Resubmissions

02/11/2022, 20:06

221102-yvc4nseabr 9

02/11/2022, 19:23

221102-x3yjxadgbl 8

Analysis

  • max time kernel
    1204s
  • max time network
    1208s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/11/2022, 20:06

General

  • Target

    IObit Driver Booster Pro 9.2.0.173 Multilingual.zip

  • Size

    31.2MB

  • MD5

    23065825b6884c76e36056a6cbd4d987

  • SHA1

    4070a7e5ace6de9fc6ee8b56f859493aeea4f873

  • SHA256

    567f903bfa1f6a7d84daee019e4aa5524567cf35ced3f5d70601870fc8589818

  • SHA512

    1fc1c0c42f847e242da31e9e5f8340383e1df2f624560fbe762e39347538439348e579ae7af5c0457612c2953bea01f9f5129cfbc15b7ed7953c6ae1d2558808

  • SSDEEP

    786432:W2YrbWmslCAqhgrhXqWEF2Z4LsPXWwkR1qsmP1mrY2FP:WJbOtrZqZv45kTgP1mrY2l

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 2 IoCs

    Detects file using ACProtect software.

  • Downloads MZ/PE file
  • Executes dropped EXE 28 IoCs
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks for any installed AV software in registry 1 TTPs 6 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 24 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Suspicious use of NtSetInformationThreadHideFromDebugger 10 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 15 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 22 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 13 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Windows\Explorer.EXE
    C:\Windows\Explorer.EXE
    1⤵
    • Loads dropped DLL
    • Modifies Internet Explorer settings
    • Modifies registry class
    • Suspicious behavior: AddClipboardFormatListener
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3068
    • C:\Windows\Explorer.exe
      C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\IObit Driver Booster Pro 9.2.0.173 Multilingual.zip"
      2⤵
        PID:2276
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\" -an -ai#7zMap1664:174:7zEvent21275
        2⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:3788
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\" -an -ai#7zMap21033:192:7zEvent1569
        2⤵
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        PID:4984
      • C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe
        "C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe"
        2⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:4952
        • C:\Users\Admin\AppData\Local\Temp\is-HGRTR.tmp\driver_booster_setup.tmp
          "C:\Users\Admin\AppData\Local\Temp\is-HGRTR.tmp\driver_booster_setup.tmp" /SL5="$3035C,26666375,139264,C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe"
          3⤵
          • Executes dropped EXE
          • Checks computer location settings
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:4048
          • C:\Users\Admin\AppData\Local\Temp\is-79QG3.tmp-dbinst\setup.exe
            "C:\Users\Admin\AppData\Local\Temp\is-79QG3.tmp-dbinst\setup.exe" "C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe" /title="Driver Booster 9" /dbver=9.2.0.173 /eula="C:\Users\Admin\AppData\Local\Temp\is-79QG3.tmp-dbinst\EULA.rtf" /showlearnmore /pmtproduct /nochromepmt
            4⤵
            • Executes dropped EXE
            • Checks computer location settings
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:3236
            • C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe
              "C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe" /sp- /verysilent /Installer /norestart /DIR="C:\Program Files (x86)\IObit\Driver Booster" /Installer-DeskIcon /Installer-TaskIcon
              5⤵
              • Executes dropped EXE
              • Suspicious use of WriteProcessMemory
              PID:4208
              • C:\Users\Admin\AppData\Local\Temp\is-P4JTM.tmp\driver_booster_setup.tmp
                "C:\Users\Admin\AppData\Local\Temp\is-P4JTM.tmp\driver_booster_setup.tmp" /SL5="$4007C,26666375,139264,C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe" /sp- /verysilent /Installer /norestart /DIR="C:\Program Files (x86)\IObit\Driver Booster" /Installer-DeskIcon /Installer-TaskIcon
                6⤵
                • Executes dropped EXE
                • Checks computer location settings
                • Drops file in Program Files directory
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:3772
                • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO.exe
                  "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO.exe" /brandname
                  7⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious use of AdjustPrivilegeToken
                  PID:4524
                • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\CareScan.exe
                  "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\CareScan.exe" /savefile /silentscan /low /output="C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ScanData\ScanResult_all.ini"
                  7⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Checks for any installed AV software in registry
                  • Enumerates connected drives
                  • Drops file in Program Files directory
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of AdjustPrivilegeToken
                  PID:4804
                • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe
                  "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe" /install /setup="C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe"
                  7⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Drops file in Program Files directory
                  • Modifies registry class
                  • Suspicious behavior: EnumeratesProcesses
                  • Suspicious use of WriteProcessMemory
                  PID:1188
                  • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe
                    "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe" /winstdate
                    8⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:1800
                • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\TaskbarPin\ICONPIN64.exe
                  "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\TaskbarPin\ICONPIN64.exe" pin "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DriverBooster.exe"
                  7⤵
                  • Executes dropped EXE
                  • Suspicious use of FindShellTrayWindow
                  • Suspicious use of WriteProcessMemory
                  PID:1460
                • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\InstStat.exe
                  "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\InstStat.exe" /install db9
                  7⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  • Suspicious behavior: EnumeratesProcesses
                  PID:3972
            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe
              "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe" /afterinstall /setup="C:\Users\Admin\AppData\Local\Temp\is-79QG3.tmp-dbinst\setup.exe"
              5⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious behavior: EnumeratesProcesses
              PID:3536
      • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DriverBooster.exe
        "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DriverBooster.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of NtSetInformationThreadHideFromDebugger
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • Checks SCSI registry key(s)
        • Checks processor information in registry
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3240
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO.exe" /brandname
          3⤵
          • Executes dropped EXE
          PID:4956
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Manta.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Manta.exe" /CommStat /DoCommStat /Code="a602" /Days=0
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Suspicious behavior: EnumeratesProcesses
          PID:456
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\AutoUpdate.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\AutoUpdate.exe" /auto /App=db9 /MainHwnd=0
          3⤵
          • Executes dropped EXE
          • Checks computer location settings
          • Loads dropped DLL
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Program Files directory
          • Modifies system certificate store
          • Suspicious behavior: EnumeratesProcesses
          PID:3432
          • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\sgupd.exe
            "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\sgupd.exe" /db
            4⤵
            • Executes dropped EXE
            PID:1852
          • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\rma.exe
            "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\rma.exe" /run /auto
            4⤵
            • Executes dropped EXE
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            PID:3020
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ChangeIcon.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ChangeIcon.exe" /0 "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Icons\Main\"
          3⤵
          • Executes dropped EXE
          PID:3180
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\NoteIcon.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\NoteIcon.exe" "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DriverBooster.exe"
          3⤵
          • Executes dropped EXE
          PID:2644
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe" /cnt
          3⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Suspicious behavior: EnumeratesProcesses
          PID:1292
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Manta.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Manta.exe" /CommStat /DoCommStat /Code="A100" /Days=0
          3⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Suspicious behavior: EnumeratesProcesses
          PID:4040
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Manta.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Manta.exe" /CommStat /DoCommStat /Code="B100" /Days=7
          3⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Suspicious behavior: EnumeratesProcesses
          PID:1276
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe" /afterupgrade
          3⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          PID:1992
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe" /stat
          3⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          PID:4696
          • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\AUpdate.exe
            "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\AUpdate.exe" /u http://stats.iobit.com/active_month.php /a db9 /p iobit /v 9.2.0.173 /t 2 /d 7 /db /user
            4⤵
            • Executes dropped EXE
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            PID:4580
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ChangeIcon.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ChangeIcon.exe" /0 "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Icons\Main\"
          3⤵
          • Executes dropped EXE
          • Drops file in Program Files directory
          PID:2304
        • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ChangeIcon.exe
          "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\ChangeIcon.exe" /0 "C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Icons\Main\"
          3⤵
          • Executes dropped EXE
          PID:1648
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:2440

