softokn3.dll

First submission 2022-10-04 08:44:02

File details

File type:	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
File type:	248.43 KB (254392 bytes)
Compile time:	2022-03-22 16:58:31
MD5:	63a1fe06be877497c4c2017ca0303537
SHA1:	f4f9cbd7066afb86877bb79c3d23eddaca15f5a0
SHA256:	44be3153c15c2d18f49674a092c135d3482fb89b77a1b2063d01d02985555fe0
Import Hash :	32ef7516974ac0c43943c0635266c6fd
Sections 6	.text .rdata .data .00cfg .rsrc .reloc
Directories 6	security relocation debug resource export import
Virus Total:	0/70 VT report date: 2022-10-03 23:34:55

File features detected

Is DLL

Packers

Anti Debug

Anti VM

Signed

XOR

URLs, FQDN and IP indicators 167

URL	Host (FQDN/IP)	Date Added
hXXp://213.226.100.108/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	213.226.100.108	2023-03-28 22:47:08
hXXp://101.99.93.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	101.99.93.178	2023-03-28 12:49:09
hXXp://37.220.87.63/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	37.220.87.63	2023-03-25 15:08:23
hXXp://45.9.74.90/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.9.74.90	2023-03-23 07:40:10
hXXp://94.142.138.213/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.142.138.213	2023-03-23 07:29:25
hXXp://45.9.74.170/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.9.74.170	2023-03-22 08:19:09
hXXp://77.73.134.43/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	77.73.134.43	2023-03-22 08:13:16
hXXp://78.153.130.123/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	78.153.130.123	2023-03-21 08:55:15
hXXp://185.106.92.151/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	185.106.92.151	2023-03-20 18:06:15
hXXp://195.133.40.111/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	195.133.40.111	2023-03-19 16:21:10
hXXp://83.217.11.31/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	83.217.11.31	2023-03-19 08:34:05
hXXp://83.217.11.32/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	83.217.11.32	2023-03-19 08:31:10
hXXp://45.144.31.31/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.144.31.31	2023-03-15 14:14:10
hXXp://45.9.74.36/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.9.74.36	2023-03-14 21:04:16
hXXp://94.142.138.43/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.142.138.43	2023-03-13 13:47:09
hXXp://185.106.92.84/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	185.106.92.84	2023-03-13 00:18:05
hXXp://37.220.87.66/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	37.220.87.66	2023-03-12 19:09:07
hXXp://45.9.74.133/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.9.74.133	2023-02-26 08:13:10
hXXp://83.217.11.27/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	83.217.11.27	2023-02-26 06:39:08
hXXp://79.137.248.136/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.248.136	2023-02-08 08:46:16
hXXp://62.204.41.134/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	62.204.41.134	2023-02-07 20:29:15
hXXp://62.204.41.7/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	62.204.41.7	2023-02-07 15:24:10
hXXp://94.142.138.10/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.142.138.10	2023-02-02 12:43:06
hXXp://83.217.11.23/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	83.217.11.23	2023-01-24 09:40:08
hXXp://89.238.185.17/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.238.185.17	2023-01-24 09:24:05
hXXp://79.137.197.160/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.197.160	2023-01-24 09:20:07
hXXp://respekt5568.com/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	respekt5568.com	2023-01-20 21:09:06
hXXp://91.107.180.190/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	91.107.180.190	2023-01-19 16:57:08
hXXp://51.81.254.14/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	51.81.254.14	2023-01-11 08:53:06
hXXp://195.133.40.221/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	195.133.40.221	2023-01-10 07:58:04
hXXp://167.235.29.56/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	167.235.29.56	2023-01-09 08:46:03
hXXp://87.251.77.45/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	87.251.77.45	2023-01-08 17:58:05
hXXp://85.192.63.204/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	85.192.63.204	2023-01-06 21:13:04
hXXp://5.252.118.36/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	5.252.118.36	2023-01-06 21:02:04
hXXp://147.135.62.202/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	147.135.62.202	2023-01-06 05:36:07
hXXp://104.234.147.80/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	104.234.147.80	2023-01-05 21:12:05
hXXp://77.73.133.119/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	77.73.133.119	2023-01-05 08:53:03
