5e01060bd60c83bf2fa00c2f25e86fda090da20bde322a25620a47ad3e4d0328

Analysis

max time kernel
150s
max time network
63s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22-03-2023 18:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Game Booster v3.4.exe
Size

4.2MB
MD5

ab1d5473e2be34629aed5f33969cdcf6
SHA1

b39d2a3aa0ffcd4ea8b8b15d4cb790133e71f48e
SHA256

5e01060bd60c83bf2fa00c2f25e86fda090da20bde322a25620a47ad3e4d0328
SHA512

66cfb2923146e66deef6bf6ff8121cd2522ec9c56fffa59f942fcf81c2ffc9c61581caa92b409680a733767540a7d926f4f6b8ec67805a77a13ca737f44393e3
SSDEEP

98304:qh4QVVE8rR5Z+kL5n6XmiH4dfcdDh6DClPyB/cLOH/fDbB0:qmQ7EUZ+R4df9ClOc6HDbB0

Score

7^/10

bootkit discovery persistence

Malware Config

Signatures

Executes dropped EXE 8 IoCs

Processes:

Game Booster v3.4.tmpSvcHelper.exegbinit.exeGameBooster.exegbtray.exegbtray.exegbtray.exegbtray.exe

pid process

1208 Game Booster v3.4.tmp
680 SvcHelper.exe
1432 gbinit.exe
688 GameBooster.exe
2036 gbtray.exe
984 gbtray.exe
1476 gbtray.exe
564 gbtray.exe

Loads dropped DLL 41 IoCs

Processes:

Game Booster v3.4.exeGame Booster v3.4.tmpregsvr32.exeregsvr32.exeGameBooster.exegbtray.exegbtray.exegbtray.exegbtray.exe

pid	process
2032	Game Booster v3.4.exe
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1068	regsvr32.exe
340	regsvr32.exe
1208	Game Booster v3.4.tmp
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
2036	gbtray.exe
2036	gbtray.exe
2036	gbtray.exe
984	gbtray.exe
1476	gbtray.exe
1476	gbtray.exe
984	gbtray.exe
984	gbtray.exe
1476	gbtray.exe
564	gbtray.exe
564	gbtray.exe
564	gbtray.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe
688	GameBooster.exe

Registers COM server for autorun 1 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Processes:

regsvr32.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\InprocServer32\ = "C:\\Program Files (x86)\\IObit\\Game Booster 3\\GBV3ContextMenu.dll"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
bootkit persistence

Bootkit
T1067

Processes:

GameBooster.exe

description ioc process

File opened for modification \??\PhysicalDrive0 GameBooster.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	GameBooster.exe

Drops file in Program Files directory 64 IoCs

Processes:

Game Booster v3.4.tmpGameBooster.exe

description	ioc	process
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-ITQG4.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\News\is-2OJ8O.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Boost\is-PQ5KT.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-0LTGD.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-BSRF5.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-QAQFM.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Boost\is-NCK87.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Border\is-IHM1H.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-NQRJB.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Scroll\is-FFCBC.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\button\is-44087.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Performance\is-UKBSS.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Scroll\is-MI16G.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-DIPD7.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-LDT8J.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Scroll\is-UPUIP.tmp	Game Booster v3.4.tmp
File opened for modification	C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log	GameBooster.exe
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-OP08P.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-2FDH1.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-Q9D1C.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-02LLT.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-TQLNA.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-94QDD.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-C8883.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-VRMMN.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-7UJN1.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Border\is-G7SOB.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Tweak\is-JMKTN.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-MGSMS.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\unins000.msg	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-16N81.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-I6S26.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Boost\is-TQSJO.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Defrag\is-DSIB4.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Tweak\is-98MSP.tmp	Game Booster v3.4.tmp
File opened for modification	C:\Program Files (x86)\IObit\Game Booster 3\LatestGames\LatestGames.ini	GameBooster.exe
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-85OLS.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-IGA1T.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-3OHEH.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-48BLM.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-5RQF9.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-LP9HM.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Performance\is-LL2BR.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-36TVF.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-UAI0N.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-OQUJP.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Border\is-LJNV8.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-NO2ST.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-KD3I0.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-PCUPI.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-6CB7T.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-DVR6V.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-I9QVS.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Defrag\is-NHJO9.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Performance\is-HM2DA.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-QD0KR.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-0U2MQ.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\Scroll\is-VLI9I.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\is-PNDTA.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-33EE9.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Skin\Default\is-GL6D7.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\unins000.dat	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-IBDC2.tmp	Game Booster v3.4.tmp
File created	C:\Program Files (x86)\IObit\Game Booster 3\Language\is-IFJRA.tmp	Game Booster v3.4.tmp

Drops file in Windows directory 1 IoCs

Processes:

GameBooster.exe

description ioc process

File opened for modification C:\Windows\WindowsUpdate.log GameBooster.exe
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Modifies Internet Explorer settings 1 TTPs 1 IoCs
adware spyware

Modify Registry
T1112

Processes:

gbinit.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000\Software\Microsoft\Internet Explorer\Main gbinit.exe

description	ioc	process
File opened for modification	C:\Windows\WindowsUpdate.log	GameBooster.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000\Software\Microsoft\Internet Explorer\Main	gbinit.exe

Modifies registry class 61 IoCs

Processes:

regsvr32.exeChess.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu\ = "GBContextMenu Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft\Windows\GameUX\GameStats\{E2856B15-A196-4C82-BDA1-C75D273DF989}	Chess.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\0	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft\Windows\GameUX\GameStats	Chess.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\InprocServer32\ = "C:\\Program Files (x86)\\IObit\\Game Booster 3\\GBV3ContextMenu.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\FLAGS\ = "0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software	Chess.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu.1\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu\CLSID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\TypeLib\Version = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\TypeLib\ = "{316C9EA4-6140-4BC8-8537-B08D0D115D9E}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\TypeLib\ = "{316C9EA4-6140-4BC8-8537-B08D0D115D9E}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\ = "IGBContextMenu"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{49D756D0-FACE-47A5-8D11-BB050A0FA6FD}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\ProgID\ = "GBv3ComputerMenu.GBContextMenu.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\ = "GBv3ComputerMenu 1.0 Type Library"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\0\win64	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\GBv3ComputerMenu.DLL	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\VersionIndependentProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\GB3ContextMenu	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\ = "GBContextMenu Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\Programmable	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\GBv3ComputerMenu.DLL\AppID = "{49D756D0-FACE-47A5-8D11-BB050A0FA6FD}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu\CLSID\ = "{3A488FE8-9916-4F36-BDFF-3DED559142E5}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu\CurVer\ = "GBv3ComputerMenu.GBContextMenu.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\GB3ContextMenu\ = "{3A488FE8-9916-4F36-BDFF-3DED559142E5}"	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings	Chess.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\ProgID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\HELPDIR\ = "C:\\Program Files (x86)\\IObit\\Game Booster 3"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\ProxyStubClsid32	regsvr32.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft\Windows\GameUX\GameStats\{E2856B15-A196-4C82-BDA1-C75D273DF989}\LastPlayed = "7"	Chess.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{49D756D0-FACE-47A5-8D11-BB050A0FA6FD}\ = "GBv3ComputerMenu"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\0\win64\ = "C:\\Program Files (x86)\\IObit\\Game Booster 3\\GBV3ContextMenu.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\ = "IGBContextMenu"	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft	Chess.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft\Windows\GameUX	Chess.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft\Windows\GameUX\GameStats\{E2856B15-A196-4C82-BDA1-C75D273DF989}\LastPlayed = "2"	Chess.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu.1\ = "GBContextMenu Class"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu\CurVer	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\FLAGS	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{43004568-151F-41AF-8262-92DCA51E4D12}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{316C9EA4-6140-4BC8-8537-B08D0D115D9E}\1.0\HELPDIR	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu.1\CLSID\ = "{3A488FE8-9916-4F36-BDFF-3DED559142E5}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\VersionIndependentProgID\ = "GBv3ComputerMenu.GBContextMenu"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A488FE8-9916-4F36-BDFF-3DED559142E5}\TypeLib\ = "{316C9EA4-6140-4BC8-8537-B08D0D115D9E}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\GBv3ComputerMenu.GBContextMenu.1	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-2647223082-2067913677-935928954-1000_CLASSES\Local Settings\Software\Microsoft\Windows	Chess.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