      Network

            MITRE ATT&CK Enterprise v6

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\CareScan.exe

              Filesize

              3.4MB

              MD5

              c6feb1cdfb75f6bf43176c68a6be5d1f

              SHA1

              a33c81b1813e0952684f776251f18442d728b446

              SHA256

              9da000115b0e339b87006085a2cd036ae6a8a3b6d1d1bd9b4fb6509e04f5e467

              SHA512

              5b5b68857e7b9fffffabbc08f2d692eb902c21f44e1d162ac46b88f5b79084804ea02e14fbc119a992292178ee2ceec6f895a73132b72d0fea2fd7dbdd672984

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\CareScan.exe

              Filesize

              3.4MB

              MD5

              c6feb1cdfb75f6bf43176c68a6be5d1f

              SHA1

              a33c81b1813e0952684f776251f18442d728b446

              SHA256

              9da000115b0e339b87006085a2cd036ae6a8a3b6d1d1bd9b4fb6509e04f5e467

              SHA512

              5b5b68857e7b9fffffabbc08f2d692eb902c21f44e1d162ac46b88f5b79084804ea02e14fbc119a992292178ee2ceec6f895a73132b72d0fea2fd7dbdd672984

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DataState.dll

              Filesize

              75KB

              MD5

              05d73ef4eac3ef5cd06f81ab292ec499

              SHA1

              4c8f7c64f2900ef70e048105f02805f1c38b94ff

              SHA256

              f4ab13542590fb63929cefc3c2c598d37637a61f49ab99b8de4eeb3f8a4683b9

              SHA512

              bd6bd095eb3281deb65590659a39fb9e34bab5c1e7ebd9796ec021514de149e9c09a9eabaa5a796371b5ec9d92989b5ae8dc6381fe7443aa0a9b5adcd795d102

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Database\Scan\initial.wlst

              Filesize

              1.4MB

              MD5

              195fe93c446ea4f419924e439c2a2605

              SHA1

              fad7c54e47ec0415bfadf8aa39ffcee77592aa05

              SHA256

              c676c90ebdb55b173ec584b00b17c7f0b7a98953165852dd86da52e2e49c45de

              SHA512

              d5acccbbd9774970bc679146331e14b85df6ec6e031f3e8328f4331224348227905e85b001639dd83b792b1036a904b5e5945adf40753abd03489db3d7a9d468

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\DriverBooster.exe

              Filesize

              8.3MB

              MD5

              9530bf698d8ef79361ff6840da2f9b28

              SHA1

              15409f4bb4ef7c7862511b6fd2ee48f401cd3113

              SHA256

              9b4d7f91b21f59d450fd95623dc3cf7843f9599ad659cc6870d30a687a183eb1

              SHA512

              209f8fdf4bbb7b4ad1ed5652d74f2b6e587492792bc7b05efb3fcb5711a38c07843e0519525deab18dbbf5a3bd83244e6226b9aa0f925e65cdc1a85bac31346b

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO.exe

              Filesize

              171KB

              MD5

              226c4e3cc9f513f98a128c08f3dc7e80

              SHA1

              428f8c580aff677e4a36d06f71bde29106d4e2ae

              SHA256

              9f1d61d16b505064c9cba003630c09b1d09f25e3e42deeaacb105a7b246d49e2

              SHA512

              a6fd2c5df7939ae18ec7c1f1dab883c23017028f74b3a6ea708fec3f568ce99ae69827b4e5ea4587b55a45ff13cf4ea229044521cd8a12ddf4a90e73f5504d9a