hXXp://193.3.23.11/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	193.3.23.11	2022-12-28 07:50:04
hXXp://185.234.247.220/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	185.234.247.220	2022-12-26 08:37:04
hXXp://93.185.166.49/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	93.185.166.49	2022-12-25 18:21:05
hXXp://152.89.247.84/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	152.89.247.84	2022-12-25 08:50:06
hXXp://194.87.216.120/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	194.87.216.120	2022-12-24 08:03:05
hXXp://5.252.118.177/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	5.252.118.177	2022-12-22 13:26:04
hXXp://91.215.85.146/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	91.215.85.146	2022-12-18 17:29:03
hXXp://179.43.142.85/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	179.43.142.85	2022-12-18 15:26:03
hXXp://212.192.31.175/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	212.192.31.175	2022-12-18 12:50:03
hXXp://194.4.49.101/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	194.4.49.101	2022-12-18 12:35:03
hXXp://45.15.156.179/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.179	2022-12-18 03:05:04
hXXp://94.131.98.162/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.131.98.162	2022-12-17 09:26:06
hXXp://88.119.170.115/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	88.119.170.115	2022-12-17 08:34:04
hXXp://45.153.240.247/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.153.240.247	2022-12-06 08:00:06
hXXp://74.119.195.225/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	74.119.195.225	2022-12-05 20:57:07
hXXp://92.204.160.116/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	92.204.160.116	2022-12-02 18:14:04
hXXp://45.15.156.38/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.38	2022-11-29 16:13:05
hXXp://65.108.248.168/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	65.108.248.168	2022-11-29 07:11:03
hXXp://respekt5567.com/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	respekt5567.com	2022-11-28 20:15:04
hXXp://45.84.240.72/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.84.240.72	2022-11-28 16:07:06
hXXp://37.220.87.6/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	37.220.87.6	2022-11-27 08:16:04
hXXp://79.137.196.11/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.196.11	2022-11-25 12:24:03
hXXp://193.149.185.168/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	193.149.185.168	2022-11-20 07:44:04
hXXp://185.246.220.214/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	185.246.220.214	2022-11-19 05:38:47
hXXp://89.208.103.56/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.208.103.56	2022-11-18 08:30:48
hXXp://193.47.61.188/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	193.47.61.188	2022-11-16 21:48:49
hXXp://172.86.121.106/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	172.86.121.106	2022-11-16 14:10:42
hXXp://45.67.35.17/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.67.35.17	2022-11-16 14:03:47
hXXp://45.15.156.40/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.40	2022-11-16 09:55:28
hXXp://176.113.115.217/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	176.113.115.217	2022-11-16 09:03:45
hXXp://45.15.156.120/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.120	2022-11-16 08:08:45
hXXp://146.70.125.95/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	146.70.125.95	2022-11-14 08:29:39
hXXp://88.210.6.78/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	88.210.6.78	2022-11-13 09:46:50
hXXp://45.15.156.102/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.102	2022-11-12 09:08:42
hXXp://77.73.133.92/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	77.73.133.92	2022-11-12 08:50:41
hXXp://89.185.85.230/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.185.85.230	2022-11-11 20:06:46
hXXp://164.92.186.156/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	164.92.186.156	2022-11-11 11:25:51
hXXp://79.137.205.87/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.205.87	2022-11-11 09:05:46
hXXp://193.149.187.118/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	193.149.187.118	2022-11-10 21:15:30
hXXp://167.235.134.14/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	167.235.134.14	2022-11-10 21:12:58
hXXp://45.140.147.122/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.140.147.122	2022-11-10 08:51:39
hXXp://87.236.161.20/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	87.236.161.20	2022-11-09 21:26:37
hXXp://45.15.156.90/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.90	2022-11-08 21:42:37
