eba3d

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcASN.dll

    Filesize

    476KB

    MD5

    da64e467d08091baff34d11dc5ce221c

    SHA1

    c5587ecdda54d9bd41d725a0b733f1b0497a70e7

    SHA256

    e7beeb18da5fb23053892440530c7d69f66207841f51cbad5e8d61144ce72fdf

    SHA512

    772f1477f59ee9039be32bdf38fe9888d3cbea5530afd6cbbc1448ed1516e15cfeae81ce99f980f232e9a9e0152aa922de2eb77509afd811135477afdfc1029b

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcCMP.dll

    Filesize

    116KB

    MD5

    b88c2629b423f8523562502fa41ea887

    SHA1

    24a7a9005ab1f9072b59e9bce354e60742e7048d

    SHA256

    01eb6e86f92e75c0d0d2f981d29513448269d443b585319796f51ddb1576e83e

    SHA512

    5c1afcab24a08f7eb48d6971929f1413380720a6633a1c0fa9e8c7b60c4dcfdb65010bfd2dd190652431a304db8efb8e04dcf80cc011d250736861ba00832754

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcCRL.dll

    Filesize

    25KB

    MD5

    d70354316a65057b5e8fcc834d32e380

    SHA1

    c7010124e6647cb09558bb08b7ddd8938b8e7329

    SHA256

    40b325db483a312d33f56812225b7f06be21a4c2bcf9839a39bd8f5498409491

    SHA512

    deb7429dd3680f433d2f553422842c0bdadf977a6dce8c5905c6d2f9a10d1de517775a8df712e9ca96d6ecc75b0c4daf0903b07ec6d2328d3c200cd885ff1cd8

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcCSP.dll

    Filesize

    76KB

    MD5

    953dc07cebdebb4606aaba39cbb4a033

    SHA1

    7856dc02ae13866f802c792eda4a19c0f1d4886a

    SHA256

    2d5fc9a50190a9295c7e3fe0b7a0c94617bdbe0edb949a20314c19f25f805d24

    SHA512

    33086ffdd493049c7a9429cc52dea533669e9463fce4361485b059f348044c7e75fbf1e0425200eb03413500bd68879d6a61de9558f28090ef89e04a8623e6a3

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcCodec.dll

    Filesize

    25KB

    MD5

    e9fbf4bd121a07c0229e03d8ca44d54b

    SHA1

    f8e767969f2625c9eda52165f7f0f979347b8875

    SHA256

    1b191d2e84aa3766269cc2552418806516e7e0c5c459eedab05d5fd416424335

    SHA512

    200b10611ea04b880e15be1c1eec43d8c36c946eb501f8e7f13d2150a0effa901d947085756797a5cd372f47f2bacc67e78610909ae18b59734b09d329937244

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcCrypto.dll

    Filesize

    364KB

    MD5

    fc0dc47b7de24ca8dbf4f7876b5eff98

    SHA1

    a4c2673c81850f8afe481f45c686566fce1898b1

    SHA256

    7dbaa3bafe67480b9654b4baea249fadc91607c80d6c5f7eec82552252efe64a

    SHA512

    8733da5b181079b38996c314aa6dcc03a6f598e60a0e0de1768365a8166b6afd947c98f25b39b5e51d11087b307cb90e15fb1ebfe123700e8ee95abf0845031b

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcIO.dll

    Filesize

    50KB

    MD5

    4e7bc5cb9335f07323e90e484ab7ccfe

    SHA1

    2cf8f65c27478f6a5de87fcdbaa9e66e128244b7

    SHA256

    230fd595d82c33ff27005ca81efebbcffe9043c0eb0e7952b91aed5071f8a4b3

    SHA512

    917ab7f6f17afb671fe48b2cf866deb53ca142e6f24fbc4eb96ff739b4e132b4098f743433002ad8016590ff662f407bca41a9f65861fba49dbf696cfbb5771b

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcLDAP.dll

    Filesize

    29KB

    MD5

    5af3726ba18d0d22adcb56f61ab19c6a

    SHA1

    81b04444018e07ba24ba07e6b16ad71486cbdc9f

    SHA256

    432a8be57e634a3b32805f5e55559f19bb6d9cd7cce3f14438ba5b946fd4e1aa

    SHA512

    e5121a10b322723ddccfe367d1a1d9f04bfd6d2ce95595f9281729d4cd0f324e8623c708b5f94547425eeb22e91539898eb0691efdaf44251ed0743858ee41c9