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO.exe

              Filesize

              171KB

              MD5

              226c4e3cc9f513f98a128c08f3dc7e80

              SHA1

              428f8c580aff677e4a36d06f71bde29106d4e2ae

              SHA256

              9f1d61d16b505064c9cba003630c09b1d09f25e3e42deeaacb105a7b246d49e2

              SHA512

              a6fd2c5df7939ae18ec7c1f1dab883c23017028f74b3a6ea708fec3f568ce99ae69827b4e5ea4587b55a45ff13cf4ea229044521cd8a12ddf4a90e73f5504d9a

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO32.dll

              Filesize

              1.2MB

              MD5

              e937e1a411075768ef3f287f9abc128a

              SHA1

              ee63928100563c1d846ecdc462a5c163ecce3d4c

              SHA256

              cb81c7cbd229b639f24db6655edc67f4c32954778d24e086d45a7229cc58351c

              SHA512

              a8a6123e1b88d3708ae76ab1ea2d3f15549d03549ee07fdf935357d06792fe63cceae7034e250588415040b8e11b0e892016bba165c488068c6c48f4cc7726a5

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\HWiNFO\HWiNFO32.dll

              Filesize

              1.2MB

              MD5

              e937e1a411075768ef3f287f9abc128a

              SHA1

              ee63928100563c1d846ecdc462a5c163ecce3d4c

              SHA256

              cb81c7cbd229b639f24db6655edc67f4c32954778d24e086d45a7229cc58351c

              SHA512

              a8a6123e1b88d3708ae76ab1ea2d3f15549d03549ee07fdf935357d06792fe63cceae7034e250588415040b8e11b0e892016bba165c488068c6c48f4cc7726a5

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\InstStat.exe

              Filesize

              1.3MB

              MD5

              e3f556feb681696c1532a4a373132d68

              SHA1

              221814339cf1180d2162b8e816aefed067b303dc

              SHA256

              1067311ee6f0a00653f59bf70c2136d85188304e89b27dd11be888a0d2a8dcae

              SHA512

              795b00adb28dd9ef62aa7fe94e1e0908eabcd1ec94145e8e261901d12596d517921389437c1257578b2c9537190396f02fe1ad9113da5f05a0d3c8ff4e03687c

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\InstStat.exe

              Filesize

              1.3MB

              MD5

              e3f556feb681696c1532a4a373132d68

              SHA1

              221814339cf1180d2162b8e816aefed067b303dc

              SHA256

              1067311ee6f0a00653f59bf70c2136d85188304e89b27dd11be888a0d2a8dcae

              SHA512

              795b00adb28dd9ef62aa7fe94e1e0908eabcd1ec94145e8e261901d12596d517921389437c1257578b2c9537190396f02fe1ad9113da5f05a0d3c8ff4e03687c

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\LocalData\WhiteList.ini

              Filesize

              132B

              MD5

              76be398d57ba9a293f99b31db9985f62

              SHA1

              1306388768b595be31b738baf3ad267d3ac07fe7

              SHA256

              32d640bdabcdc4514dddf0b669a4b1d60bae16e700e9dabd0516544c6ab68cf5

              SHA512

              627a0bee4ba7b9c3ecda4abebb7a2f0d515080e10d200444ce0cd97668a8e2b8bfb69ea298ba4228e4adf04412cbae2a539950f45a8f3fbee6dac04b4af5e321

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Register.dll

              Filesize

              1.0MB

              MD5

              6caa319bdaad461f70be7215b1a14f1c

              SHA1

              88e5e169f004e0a423df672219dca962e8a8c23d

              SHA256

              c06ef0b045143a04f3df20cf3cd9938f47be24c207f0af1c1fe011c01f39a795

              SHA512

              bbc2fc020167a083fbc0d615983968ebca77224f7cd91b4fc6a489d9a1b2c677cef8abc99c8268ef18f8b9fa3bf86960b0709aa164362a6066c8c93e4abb25fa

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe

              Filesize

              123KB

              MD5

              8abcd3adfd60590deb7d06e350c96873

              SHA1

              93b5bd0d1e44799dbdd91f8cba445006f481f3ff

              SHA256

              fa36fda225a0d7431e7f8335e20013f43d960cda87cdd447f4695aca187b1eed

              SHA512

              57b289a03966ef2d5398b433e2cb0b51c1b6caa58681b689b0fba0e5fecf0c5b970762ac94a61778e8a454ed101dd9492a98415c1d7943784c9fc1326dd83bfc

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\RttHlp.exe

              Filesize

              123KB

              MD5

              8abcd3adfd60590deb7d06e350c96873

              SHA1

              93b5bd0d1e44799dbdd91f8cba445006f481f3ff

              SHA256

              fa36fda225a0d7431e7f8335e20013f43d960cda87cdd447f4695aca187b1eed

              SHA512

              57b289a03966ef2d5398b433e2cb0b51c1b6caa58681b689b0fba0e5fecf0c5b970762ac94a61778e8a454ed101dd9492a98415c1d7943784c9fc1326dd83bfc

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe

              Filesize

              2.3MB

              MD5

              4608eb2b3bc2ae80c301f63ac8538a97

              SHA1

              25dc359b4db73e352684a76ea1b4c5fd64c726b8

              SHA256

              fd01b7e1550b7ad7d79616f180d3856c0205f03e08de73e4dfd106a853d560b7

              SHA512

              f796c07fce5f7ddea3ea4a845b660f73c4c8b80cb47a37a372f00d2a13a329c89901cf16b584c4771653c9bf30a8456b98cdf51b4b9b2a0f45686b55a83fbf23