hXXp://79.137.195.225/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.195.225	2022-11-08 16:55:35
hXXp://135.181.185.150/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	135.181.185.150	2022-11-08 08:20:37
hXXp://94.131.109.157/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.131.109.157	2022-11-07 14:09:39
hXXp://87.251.77.253/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	87.251.77.253	2022-11-07 08:31:34
hXXp://146.70.160.4/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	146.70.160.4	2022-11-07 08:10:36
hXXp://5.252.177.64/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	5.252.177.64	2022-11-06 07:49:38
hXXp://88.119.171.176/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	88.119.171.176	2022-11-05 18:59:36
hXXp://data-file-data-7.com/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	data-file-data-7.com	2022-11-05 08:26:40
hXXp://95.141.41.13/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	95.141.41.13	2022-11-05 06:48:35
hXXp://159.69.241.241/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	159.69.241.241	2022-11-04 20:39:38
hXXp://185.106.92.25/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	185.106.92.25	2022-10-14 21:50:34
hXXp://88.119.170.188/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	88.119.170.188	2022-10-14 07:34:11
hXXp://179.43.163.117/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	179.43.163.117	2022-10-14 07:20:11
hXXp://79.137.197.212/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.197.212	2022-11-03 21:39:23
hXXp://51.79.211.202/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	51.79.211.202	2022-11-03 21:31:31
hXXp://45.15.156.105/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.105	2022-11-03 21:28:35
hXXp://94.158.244.114/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.158.244.114	2022-10-13 14:52:16
hXXp://194.87.216.7/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	194.87.216.7	2022-10-13 09:13:10
hXXp://65.108.20.41/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	65.108.20.41	2022-11-02 15:49:29
hXXp://84.246.85.153/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	84.246.85.153	2022-11-02 09:04:36
hXXp://188.93.233.101/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	188.93.233.101	2022-10-12 17:31:09
hXXp://45.153.241.202/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.153.241.202	2022-11-01 08:32:16
hXXp://91.240.118.160/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	91.240.118.160	2022-11-01 07:22:17
hXXp://77.73.133.1/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	77.73.133.1	2022-10-11 08:37:03
hXXp://45.67.35.251/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.67.35.251	2022-10-11 08:34:08
hXXp://31.41.244.137/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	31.41.244.137	2022-10-31 09:35:10
hXXp://77.73.133.7/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	77.73.133.7	2022-10-10 16:06:09
hXXp://88.119.171.205/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	88.119.171.205	2022-10-30 11:54:05
hXXp://45.67.231.202/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.67.231.202	2022-10-10 14:35:10
hXXp://51.68.28.231/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	51.68.28.231	2022-10-29 21:09:04
hXXp://193.233.48.6/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	193.233.48.6	2022-10-29 19:12:05
hXXp://89.208.103.222/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.208.103.222	2022-10-29 18:10:04
hXXp://31.41.244.153/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	31.41.244.153	2022-10-29 17:54:05
hXXp://146.70.86.136/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	146.70.86.136	2022-10-29 09:07:35
hXXp://94.131.97.157/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.131.97.157	2022-10-09 10:39:04
hXXp://45.89.55.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.89.55.178	2022-10-09 10:33:03
hXXp://167.114.45.110/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	167.114.45.110	2022-10-09 09:58:04
hXXp://5.252.21.191/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	5.252.21.191	2022-10-09 09:56:03
hXXp://45.8.144.183/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.8.144.183	2022-10-28 14:30:32
hXXp://94.131.109.53/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.131.109.53	2022-10-27 18:41:20
hXXp://45.15.156.72/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.72	2022-10-27 18:21:29
hXXp://89.185.85.151/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.185.85.151	2022-10-26 20:06:29
hXXp://85.192.63.175/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	85.192.63.175	2022-10-07 21:13:03