Processes:

Game Booster v3.4.tmpGameBooster.exegbtray.exe

pid	process
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
1208	Game Booster v3.4.tmp
688	GameBooster.exe
688	GameBooster.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
688	GameBooster.exe
688	GameBooster.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

Processes:

GameBooster.exeChess.exe

pid process

688 GameBooster.exe
544 Chess.exe
Suspicious behavior: LoadsDriver 1 IoCs

Processes:

pid process

468

pid	process
688	GameBooster.exe
544	Chess.exe

pid	process
468

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

GameBooster.exegbtray.exe

description	pid	process
Token: SeDebugPrivilege	688	GameBooster.exe
Token: SeDebugPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	984	gbtray.exe
Token: SeIncBasePriorityPrivilege	984	gbtray.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe
Token: 33	688	GameBooster.exe
Token: SeIncBasePriorityPrivilege	688	GameBooster.exe

Suspicious use of FindShellTrayWindow 21 IoCs

Processes:

Game Booster v3.4.tmpgbtray.exegbtray.exegbtray.exegbtray.exeGameBooster.exe

pid	process
1208	Game Booster v3.4.tmp
984	gbtray.exe
984	gbtray.exe
1476	gbtray.exe
1476	gbtray.exe
2036	gbtray.exe
1476	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
2036	gbtray.exe
2036	gbtray.exe
564	gbtray.exe
564	gbtray.exe
984	gbtray.exe
564	gbtray.exe
984	gbtray.exe
984	gbtray.exe
688	GameBooster.exe
984	gbtray.exe

Suspicious use of SendNotifyMessage 19 IoCs

Processes:

gbtray.exegbtray.exegbtray.exegbtray.exe

pid	process
984	gbtray.exe
984	gbtray.exe
1476	gbtray.exe
1476	gbtray.exe
2036	gbtray.exe
1476	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe
2036	gbtray.exe
2036	gbtray.exe
564	gbtray.exe
564	gbtray.exe
984	gbtray.exe
564	gbtray.exe
984	gbtray.exe
984	gbtray.exe
984	gbtray.exe

Suspicious use of SetWindowsHookEx 5 IoCs

Processes:

gbinit.exeGameBooster.exeChess.exe

pid process

1432 gbinit.exe
1432 gbinit.exe
688 GameBooster.exe
688 GameBooster.exe
544 Chess.exe

pid	process
1432	gbinit.exe
1432	gbinit.exe
688	GameBooster.exe
688	GameBooster.exe
544	Chess.exe

Suspicious use of WriteProcessMemory 53 IoCs

Processes:

Game Booster v3.4.exeGame Booster v3.4.tmpregsvr32.exeGameBooster.exegbtray.exe

description	pid	process	target process
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 2032 wrote to memory of 1208	2032	Game Booster v3.4.exe	Game Booster v3.4.tmp
PID 1208 wrote to memory of 680	1208	Game Booster v3.4.tmp	SvcHelper.exe
PID 1208 wrote to memory of 680	1208	Game Booster v3.4.tmp	SvcHelper.exe
PID 1208 wrote to memory of 680	1208	Game Booster v3.4.tmp	SvcHelper.exe
PID 1208 wrote to memory of 680	1208	Game Booster v3.4.tmp	SvcHelper.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1208 wrote to memory of 1068	1208	Game Booster v3.4.tmp	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1068 wrote to memory of 340	1068	regsvr32.exe	regsvr32.exe
PID 1208 wrote to memory of 1432	1208	Game Booster v3.4.tmp	gbinit.exe
PID 1208 wrote to memory of 1432	1208	Game Booster v3.4.tmp	gbinit.exe
PID 1208 wrote to memory of 1432	1208	Game Booster v3.4.tmp	gbinit.exe
PID 1208 wrote to memory of 1432	1208	Game Booster v3.4.tmp	gbinit.exe
PID 1208 wrote to memory of 688	1208	Game Booster v3.4.tmp	GameBooster.exe
PID 1208 wrote to memory of 688	1208	Game Booster v3.4.tmp	GameBooster.exe
PID 1208 wrote to memory of 688	1208	Game Booster v3.4.tmp	GameBooster.exe
PID 1208 wrote to memory of 688	1208	Game Booster v3.4.tmp	GameBooster.exe
PID 688 wrote to memory of 2036	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 2036	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 2036	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 2036	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 984	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 984	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 984	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 984	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 1476	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 1476	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 1476	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 1476	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 564	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 564	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 564	688	GameBooster.exe	gbtray.exe
PID 688 wrote to memory of 564	688	GameBooster.exe	gbtray.exe
PID 984 wrote to memory of 544	984	gbtray.exe	Chess.exe
PID 984 wrote to memory of 544	984	gbtray.exe	Chess.exe
PID 984 wrote to memory of 544	984	gbtray.exe	Chess.exe
PID 984 wrote to memory of 544	984	gbtray.exe	Chess.exe

C:\Users\Admin\AppData\Local\Temp\Game Booster v3.4.exe
"C:\Users\Admin\AppData\Local\Temp\Game Booster v3.4.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2032

C:\Users\Admin\AppData\Local\Temp\is-IC5LG.tmp\Game Booster v3.4.tmp
"C:\Users\Admin\AppData\Local\Temp\is-IC5LG.tmp\Game Booster v3.4.tmp" /SL5="$7012C,3815455,158720,C:\Users\Admin\AppData\Local\Temp\Game Booster v3.4.exe"
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1208

C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\SvcHelper.exe
"C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\SvcHelper.exe"
3⤵
- Executes dropped EXE
PID:680

C:\Windows\SysWOW64\regsvr32.exe
"C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\IObit\Game Booster 3\GBV3ContextMenu.dll"
3⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1068

C:\Windows\system32\regsvr32.exe
/s "C:\Program Files (x86)\IObit\Game Booster 3\GBV3ContextMenu.dll"
4⤵
- Loads dropped DLL
- Registers COM server for autorun
- Modifies registry class
PID:340

C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\gbinit.exe
"C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\gbinit.exe"
3⤵
- Executes dropped EXE
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1432

C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe
"C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe"
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:688

C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
"C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe" -enablemenu
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2036

C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
"C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe" -enablemenu
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:984

C:\Program Files\Microsoft Games\Chess\Chess.exe
"C:\Program Files\Microsoft Games\Chess\Chess.exe"
5⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:544

C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
"C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe" -enablemenu
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1476

C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe
"C:\Program Files (x86)\IObit\Game Booster 3\gbtray.exe" -settingchange
4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:564

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
1⤵
PID:1020

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x578
1⤵
PID:1540

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Bootkit

T1067

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\IObit\Game Booster 3\GBV3ContextMenu.dll
Filesize
134KB

MD5
28f23af5d04c5b6e50c8951437ed851c

SHA1
51762c2e212da192bb860ffdcf92a05bb40c5d03

SHA256
24ddabdee7102acb84ec5bf2c1953c1ffc440d9c5eaca858c6c21895b7b56364

SHA512
21d53fcadbfc840966e6bddf22a27a7f61e4df3186df007636fa3550385ff317f09ac66b723b84e2fc71712f37866c5902e402286a65ac017258aadc07b3e282

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe
Filesize
2.4MB

MD5
eed44409f5c42cab3c3313fd8dd9d3ac

SHA1
04e18f2d0d1ef89d7b4c315923dca8fa7260894d

SHA256
f7033036856d48792d0e006db5fd6b1346ea0a8e7feb64f07b6827ee5bc0b112

SHA512
98cc7596f973970ff50aa0fb3f5fc1fc0066c7b179076fe45cd2a4c991964ce07718530c4118795e5b7ef28b80df8bbd580ea7334a2af4647d6c1b039b3df302

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe
Filesize
2.4MB

MD5
eed44409f5c42cab3c3313fd8dd9d3ac

SHA1
04e18f2d0d1ef89d7b4c315923dca8fa7260894d

SHA256
f7033036856d48792d0e006db5fd6b1346ea0a8e7feb64f07b6827ee5bc0b112

SHA512
98cc7596f973970ff50aa0fb3f5fc1fc0066c7b179076fe45cd2a4c991964ce07718530c4118795e5b7ef28b80df8bbd580ea7334a2af4647d6c1b039b3df302