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\SetupHlp.exe

              Filesize

              2.3MB

              MD5

              4608eb2b3bc2ae80c301f63ac8538a97

              SHA1

              25dc359b4db73e352684a76ea1b4c5fd64c726b8

              SHA256

              fd01b7e1550b7ad7d79616f180d3856c0205f03e08de73e4dfd106a853d560b7

              SHA512

              f796c07fce5f7ddea3ea4a845b660f73c4c8b80cb47a37a372f00d2a13a329c89901cf16b584c4771653c9bf30a8456b98cdf51b4b9b2a0f45686b55a83fbf23

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\TaskbarPin\ICONPIN64.dll

              Filesize

              605KB

              MD5

              a495cef182d461779e6881087b68aec9

              SHA1

              ba7cc36e057f52d792e1956cb4719b5266c4e53c

              SHA256

              57a07e46906e045178c4e0054d7906cb7f7a562f66efa707510a986e46b12053

              SHA512

              a6d976205ca122beb8d1340cc7911bc2f954333a63d3b0588ddb89ab4f0deff11d978952409ed6b180bd29752e349df4a00105f6197e836b750b7cf75fbc4932

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\TaskbarPin\ICONPIN64.dll

              Filesize

              605KB

              MD5

              a495cef182d461779e6881087b68aec9

              SHA1

              ba7cc36e057f52d792e1956cb4719b5266c4e53c

              SHA256

              57a07e46906e045178c4e0054d7906cb7f7a562f66efa707510a986e46b12053

              SHA512

              a6d976205ca122beb8d1340cc7911bc2f954333a63d3b0588ddb89ab4f0deff11d978952409ed6b180bd29752e349df4a00105f6197e836b750b7cf75fbc4932

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\TaskbarPin\ICONPIN64.exe

              Filesize

              1.6MB

              MD5

              e1f5755f7158a4d356e99f49d020a11e

              SHA1

              c756c2f5358462f046cd1d0daea86fa900ab8e8c

              SHA256

              ac4f7cab4f8616e117dfaa06e82669cbe9326da356e18c1ed0fa0f2b11fa6864

              SHA512

              294dcfac583d8f4ec6b3cb6a3edea802bcd16a4ffc824355f0d53c21db9f297a1734c1bbecbbf1fb9fa3e2ffe7aefae25ecf5869035b036d18f95044ad0118e3

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\TaskbarPin\ICONPIN64.exe

              Filesize

              1.6MB

              MD5

              e1f5755f7158a4d356e99f49d020a11e

              SHA1

              c756c2f5358462f046cd1d0daea86fa900ab8e8c

              SHA256

              ac4f7cab4f8616e117dfaa06e82669cbe9326da356e18c1ed0fa0f2b11fa6864

              SHA512

              294dcfac583d8f4ec6b3cb6a3edea802bcd16a4ffc824355f0d53c21db9f297a1734c1bbecbbf1fb9fa3e2ffe7aefae25ecf5869035b036d18f95044ad0118e3

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\Update\Update.ini

              Filesize

              1KB

              MD5

              e1da3b63bd6a8c8fe91b193ec3e07c12

              SHA1

              9f9a5eec6aae21d72f9d3fd23cddd27a5af92e54

              SHA256

              1c2f9f082d3c56e7e604d806060fa9dd8736cae3c04d6ea36b87429162588d0b

              SHA512

              4e99508de7bb6543ca7dfdd68b1c6094b1ce2a1566de12c7808ae8399d66182e019066b54b351e2d35e29c1b737cb9ab2ac80fb212ea464bcc27b02ddbdf76ba

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\datastate.dll

              Filesize

              75KB

              MD5

              05d73ef4eac3ef5cd06f81ab292ec499

              SHA1

              4c8f7c64f2900ef70e048105f02805f1c38b94ff

              SHA256

              f4ab13542590fb63929cefc3c2c598d37637a61f49ab99b8de4eeb3f8a4683b9

              SHA512

              bd6bd095eb3281deb65590659a39fb9e34bab5c1e7ebd9796ec021514de149e9c09a9eabaa5a796371b5ec9d92989b5ae8dc6381fe7443aa0a9b5adcd795d102

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\lang.dat

              Filesize

              27B

              MD5

              25f5875159bd806eadaa7bc41cd61dc1

              SHA1

              02f5ae9c79c122bb52236d930c2541b2d3ead3a8

              SHA256

              d5062ff936c218c4c23c1f0846fa1ab4ec359be885cd2ab1cb24178da5b0ff2c

              SHA512

              0292ff0478ce6819d56bd430c786bb0c648895e8d9e6a689383274e37a643cca46958de23e75a25637c760911bb4328e7fb1d02882dfa42dbed7d17ee90fe8b5

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\local.dat

              Filesize

              1KB

              MD5

              68c291e76f401815759a88cb3fa3a876

              SHA1

              b1d9b789798718e90859fed77997ae4c694717cb

              SHA256

              d52e6bcf805af1d4116cf24eaf0e40eb28a046e580c264facfc29708df4940fa

              SHA512

              6ff8f73f9507a5260e1ef1371a6e6c85f197351b8d45a4ac3a41b60dab779c00c98ac25626afb15b25ba8af37426a49625b685792d41168bb7cc3ad6a906b215

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\madBasic_.bpl

              Filesize

              209KB

              MD5

              752d6cd2023479342250eb576af4b451

              SHA1

              aabc6e14b64a68dd9e934036d25d3a602684cd3e

              SHA256

              6bd8913a44147de462eb971335938caa3906ad5a4bacbb8615c60024670caa5c

              SHA512

              15521c8a1d4d6a13783c347ebc601ecd6bbb3a489b46893ce0aa4c4dfafb9ce8f3cd2b8e80938d157e7812064b64836e187f274e3ffdaa68cc3bd5a4313c7ec2