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcPKC.dll

    Filesize

    96KB

    MD5

    2e6b9a2c04e063ea3fdc557c1b375f75

    SHA1

    23fc698d391d5183126031ab2f7882a3bf9bccaa

    SHA256

    729d8e3b1982b6a29ac76cee8a5e5ad64ac74b840b19ae5e9362b8b33051b58b

    SHA512

    0b2577dc659d6c82ae74f6c1bc4de663d5bbce9f4b97c4592ede76bd8729c076da386ded85d0601c30f2673c18c3adfff9bfc28eabdaf0d66f8590d79cdee813

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcPKCS12.dll

    Filesize

    72KB

    MD5

    f6fc5ff28cd788dfefc5e43c2c210f9e

    SHA1

    f6b4ecd0a8a7fbcb2fed1dce02e2dd3a139d9f66

    SHA256

    7a1ded8fb411c186bb8e7b4effc13310e0479811401c2aaab2d3f4e738edfc0d

    SHA512

    2ffadc57fc7c769e02498086300ceb368807e1bd74cba41991e061198a76ff1f60cea03a4386f2e8585a194ff555c994ab981111be8afc8dc21cdda637832f08

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcPKCS5.dll

    Filesize

    41KB

    MD5

    937f4ac3a315bf45da8130bf4c1f07cc

    SHA1

    91cf9a5f0c7e4bce63a5ae062d26540e28ef8e2c

    SHA256

    2a27b402a1bf38fe8679a00955c837fd0311b20e052213193b981631216bee21

    SHA512

    c22aae4305655170fd07efa205df1ceb409aabf9777a239eb728fe00283273c8243aeb47610a53c6fa3412773760361763e9fb95a338a783f934c2373db339dd

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcPKCS7.dll

    Filesize

    116KB

    MD5

    8536fca979cc83f7e73f457b22c6887c

    SHA1

    8dcd064314a3dd4eb2e0a35fda091216640e1172

    SHA256

    bda0634667d5cdc4fdccaab98ef229dff14f01a405ca8c8e67d3583452c9d8eb

    SHA512

    8353d83478b9fce0c97c1557987e0ade4e1a0f355f24c6006372cedcf287dfd0c2f8575a08019b3023bd40411a3857123faa6dbf219f11cec958608ad8513ce0

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcPKCS8.dll

    Filesize

    29KB

    MD5

    b352b60f43880596ce5ecc3445127e7e

    SHA1

    4bdb3aae26ff2ab8304f30cb19d700497c3e4abf

    SHA256

    6af900b578699891a07ca36358bf7fe1b0c184fb858f7686a5fe9de104d0fad0

    SHA512

    dfc0c2bf87e5582bdc5ba8533b52dab2d8fbeb7c71d77596fb014bb841f3be042f99156ff08f1f3f64cb7e89aaf2f223a4bdf536841ecffbe7a047cb6e9cada1

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcPVD.dll

    Filesize

    100KB

    MD5

    18be192fc54f89d888c6edbf8ea9ed26

    SHA1

    f3de7e8377bd876787d8ddc18519eea9592737b7

    SHA256

    458fddc46857bb7357876e36a9aad8f8e6c92922dc162a598529448b719d11a7

    SHA512

    634aca11ffd6bcc9ed385c744f6b56571eb93ef77a61c996c74c903051faec74ecc95f42ff5675c375017d8d79457f1f5b78556a0f0c8e44bf6c5fa3750ec0a3

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureAcST.dll

    Filesize

    33KB

    MD5

    c276fec2bd190914b997a52655f3da46

    SHA1

    911692ab8925939bd77294108c12ba89582725ce

    SHA256

    71433a757112397417103e24d43482a7150a027aa70f0c4c4ff0e0f779bcc359

    SHA512

    685263f6e3cec6df5ed82e9ab18c3b96c67ae57dcf59a5764f6e152236c225723a52dd59e6ca2dacfa705b47eb3a9599fd077468190e0d5b7bf0382ab08c7b45

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\XecureMacuxCSM.dll

    Filesize

    796KB

    MD5

    34928bc9500565d1d8206cc002ecfb85

    SHA1

    fac8228974009162b0c0476e2b2b4adcb391173e

    SHA256

    aac8ab150d0fce35adff0be9a2cd4d83c92bcb7b7df7ee2a2c5b07550ed9fb1a

    SHA512

    899b457f4dd6ac2f0de31698f7ca3e2881a5abcaa529821ea127d0cc334e24a5ce2cd2be024dba2e6818849725fbb1d882352786b0d05adaacc077414c0b67fa

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\msvcp80.dll

    Filesize

    541KB

    MD5

    0b3595a4ff0b36d68e5fc67fd7d70fdc

    SHA1

    973614ac9622d5ea9cdd68febce3258d196408b6

    SHA256

    372af797353f9335915cd06d4076bab8410775dcaf2dac0593197d7c41bbffb2

    SHA512

    e191de0236e05e0bb198c51e2f630b56b833b868383e7ab0bbfd91010fa57a9402364e1082c0f267b1e24789f6d7e6d0253d2a932369f469588eec6ada3f48be