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
3KB

MD5
6b975b5e52710c93ee392fe38d6733c2

SHA1
2d44a22ff6aabac8fceefa2d4fe4f83ec8a96514

SHA256
e530401243165771b7b72e1be4d205756cd38fbad2778706cf440fc8dc687aed

SHA512
098e6333d6f2a1d8bb4998acd5ca71a915b5d7ede9d797a85f0b02c2af323b63c5588e838fe00961a6a9a45eb7646df175b8285727f097532f32785a6e8705ad

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
3KB

MD5
f6645f7fedc0ee76732df904141d825f

SHA1
3cc639472cbd75d7239747dd95b0ad726b5d23e7

SHA256
4563778ec2a54461fd53806830d626e6a75f4933403f750349e944ab76c2dcf4

SHA512
8c07bf9feede63d519e78e29200afde103d5f74ceaaef546f59e44d34cbf3ddc78f1302cc994ac359b850f13004688a9aa92835252eec3675b2d57d495e367a5

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
853B

MD5
86d29381f177ef3da2c4c92ccaf916f3

SHA1
209708e115126dc88a92870b4c67bf2a87d4cb32

SHA256
c93568659533b85fe9b171271812725b13277a14bb81ab88b60408083f1f32cd

SHA512
9b953d162381895ce7299674aab6f6ec4f8e51b75797d52b07856d2be0a7da4af1eefd62854402fc5feb2a31db8723e1acbb5e8a35f2dbb1df2ef24a21dfda15

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
853B

MD5
86d29381f177ef3da2c4c92ccaf916f3

SHA1
209708e115126dc88a92870b4c67bf2a87d4cb32

SHA256
c93568659533b85fe9b171271812725b13277a14bb81ab88b60408083f1f32cd

SHA512
9b953d162381895ce7299674aab6f6ec4f8e51b75797d52b07856d2be0a7da4af1eefd62854402fc5feb2a31db8723e1acbb5e8a35f2dbb1df2ef24a21dfda15

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
1KB

MD5
84ef9eb8f703654f4422c4c0dfa990d2

SHA1
c523771d94102ed462a8e7d17638f4605cc84547

SHA256
7c43f91305733d3d9058e0c05dac569c9e5273b160f843c8e337ae0ddf908e21

SHA512
324a120dc531f1abe12d1589bd4b20a3e489605297d628391ed3b9a0bee8791e239ca704766110b47a05150136ecfb11ae77697a40b64b3faef9e5a23b6f7afd

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
1KB

MD5
74c060f6fcba1a4741204cb8872f4ae4

SHA1
787e147c066d5b7944ff66bd41b6b425008ec9fe

SHA256
4e286e2c317953a706a87058139f0cba2979d267f361596f8474cae7162a3e58

SHA512
77c0c0b6a475933a4e4dc4564864ac43620a1c2c8dd9333d8d38fe03fb153a0119a493870c98c5650e26b04c39fa43d4f8891ed92057674f4a8cd6b02cbefab6

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
1KB

MD5
14d8037cae6beb256a27a8bc6a0a88de

SHA1
da4ecde7b3b7869c349f52967f76297d1cb812ec

SHA256
18f4b2e60e5e8e1d1af36302a382ca1d8eb06201fcde694a91233d9be5c86a1b

SHA512
8e349da83d8db28281b0112358a3ef065fdca2962d6c2b5652a698e6c1280a879339e394cabd91cedcb321e6296bcb3f9d43117913371c5e1bb1ac519426550b

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
2KB

MD5
f8c2bd91c45e3988f9c12417fb9e90b7

SHA1
563df73f53672cfe12f38d950fd531b6caa599b5

SHA256
6ee384974a41bdae4225c673acf930978cad9ddf64cbd02b5bee9885c14af6cd

SHA512
d7672c85aa6eb24e1da71c8a22bf51aaa1517a0e82af481f12ba8087de173fe31f7600163d0d2af28d81e3fb589b0f3f50eb90293be5fa24e5b626567fc5ef45

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
2KB

MD5
5c583ecbcc41c55cd5666dfa13ba086e

SHA1
9ec40c933137bbcdfab99eec3a771ee1baaef4f6

SHA256
861fd86501df505735b22c46ad5d9a4dcfcee460ff1a152426ecba1578c07f51

SHA512
701d3cc77412f13f46ab015aec5995ddfc92660415e000a8680e1f42c6e72b7c85082333ffebe761b09040757b9e728e1b636419159a9256716cfc8955f93bb0

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\GameBooster.log
Filesize
2KB

MD5
f352a57e25f279497fde863615bf9196

SHA1
5e5c5feb96a2d29ccf11316a9be91905338b5b3b

SHA256
b4a4e953594b6ee6f43aae54d36f143057d965a8ca31d199e34f4c2e55c0d3eb

SHA512
98e3c39a970f8d050a8b89ce36d5b169aeca9de74007a92438ed1f33355e751747163a8cf42bbc8c9b9da00291060cd5a797387c8d8f1d0199968dae56109277

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Arabic.lng
Filesize
34KB

MD5
9b05895fdcda6f5afea21d800814a8a8

SHA1
8ce5ad00ba83436735d2ede05edbcfc41fe1a52a

SHA256
b16214a1a570777f79eb334512f9936456da19a7f871e63e14e11ba9be18f4d2

SHA512
6d9633d25fcf70d1a67ac4a94e3758b724b9051d65a8c1e689a36787eb49ba9afb828542be1fe39c94e6ae5a98c7ead28b16ac01847c14ff6966f6877f0ebdbb

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Azerbaijani.lng
Filesize
43KB

MD5
ffd8396832d376bc139057ccb7bdaa36

SHA1
0f6fa5f28cf55ebc26cafdf412e394ecd0646419

SHA256
da12374913fa00e3ed9c29a0fc40f64c3f9fd53676bda19e8280e23294bab140

SHA512
51e0426afddd69b738f56bf73a90ac5011cc3f2c66d76c1c0a28dc99d38017aa6579be997df27b1c29e9d401e7f784003e1a65ee4f9018aac764f86241e70a47

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\BrazilianPortuguese.lng
Filesize
42KB

MD5
e6884afd08f4d5aacfd9d2aa8ff7ba05

SHA1
8565ba1877c96714fa65f36e72200363e0471b62

SHA256
84d2125eb3b51494725f678ddb26f4bb5dd5927fc1391bc1d4c4ef465e17ca3d

SHA512
a1f4bcbbc10fb2886a910aa11c94752a8a330d9f191d210a6a1ea74da930980af42d8b1c2f7559ea2f298a5b9e4a0b6f05247f4ae46a0905a8a8a264c248fd64

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\ChineseSimp.lng
Filesize
27KB

MD5
28262e5b828167ae9d464d05fcd8f730

SHA1
458a2e39d0cf953d8d2c9f2ab02cc50404697dd6

SHA256
cbe7a690fa5a6abca1905505bc186209f1bb72b315a8b41d97fe2f7837664333

SHA512
0b896372d94ccee71533dd8747658a05a8eb389b204fec38b07bb5aad0df9e8342deca457011ac4d250daef8f7a72d760567f2ef29ff2d1756426788bc8b3721

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\ChineseTrad.lng
Filesize
26KB

MD5
d9d9b9f7e3dac4617bfd72f76e91cf95

SHA1
dd009cbf2e31efcbba74d9762e93aab9a4380433

SHA256
066cdcd681e269553fb46879deb47df04a2c82270d48aa6ce4af5fc2f4158e86

SHA512
5969cf8981b24bc0275d1a18f9932315414ba116dd17e4d3114c2a4ce77ee281e5aa452ee99bafb2e0b6a84e3f5c991125a8c4a7eda739a1e27fad303df103fc

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Czech.lng
Filesize
41KB

MD5
b8678a70d43da0e53c3cf134f2de36dd

SHA1
a4ebd843c105d6d16392842de3e68db332b9a4d3

SHA256
5f591c884f0e3ee826fb45a238780e4a25348c41dcc4df03076c29a3eff8c909

SHA512
6e74d15bf44aec9ac5f952bb841624fe09e144b863ba8c3f3e90ad474238412810e5413e7f45a1191c08058c63635c8211312e221d3cd14522667158845b4259