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\madBasic_.bpl

              Filesize

              209KB

              MD5

              752d6cd2023479342250eb576af4b451

              SHA1

              aabc6e14b64a68dd9e934036d25d3a602684cd3e

              SHA256

              6bd8913a44147de462eb971335938caa3906ad5a4bacbb8615c60024670caa5c

              SHA512

              15521c8a1d4d6a13783c347ebc601ecd6bbb3a489b46893ce0aa4c4dfafb9ce8f3cd2b8e80938d157e7812064b64836e187f274e3ffdaa68cc3bd5a4313c7ec2

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\madDisAsm_.bpl

              Filesize

              62KB

              MD5

              1856c3d0aba628ead9a1ac8a713fb11e

              SHA1

              196f94ce689b4de0537190582baba76e131e00cc

              SHA256

              9e3bda2c295be18ddcd7406366c325bf52b090f87612854ce3e35f80b633e931

              SHA512

              9e5896398def73664fa502ee4e0964aa3d4a5f3145cf118c2a2fd27e58e8908fd2bf26db472e8e96d2f2508d24bccd065a4a347da33c44f800ed4ab8599b389e

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\madDisAsm_.bpl

              Filesize

              62KB

              MD5

              1856c3d0aba628ead9a1ac8a713fb11e

              SHA1

              196f94ce689b4de0537190582baba76e131e00cc

              SHA256

              9e3bda2c295be18ddcd7406366c325bf52b090f87612854ce3e35f80b633e931

              SHA512

              9e5896398def73664fa502ee4e0964aa3d4a5f3145cf118c2a2fd27e58e8908fd2bf26db472e8e96d2f2508d24bccd065a4a347da33c44f800ed4ab8599b389e

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\madExcept_.bpl

              Filesize

              435KB

              MD5

              70d73d518ceab5e50623cb73353dab4f

              SHA1

              c23656077432925131c95ab754ffb773d3cb9796

              SHA256

              eb2573197363b52d7a240c7e8944ab6b4a07fe101f1df0da764f281a611246fd

              SHA512

              8956b520619ce8380d19e58743c94a7a26980cc0dd3874172df9cfb9a09f4cff7855fc3d69c79acb42a21626590d59609d92a258ca8c8f99f16732080fe20688

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\madExcept_.bpl

              Filesize

              435KB

              MD5

              70d73d518ceab5e50623cb73353dab4f

              SHA1

              c23656077432925131c95ab754ffb773d3cb9796

              SHA256

              eb2573197363b52d7a240c7e8944ab6b4a07fe101f1df0da764f281a611246fd

              SHA512

              8956b520619ce8380d19e58743c94a7a26980cc0dd3874172df9cfb9a09f4cff7855fc3d69c79acb42a21626590d59609d92a258ca8c8f99f16732080fe20688

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\rtl120.bpl

              Filesize

              1.1MB

              MD5

              af6ba2df6a5fd24af4074be3b9a3e419

              SHA1

              a507188f63e54b48a13f5f1f6350773b9b97605b

              SHA256

              d1dab9914233a86b06c4fdb192507db7a516367b274180accf181cde5bbf9efd

              SHA512

              242aadc1ea77870f3de5e866661be04ca2693b4a67ac8ea457ce9fe05ca067d2877b500a5cbb8a880a91f50a5bfe5c7407d7f784d97707ea4fb39c2f1d277942

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\rtl120.bpl

              Filesize

              1.1MB

              MD5

              af6ba2df6a5fd24af4074be3b9a3e419

              SHA1

              a507188f63e54b48a13f5f1f6350773b9b97605b

              SHA256

              d1dab9914233a86b06c4fdb192507db7a516367b274180accf181cde5bbf9efd

              SHA512

              242aadc1ea77870f3de5e866661be04ca2693b4a67ac8ea457ce9fe05ca067d2877b500a5cbb8a880a91f50a5bfe5c7407d7f784d97707ea4fb39c2f1d277942

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\rtl120.bpl

              Filesize

              1.1MB

              MD5

              af6ba2df6a5fd24af4074be3b9a3e419

              SHA1

              a507188f63e54b48a13f5f1f6350773b9b97605b

              SHA256

              d1dab9914233a86b06c4fdb192507db7a516367b274180accf181cde5bbf9efd

              SHA512

              242aadc1ea77870f3de5e866661be04ca2693b4a67ac8ea457ce9fe05ca067d2877b500a5cbb8a880a91f50a5bfe5c7407d7f784d97707ea4fb39c2f1d277942

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\rtl120.bpl

              Filesize

              1.1MB

              MD5

              af6ba2df6a5fd24af4074be3b9a3e419

              SHA1

              a507188f63e54b48a13f5f1f6350773b9b97605b

              SHA256

              d1dab9914233a86b06c4fdb192507db7a516367b274180accf181cde5bbf9efd

              SHA512

              242aadc1ea77870f3de5e866661be04ca2693b4a67ac8ea457ce9fe05ca067d2877b500a5cbb8a880a91f50a5bfe5c7407d7f784d97707ea4fb39c2f1d277942

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\sqlite3.dll

              Filesize

              905KB

              MD5

              93e1cbff5471692742520ac78f9d39c2

              SHA1

              2bf8cb6683e135922c232b2480c60157ce2e23f0

              SHA256

              c1f0111baf2423027596ada8458685957e913f0b72021faa34c498a14d70b9ce

              SHA512

              8e237c2d3db98b72c8abfb2eced58f5e3868cd79d66ac48b730a12a945eb64c287d8ef17a5f19b53b1d2fee8a19a91aac29861be5201ce55bd219f945406c9b3