hXXp://46.249.35.162/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	46.249.35.162	2022-10-07 20:51:03
hXXp://45.8.146.34/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.8.146.34	2022-10-07 20:18:04
hXXp://89.185.85.175/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.185.85.175	2022-10-07 19:33:05
hXXp://84.246.85.178/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	84.246.85.178	2022-10-07 19:32:03
hXXp://45.15.156.56/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.56	2022-10-26 13:57:24
hXXp://151.236.1.121/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	151.236.1.121	2022-10-26 12:04:23
hXXp://79.137.192.29/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.192.29	2022-10-26 10:25:20
hXXp://82.115.223.5/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	82.115.223.5	2022-10-26 08:51:20
hXXp://45.8.144.153/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.8.144.153	2022-10-26 08:42:21
hXXp://23.229.117.245/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	23.229.117.245	2022-10-25 16:06:21
hXXp://45.89.55.113/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.89.55.113	2022-10-06 11:50:09
hXXp://193.106.191.150/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	193.106.191.150	2022-10-06 11:46:12
hXXp://111.90.149.168/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	111.90.149.168	2022-10-25 12:02:21
hXXp://94.131.98.5/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.131.98.5	2022-10-05 21:24:08
hXXp://45.150.67.85/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.150.67.85	2022-10-05 20:50:09
hXXp://206.166.251.218/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	206.166.251.218	2022-10-05 20:47:09
hXXp://45.67.231.93/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.67.231.93	2022-10-05 20:27:16
hXXp://172.86.120.142/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	172.86.120.142	2022-10-24 11:18:19
hXXp://89.22.226.85/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	89.22.226.85	2022-10-23 20:04:09
hXXp://23.229.117.249/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	23.229.117.249	2022-10-23 19:53:10
hXXp://5.255.103.158/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	5.255.103.158	2022-10-23 08:53:13
hXXp://45.15.156.36/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.36	2022-10-22 15:22:13
hXXp://109.107.175.28/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	109.107.175.28	2022-10-22 12:53:11
hXXp://94.158.247.34/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.158.247.34	2022-10-22 08:34:11
hXXp://45.15.156.31/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.31	2022-10-21 09:22:08
hXXp://45.147.231.141/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.147.231.141	2022-10-04 08:44:02
hXXp://45.147.231.4/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.147.231.4	2022-10-19 08:08:07
hXXp://45.147.231.42/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.147.231.42	2022-10-17 20:51:04
hXXp://31.41.244.88/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	31.41.244.88	2022-10-17 20:25:04
hXXp://5.75.159.229/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	5.75.159.229	2023-04-06 08:48:05
hXXp://83.217.11.10/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	83.217.11.10	2023-04-06 09:09:04
hXXp://94.142.138.224/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.142.138.224	2023-04-06 09:10:05
hXXp://94.142.138.174/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	94.142.138.174	2023-04-06 09:29:06
hXXp://37.220.87.68/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	37.220.87.68	2023-04-07 09:43:05
hXXp://45.15.156.143/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.143	2023-04-07 10:27:04
hXXp://79.137.248.245/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	79.137.248.245	2023-04-07 10:43:04
hXXp://45.15.156.233/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.233	2023-04-11 08:28:05
hXXp://83.217.11.6/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	83.217.11.6	2023-04-11 08:50:06
hXXp://91.219.236.18/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	91.219.236.18	2023-04-12 20:06:04
hXXp://45.15.156.198/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.15.156.198	2023-04-12 20:26:04
hXXp://95.216.153.86/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	95.216.153.86	2023-04-13 08:04:05
hXXp://85.192.63.15/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	85.192.63.15	2023-04-28 06:37:04
hXXp://45.9.74.99/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	45.9.74.99	2023-05-22 11:01:05
hXXp://91.107.229.39:8999/aN7jD0qO6kT5bK5bQ4eR8fE1xP7hL2vK/softokn3.dll	91.107.229.39	2023-06-01 21:34:04

