84f885bf443d5070412cb86c1c49b22963e65187000ba665c12b3c623ab59951

Analysis

max time kernel
153s
max time network
163s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2023, 16:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3uTools_v2.65.003_Setup.exe
Size

115.8MB
MD5

a23cf91ca5adf1828ea3e8a94250adba
SHA1

32903059c9c5cb6aadcad3c04c7d4b98f7e5815f
SHA256

84f885bf443d5070412cb86c1c49b22963e65187000ba665c12b3c623ab59951
SHA512

81484d2ae7e6b35ddebedcdcb526d43ebbde3606635c5c1e4f299692f1c9041e7e04d56cf279b43402152533c83791fd7decad7249d298ae56969db638c8ef4f
SSDEEP

3145728:4kOygLs+m7VOGETTYF6ObUNihj/TU49UQLhWGSfVRDX8QGJ/oEE8sVa:UygTwOGT7EchL0RDXvswEE2

Score

8^/10

discovery persistence

Malware Config

Signatures

Blocklisted process makes network request 3 IoCs

flow	pid	Process
140	1364	msiexec.exe
142	1364	msiexec.exe
149	1364	msiexec.exe

Downloads MZ/PE file

Modifies file permissions 1 TTPs 1 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
824	takeown.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000\Control Panel\International\Geo\Nation	3uTools_v2.65.003_Setup.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000\Control Panel\International\Geo\Nation	3uTools.exe

Drops file in System32 directory 19 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6E2.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\AppleKIS.inf	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\applekis.inf_amd64_7f6076db0b9b7904\AppleKIS.sys	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6E0.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\AppleKISInterface.dll	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6E2.tmp	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6F3.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\applekis.inf_amd64_7f6076db0b9b7904\AppleKIS.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6E1.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\AppleKIS.cat	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\AppleKIS.sys	DrvInst.exe
File created	C:\Windows\System32\DriverStore\drvstore.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6E0.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6F3.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\applekis.inf_amd64_7f6076db0b9b7904\AppleKIS.inf	DrvInst.exe
File created	C:\Windows\System32\DriverStore\Temp\{1a3f30ed-9f1e-af4b-9553-aba9c517b923}\SETC6E1.tmp	DrvInst.exe
File opened for modification	C:\Windows\System32\DriverStore\FileRepository\applekis.inf_amd64_7f6076db0b9b7904\AppleKISInterface.dll	DrvInst.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\3uTools\setting.cfg.kt4704	3uTools.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\OpenStreetMap\images\marker-icon-2x.png	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\iCloudDll\concrt140.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\itunesDll\lbm.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\itunesFlashDll\objc.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\OpenStreetMap\LeafletOSM.html	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\themes\Default.skin	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\files\patchtools\7z-32\7z.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-sysinfo-l1-1-0.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\libXunlei\xldl.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\zint.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files\Common Files\Apple\Mobile Device Support\CFNetwork.dll	msiexec.exe
File created	C:\Program Files (x86)\3uTools\itunesFlashDll\api-ms-win-core-file-l2-1-0.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-rtlsupport-l1-1-0.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-synch-l1-2-0.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\locales\images\nl\close_cloud_img.png	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\itunesFlashDll\api-ms-win-core-processthreads-l1-1-1.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files\Common Files\Apple\Mobile Device Support\CoreFoundation.resources\CFCharacterSetBitmaps.bitmap	msiexec.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\CoreFoundation.resources\es_419.lproj\Error.strings	msiexec.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\CFNetwork.resources\da.lproj\Localizable.strings	msiexec.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\shsh\iPhone3,2_SHSH_6.1.3(10B329).3u	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\iCloudDll\Foundation.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.resources\ClientDescription50Tiger.plist	msiexec.exe
File opened for modification	C:\Program Files (x86)\3uTools\setting.cfg.sv4704	3uTools.exe
File created	C:\Program Files\Common Files\Apple\Mobile Device Support\CFNetwork.resources\ms.lproj\Localizable.strings	msiexec.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\CFNetwork.resources\zh_TW.lproj\Localizable.strings	msiexec.exe
File created	C:\Program Files (x86)\3uTools\files\SMS\js\messager.js	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\itunesFlashDll\api-ms-win-core-rtlsupport-l1-1-0.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\itunesFlashDll\ASL.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\idm_jb90.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\cache\checkra1n.cfg	3uTools.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\Foundation.resources\en.lproj\URL.strings	msiexec.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\shsh\iPhone3,1_SHSH_6.1.3(10B329).3u	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\locales\tools_nl.qm	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\CustomUI.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServices\Schemas\Outlook.syncschema\Contents\Resources\Schema.plist	msiexec.exe
File created	C:\Program Files (x86)\3uTools\files\SMS\images\weChatLogo.png	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\idm_sync.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\Mingler.exe	msiexec.exe
File created	C:\Program Files (x86)\3uTools\itunesFlashDll\api-ms-win-crt-time-l1-1-0.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\setting.cfg.fK4704	3uTools.exe
File opened for modification	C:\Program Files (x86)\3uTools\cache\jailbreak.cfg	3uTools.exe
File opened for modification	C:\Program Files (x86)\3uTools\locales\fonts	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\3uTools\files\Cydia\Cydia.tar	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files\Common Files\Apple\Mobile Device Support\CFNetwork.resources\zh_TW.lproj\Localizable.strings	msiexec.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\CFNetwork.resources\ro.lproj\Localizable.strings	msiexec.exe
File created	C:\Program Files (x86)\3uTools\files\bonjour\Bonjour.msi	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\locales\images\vn\Connecting_text.png	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\icudt46.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\SMS\images\qqLogo.png	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-conio-l1-1-0.dll	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\taglib.dll	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\CoreFoundation.resources\da.lproj\Error.strings	msiexec.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\patchtools\7z-64	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\locales\images	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\locales\images\vn\PersonalHotspot_img.png	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files\Common Files\Apple\Mobile Device Support\CoreFoundation.resources\ms.lproj\Error.strings	msiexec.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\Cydia\Cydia.tar	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\files\OpenStreetMap\leaflet-geoip.js	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileSync_main.dll	msiexec.exe
File created	C:\Program Files (x86)\3uTools\locales\images\vn\icon_ipa_type.png	3uTools_v2.65.003_Setup.exe
File opened for modification	C:\Program Files (x86)\3uTools\locales\tools_fr.qm	3uTools_v2.65.003_Setup.exe
File created	C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\CFNetwork.resources\th.lproj\Localizable.strings	msiexec.exe
File opened for modification	C:\Program Files (x86)\3uTools\iCloudDll\CoreText.dll	3uTools_v2.65.003_Setup.exe