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Danish.lng
Filesize
36KB

MD5
cf1b70420a32ff1683118fc8b6b06aee

SHA1
762d6385e4bac91dc3cdd2a53a81e1e404df5dfc

SHA256
7bff34f248ac7e923f4fad6ecb2ee2b0f5f616d8ba46136fc573a6fd97b77b24

SHA512
67eceab883a54621591ccc9e38e21d5086ca664b3048e4321b94d7040d037a6291dd77900f16b638190745c20ebf42d31c2ec57664e911135a49b28b35ce5370

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Dutch.lng
Filesize
37KB

MD5
74387de0217279f08b97b86ab7d01c61

SHA1
b8da22f0762139bcd8a0f9d09fed13b9da964afa

SHA256
d2395fe325df175eb7f659e6a98cfca35c3c7c32cce4891cb3a060694ca2bf3f

SHA512
c99892d08c45d4c52d97cecc9392f71b8d9374f2c71d74b02c61a458e931a9769ae5bd5f8419c99b6c17c545ec94f22a52bdf70e7a9abdf2215d92fd7280cc8b

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\English.lng
Filesize
40KB

MD5
5d8fd5c00ae67232b5fae2e6b8e4b582

SHA1
0f9613fdae34abe4ac75b54e68e93613356ddf87

SHA256
19707e73811ef5af4a5a81ca221d04bcab26480d6beb7697b66696a4e21112a3

SHA512
c6963c0a23b6396f4e9b64e9271eae978e61d1ab221be89202a72e0784228af8eacf923525abfe7164f34dc21dcfed4bcb6cdae3ba0c8538568535fcc3ae6ec1

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Finnish.lng
Filesize
40KB

MD5
4d6e0367fe18842d30b4cf44e93c1ba4

SHA1
490dbd18cd06d959749a61ab64084549f2609ddc

SHA256
a70ea917c8a8fa845e7cdece889bc44f6d5e340cf1c12a7cc0edc3b91ea5b7ce

SHA512
6f4a9cc9d3913f563bca10e3b8ea97b446c432ecf7fc1581507b5f117a6bcfe8bb3d2b42be215d1970bd30c2587090309efb2d85d593d0b316a6cf14d58a408a

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\French.lng
Filesize
40KB

MD5
018a85a69f345306e990c945f81066f8

SHA1
c600768296183ed31b3b7d6659880ccef59b74e5

SHA256
c4bae02edb5368bd3cc85cf21e14ec0b67ee9cf10018f527f77f7b9dac38579e

SHA512
2dfb16136377980a4ccebdb6d2a847c5cfb1db8e94d71e9e9edf9e5f1e281fdc5d2652863f40868162f49a4452a1875b51bf493a0aaabf9ceb0667ae84fc22cf

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\German.lng
Filesize
41KB

MD5
82b21f408340c7e5b542297e8a8f50d5

SHA1
2381c879b7795446dc9963bc9130aee2e31d960a

SHA256
e767b6753ea6e517a39cc5ad2066ba6476c76ceee97455e3a13adb6720d333cd

SHA512
7ad3a32600852942a395e9a73f53661d46deee5cc41961a42bc325002ead84b8ba0c5e83c8ccf791a5f5ba3e41c96de9b700a781c415643b8839c816bd4a5147

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Greek.lng
Filesize
45KB

MD5
a1e3e17f90a1baec05b364fa4fb2437a

SHA1
0a4d98853ec1f8c8c40bec901d2d3e8e3aa7c715

SHA256
fbd81b52fca0da5c2409b05d75a5a8ae5b0a2ddaad681d78f7745bb8dbb5f5a0

SHA512
f99fd15196e990cfff27b7c9acf3a65e4ab92d1916e1bf2a9dc53dc9fdc8f68144384d7bf4994ee65d7e4b46e0885b24bab43e5fe8bd0443a4983d86695cfd52

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Hungarian.lng
Filesize
42KB

MD5
5e5e5cad485e5e97d9eaed098c877962

SHA1
585d4c13ebd66372552a5f4284fa3bfe5dba82a3

SHA256
1519747e93b0641faf57b31f912ab129a383c6d36d00ec32fc97035d40d6a6c6

SHA512
3a5d8e47f6ff549dc4b8f0e208a1268197ea34783bdd0dcdcf897d5257dd318beeb91acb5a3136410ce1e3b0a49d58d830a3aa94718a5224de29f4c228375e7b

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Italian.lng
Filesize
43KB

MD5
697e9e1b9f48eb04e442e15a12a4ca60

SHA1
03f3aa489ff830d62dfbd6f904b3ce98b5d7f437

SHA256
bdc0b13c0dc1078f18248f06e09d29037481884a981a9d49977cd5fbc470c1e4

SHA512
980c355c9d5ed2973f7ea0ff9dfc1a80b9c7e8ecf8ad6e00b5c56eb3b9357964d6c9ba191dfefb84bf0d8b09758b9055d3f8ae4281a42b9fff522325ffa7639c

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Japanese.lng
Filesize
28KB

MD5
ba4d260789675b29c56e095043e06ea4

SHA1
b396656e4a64207c6c0179daf1327d7d51bd472f

SHA256
edda2c06f1fc3f8ae5909a75311c438729f3b9a3945fa1b525f220e63ab03031

SHA512
c39ab9a63ea840fbaecb324dc495a6a85eb14df0c64fe3c69fc19611a1b3b2e80ef461d046ab2b0a8a202fdf03ecc87678e70f344fe71e7af7b951e6556f53fc

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Korean.lng
Filesize
31KB

MD5
5b6b3d098b009e1b296ddc463ccc1b6c

SHA1
2dac059a4b481daae100209120103f7c37ddf0cd

SHA256
db21925f27ce5adc2b519d648f31bfc2005015fd69d10a0d82384550e8e58ab2

SHA512
a72001538361218f67e0ff7ce170d9a948b197fdeeba48b4bccede7b429b82f212bb656400d7e6d6f25d2702f0d828957b72aa13f3622ad6edee7a1623621a6b

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Macedonian.lng
Filesize
42KB

MD5
ad1e8bdbbe10606fc2ad9ed1c94eea9a

SHA1
c2d01482e273b8edc4cbf60d290a9f19df39f788

SHA256
fdc5f43189542d52122fb394763431951e5a85766ef27f33033d03e605fdcf3d

SHA512
71317542d042050a2b989b06b76376d8740d5c773e95f018fe3430915fcbdd6b1f60d2e82cd7bd45a408c388bef987ae6133c955fe081e24e71ae9f0e5556562

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Mongolian.lng
Filesize
42KB

MD5
4d3dea9680cdf4e8917d6b936e4f8984

SHA1
34a9cf377c178b3ff0cb16593e766631a1454e84

SHA256
3a53ab11f2854ed67620a5e4809db4f0045f0e10e3fac632d9943ad8b91bf43d

SHA512
318c9830fe3541c07cb6b412d94879f3db523ef576cd3e35bc0b4937ffc6447e2046e3231b9cf57cc95aad1467049e308141f0c3dfd3fb02318fe9f366e5a90c

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Norwegian.lng
Filesize
38KB

MD5
a765dffd2b0b36c8130fbf884f43f04d

SHA1
74b813021c1098b7aeed9bb20ded7e5ff292dff1

SHA256
7fdcf53f1569a43a2ce4bf6118bde85f0273379052cb16c1a3c900ac83aec929

SHA512
c8d4fd7cb6822856a1040a194c6dad15487ce20a557ed196fcc703662415bc7a8efcf68d44da168e9cd30ae5d3070b08e5c6a8a5383617c2322464c18b7126ed

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Persian.lng
Filesize
35KB

MD5
fc697ecdfc0cdb4ace67a09d5b16f5a1

SHA1
567cab814996ce8d3259af68ef9b1da35d6bc5fa

SHA256
8bf12037fa62e72e818eecb2898ed605e194bc977cecc747015cd9f0c1194d6a

SHA512
0c38d519a8da288ec31d9556c9f77c9c6c388a6e1b9d17f76025996100606ce130284e16a6cf9b077f12236be4c74412c32e78daca8b02240c719d5fb0502899