PE Sections 1 suspicious

Name	VAddress	VSize	Size	SHA1	MD5
.text	0x1000	0x2ca56	183296	d5460ade41f122adc366393a25d9d770321aae0b	e2aaeccd0a84d7c8aca188ac438deb78
.rdata	0x2e000	0xac04	44544	c7575daabae6a9fe36f64e7ce6c506dadb3891b1	cc69154bc28fc175cfcb85aa7de76980
.data	0x39000	0xb98	2048	0c2135b1f0e1fe0546afbb385e5e43e6cb0fe129	469713a63fe9356b9c796b0c727e7c71
.00cfg	0x3a000	0x4	512	efcf5e362fa2cb1f4f1a8f25e5c67fbe87b4c9c9	6eea8162ea8b888e43f8691d49ecf55f
.rsrc	0x3b000	0x380	1024	4332ed3b363078c075c8202cc945ab2421531779	a16f8affefc8cf97b46d45c1930174ba
.reloc	0x3c000	0x3598	13824	76b4b5b3d519f6cb951d78fc8dc72c749fb74bf4	7d622bba7c060f468eed41e8dd5c6abc

PE Resources 1

Name	Language	Sublanguage	Offset	Size	Data
RT_VERSION	LANG_ENGLISH	SUBLANG_ENGLISH_US	0x3b060	796	PE Resource: RT_VERSION - Data 4VS_VERSION_INFObb?zStringFileInfoV000004b0CommentsBLegalCopyrightLicense: MPL 2FCompanyNameMozilla Foundation*FileDescription.FileVersion98.0.22ProductVersion98.0.2"InternalName8LegalTrademarksMozillaB OriginalFilenamesoftokn3.dll0ProductNameFirefox6BuildID20220322144853DVarFileInfo$Translation

Name

Language

Sublanguage

Offset

Size

Data

RT_VERSION

LANG_ENGLISH

SUBLANG_ENGLISH_US

0x3b060

796

Meta infos 12

BuildID:	20220322144853
OriginalFilename:	softokn3.dll
Translation:	0x0000 0x04b0
InternalName:
FileVersion:	98.0.2
LegalTrademarks:	Mozilla
ProductVersion:	98.0.2
FileDescription:
LegalCopyright:	License: MPL 2
Comments:
ProductName:	Firefox
CompanyName:	Mozilla Foundation

Packers detected 1

Borland Delphi 3.0 (???)

Anti debug functions 4

IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter

File signature

MD5	SHA1	Block size	Virtual Address
c8f8260c616cac80d9a9fbe2e75abc8d	f571be190b37d47d2da21205b0ccff283ada97e3	8120	246272

Strings analysis - File found

Database
_dOeSnotExist_.db
%s%c%s%s%d.db
Library
KERNEL32.dll
api-ms-win-crt-environment-l1-1-0.dll
api-ms-win-crt-convert-l1-1-0.dll
api-ms-win-crt-runtime-l1-1-0.dll
api-ms-win-crt-filesystem-l1-1-0.dll
vcruntime140.dll
api-ms-win-crt-string-l1-1-0.dll
nss3.dll
api-ms-win-crt-stdio-l1-1-0.dll
api-ms-win-crt-heap-l1-1-0.dll
freebl3.dll
api-ms-win-crt-utility-l1-1-0.dll
softokn3.dll

Strings analysis - Possible URLs found 16

https://www.digicert.com/CPS0
http://cacerts.digicert.com/DigiCertSHA2AssuredIDCodeSigningCA.crt0
http://crl3.digicert.com/sha2-assured-ts.crl02
http://ocsp.digicert.com0N
http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0O
http://crl3.digicert.com/sha2-assured-cs-g1.crl05
http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
http://www.digicert.com/CPS0
https://mozilla.org0
http://ocsp.digicert.com0O
http://ocsp.digicert.com0C
http://crl4.digicert.com/sha2-assured-cs-g1.crl0K
http://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
http://crl4.digicert.com/sha2-assured-ts.crl0

Import functions

api-ms-win-crt-heap-l1-1-0.dll 3 KERNEL32.dll 13 api-ms-win-crt-string-l1-1-0.dll 5 api-ms-win-crt-stdio-l1-1-0.dll 1 api-ms-win-crt-runtime-l1-1-0.dll 8 api-ms-win-crt-convert-l1-1-0.dll 2 VCRUNTIME140.dll 6 api-ms-win-crt-filesystem-l1-1-0.dll 1 api-ms-win-crt-utility-l1-1-0.dll 1 api-ms-win-crt-environment-l1-1-0.dll 1 nss3.dll 111

Function	Address	Souspicious	Anti Debug
free	0x10037d98
malloc	0x10037d9c
realloc	0x10037da0