Drops file in Windows directory 46 IoCs

description	ioc	Process
File created	C:\Windows\Installer\e59d315.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDA78.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vcruntime140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	pnputil.exe
File opened for modification	C:\Windows\inf\oem3.inf	DrvInst.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\concrt140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vccorlib140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI22D.tmp	msiexec.exe
File created	C:\Windows\Installer\wix{CA8EDE78-7A08-4F27-9B31-D6161C095986}.SchedServiceConfig.rmi	MsiExec.exe
File created	C:\Windows\Installer\e59d319.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIE914.tmp	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\concrt140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\msvcp140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\msvcp140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDBD1.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\concrt140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File created	C:\Windows\Installer\SourceHash{CA8EDE78-7A08-4F27-9B31-D6161C095986}	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIECCF.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vccorlib140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vccorlib140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vcruntime140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vcruntime140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIAD9.tmp	msiexec.exe
File created	C:\Windows\inf\oem3.inf	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSIDF1E.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIE0A6.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\msvcp140.dll.B796D14F_AD8C_3A96_B2B8_3D8FF8499DA8	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	DrvInst.exe
File opened for modification	C:\Windows\Installer\MSIE0C6.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIEC03.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\msvcp140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vcruntime140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File created	C:\Windows\Installer\{CA8EDE78-7A08-4F27-9B31-D6161C095986}\Installer.ico	msiexec.exe
File opened for modification	C:\Windows\Installer\{CA8EDE78-7A08-4F27-9B31-D6161C095986}\Installer.ico	msiexec.exe
File created	C:\Windows\Installer\e59d31a.msi	msiexec.exe
File opened for modification	C:\Windows\INF\setupapi.dev.log	svchost.exe
File opened for modification	C:\Windows\Installer\e59d315.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSIDEEE.tmp	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\concrt140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File created	C:\Windows\Installer\$PatchCache$\Managed\87EDE8AC80A772F4B9136D61C1909568\16.5.0\vccorlib140.dll.BC0B92F1_D156_35A8_A565_6689E8DDDA1F	msiexec.exe
File opened for modification	C:\Windows\Installer\e59d31a.msi	msiexec.exe