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Polish.lng
Filesize
41KB

MD5
e3885c75b330dd92e8d26b964e163e45

SHA1
3bcdd6e1e0318cfa1b605eb0bb029682a0bd1d21

SHA256
e322b5ad24d1f7a6d11431cdc893c8ff8be8e7100a7679c0ee66838f255a7363

SHA512
8c177efb16cc6631876893643dafd4a27b9ecefd632ada735c5606cc742ebc51aab7e898001c2573a5bd5a42de9684975c3cd4ecb535b81d161853042026b9fb

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Portuguese(Portugal).lng
Filesize
43KB

MD5
be9a923c665c5ed77a47cb8e27ca8321

SHA1
c7375340547aa65c5ca80300cbad837f0e85b9ee

SHA256
097d4f1e70ef6a4efdfa70c63d1faefdcd3fc7f823f583c4bf318032e60df240

SHA512
740a5b5e57784f101d0484cebe5b3bf154e98a29fb306ff9764b3a37947eff8a3627da4cb112061c8b6cdd23f0ccb0ef440e87969a54c6cd8bc94383855a83ad

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Russian.lng
Filesize
43KB

MD5
b4430c48cee060fe40977e4e75d3fa6f

SHA1
f316ceded92841c15f2dd0af5c7a1737cf5d707f

SHA256
997f3e683668170f57aa0da58b129b4c1c0701d382e66117731c6a46610af728

SHA512
d069fa3368ed49fba0f7759473ccaf987574d9efc4990f4cdc0ac7f39d0fc3fe80b9e974b52d237cb7f1c4239549899b159c0ed5b635bda215ea42a098c044d2

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Serbian (cyrillic).lng
Filesize
41KB

MD5
7f5a7dcd2a3d00b92d7dd4e9616c66b4

SHA1
6769c9569679eeb7f640bdb1efd23209a6c6fa06

SHA256
d80c4abd23df6799aff88cdaab00289259ee8b4a449dc4ad57fc5d7debb20a4b

SHA512
d68796cb5dd1ff7ec883d71930c6b8b4b63569be585ad1635882272eef0362f13949615daa0aec98ff9694172c38a04bfd9caf29dcb15bc2334f9bb475c3d8c8

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Serbian (latin).lng
Filesize
42KB

MD5
f44be5c1b36f04701258104d3e2f012a

SHA1
56b87a27d33c6738e5ee548d822520c17f1d1f86

SHA256
b3e2b137c03e01321a11ba48cf1f28c80a04d6bd2c717bf25fcbe7bd03ff6684

SHA512
b850b2912c36a750a395d9f052cfef59f1890038b89439dc0514ee9d3c8e418484c496c46dae353cf44cf521c1a1313b0e2fb8db4520c3f6a11ddf727dde4c75

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Slovenian.lng
Filesize
41KB

MD5
19701ad42d8b00459ccc3155b300fc64

SHA1
353261b75b82670b84664bd68d25c8579c506fce

SHA256
ce988245f47cfe60f97ba0a5b08ca088a275ab904c2665b1dbe93fe069ca737c

SHA512
4cf588054fc2a45741853430f5d2c408d6a9707b13616ddae06e947ca91f47bdb8b3b17f7ddcbe50a06a8a139a3cfe405a281e929b6128993faad282aebec14a

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Spanish.lng
Filesize
40KB

MD5
dff7c104ec3f35614d4c4256710fa315

SHA1
d68fcf3259329250bac2a0fc5b9507ca33297b1b

SHA256
b37723294f85947b8a13de600e2432d642c72d2e8c6500e155a8ebf6ecca9d7d

SHA512
34e218b598e9e35dbfa26921e400e50796d3cdf3778569210cbc2d337e4104ca14fd65972ae1c3d7d526f4b793f3615c6342fa066b9a78ea71fe6db1d6ae2b1b

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Swedish.lng
Filesize
37KB

MD5
c2d8e5e427207900c92bb347fb2ff2b2

SHA1
7298d9ff0c007de511d652796e6d95f60f6a1476

SHA256
5075fb33f2733ac850a03944d1a2f423909592938210d580e2c7ee17dfd97f18

SHA512
6c3763d6f4c3ef1d2c65d054c96cc959c1eb9b8f4288ad15e7f6c583f22372227d7a3bd4a8f9928f8438a5f346f3b84af8d6fcaac6bddee7850c8023efb216fc

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Turkish.lng
Filesize
42KB

MD5
49cedf5fc566fafea582b45004cb22e0

SHA1
7eb9830848f70d292fcb961c3b11b6271957b9d4

SHA256
f97113c889a96fd369fadf49fd04c0b4898504303e38eb970341cd5e6b9a70ee

SHA512
5b2407dfd0c722ae2179d3f73f3628d41adbd7144cc2dc2ca8b4fd54c6d420f75c4a10c4102d11256e7fccbf11fe4add74f0c7f3084229b402d79abf78a6662c

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\Language\Vietnamese.lng
Filesize
43KB

MD5
c1f6187426e45dd877c222b7966ce002

SHA1
da4ef53f513d322fff37eb362c413cabbe81e69e

SHA256
7954a5d0e4cdadc997a0bd51ee5e551e8dabbffa437dacdd59181a6801a19687

SHA512
7e42d00b36c3b06fbcbdc2c9ea5d7aa1e1e4d57489ddc321b65a956e9ba13ec6a17c7f68dd60028299003ee151dab90d3fb41f5f5fdf89f17295352da091d5b4

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\LatestGames\LatestGames.ini
Filesize
284B

MD5
c1f06af531a9b6f2a02a75ac49c50ad4

SHA1
4681f8f3cb91d45ded6d2c293f91f83b3bd9c72f

SHA256
b79bb777948a2b489858051cd234cd47ccb38f09f37311c7233e672e6ce48090

SHA512
59093c64f29e24b76dbf8874e694ef9878b9ca3191447ebfd13e3e2e2293d92c0568c9904c87cfa64345f32f541aaf495f3f2ea3482c441ec221487cbfa93f15

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\PowerConfig.dll
Filesize
60KB

MD5
07de550e2c672bca2b2fa3d082094cb7

SHA1
832b3b2900f5a2611015dacfb2092c140020ad11

SHA256
2b0d49b58b1e103dac8dd449a0ce4d9488e6aad083700287296f9465e8e207f8

SHA512
e4f50002996decb0acbb073051760fc0eeb960836b5f52360a1649d4ea60defeaaf311763d330a78118b1aee35f70ffee037b6c38d9c7a9e7e31177f29a7bc34

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\dxhelper.dll
Filesize
81KB

MD5
55bd2e5fa1a20d5f4357a22707eb9c80

SHA1
be16b69b1d55dc3ae9f3fcf12463cde688916118

SHA256
b145a4743439d1924be3b59c045d4755720e3c6df0e75626ff7665c77c2cfb73

SHA512
fd7d3b69dafdc1c8e4fe2327f10c1513ac14c065c526026977273aa365e335fd935351f890afe7ff14df11dfb28bcfea030e301780ae7912bc68f47e0111a5b0

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\is-S2P6N.tmp
Filesize
1014KB

MD5
ab24d2a81fc60ec9038fead15c5470bf

SHA1
e991934a95399cbd50a280809e4da09039b18522

SHA256
7e4e95400c474d68468d4cff2f9809fd56acaf262a8858c885bf7dc3bc773e20

SHA512
7b9f398fefe642659a8d29fc03eadae2eb38e4c2e290934ddd574e59e54fa70c2161410ad18248b1630233e69a608a0269d36129f4383989a2ba9d0561a02769

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\rtl120.bpl
Filesize
1.0MB

MD5
dd82eb68d97944b192c7803eb585b03c

SHA1
b3ca5f5bf172dbb5e83ff9d9113e0f897152e642

SHA256
e39263e6305bd0eaead7ce9838be6d8510b66776880331f4c0f570370ccb7e01

SHA512
a070bc970a5c03ad191405a6ab9e119fde7fc0966c93bea36dfa15a8300882b662f0b342a2bbc327b57e7e570e001f0a8d661de5858784ca376ff36a99131faf