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\msvcr80.dll

    Filesize

    617KB

    MD5

    c9564cf4976e7e96b4052737aa2492b4

    SHA1

    43851fe4644c0a1eb31fe80f427777f1f0015efa

    SHA256

    c3ac989c8489a23bb96400b1856f5325ffc67e844f04651ea5d61bc20a991c6d

    SHA512

    8e9817ab398a86af6982d39fed018ff5282f60c5330dbef6417cfbe73731d8503c63da32107d948cc1eba14dd30aab614c7c858300e4f79ca418dc42d353f9c8

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\nsldap32v50.dll

    Filesize

    140KB

    MD5

    9a4a4a35adbeba2b47c435a7bb9b8dd2

    SHA1

    538da93d169bc5ce060279ee3234a14e5f8f1a5f

    SHA256

    e048c35e4d809532c0ca98e49ec27f7d26367051265cada3d381f842a67c50c4

    SHA512

    9b195b7a5b49ea1986973ecfe1ed6dfbad020772af733a16dbb07d1c177e025db43ba8817ab4dbcd2f39934d3169fadc8d930b1eb5b599807e715ea7a3271512

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\xwm_smartcard.dll

    Filesize

    124KB

    MD5

    4b252a2d91509dc995b60e5f1ea92df7

    SHA1

    8788b12219f96d4fdc0fa0fc277fdf6aa3591cc9

    SHA256

    94fc68c7fe0df25e78b5d109b3fb8a7436c8864ae215cadd25463cdfc3e8e9ff

    SHA512

    f28aa4890126e951e7d03f21488c7f9f72a681757b99f3639d51d08b000559a01fbd359ec7672b53250b79bec2defb27bd4a10f7482a4fc1487844fbf06954a2

  • \Program Files (x86)\SoftForum\XecureWeb\AnySign\dll\xwmfUI.dll

    Filesize

    504KB

    MD5

    42dfb5145ed3da34a05bd789b9db6da8

    SHA1

    2c4ca214e3d50b0de46b605bc4fe97768317e27f

    SHA256

    53590892565ce456ca1a606a1263345dbef6f08915ee2206beb3f4733a2646f5

    SHA512

    01204281647aca2153b9c0e3add9123690a035f4f345bd21a83af48d51e3d4b165787ea0a0be360920f82fe416545553c03e90306c9c8164e249cc3d40425de1