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\sqlite3.dll

              Filesize

              905KB

              MD5

              93e1cbff5471692742520ac78f9d39c2

              SHA1

              2bf8cb6683e135922c232b2480c60157ce2e23f0

              SHA256

              c1f0111baf2423027596ada8458685957e913f0b72021faa34c498a14d70b9ce

              SHA512

              8e237c2d3db98b72c8abfb2eced58f5e3868cd79d66ac48b730a12a945eb64c287d8ef17a5f19b53b1d2fee8a19a91aac29861be5201ce55bd219f945406c9b3

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\vcl120.bpl

              Filesize

              1.9MB

              MD5

              3dac8fc6c8c43f85ef76d33b1736133f

              SHA1

              6d2d2ca5087b755c8e49be84871436b9fa6cf903

              SHA256

              132828f816e9e4f0ba2ed5ae5cd62d213e4cfc698bf06543cc7890c5ed5792e1

              SHA512

              68ddf4b68101fd9ca9899a901e7e22ed66067c0416ccc96780f8c109724ffe583aa135996fffe47b185c25d768ab48c84c256c43eb769ed90e143e5235530fc6

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\vcl120.bpl

              Filesize

              1.9MB

              MD5

              3dac8fc6c8c43f85ef76d33b1736133f

              SHA1

              6d2d2ca5087b755c8e49be84871436b9fa6cf903

              SHA256

              132828f816e9e4f0ba2ed5ae5cd62d213e4cfc698bf06543cc7890c5ed5792e1

              SHA512

              68ddf4b68101fd9ca9899a901e7e22ed66067c0416ccc96780f8c109724ffe583aa135996fffe47b185c25d768ab48c84c256c43eb769ed90e143e5235530fc6

            • C:\Program Files (x86)\IObit\Driver Booster\9.2.0\vcl120.bpl

              Filesize

              1.9MB

              MD5

              3dac8fc6c8c43f85ef76d33b1736133f

              SHA1

              6d2d2ca5087b755c8e49be84871436b9fa6cf903

              SHA256

              132828f816e9e4f0ba2ed5ae5cd62d213e4cfc698bf06543cc7890c5ed5792e1

              SHA512

              68ddf4b68101fd9ca9899a901e7e22ed66067c0416ccc96780f8c109724ffe583aa135996fffe47b185c25d768ab48c84c256c43eb769ed90e143e5235530fc6

            • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 9\Driver Booster 9.lnk

              Filesize

              1KB

              MD5

              3c75e47bc05971085b83b7a88e15a7b0

              SHA1

              8cb313034c66145b7a0d73f27fee9ca309d36338

              SHA256

              53617da86563d416fd888360a6c4b18ddac876f42278233497dac6d0d76f9af4

              SHA512

              684b392c269a74160b0fc5f224c74dfe5db0cb1f0d37abeed3be91c668561efd97d618af53496e4394c72bc992304a2f475b90e2a1b2e2465f2dd92ddfe003e5

            • C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 9\Uninstall Driver Booster 9.lnk

              Filesize

              1KB

              MD5

              5868dbdf7558889f3263af8a69483ed7

              SHA1

              94797e313b69757feb0b6001034eddcaca62b71a

              SHA256

              1266a60883f3ac6ca074de81a1d6874e38ea8bf024f79d63287199fa21b46e83

              SHA512

              b7815b38173f2ef65a25b999f7a271aed731e40c4f84af65a53cc0e5fda4a6967e0e8c7e1f3846a7c44a4abe17d90e54bf8d0b78c7fe660627bdc554613acb8b

            • C:\Users\Admin\AppData\Local\Temp\Commu.ini

              Filesize

              232B

              MD5

              0b4c6b249bba530f470fecd10e3600ef

              SHA1

              8ff1c587a9a7ae4f429432f1c116b1784e2768a4

              SHA256

              caeb3e66f28305316b25c14cc205741d7191af670da8f6a714b11b05c0dc3cc1

              SHA512

              5e89dda4228bf31c5956310bf98690ca0296e092930ff0f0d67a4e1215d61c397d935f8b70fee3dc335ae3083fadcf35c6088a1c0e810144a25c4d8bb02e8d87

            • C:\Users\Admin\AppData\Local\Temp\Commu.ini

              Filesize

              232B

              MD5

              0b4c6b249bba530f470fecd10e3600ef

              SHA1

              8ff1c587a9a7ae4f429432f1c116b1784e2768a4

              SHA256

              caeb3e66f28305316b25c14cc205741d7191af670da8f6a714b11b05c0dc3cc1

              SHA512

              5e89dda4228bf31c5956310bf98690ca0296e092930ff0f0d67a4e1215d61c397d935f8b70fee3dc335ae3083fadcf35c6088a1c0e810144a25c4d8bb02e8d87

            • C:\Users\Admin\AppData\Local\Temp\is-79QG3.tmp-dbinst\setup.exe

              Filesize

              8.0MB

              MD5

              64b0b4eea59afe83254ea2d00c059702

              SHA1

              7652e55829d667b55b1734b7d0bd0cb677bfd138

              SHA256

              e818ca17509436a84bf5753cb5e9faca74746895e16e1ed9c7d7e39ef170ea52

              SHA512

              bdbc2e9225852f2e4172913e602b289359d40b7b4d8cfa22eb89ef1f5bbe64f681517f82d5e95a42d37d7688536438f65735393ee4941666e1750b0069e64f28

            • C:\Users\Admin\AppData\Local\Temp\is-79QG3.tmp-dbinst\setup.exe

              Filesize

              8.0MB

              MD5

              64b0b4eea59afe83254ea2d00c059702

              SHA1

              7652e55829d667b55b1734b7d0bd0cb677bfd138

              SHA256

              e818ca17509436a84bf5753cb5e9faca74746895e16e1ed9c7d7e39ef170ea52

              SHA512

              bdbc2e9225852f2e4172913e602b289359d40b7b4d8cfa22eb89ef1f5bbe64f681517f82d5e95a42d37d7688536438f65735393ee4941666e1750b0069e64f28