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\sqlite3.dll
Filesize
504KB

MD5
dc75cad4f45af46b7a98f0b9f89ee5de

SHA1
42266455e4a5b72f7805d63062c6c966eaa88ffc

SHA256
bc7ca2c14170641c470f004860c034be33f11c5bedbcb76f84585009a6da952d

SHA512
8346c19936e7923623595a3c740d9100a0dded3df3c44e2d719c6cd9110c77f7556c22d3b77bfe5bb374123483bc61ae3139d4673048fc3712e8faaa6e1875e6

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\taskMgr.dll
Filesize
319KB

MD5
4235a1996760156ac8bc88cd47942a56

SHA1
36739c4b7739473a1f46b7a2f7f273f968a0fb99

SHA256
fc00ebba7d93b0256f2dc983bd7df23e7cfa0edd22a8578bf6be5aa6a48558e2

SHA512
ebe0619b0f70ca073ff3eb495fe32305d3fe5f98f1dc996611e3a7917c84a41a9acae1aaa8c3d9d82586eec9aea72233d19c5210b8529f56adfac650665599b0

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\unins000.exe
Filesize
1.1MB

MD5
30f2396ad4a22e87f99f5c3c30eb1490

SHA1
b7b7880b3891ff30434b057b3bbd41100863f0bf

SHA256
09e16e8133b6fbc7a7ae2a24b66b29aba71fa0ed710b377d5a2f484168492f6b

SHA512
bcbbb6fb5be6eb8029526617fcaa6713ff3c1865161b052e50ebcc253083b05c2e659981872c1ef04f013ce054fbeae6be657ff847709669f1672d047ab7a7d0

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\vcl120.bpl
Filesize
1.9MB

MD5
773ebd87010a6f644869a59d98792c9c

SHA1
7d5befef572dd95776af9c2f9999124b98f1965b

SHA256
c9581c6a50061ed588678f29591b2515fea81a70a7e523751106bbadbfe11842

SHA512
e111505b06b8215ad7584f0b5d36a0a62660a2da5f74ec67848dc37dd209564e3261ae371648175a1184882b06b3e395a36fa5859c031ca3818fb745121fa80a

Download Submit
C:\Program Files (x86)\IObit\Game Booster 3\vclx120.bpl
Filesize
204KB

MD5
264bfcc11a0da6f0b449a40a14d15772

SHA1
c3c4557eae6e5337dd261a92f254043bfa1da82c

SHA256
7744ee00d954d60e04b05765405ae128e566c1cf0b2717401dd87499e4b8acb2

SHA512
63ec6652e2794f9d2fec09c0179cb6aa32f6097c14830edb33932a12061b50d1a21fe8c10d81aa30754d6f1352f2807bea4004ecc5a5c9b0c1ba69db6da30718

Download Submit
C:\ProgramData\IObit\Game Booster 3\Defrags.ini
Filesize
5KB

MD5
b15e0e7d617bb7ed9b4ff3a220330632

SHA1
d452bc6e558ac8970bf53da828cc6d85a08db2e1

SHA256
4d1c16010938d0fbef09fa5e1b3c34468fadea0b723df10e7201d6ddf609c4cf

SHA512
fbec27df850b0587edbac6a6f981710ef9cfb56d6b09c472f19acba456c291fe7780057deeda95e8e1427009857ee65fb86940c8c0fb5436fd8e98880786b950

Download Submit
C:\ProgramData\IObit\Game Booster 3\GameBooster.ini
Filesize
146B

MD5
259f5747a91871cb5988420e34a348c5

SHA1
2eab8cb5abdb7dd9ec52e8fc443c01d973ff4b0d

SHA256
68b36f203e92d77bab75eec8ea769f91b3ab3fa51dc7147608c7f69aeaebff7f

SHA512
9a4aa8f5d1878a5ac70bd31a2eaadb083ad6462af58480ce551e3520929b1670f156f93c0c8818fde9aa07948eb72f88be37d700c83abeb41fb47b1658919640

Download Submit
C:\ProgramData\IObit\Game Booster 3\GameBooster.ini
Filesize
237B

MD5
114d1b3c3066784bbfde7e0a1d1f6921

SHA1
fade5a65cf79953f4384a323ee81ee11762174c7

SHA256
68127a113c2dc2c1cf0969177fef583a04901290bf113e928f2c1d5964a0d408

SHA512
6f55179e153af4bc38899270dd15b358bd748b5f4de1611c993d16715c12ef12f18ec0cb744db99f28df41b42cb1aec3b11576b47e215e70425f7bdafbfc6219

Download Submit
C:\ProgramData\IObit\Game Booster 3\GameBooster.ini
Filesize
290B

MD5
73d690271fad2220cebe153ce9793d55

SHA1
c0321c234e0f30f8ebd4a5c801328da78dad3618

SHA256
2c1d95536559d01fb614584f5f5727ff57c084667e70581a1619854f3935a979

SHA512
69810a1922ba4660f6a9e3dc8e51388485535801f16d8218c9d5db9509560e00bcf4bc7bae53e11368b0f2c930ace4793d6dfec06e75a37b42fb4f96607bb531

Download Submit
C:\ProgramData\IObit\Game Booster 3\Service.ini
Filesize
3KB

MD5
e9c0ee6bcd09b89bba9430b4d7f302a0

SHA1
921d1b17de8160f8225246180dbac099287e6bd9

SHA256
af001e7806193bf1815f3a187d7b9d3caf88f9d9af7d7758100336f4d4b7ba45

SHA512
9aefe89381e545ac87a64e30f78bf559cced1dcf7b1565560160917ea2714562a47a27637a1291e96146b31fbce4bcd07e9ec0d1480b5df4d67dc0cdab3112d9

Download Submit
C:\ProgramData\IObit\Game Booster 3\Temp.ini
Filesize
282B

MD5
37644f8df3527a7b10cda48bf8983504

SHA1
b20db2f0ea8f1db2daa10c4dad07c6ef1402cecd

SHA256
45288366a674e12828a402f549fb4de4264bd82395e23ba43a134c78a0ff4145

SHA512
ea9eec7cff6e4ecadb875b03a17073cd759c15d831549f825623d1f3de480b3c5c4cbb2959b0f050ff4cfc48d2553bfdc9d5649dc29210aa8c46d68d835e0fdc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\GameExplorer\GameStatistics\{E2856B15-A196-4C82-BDA1-C75D273DF989}\{E2856B15-A196-4C82-BDA1-C75D273DF989}.gamestats
Filesize
12KB

MD5
d29c3d48948b47ff0856788c7f1067a9

SHA1
40d1d7542b0ae7e963cd77f4faa31787d13c3eca

SHA256
ab13a464752639064f53148f4b6a5960b36193e655f0cc8ed70cdf87a2b5fbf1

SHA512
439fe41b99c9fc9b9e1a28405e646d040426e797f94259e93721b14d3a5fed44f1d524f86bdb649339d9c6ad3251bb077943821d602b55ed1a03e61a63762000

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\SvcHelper.exe
Filesize
134KB

MD5
d23dc90ab2e073524365d6f88d732c1b

SHA1
f07ff93e1bf1648a40467d7c38ded0342a42148f

SHA256
6fa1b4f54b9ee66072fe89b0fe0c3c5851c92b6a458d9a57bd4c684930591bbc

SHA512
6dd0ae6d681665ba8ae6d15adc5912b6860ad6959bedec30372a0120e41d6f14a433d5c4ce8b440195ff3197390c7e1cddc6106de0160e7217f30b3a0aeef067

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\SvcHelper.exe
Filesize
134KB

MD5
d23dc90ab2e073524365d6f88d732c1b

SHA1
f07ff93e1bf1648a40467d7c38ded0342a42148f

SHA256
6fa1b4f54b9ee66072fe89b0fe0c3c5851c92b6a458d9a57bd4c684930591bbc

SHA512
6dd0ae6d681665ba8ae6d15adc5912b6860ad6959bedec30372a0120e41d6f14a433d5c4ce8b440195ff3197390c7e1cddc6106de0160e7217f30b3a0aeef067

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\gbinit.exe
Filesize
581KB

MD5
5a7fba53746852b3543839e77b913893

SHA1
5e8621808251e7dfa5b9899d490d9aa5a20d2b06

SHA256
7829d11c205f0b8d22d942b66364cdf2e6a1763a8f78adffb45cf660f0f26cbb

SHA512
b124c395ce06caf2edb8780613ed27516b89bb1abd5dae7917c11d4eb12abccfa353d005225b0d3360b14c71f8b7da808b6b515b108012139b52879f5dd59473