Executes dropped EXE 6 IoCs

pid	Process
4704	3uTools.exe
2708	3uViewer.exe
2868	3uViewer.exe
3284	InfInstallerx64.exe
2624	7z.exe
3732	AppleMobileDeviceService.exe

Launches sc.exe 2 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
492	sc.exe
1932	sc.exe

Loads dropped DLL 64 IoCs

pid	Process
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe

Registers COM server for autorun 1 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\InprocServer32	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\InprocServer32\ = "C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\OutlookChangeNotifierAddIn.dll"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\InprocServer32\ThreadingModel = "Apartment"	msiexec.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks SCSI registry key(s) 3 TTPs 42 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\ConfigFlags	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\HardwareID	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\ConfigFlags	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Phantom	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	svchost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Phantom	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Phantom	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\HardwareID	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\CompatibleIDs	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000002	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\CompatibleIDs	pnputil.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000001	svchost.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Phantom	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	DrvInst.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	DrvInst.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\CompatibleIDs	pnputil.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{83da6326-97a6-4088-9453-a1923f573b29}\0009	svchost.exe

Modifies data under HKEY_USERS 50 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Apple Inc.\ASL\filenames\asl.log = "asl.163438_04Jul23.log"	AppleMobileDeviceService.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1e\52C64B7E	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	AppleMobileDeviceService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Apple Inc.\ASL\filenames	AppleMobileDeviceService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Environment	AppleMobileDeviceService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Apple Inc.\ASL	AppleMobileDeviceService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1f	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Apple Inc.	AppleMobileDeviceService.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	DrvInst.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\1e	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	DrvInst.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	DrvInst.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\.svg\ = "3uViewer.svg"	3uViewer.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.svg\shell	3uViewer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.svg\shell\open\ = "打开(&O)"	3uViewer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\TypeLib	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\Assignment = "1"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\.heic\ = "3uViewer.heic"	3uViewer.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.heic\shell\open\command	3uViewer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OutlookChangeNotifier.Connect	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OutlookChangeNotifier.Connect.1\CLSID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\PackageCode = "10ED304FDA43BEB4A8385676C68ADB71"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\Language = "1033"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\Version = "268763136"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\VersionIndependentProgID	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Interface	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\PlistEditor.plist\DefaultIcon\ = "C:\\Program Files (x86)\\3uTools\\3uTools.exe,-102"	3uTools.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\Programmable\	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\E6560FC58B3FBD11AB1808E4658D5939	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\PlistEditor.plist\DefaultIcon	3uTools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0\0	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\InstanceType = "0"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\3uTools\\iTunes(12.12.9.4)\\"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\iTunes.ipa\shell	3uTools.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OutlookChangeNotifier.Connect\CLSID\ = "{12E6A993-AE52-4F99-8B89-41F985E6C952}"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.svg\DefaultIcon	3uViewer.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.svg\shell\ = "open"	3uViewer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\PlistEditor.plist\shell\3uTools\command	3uTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.heic\DefaultIcon	3uViewer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0\HELPDIR	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PC3uTools\shell\open	3uTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OutlookChangeNotifier.Connect.1\CLSID\ = "{12E6A993-AE52-4F99-8B89-41F985E6C952}"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0\ = "OutlookChangeNotifierAddin1 1.0 Type Library"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568	msiexec.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\PlistEditor.plist\shell\3uTools\command\ = "\"C:\\Program Files (x86)\\3uTools\\3uTools.exe\" /open \"%1\""	3uTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.heic\shell\open	3uViewer.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\ProductName = "Apple Mobile Device Support"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OutlookChangeNotifier.Connect\ = "Connect Class"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0\HELPDIR\	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\iTunes.ipa	3uTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\PlistEditor.plist\shell\3uTools\ = "Open with 3uTools "	3uTools.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\SourceList\PackageName = "AppleMobileDeviceSupport64.msi"	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\.heic	3uViewer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.svg	3uViewer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\DeploymentFlags = "3"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\Clients = 3a0000000000	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\iTunes.ipa\shell\3uTools	3uTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\.svg	3uViewer.exe
Key created	\REGISTRY\MACHINE\Software\Classes\OutlookChangeNotifier.Connect.1	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OutlookChangeNotifier.Connect.1\ = "Connect Class"	msiexec.exe
Key created	\REGISTRY\MACHINE\Software\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\ProgID	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12E6A993-AE52-4F99-8B89-41F985E6C952}\InprocServer32\ = "C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\OutlookChangeNotifierAddIn.dll"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{B80C6976-50C0-4110-BC85-44EB975CDCA0}\1.0\0\win64\ = "C:\\Program Files\\Common Files\\Apple\\Mobile Device Support\\OutlookChangeNotifierAddIn.dll"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\87EDE8AC80A772F4B9136D61C1909568\SourceList\Net\2 = "C:\\ProgramData\\Apple\\Installer Cache\\Apple Mobile Device Support 16.5.0.12\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\PC3uTools	3uTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3195054982-4292022746-1467505928-1000_Classes\3uViewer.heic	3uViewer.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4704	3uTools.exe