            • C:\Users\Admin\AppData\Local\Temp\is-HGRTR.tmp\driver_booster_setup.tmp

              Filesize

              1.2MB

              MD5

              68b52a0b8e3d45bf3b520a0e7f16dad1

              SHA1

              e50408326eafb5ca8adc70db29c33b64e25bbbbd

              SHA256

              b409d6d6f8896dc2afd1774479c741ca253c0e9b4732daaa08af84aa9c96888b

              SHA512

              b8e0b486e2b9652831eb8efe48cf9575eef49204e827a64d69ae7c9c30304b2d98a66c28f1072fe8596847c15f13bbf7ec39d7708684ff64051bbae7ed063faf

            • C:\Users\Admin\AppData\Local\Temp\is-HGRTR.tmp\driver_booster_setup.tmp

              Filesize

              1.2MB

              MD5

              68b52a0b8e3d45bf3b520a0e7f16dad1

              SHA1

              e50408326eafb5ca8adc70db29c33b64e25bbbbd

              SHA256

              b409d6d6f8896dc2afd1774479c741ca253c0e9b4732daaa08af84aa9c96888b

              SHA512

              b8e0b486e2b9652831eb8efe48cf9575eef49204e827a64d69ae7c9c30304b2d98a66c28f1072fe8596847c15f13bbf7ec39d7708684ff64051bbae7ed063faf

            • C:\Users\Admin\AppData\Local\Temp\is-P4JTM.tmp\driver_booster_setup.tmp

              Filesize

              1.2MB

              MD5

              68b52a0b8e3d45bf3b520a0e7f16dad1

              SHA1

              e50408326eafb5ca8adc70db29c33b64e25bbbbd

              SHA256

              b409d6d6f8896dc2afd1774479c741ca253c0e9b4732daaa08af84aa9c96888b

              SHA512

              b8e0b486e2b9652831eb8efe48cf9575eef49204e827a64d69ae7c9c30304b2d98a66c28f1072fe8596847c15f13bbf7ec39d7708684ff64051bbae7ed063faf

            • C:\Users\Admin\AppData\Local\Temp\is-P4JTM.tmp\driver_booster_setup.tmp

              Filesize

              1.2MB

              MD5

              68b52a0b8e3d45bf3b520a0e7f16dad1

              SHA1

              e50408326eafb5ca8adc70db29c33b64e25bbbbd

              SHA256

              b409d6d6f8896dc2afd1774479c741ca253c0e9b4732daaa08af84aa9c96888b

              SHA512

              b8e0b486e2b9652831eb8efe48cf9575eef49204e827a64d69ae7c9c30304b2d98a66c28f1072fe8596847c15f13bbf7ec39d7708684ff64051bbae7ed063faf

            • C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

              Filesize

              56B

              MD5

              37ba980823908ef9d3dbbab646a0c436

              SHA1

              5a549c0e5b38479bdb797ad75ed20a3196c6976c

              SHA256

              bda1cde581bd73cff85aaebd778a7e4a13a4c6028477431a86ffd9ed43f481f6

              SHA512

              583c84bb9cdc3eca80ed484b29b747df27931b783af319733f4b90fc2d959e066f32f25f08b4d94906dfb4df895684f8db0fd0567d0f4ccdbba7dcb92867d242

            • C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

              Filesize

              81B

              MD5

              12fdeadf3187a4dd52ce49d95aaee00e

              SHA1

              d2054533c253424e08f891ef6231171b199060dd

              SHA256

              0ed62c59ac1cf107c97cff692f2dc7c73edb6b898b0cdb5b6db494fbe4e6c970

              SHA512

              c6148772037c7585d971aea3a2cf021ba94c3d2744437a093554f62fff8ec47dc44be37ceb329c7121059a969c919e9e251a8070c7675dd04023efdb94fba654

            • C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini

              Filesize

              263B

              MD5

              d22a9af5b3c3b0f450dd695c58c37dfa

              SHA1

              7aa5962a3fdd827b9707c6cd6d742576a8f8cea0

              SHA256

              1421f4420cbe1adc72314756e1fcb3970fc3229efb74f2dcb9889d9eef60f61a

              SHA512

              d3fb7c23239169f12a1e21a70f9333544c584a2a599486c502fe985e83aad2684dc0f04b99564043d678ba0f5cd5c87688bb5dfa8bc5a604e875352aa60d8209

            • C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\Activator_By_ActVer.zip

              Filesize

              5.2MB

              MD5

              163fda49b46c275fa70a723124c88ea3

              SHA1

              58d1e5f036075b649f948d038b81eae347f28eea

              SHA256

              fc6c881b0834ef49c97b48bc8fd949acc1480040947796e4d7a3b14a9c6cb88e

              SHA512

              34fe6955472a8a7d6f5e603f4272f6cfba8970fb7a848e6e46e72ae4d3ea71ed7eced60aad6742d3151841b26be6e9f54b2e943e5c634f6e7c1820de1017e706

            • C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe

              Filesize

              26.1MB

              MD5

              68ef7178ed9673afed56b2a94fa78892

              SHA1

              cabd01540b4b7dffcc3865d9f7b3134d1e123226

              SHA256

              53b1ba6f5e6f410b83942a08059b1152d7f9abe3e7e00918f8d4405ae8e82653

              SHA512

              846411d677e3688db9d334953c47d4df3b41a9b3a47019b4678eb76549e9249388dd814f61ed723c675cda816888b5cbaf1d88b26cc4cf37133dc9f81ea3978f