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\gbinit.exe
Filesize
581KB

MD5
5a7fba53746852b3543839e77b913893

SHA1
5e8621808251e7dfa5b9899d490d9aa5a20d2b06

SHA256
7829d11c205f0b8d22d942b66364cdf2e6a1763a8f78adffb45cf660f0f26cbb

SHA512
b124c395ce06caf2edb8780613ed27516b89bb1abd5dae7917c11d4eb12abccfa353d005225b0d3360b14c71f8b7da808b6b515b108012139b52879f5dd59473

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-IC5LG.tmp\Game Booster v3.4.tmp
Filesize
1.1MB

MD5
30f2396ad4a22e87f99f5c3c30eb1490

SHA1
b7b7880b3891ff30434b057b3bbd41100863f0bf

SHA256
09e16e8133b6fbc7a7ae2a24b66b29aba71fa0ed710b377d5a2f484168492f6b

SHA512
bcbbb6fb5be6eb8029526617fcaa6713ff3c1865161b052e50ebcc253083b05c2e659981872c1ef04f013ce054fbeae6be657ff847709669f1672d047ab7a7d0

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-IC5LG.tmp\Game Booster v3.4.tmp
Filesize
1.1MB

MD5
30f2396ad4a22e87f99f5c3c30eb1490

SHA1
b7b7880b3891ff30434b057b3bbd41100863f0bf

SHA256
09e16e8133b6fbc7a7ae2a24b66b29aba71fa0ed710b377d5a2f484168492f6b

SHA512
bcbbb6fb5be6eb8029526617fcaa6713ff3c1865161b052e50ebcc253083b05c2e659981872c1ef04f013ce054fbeae6be657ff847709669f1672d047ab7a7d0

Download Submit
\Program Files (x86)\IObit\Game Booster 3\GBV3ContextMenu.dll
Filesize
134KB

MD5
28f23af5d04c5b6e50c8951437ed851c

SHA1
51762c2e212da192bb860ffdcf92a05bb40c5d03

SHA256
24ddabdee7102acb84ec5bf2c1953c1ffc440d9c5eaca858c6c21895b7b56364

SHA512
21d53fcadbfc840966e6bddf22a27a7f61e4df3186df007636fa3550385ff317f09ac66b723b84e2fc71712f37866c5902e402286a65ac017258aadc07b3e282

Download Submit
\Program Files (x86)\IObit\Game Booster 3\GBV3ContextMenu.dll
Filesize
134KB

MD5
28f23af5d04c5b6e50c8951437ed851c

SHA1
51762c2e212da192bb860ffdcf92a05bb40c5d03

SHA256
24ddabdee7102acb84ec5bf2c1953c1ffc440d9c5eaca858c6c21895b7b56364

SHA512
21d53fcadbfc840966e6bddf22a27a7f61e4df3186df007636fa3550385ff317f09ac66b723b84e2fc71712f37866c5902e402286a65ac017258aadc07b3e282

Download Submit
\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe
Filesize
2.4MB

MD5
eed44409f5c42cab3c3313fd8dd9d3ac

SHA1
04e18f2d0d1ef89d7b4c315923dca8fa7260894d

SHA256
f7033036856d48792d0e006db5fd6b1346ea0a8e7feb64f07b6827ee5bc0b112

SHA512
98cc7596f973970ff50aa0fb3f5fc1fc0066c7b179076fe45cd2a4c991964ce07718530c4118795e5b7ef28b80df8bbd580ea7334a2af4647d6c1b039b3df302

Download Submit
\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe
Filesize
2.4MB

MD5
eed44409f5c42cab3c3313fd8dd9d3ac

SHA1
04e18f2d0d1ef89d7b4c315923dca8fa7260894d

SHA256
f7033036856d48792d0e006db5fd6b1346ea0a8e7feb64f07b6827ee5bc0b112

SHA512
98cc7596f973970ff50aa0fb3f5fc1fc0066c7b179076fe45cd2a4c991964ce07718530c4118795e5b7ef28b80df8bbd580ea7334a2af4647d6c1b039b3df302

Download Submit
\Program Files (x86)\IObit\Game Booster 3\GameBooster.exe
Filesize
2.4MB

MD5
eed44409f5c42cab3c3313fd8dd9d3ac

SHA1
04e18f2d0d1ef89d7b4c315923dca8fa7260894d

SHA256
f7033036856d48792d0e006db5fd6b1346ea0a8e7feb64f07b6827ee5bc0b112

SHA512
98cc7596f973970ff50aa0fb3f5fc1fc0066c7b179076fe45cd2a4c991964ce07718530c4118795e5b7ef28b80df8bbd580ea7334a2af4647d6c1b039b3df302

Download Submit
\Program Files (x86)\IObit\Game Booster 3\PowerConfig.dll
Filesize
60KB

MD5
07de550e2c672bca2b2fa3d082094cb7

SHA1
832b3b2900f5a2611015dacfb2092c140020ad11

SHA256
2b0d49b58b1e103dac8dd449a0ce4d9488e6aad083700287296f9465e8e207f8

SHA512
e4f50002996decb0acbb073051760fc0eeb960836b5f52360a1649d4ea60defeaaf311763d330a78118b1aee35f70ffee037b6c38d9c7a9e7e31177f29a7bc34

Download Submit
\Program Files (x86)\IObit\Game Booster 3\dxhelper.dll
Filesize
81KB

MD5
55bd2e5fa1a20d5f4357a22707eb9c80

SHA1
be16b69b1d55dc3ae9f3fcf12463cde688916118

SHA256
b145a4743439d1924be3b59c045d4755720e3c6df0e75626ff7665c77c2cfb73

SHA512
fd7d3b69dafdc1c8e4fe2327f10c1513ac14c065c526026977273aa365e335fd935351f890afe7ff14df11dfb28bcfea030e301780ae7912bc68f47e0111a5b0

Download Submit
\Program Files (x86)\IObit\Game Booster 3\rtl120.bpl
Filesize
1.0MB

MD5
dd82eb68d97944b192c7803eb585b03c

SHA1
b3ca5f5bf172dbb5e83ff9d9113e0f897152e642

SHA256
e39263e6305bd0eaead7ce9838be6d8510b66776880331f4c0f570370ccb7e01

SHA512
a070bc970a5c03ad191405a6ab9e119fde7fc0966c93bea36dfa15a8300882b662f0b342a2bbc327b57e7e570e001f0a8d661de5858784ca376ff36a99131faf

Download Submit
\Program Files (x86)\IObit\Game Booster 3\sqlite3.dll
Filesize
504KB

MD5
dc75cad4f45af46b7a98f0b9f89ee5de

SHA1
42266455e4a5b72f7805d63062c6c966eaa88ffc

SHA256
bc7ca2c14170641c470f004860c034be33f11c5bedbcb76f84585009a6da952d

SHA512
8346c19936e7923623595a3c740d9100a0dded3df3c44e2d719c6cd9110c77f7556c22d3b77bfe5bb374123483bc61ae3139d4673048fc3712e8faaa6e1875e6

Download Submit
\Program Files (x86)\IObit\Game Booster 3\taskMgr.dll
Filesize
319KB

MD5
4235a1996760156ac8bc88cd47942a56

SHA1
36739c4b7739473a1f46b7a2f7f273f968a0fb99

SHA256
fc00ebba7d93b0256f2dc983bd7df23e7cfa0edd22a8578bf6be5aa6a48558e2

SHA512
ebe0619b0f70ca073ff3eb495fe32305d3fe5f98f1dc996611e3a7917c84a41a9acae1aaa8c3d9d82586eec9aea72233d19c5210b8529f56adfac650665599b0

Download Submit
\Program Files (x86)\IObit\Game Booster 3\unins000.exe
Filesize
1.1MB

MD5
30f2396ad4a22e87f99f5c3c30eb1490

SHA1
b7b7880b3891ff30434b057b3bbd41100863f0bf

SHA256
09e16e8133b6fbc7a7ae2a24b66b29aba71fa0ed710b377d5a2f484168492f6b

SHA512
bcbbb6fb5be6eb8029526617fcaa6713ff3c1865161b052e50ebcc253083b05c2e659981872c1ef04f013ce054fbeae6be657ff847709669f1672d047ab7a7d0