Suspicious behavior: EnumeratesProcesses 60 IoCs

pid	Process
2060	3uTools_v2.65.003_Setup.exe
2060	3uTools_v2.65.003_Setup.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3824	MsiExec.exe
3732	AppleMobileDeviceService.exe
3732	AppleMobileDeviceService.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4704	3uTools.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	4704	3uTools.exe
Token: SeBackupPrivilege	4704	3uTools.exe
Token: SeTakeOwnershipPrivilege	824	Conhost.exe
Token: SeAuditPrivilege	3636	svchost.exe
Token: SeSecurityPrivilege	3636	svchost.exe
Token: SeRestorePrivilege	2624	7z.exe
Token: 35	2624	7z.exe
Token: SeSecurityPrivilege	2624	7z.exe
Token: SeSecurityPrivilege	2624	7z.exe
Token: SeLoadDriverPrivilege	3284	InfInstallerx64.exe
Token: SeLoadDriverPrivilege	4704	3uTools.exe
Token: SeShutdownPrivilege	4704	3uTools.exe
Token: SeIncreaseQuotaPrivilege	4704	3uTools.exe
Token: SeSecurityPrivilege	1364	msiexec.exe
Token: SeCreateTokenPrivilege	4704	3uTools.exe
Token: SeAssignPrimaryTokenPrivilege	4704	3uTools.exe
Token: SeLockMemoryPrivilege	4704	3uTools.exe
Token: SeIncreaseQuotaPrivilege	4704	3uTools.exe
Token: SeMachineAccountPrivilege	4704	3uTools.exe
Token: SeTcbPrivilege	4704	3uTools.exe
Token: SeSecurityPrivilege	4704	3uTools.exe
Token: SeTakeOwnershipPrivilege	4704	3uTools.exe
Token: SeLoadDriverPrivilege	4704	3uTools.exe
Token: SeSystemProfilePrivilege	4704	3uTools.exe
Token: SeSystemtimePrivilege	4704	3uTools.exe
Token: SeProfSingleProcessPrivilege	4704	3uTools.exe
Token: SeIncBasePriorityPrivilege	4704	3uTools.exe
Token: SeCreatePagefilePrivilege	4704	3uTools.exe
Token: SeCreatePermanentPrivilege	4704	3uTools.exe
Token: SeBackupPrivilege	4704	3uTools.exe
Token: SeRestorePrivilege	4704	3uTools.exe
Token: SeShutdownPrivilege	4704	3uTools.exe
Token: SeDebugPrivilege	4704	3uTools.exe
Token: SeAuditPrivilege	4704	3uTools.exe
Token: SeSystemEnvironmentPrivilege	4704	3uTools.exe
Token: SeChangeNotifyPrivilege	4704	3uTools.exe
Token: SeRemoteShutdownPrivilege	4704	3uTools.exe
Token: SeUndockPrivilege	4704	3uTools.exe
Token: SeSyncAgentPrivilege	4704	3uTools.exe
Token: SeEnableDelegationPrivilege	4704	3uTools.exe
Token: SeManageVolumePrivilege	4704	3uTools.exe
Token: SeImpersonatePrivilege	4704	3uTools.exe
Token: SeCreateGlobalPrivilege	4704	3uTools.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe
Token: SeTakeOwnershipPrivilege	1364	msiexec.exe
Token: SeRestorePrivilege	1364	msiexec.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4704	3uTools.exe
4704	3uTools.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
4704	3uTools.exe
4704	3uTools.exe

Suspicious use of SetWindowsHookEx 8 IoCs

pid	Process
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe
4704	3uTools.exe