Function	Address	Souspicious	Anti Debug
DisableThreadLibraryCalls	0x10037d04
GetCurrentProcess	0x10037d08
GetCurrentProcessId	0x10037d0c
GetCurrentThreadId	0x10037d10
GetSystemTimeAsFileTime	0x10037d14
GetTempPathA	0x10037d18
InitializeSListHead	0x10037d1c
IsDebuggerPresent	0x10037d20
IsProcessorFeaturePresent	0x10037d24
QueryPerformanceCounter	0x10037d28
SetUnhandledExceptionFilter	0x10037d2c
TerminateProcess	0x10037d30
UnhandledExceptionFilter	0x10037d34

Function	Address	Souspicious	Anti Debug
islower	0x10037db0
isupper	0x10037db4
strcmp	0x10037db8
strcpy	0x10037dbc
strlen	0x10037dc0

Function	Address	Souspicious	Anti Debug
__stdio_common_vsprintf	0x10037d7c

Function	Address	Souspicious	Anti Debug
_cexit	0x10037d58
_configure_narrow_argv	0x10037d5c
_execute_onexit_table	0x10037d60
_initialize_narrow_environment	0x10037d64
_initialize_onexit_table	0x10037d68
_initterm	0x10037d6c
_initterm_e	0x10037d70
_seh_filter_dll	0x10037d74

Function	Address	Souspicious	Anti Debug
atoi	0x10037d8c
strtoul	0x10037d90

Function	Address	Souspicious	Anti Debug
__std_type_info_destroy_list	0x10037d3c
_except_handler4_common	0x10037d40
memcmp	0x10037d44
memcpy	0x10037d48
memset	0x10037d4c
strrchr	0x10037d50