  • memory/1172-330-0x0000000000F30000-0x0000000000F3F000-memory.dmp

    Filesize

    60KB

  • memory/1172-321-0x00000000009B0000-0x00000000009DF000-memory.dmp

    Filesize

    188KB

  • memory/1172-324-0x0000000000D80000-0x0000000000DF4000-memory.dmp

    Filesize

    464KB

  • memory/1172-329-0x0000000000F00000-0x0000000000F24000-memory.dmp

    Filesize

    144KB

  • memory/1172-328-0x0000000000EB0000-0x0000000000ECA000-memory.dmp

    Filesize

    104KB

  • memory/1172-327-0x0000000000E90000-0x0000000000E9B000-memory.dmp

    Filesize

    44KB

  • memory/1172-319-0x0000000000B90000-0x0000000000C57000-memory.dmp

    Filesize

    796KB

  • memory/1172-317-0x0000000000B10000-0x0000000000B8B000-memory.dmp

    Filesize

    492KB

  • memory/1172-450-0x0000000000400000-0x00000000009AF000-memory.dmp

    Filesize

    5.7MB

  • memory/1172-334-0x0000000000FA0000-0x0000000000FB6000-memory.dmp

    Filesize

    88KB

  • memory/1172-315-0x0000000000350000-0x00000000003A8000-memory.dmp

    Filesize

    352KB

  • memory/1172-359-0x0000000000400000-0x00000000009AF000-memory.dmp

    Filesize

    5.7MB

  • memory/1172-314-0x0000000000330000-0x000000000033D000-memory.dmp

    Filesize

    52KB

  • memory/1172-331-0x0000000000F50000-0x0000000000F6A000-memory.dmp

    Filesize

    104KB

  • memory/1172-326-0x0000000000E00000-0x0000000000E15000-memory.dmp

    Filesize

    84KB

  • memory/1172-322-0x0000000000C60000-0x0000000000D71000-memory.dmp

    Filesize

    1.1MB

  • memory/1172-313-0x0000000000220000-0x0000000000230000-memory.dmp

    Filesize

    64KB

  • memory/1172-310-0x00000000001D0000-0x0000000000220000-memory.dmp

    Filesize

    320KB

  • memory/1496-493-0x0000000000400000-0x00000000009AF000-memory.dmp

    Filesize

    5.7MB

  • memory/1496-588-0x0000000000400000-0x00000000009AF000-memory.dmp

    Filesize

    5.7MB

  • memory/1896-338-0x0000000000250000-0x000000000025D000-memory.dmp

    Filesize

    52KB

  • memory/1896-337-0x0000000000230000-0x0000000000240000-memory.dmp

    Filesize

    64KB

  • memory/1896-335-0x00000000002F0000-0x0000000000340000-memory.dmp

    Filesize

    320KB

  • memory/1896-342-0x0000000000A10000-0x0000000000A8B000-memory.dmp

    Filesize

    492KB

  • memory/1896-340-0x0000000000340000-0x0000000000398000-memory.dmp

    Filesize

    352KB

  • memory/1896-333-0x0000000000400000-0x0000000000A0E000-memory.dmp

    Filesize

    6.1MB

  • memory/1896-585-0x0000000000400000-0x0000000000A0E000-memory.dmp

    Filesize

    6.1MB

  • memory/2244-271-0x0000000004030000-0x0000000004054000-memory.dmp

    Filesize

    144KB

  • memory/2244-247-0x0000000003F30000-0x0000000003F45000-memory.dmp

    Filesize

    84KB

  • memory/2244-360-0x0000000004530000-0x0000000004B3E000-memory.dmp

    Filesize

    6.1MB

  • memory/2244-361-0x0000000003B40000-0x00000000040EF000-memory.dmp

    Filesize

    5.7MB

  • memory/2244-225-0x0000000003C30000-0x0000000003CF7000-memory.dmp

    Filesize

    796KB

  • memory/2244-203-0x0000000001DB0000-0x0000000001DC0000-memory.dmp

    Filesize

    64KB

  • memory/2244-475-0x0000000003B40000-0x00000000040EF000-memory.dmp

    Filesize

    5.7MB

  • memory/2244-474-0x0000000003B40000-0x00000000040EF000-memory.dmp

    Filesize

    5.7MB

  • memory/2244-237-0x0000000003D70000-0x0000000003E81000-memory.dmp

    Filesize

    1.1MB

  • memory/2244-286-0x00000000040D0000-0x00000000040E6000-memory.dmp

    Filesize

    88KB

  • memory/2244-260-0x0000000003FC0000-0x0000000003FCB000-memory.dmp

    Filesize

    44KB

  • memory/2244-278-0x0000000004080000-0x000000000409A000-memory.dmp

    Filesize

    104KB

  • memory/2244-264-0x0000000003FE0000-0x0000000003FFA000-memory.dmp

    Filesize

    104KB

  • memory/2244-274-0x0000000004060000-0x000000000406F000-memory.dmp

    Filesize

    60KB

  • memory/2244-242-0x0000000003EA0000-0x0000000003F14000-memory.dmp

    Filesize

    464KB

  • memory/2244-339-0x0000000003B40000-0x00000000040EF000-memory.dmp

    Filesize

    5.7MB

  • memory/2244-298-0x0000000004530000-0x0000000004B3E000-memory.dmp

    Filesize

    6.1MB

  • memory/2244-230-0x0000000003D10000-0x0000000003D3F000-memory.dmp

    Filesize

    188KB

  • memory/2244-213-0x0000000003B40000-0x0000000003B98000-memory.dmp

    Filesize

    352KB

  • memory/2244-218-0x0000000003BA0000-0x0000000003C1B000-memory.dmp

    Filesize

    492KB

  • memory/2244-207-0x0000000002930000-0x000000000293D000-memory.dmp

    Filesize

    52KB

  • memory/2340-476-0x0000000000400000-0x00000000009AF000-memory.dmp

    Filesize

    5.7MB

  • memory/2340-582-0x0000000000400000-0x00000000009AF000-memory.dmp

    Filesize

    5.7MB

  • memory/2344-45-0x0000000000420000-0x00000000004A8000-memory.dmp

    Filesize

    544KB

  • memory/2344-49-0x0000000000220000-0x0000000000254000-memory.dmp

    Filesize

    208KB

  • memory/2344-42-0x0000000000310000-0x00000000003A9000-memory.dmp

    Filesize

    612KB

  • memory/2744-31-0x0000000000420000-0x0000000000454000-memory.dmp

    Filesize

    208KB

  • memory/2744-25-0x0000000000350000-0x00000000003D8000-memory.dmp

    Filesize

    544KB

  • memory/2744-21-0x0000000000220000-0x00000000002B9000-memory.dmp

    Filesize

    612KB