Suspicious use of WriteProcessMemory 35 IoCs

description	pid	Process	procid_target
PID 2060 wrote to memory of 4704	2060	3uTools_v2.65.003_Setup.exe	95
PID 2060 wrote to memory of 4704	2060	3uTools_v2.65.003_Setup.exe	95
PID 2060 wrote to memory of 4704	2060	3uTools_v2.65.003_Setup.exe	95
PID 4704 wrote to memory of 2708	4704	3uTools.exe	98
PID 4704 wrote to memory of 2708	4704	3uTools.exe	98
PID 4704 wrote to memory of 2708	4704	3uTools.exe	98
PID 4704 wrote to memory of 2868	4704	3uTools.exe	99
PID 4704 wrote to memory of 2868	4704	3uTools.exe	99
PID 4704 wrote to memory of 2868	4704	3uTools.exe	99
PID 4704 wrote to memory of 3284	4704	3uTools.exe	100
PID 4704 wrote to memory of 3284	4704	3uTools.exe	100
PID 3284 wrote to memory of 824	3284	InfInstallerx64.exe	114
PID 3284 wrote to memory of 824	3284	InfInstallerx64.exe	114
PID 4704 wrote to memory of 492	4704	3uTools.exe	104
PID 4704 wrote to memory of 492	4704	3uTools.exe	104
PID 4704 wrote to memory of 492	4704	3uTools.exe	104
PID 4704 wrote to memory of 1932	4704	3uTools.exe	107
PID 4704 wrote to memory of 1932	4704	3uTools.exe	107
PID 4704 wrote to memory of 1932	4704	3uTools.exe	107
PID 4704 wrote to memory of 2624	4704	3uTools.exe	110
PID 4704 wrote to memory of 2624	4704	3uTools.exe	110
PID 3284 wrote to memory of 4472	3284	InfInstallerx64.exe	113
PID 3284 wrote to memory of 4472	3284	InfInstallerx64.exe	113
PID 3284 wrote to memory of 660	3284	InfInstallerx64.exe	115
PID 3284 wrote to memory of 660	3284	InfInstallerx64.exe	115
PID 3636 wrote to memory of 532	3636	svchost.exe	117
PID 3636 wrote to memory of 532	3636	svchost.exe	117
PID 1364 wrote to memory of 3824	1364	msiexec.exe	120
PID 1364 wrote to memory of 3824	1364	msiexec.exe	120
PID 1364 wrote to memory of 3824	1364	msiexec.exe	120
PID 1364 wrote to memory of 2060	1364	msiexec.exe	122
PID 1364 wrote to memory of 2060	1364	msiexec.exe	122
PID 1364 wrote to memory of 4824	1364	msiexec.exe	123
PID 1364 wrote to memory of 4824	1364	msiexec.exe	123
PID 1364 wrote to memory of 4824	1364	msiexec.exe	123

C:\Users\Admin\AppData\Local\Temp\3uTools_v2.65.003_Setup.exe
"C:\Users\Admin\AppData\Local\Temp\3uTools_v2.65.003_Setup.exe"
1⤵
- Checks computer location settings
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2060
- C:\Program Files (x86)\3uTools\3uTools.exe
  "C:\Program Files (x86)\3uTools\3uTools.exe"
  2⤵
  - Checks computer location settings
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  - Suspicious behavior: AddClipboardFormatListener
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4704
- - C:\Program Files (x86)\3uTools\3uViewer.exe
    3uViewer.exe /reg 1
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    PID:2708
- - C:\Program Files (x86)\3uTools\3uViewer.exe
    3uViewer.exe /reg 2
    3⤵
    - Executes dropped EXE
    - Modifies registry class
    PID:2868
- - C:\Program Files (x86)\3uTools\files\inf\InfInstallerx64.exe
    "C:\Program Files (x86)\3uTools\files\inf\InfInstallerx64.exe" -i "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\AppleKIS.inf"
    3⤵
    - Executes dropped EXE
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:3284
  - - C:\Windows\SYSTEM32\takeown.exe
      takeown /F C:\Windows\System32\DriverStore\FileRepository\ /A
      4⤵
      Modifies file permissions
      PID:824
  - - C:\Windows\SYSTEM32\cacls.exe
      cacls C:\Windows\System32\DriverStore\FileRepository*.* /E /G Everyone:F
      4⤵
      PID:4472
    - - C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        5⤵
        Suspicious use of AdjustPrivilegeToken
        