Download Submit
\Program Files (x86)\IObit\Game Booster 3\vcl120.bpl
Filesize
1.9MB

MD5
773ebd87010a6f644869a59d98792c9c

SHA1
7d5befef572dd95776af9c2f9999124b98f1965b

SHA256
c9581c6a50061ed588678f29591b2515fea81a70a7e523751106bbadbfe11842

SHA512
e111505b06b8215ad7584f0b5d36a0a62660a2da5f74ec67848dc37dd209564e3261ae371648175a1184882b06b3e395a36fa5859c031ca3818fb745121fa80a

Download Submit
\Program Files (x86)\IObit\Game Booster 3\vclx120.bpl
Filesize
204KB

MD5
264bfcc11a0da6f0b449a40a14d15772

SHA1
c3c4557eae6e5337dd261a92f254043bfa1da82c

SHA256
7744ee00d954d60e04b05765405ae128e566c1cf0b2717401dd87499e4b8acb2

SHA512
63ec6652e2794f9d2fec09c0179cb6aa32f6097c14830edb33932a12061b50d1a21fe8c10d81aa30754d6f1352f2807bea4004ecc5a5c9b0c1ba69db6da30718

Download Submit
\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\SvcHelper.exe
Filesize
134KB

MD5
d23dc90ab2e073524365d6f88d732c1b

SHA1
f07ff93e1bf1648a40467d7c38ded0342a42148f

SHA256
6fa1b4f54b9ee66072fe89b0fe0c3c5851c92b6a458d9a57bd4c684930591bbc

SHA512
6dd0ae6d681665ba8ae6d15adc5912b6860ad6959bedec30372a0120e41d6f14a433d5c4ce8b440195ff3197390c7e1cddc6106de0160e7217f30b3a0aeef067

Download Submit
\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\SvcHelper.exe
Filesize
134KB

MD5
d23dc90ab2e073524365d6f88d732c1b

SHA1
f07ff93e1bf1648a40467d7c38ded0342a42148f

SHA256
6fa1b4f54b9ee66072fe89b0fe0c3c5851c92b6a458d9a57bd4c684930591bbc

SHA512
6dd0ae6d681665ba8ae6d15adc5912b6860ad6959bedec30372a0120e41d6f14a433d5c4ce8b440195ff3197390c7e1cddc6106de0160e7217f30b3a0aeef067

Download Submit
\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\_isetup\_shfoldr.dll
Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\_isetup\_shfoldr.dll
Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
\Users\Admin\AppData\Local\Temp\is-EFULD.tmp\gbinit.exe
Filesize
581KB

MD5
5a7fba53746852b3543839e77b913893

SHA1
5e8621808251e7dfa5b9899d490d9aa5a20d2b06

SHA256
7829d11c205f0b8d22d942b66364cdf2e6a1763a8f78adffb45cf660f0f26cbb

SHA512
b124c395ce06caf2edb8780613ed27516b89bb1abd5dae7917c11d4eb12abccfa353d005225b0d3360b14c71f8b7da808b6b515b108012139b52879f5dd59473

Download Submit
\Users\Admin\AppData\Local\Temp\is-IC5LG.tmp\Game Booster v3.4.tmp
Filesize
1.1MB

MD5
30f2396ad4a22e87f99f5c3c30eb1490

SHA1
b7b7880b3891ff30434b057b3bbd41100863f0bf

SHA256
09e16e8133b6fbc7a7ae2a24b66b29aba71fa0ed710b377d5a2f484168492f6b

SHA512
bcbbb6fb5be6eb8029526617fcaa6713ff3c1865161b052e50ebcc253083b05c2e659981872c1ef04f013ce054fbeae6be657ff847709669f1672d047ab7a7d0

Download Submit
memory/544-1091-0x0000000004180000-0x000000000418A000-memory.dmp

Filesize
40KB

Download
memory/544-1004-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1259-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1260-0x0000000003E00000-0x0000000003E01000-memory.dmp

Filesize
4KB

Download
memory/544-1261-0x0000000004180000-0x000000000418A000-memory.dmp

Filesize
40KB

Download
memory/544-1249-0x0000000001AE0000-0x0000000001AEA000-memory.dmp

Filesize
40KB

Download
memory/544-1248-0x0000000001AE0000-0x0000000001AEA000-memory.dmp

Filesize
40KB

Download
memory/544-1258-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1262-0x0000000004180000-0x000000000418A000-memory.dmp

Filesize
40KB

Download
memory/544-1257-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-987-0x0000000001AE0000-0x0000000001AEA000-memory.dmp

Filesize
40KB

Download
memory/544-1256-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1255-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1254-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-986-0x0000000001AE0000-0x0000000001AEA000-memory.dmp

Filesize
40KB

Download
memory/544-1100-0x0000000004250000-0x000000000425A000-memory.dmp

Filesize
40KB

Download
memory/544-1253-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1264-0x0000000004250000-0x000000000425A000-memory.dmp

Filesize
40KB

Download
memory/544-1265-0x0000000004250000-0x000000000425A000-memory.dmp

Filesize
40KB

Download
memory/544-1263-0x0000000004180000-0x000000000418A000-memory.dmp

Filesize
40KB

Download
memory/544-1096-0x0000000004180000-0x000000000418A000-memory.dmp

Filesize
40KB

Download
memory/544-1005-0x0000000003E00000-0x0000000003E01000-memory.dmp

Filesize
4KB

Download
memory/544-998-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1003-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1002-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1001-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-1000-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/544-999-0x0000000003DF0000-0x0000000003DFA000-memory.dmp

Filesize
40KB

Download
memory/564-622-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download
memory/564-619-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/564-625-0x0000000050120000-0x000000005030D000-memory.dmp

Filesize
1.9MB

Download
memory/680-80-0x0000000000400000-0x000000000042A000-memory.dmp

Filesize
168KB

Download
memory/688-839-0x0000000050310000-0x0000000050349000-memory.dmp

Filesize
228KB

Download
memory/688-837-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download
memory/688-620-0x00000000006A0000-0x00000000006A1000-memory.dmp

Filesize
4KB

Download
memory/688-917-0x0000000000400000-0x000000000066A000-memory.dmp

Filesize
2.4MB

Download
memory/688-836-0x0000000000400000-0x000000000066A000-memory.dmp

Filesize
2.4MB

Download
memory/688-898-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download
memory/688-897-0x0000000000400000-0x000000000066A000-memory.dmp

Filesize
2.4MB

Download
memory/688-895-0x00000000006A0000-0x00000000006A1000-memory.dmp

Filesize
4KB

Download
memory/688-838-0x0000000050120000-0x000000005030D000-memory.dmp

Filesize
1.9MB

Download
memory/984-893-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download
memory/984-892-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/984-894-0x0000000050120000-0x000000005030D000-memory.dmp

Filesize
1.9MB

Download
memory/984-913-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/984-914-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download
memory/984-624-0x0000000000640000-0x0000000000641000-memory.dmp

Filesize
4KB

Download
memory/1208-70-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1208-633-0x0000000000400000-0x000000000052A000-memory.dmp

Filesize
1.2MB

Download
memory/1208-527-0x0000000000400000-0x000000000052A000-memory.dmp

Filesize
1.2MB

Download
memory/1208-502-0x0000000000400000-0x000000000052A000-memory.dmp

Filesize
1.2MB

Download
memory/1432-835-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/1432-613-0x00000000003B0000-0x00000000003B1000-memory.dmp

Filesize
4KB

Download
memory/1432-916-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/1476-610-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/1476-612-0x0000000050120000-0x000000005030D000-memory.dmp

Filesize
1.9MB

Download
memory/1476-611-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download
memory/2032-634-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/2032-501-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/2032-54-0x0000000000400000-0x0000000000431000-memory.dmp

Filesize
196KB

Download
memory/2036-623-0x0000000050120000-0x000000005030D000-memory.dmp

Filesize
1.9MB

Download
memory/2036-614-0x0000000000400000-0x000000000049A000-memory.dmp

Filesize
616KB

Download
memory/2036-621-0x0000000050000000-0x0000000050116000-memory.dmp

Filesize
1.1MB

Download