            • C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe

              Filesize

              26.1MB

              MD5

              68ef7178ed9673afed56b2a94fa78892

              SHA1

              cabd01540b4b7dffcc3865d9f7b3134d1e123226

              SHA256

              53b1ba6f5e6f410b83942a08059b1152d7f9abe3e7e00918f8d4405ae8e82653

              SHA512

              846411d677e3688db9d334953c47d4df3b41a9b3a47019b4678eb76549e9249388dd814f61ed723c675cda816888b5cbaf1d88b26cc4cf37133dc9f81ea3978f

            • C:\Users\Admin\Desktop\IObit Driver Booster Pro 9.2.0.173 Multilingual\driver_booster_setup.exe

              Filesize

              26.1MB

              MD5

              68ef7178ed9673afed56b2a94fa78892

              SHA1

              cabd01540b4b7dffcc3865d9f7b3134d1e123226

              SHA256

              53b1ba6f5e6f410b83942a08059b1152d7f9abe3e7e00918f8d4405ae8e82653

              SHA512

              846411d677e3688db9d334953c47d4df3b41a9b3a47019b4678eb76549e9249388dd814f61ed723c675cda816888b5cbaf1d88b26cc4cf37133dc9f81ea3978f

            • C:\Users\Public\Desktop\Driver Booster 9.lnk

              Filesize

              1KB

              MD5

              c30e0f922cca5f84376f9af4ea375a5c

              SHA1

              9d2b84b182ba61b8cb2049aa11ffd654726f38b5

              SHA256

              231e3cbc112490f9ef90e6b4c968005f9c7e8afa96dfa48ff86e3c7a328ec4ae

              SHA512

              ab0a46c217950b3330c2cc9f1b22217801e6f52e703930b1fe90b19b86f08a2a39c3bae0c962e8fb02b1d7e656c90d8f6ffb36408f9e0cb97a0d7fe0adaf2957

            • memory/456-275-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/456-282-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/456-280-0x00000000029A0000-0x0000000002AAD000-memory.dmp

              Filesize

              1.1MB

            • memory/456-285-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/456-284-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1188-200-0x0000000003E20000-0x0000000003F2D000-memory.dmp

              Filesize

              1.1MB

            • memory/1276-323-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1276-324-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1292-297-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1292-307-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1292-320-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1800-211-0x0000000002620000-0x000000000272D000-memory.dmp

              Filesize

              1.1MB

            • memory/1992-336-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1992-329-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/1992-328-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3020-345-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3240-227-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3240-277-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3240-229-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-232-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-233-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-235-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-234-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-236-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-237-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-238-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-239-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-240-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-241-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-242-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-243-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-245-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-244-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-246-0x0000000005E30000-0x0000000005F3D000-memory.dmp

              Filesize

              1.1MB

            • memory/3240-247-0x0000000006630000-0x0000000006701000-memory.dmp

              Filesize

              836KB

            • memory/3240-248-0x0000000006710000-0x00000000067AB000-memory.dmp

              Filesize

              620KB

            • memory/3240-249-0x000000000B660000-0x000000000B7B9000-memory.dmp

              Filesize

              1.3MB

            • memory/3240-250-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-251-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-252-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-253-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-254-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-256-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-255-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-257-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-258-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-260-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-259-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-261-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-262-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-263-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-264-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-266-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-265-0x000000000B661000-0x000000000B746000-memory.dmp

              Filesize

              916KB

            • memory/3240-298-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-268-0x000000000CB90000-0x000000000CBA4000-memory.dmp

              Filesize

              80KB

            • memory/3240-230-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3240-270-0x0000000006631000-0x00000000066DB000-memory.dmp

              Filesize

              680KB

            • memory/3240-271-0x000000000CD60000-0x000000000CDF2000-memory.dmp

              Filesize

              584KB

            • memory/3240-272-0x000000000CD61000-0x000000000CDD1000-memory.dmp

              Filesize

              448KB

            • memory/3240-228-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-231-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3240-226-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3240-225-0x0000000001331000-0x00000000014F0000-memory.dmp

              Filesize

              1.7MB

            • memory/3432-289-0x0000000002780000-0x0000000002794000-memory.dmp

              Filesize

              80KB

            • memory/3432-288-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3432-296-0x0000000006521000-0x0000000006606000-memory.dmp

              Filesize

              916KB

            • memory/3432-293-0x0000000006521000-0x0000000006606000-memory.dmp

              Filesize

              916KB

            • memory/3432-291-0x0000000006521000-0x0000000006606000-memory.dmp

              Filesize

              916KB

            • memory/3432-290-0x0000000006520000-0x0000000006679000-memory.dmp

              Filesize

              1.3MB

            • memory/3432-287-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3432-283-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/3432-292-0x0000000006521000-0x0000000006606000-memory.dmp

              Filesize

              916KB

            • memory/3536-222-0x0000000003CF0000-0x0000000003DFD000-memory.dmp

              Filesize

              1.1MB

            • memory/3972-219-0x0000000003C00000-0x0000000003D0D000-memory.dmp

              Filesize

              1.1MB

            • memory/4040-302-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4040-322-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4040-313-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4208-148-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4208-220-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4208-154-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4208-153-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4524-178-0x0000000010000000-0x0000000010237000-memory.dmp

              Filesize

              2.2MB

            • memory/4580-339-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4580-341-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4580-340-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4696-330-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4696-335-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4696-325-0x0000000074BC0000-0x000000007543D000-memory.dmp

              Filesize

              8.5MB

            • memory/4804-182-0x0000000004150000-0x000000000425D000-memory.dmp

              Filesize

              1.1MB

            • memory/4952-145-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4952-141-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4952-137-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB

            • memory/4952-135-0x0000000000400000-0x000000000042C000-memory.dmp

              Filesize

              176KB