        PID:824
  - - C:\Windows\SYSTEM32\pnputil.exe
      pnputil -i -a "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\AppleKIS.inf"
      4⤵
      Drops file in Windows directory
      Checks SCSI registry key(s)
      PID:660
- - C:\Windows\SysWOW64\sc.exe
    sc start DeviceInstall
    3⤵
    - Launches sc.exe
    PID:492
- - C:\Windows\SysWOW64\sc.exe
    sc start DsmSvc
    3⤵
    - Launches sc.exe
    PID:1932
- - C:\Program Files (x86)\3uTools\files\patchtools\7z-64\7z.exe
    "C:\Program Files (x86)\3uTools\files\patchtools\7z-64\7z.exe" x "F:\3uTools\Other\iTunes(12.12.9.4).exe" -aoa -o"C:\Users\Admin\AppData\Local\Temp\3uTools\iTunes(12.12.9.4)"
    3⤵
    - Executes dropped EXE
    - Suspicious use of AdjustPrivilegeToken
    PID:2624

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3636
- C:\Windows\system32\DrvInst.exe
  DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{ba2dd2d1-b096-324c-9ca4-b0a420decbc9}\AppleKIS.inf" "9" "4639b046f" "0000000000000148" "WinSta0\Default" "0000000000000150" "208" "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64"
  2⤵
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Checks SCSI registry key(s)
  - Modifies data under HKEY_USERS
  PID:532

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Blocklisted process makes network request
- Enumerates connected drives
- Drops file in Program Files directory
- Drops file in Windows directory
- Registers COM server for autorun
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1364
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 6B224FA4523D5AAF577AC9AB796C8DC8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3824
- C:\Windows\System32\MsiExec.exe
  C:\Windows\System32\MsiExec.exe -Embedding 7E421A2EEF07CDA5E0B084699CD9790D
  2⤵
  PID:2060
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 76BFC416652234BE784C669534C988A4 E Global\MSI0000
  2⤵
  - Drops file in Windows directory
  PID:4824

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
"C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
PID:3732

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e59d318.rbs

Filesize
332KB

MD5
519290ed3e2aae6ee0ffbaf580bd6bba

SHA1
ec3e55b4c6bcdb1c56480586fb17d99de0cbf40b

SHA256
f9f353e9e8de07e9e6709924bf9176626a4aefc59e2b7ac6440668e83c547e13

SHA512
f37daa34bf91e0e375577f69c5a6067324f89e4411c0b3354d1087f8811cd651ab1ced82a6e5ca46f46e77ba0c353260864ed0c88950047a613f3d625b803564

Download Submit
C:\Program Files (x86)\3uTools\3uTools.exe

Filesize
12.4MB

MD5
4b742e9c70be3d88c7c7b2c81cb1d2fc

SHA1
5e0cd8a97e11720f44ed20e2b5266100c03b17d5

SHA256
d989cffa5ac7c2ea7ad4c2964e8cb90fcf45007db135ad6ae13e633bb59b9ea2

SHA512
409de2e99c5f580980eed945b0187681a9badf1d2863766ea56eaf2ec9a537a2c858dd13c3b1034d16ef14be7606620e9196892da923ba31a49c0a92cb3428fa

Download Submit
C:\Program Files (x86)\3uTools\3uTools.exe

Filesize
12.4MB

MD5
4b742e9c70be3d88c7c7b2c81cb1d2fc

SHA1
5e0cd8a97e11720f44ed20e2b5266100c03b17d5

SHA256
d989cffa5ac7c2ea7ad4c2964e8cb90fcf45007db135ad6ae13e633bb59b9ea2

SHA512
409de2e99c5f580980eed945b0187681a9badf1d2863766ea56eaf2ec9a537a2c858dd13c3b1034d16ef14be7606620e9196892da923ba31a49c0a92cb3428fa

Download Submit
C:\Program Files (x86)\3uTools\3uTools.exe

Filesize
12.4MB

MD5
4b742e9c70be3d88c7c7b2c81cb1d2fc

SHA1
5e0cd8a97e11720f44ed20e2b5266100c03b17d5

SHA256
d989cffa5ac7c2ea7ad4c2964e8cb90fcf45007db135ad6ae13e633bb59b9ea2

SHA512
409de2e99c5f580980eed945b0187681a9badf1d2863766ea56eaf2ec9a537a2c858dd13c3b1034d16ef14be7606620e9196892da923ba31a49c0a92cb3428fa