Function	Address	Souspicious	Anti Debug
_wchmod	0x10037d84

Function	Address	Souspicious	Anti Debug
qsort	0x10037dc8

Function	Address	Souspicious	Anti Debug
getenv	0x10037da8

Function	Address	Souspicious	Anti Debug
DER_Encode_Util	0x10037b44
DER_GetInteger_Util	0x10037b48
DER_SetUInteger	0x10037b4c
NSSUTIL_ArgDecodeNumber	0x10037b50
NSSUTIL_ArgFetchValue	0x10037b54
NSSUTIL_ArgGetLabel	0x10037b58
NSSUTIL_ArgHasFlag	0x10037b5c
NSSUTIL_ArgIsBlank	0x10037b60
NSSUTIL_ArgSkipParameter	0x10037b64
NSSUTIL_ArgStrip	0x10037b68
NSSUTIL_DoModuleDBFunction	0x10037b6c
NSS_Get_SECOID_AlgorithmIDTemplate_Util	0x10037b70
NSS_Get_SEC_AnyTemplate_Util	0x10037b74
NSS_Get_SEC_BitStringTemplate_Util	0x10037b78
NSS_Get_SEC_ObjectIDTemplate_Util	0x10037b7c
NSS_Get_SEC_OctetStringTemplate_Util	0x10037b80
NSS_SecureMemcmp	0x10037b84
PL_CompareValues	0x10037b88
PL_HashTableAdd	0x10037b8c
PL_HashTableDestroy	0x10037b90
PL_HashTableEnumerateEntries	0x10037b94
PL_HashTableLookup	0x10037b98
PL_HashTableLookupConst	0x10037b9c
PL_HashTableRemove	0x10037ba0
PL_NewHashTable	0x10037ba4
PL_strcasecmp	0x10037ba8
PL_strncasecmp	0x10037bac
PORT_Alloc_Util	0x10037bb0
PORT_ArenaAlloc_Util	0x10037bb4
PORT_ArenaGrow_Util	0x10037bb8
PORT_ArenaZAlloc_Util	0x10037bbc
PORT_FreeArena_Util	0x10037bc0
PORT_Free_Util	0x10037bc4
PORT_GetError_Util	0x10037bc8
PORT_NewArena_Util	0x10037bcc
PORT_Realloc_Util	0x10037bd0
PORT_SetError_Util	0x10037bd4
PORT_Strdup_Util	0x10037bd8
PORT_ZAlloc_Util	0x10037bdc
PORT_ZFree_Util	0x10037be0
PR_Access	0x10037be4
PR_CallOnce	0x10037be8
PR_DestroyLock	0x10037bec
PR_DestroyMonitor	0x10037bf0
PR_EnterMonitor	0x10037bf4
PR_ExitMonitor	0x10037bf8
PR_FindFunctionSymbol	0x10037bfc
PR_Free	0x10037c00
PR_GetCurrentThread	0x10037c04
PR_GetDirectorySeparator	0x10037c08
PR_GetEnv	0x10037c0c
PR_GetEnvSecure	0x10037c10
PR_GetLibraryFilePathname	0x10037c14
PR_IntervalNow	0x10037c18
PR_LoadLibraryWithFlags	0x10037c1c
PR_Lock	0x10037c20
PR_MillisecondsToInterval	0x10037c24
PR_NewLock	0x10037c28
PR_NewMonitor	0x10037c2c
PR_Now	0x10037c30
PR_SecondsToInterval	0x10037c34
PR_Sleep	0x10037c38
PR_UnloadLibrary	0x10037c3c
PR_Unlock	0x10037c40
PR_smprintf	0x10037c44
PR_smprintf_free	0x10037c48
PR_snprintf	0x10037c4c
SECITEM_AllocItem_Util	0x10037c50
SECITEM_CompareItem_Util	0x10037c54
SECITEM_CopyItem_Util	0x10037c58
SECITEM_DupItem_Util	0x10037c5c
SECITEM_FreeItem_Util	0x10037c60
SECITEM_HashCompare	0x10037c64
SECITEM_ItemsAreEqual_Util	0x10037c68
SECITEM_ZfreeItem_Util	0x10037c6c
SECOID_CopyAlgorithmID_Util	0x10037c70
SECOID_DestroyAlgorithmID_Util	0x10037c74
SECOID_FindOIDByMechanism	0x10037c78
SECOID_GetAlgorithmTag_Util	0x10037c7c
SECOID_Init	0x10037c80
SECOID_SetAlgorithmID_Util	0x10037c84
SECOID_Shutdown	0x10037c88
SEC_ASN1DecodeItem_Util	0x10037c8c
SEC_ASN1EncodeInteger_Util	0x10037c90
SEC_ASN1EncodeItem_Util	0x10037c94
SEC_QuickDERDecodeItem_Util	0x10037c98
SGN_CreateDigestInfo_Util	0x10037c9c
SGN_DestroyDigestInfo_Util	0x10037ca0
UTIL_SetForkState	0x10037ca4
_NSSUTIL_Access	0x10037ca8
_NSSUTIL_EvaluateConfigDir	0x10037cac
_NSSUTIL_UTF8ToWide	0x10037cb0
_SGN_VerifyPKCS1DigestInfo	0x10037cb4
sqlite3_bind_blob	0x10037cb8
sqlite3_bind_int	0x10037cbc
sqlite3_bind_text	0x10037cc0
sqlite3_busy_timeout	0x10037cc4
sqlite3_close	0x10037cc8
sqlite3_column_blob	0x10037ccc
sqlite3_column_bytes	0x10037cd0
sqlite3_column_int	0x10037cd4
sqlite3_column_text	0x10037cd8
sqlite3_exec	0x10037cdc
sqlite3_file_control	0x10037ce0
sqlite3_finalize	0x10037ce4
sqlite3_free	0x10037ce8
sqlite3_mprintf	0x10037cec
sqlite3_open_v2	0x10037cf0
sqlite3_prepare_v2	0x10037cf4
sqlite3_reset	0x10037cf8
sqlite3_step	0x10037cfc

PE Exports 10 suspicious

Function	Address
NSC_ModuleDBFunc	0x1000a490
NSC_GetInterfaceList	0x1000cda0
NSC_GetInterface	0x1000cdf0
NSC_GetFunctionList	0x1000cd90
FC_GetInterfaceList	0x10003ef0
FC_GetInterface	0x10003f40
FC_GetFunctionList	0x10003ee0
C_GetInterfaceList	0x1000cda0
C_GetInterface	0x1000cf30
C_GetFunctionList	0x1000cd90