Download Submit
C:\Program Files (x86)\3uTools\CustomUI.dll

Filesize
128KB

MD5
7a17c9d4f556997963d317ea84d57667

SHA1
56db149ffb42a1ab9fa914990c493ac7199d2350

SHA256
e189a7a6160061bb92248e3148422d119d08b0ce0ba4677cefbd367d500849a7

SHA512
c6ed1d497616874be921e93cd29c8848c72b4d772ec1bc5877c760be566ce68dca1f26ce3ac8fe220537e88065bafcfab05211013b329e988d570938358ab921

Download Submit
C:\Program Files (x86)\3uTools\CustomUI.dll

Filesize
128KB

MD5
7a17c9d4f556997963d317ea84d57667

SHA1
56db149ffb42a1ab9fa914990c493ac7199d2350

SHA256
e189a7a6160061bb92248e3148422d119d08b0ce0ba4677cefbd367d500849a7

SHA512
c6ed1d497616874be921e93cd29c8848c72b4d772ec1bc5877c760be566ce68dca1f26ce3ac8fe220537e88065bafcfab05211013b329e988d570938358ab921

Download Submit
C:\Program Files (x86)\3uTools\MSVCP100.dll

Filesize
411KB

MD5
e3c817f7fe44cc870ecdbcbc3ea36132

SHA1
2ada702a0c143a7ae39b7de16a4b5cc994d2548b

SHA256
d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf

SHA512
4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe

Download Submit
C:\Program Files (x86)\3uTools\MSVCR100.dll

Filesize
755KB

MD5
bf38660a9125935658cfa3e53fdc7d65

SHA1
0b51fb415ec89848f339f8989d323bea722bfd70

SHA256
60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa

SHA512
25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1

Download Submit
C:\Program Files (x86)\3uTools\Qt5Concurrent.dll

Filesize
26KB

MD5
507ae1b84e93f73347f075e8f61de04c

SHA1
08c25e8879cffd2c48972f083c83a53146d516ef

SHA256
fd003606e8811746a2ef5a8d05d183ea33d61a9fcaecc85cfc0ae11028d5e856

SHA512
8244bf1c115868cc3e6966043c318a0d0019d2b2e7dd70e2872fd03b1528dee18c342046c450458d2c57ccbddb030d4cc8c2a8a97532d6dcf83e7a0763e960e3

Download Submit
C:\Program Files (x86)\3uTools\Qt5Concurrent.dll

Filesize
26KB

MD5
507ae1b84e93f73347f075e8f61de04c

SHA1
08c25e8879cffd2c48972f083c83a53146d516ef

SHA256
fd003606e8811746a2ef5a8d05d183ea33d61a9fcaecc85cfc0ae11028d5e856

SHA512
8244bf1c115868cc3e6966043c318a0d0019d2b2e7dd70e2872fd03b1528dee18c342046c450458d2c57ccbddb030d4cc8c2a8a97532d6dcf83e7a0763e960e3

Download Submit
C:\Program Files (x86)\3uTools\Qt5Core.dll

Filesize
4.0MB

MD5
805ddeb14a9b7040430fa2af88c84ba8

SHA1
4e1299777d19e83a21d91b9c9cca27950692563a

SHA256
e089a359be5c39f0b3f70b6a1e068600272a6f7190b8071498b0fafe15406177

SHA512
31e9e60765189f69375bcb7670d5f67eb724b22c943292d2d82484d3234d05977f3eb51e6eabf1f5a27fe9447981102a364f2d029c4ca05c92a8455d96bca842

Download Submit
C:\Program Files (x86)\3uTools\Qt5Core.dll

Filesize
4.0MB

MD5
805ddeb14a9b7040430fa2af88c84ba8

SHA1
4e1299777d19e83a21d91b9c9cca27950692563a

SHA256
e089a359be5c39f0b3f70b6a1e068600272a6f7190b8071498b0fafe15406177

SHA512
31e9e60765189f69375bcb7670d5f67eb724b22c943292d2d82484d3234d05977f3eb51e6eabf1f5a27fe9447981102a364f2d029c4ca05c92a8455d96bca842

Download Submit
C:\Program Files (x86)\3uTools\Qt5Gui.dll

Filesize
4.6MB

MD5
93b4a3ef6b614a40d64b427a034bfda7

SHA1
279517c90b721212d5678b65705718700ca275b9

SHA256
f896736d1bb1a57a3024be6b9b7d68296e290719e839b9f5ea1b0c7285902494

SHA512
4c33795a262f1afd5d85d66c9b272e466f0d5c46fe86fe9a0447c6ffa90a960c40d3194a7a3a7a19b1dd7eca310d561bec2cabd9d8a3b3734754bbae7a5d263f

Download Submit
C:\Program Files (x86)\3uTools\Qt5Gui.dll

Filesize
4.6MB

MD5
93b4a3ef6b614a40d64b427a034bfda7

SHA1
279517c90b721212d5678b65705718700ca275b9

SHA256
f896736d1bb1a57a3024be6b9b7d68296e290719e839b9f5ea1b0c7285902494

SHA512
4c33795a262f1afd5d85d66c9b272e466f0d5c46fe86fe9a0447c6ffa90a960c40d3194a7a3a7a19b1dd7eca310d561bec2cabd9d8a3b3734754bbae7a5d263f

Download Submit
C:\Program Files (x86)\3uTools\Qt5Multimedia.dll

Filesize
554KB

MD5
26036c71d704d47babd90da0189f6dbe

SHA1
37194f512cca19f168b1858b096b4a41e040e2a9

SHA256
fc8bf3f8ad512100d6267a21a03c81105a3868c3c037c70b2ad2299baef311c9

SHA512
d603c0b68c008b7d4431a1fa577790aa5ca3508ab9ea08d4cfcf8ff6a3ec443ca343460b8b721b2931bdcd10517fee32381126a31e1b9630528d7d5b995156d5

Download Submit
C:\Program Files (x86)\3uTools\Qt5Multimedia.dll

Filesize
554KB

MD5
26036c71d704d47babd90da0189f6dbe

SHA1
37194f512cca19f168b1858b096b4a41e040e2a9

SHA256
fc8bf3f8ad512100d6267a21a03c81105a3868c3c037c70b2ad2299baef311c9

SHA512
d603c0b68c008b7d4431a1fa577790aa5ca3508ab9ea08d4cfcf8ff6a3ec443ca343460b8b721b2931bdcd10517fee32381126a31e1b9630528d7d5b995156d5

Download Submit
C:\Program Files (x86)\3uTools\Qt5Network.dll

Filesize
1.9MB

MD5
a6aed326a6a05c143e3d4f4d53e34794

SHA1
abcf259766be69518791cc83c76783df573d313f

SHA256
0b638c0eba2c8cea57fd929a21bc8dcfda41cb8d7c49fa5d53dd4fe58de5a953

SHA512
576436fbeb3c7a95932374e76c53a3748869513ef930fafae4a4af5815a81e29e3431632d465e261077027ef79751be472dcf4876dc5085d917f4d7a49cf4228

Download Submit
C:\Program Files (x86)\3uTools\Qt5Network.dll

Filesize
1.9MB

MD5
a6aed326a6a05c143e3d4f4d53e34794

SHA1
abcf259766be69518791cc83c76783df573d313f

SHA256
0b638c0eba2c8cea57fd929a21bc8dcfda41cb8d7c49fa5d53dd4fe58de5a953

SHA512
576436fbeb3c7a95932374e76c53a3748869513ef930fafae4a4af5815a81e29e3431632d465e261077027ef79751be472dcf4876dc5085d917f4d7a49cf4228

Download Submit
C:\Program Files (x86)\3uTools\Qt5PrintSupport.dll

Filesize
266KB

MD5
7d3fa9ec3885b38ef309118917f6485b

SHA1
d1973473a03cc002c04f56f10c361b45f87dd04c

SHA256
6e8c0b0dd1cdd14cf9777150adcd6c4cc760e2ce036ffea69781f84ac10a648b

SHA512
8d078559f46c2f34c8b2f46fcce7fb564a5fd98793bbe69aea26ffdd6a3f8f14b852482cbe63d59e62038bf9d426742410b547858442404eb2dc29fe834eacec

Download Submit
C:\Program Files (x86)\3uTools\Qt5PrintSupport.dll

Filesize
266KB

MD5
7d3fa9ec3885b38ef309118917f6485b

SHA1
d1973473a03cc002c04f56f10c361b45f87dd04c

SHA256
6e8c0b0dd1cdd14cf9777150adcd6c4cc760e2ce036ffea69781f84ac10a648b

SHA512
8d078559f46c2f34c8b2f46fcce7fb564a5fd98793bbe69aea26ffdd6a3f8f14b852482cbe63d59e62038bf9d426742410b547858442404eb2dc29fe834eacec

Download Submit
C:\Program Files (x86)\3uTools\Qt5Svg.dll

Filesize
251KB

MD5
85b776b7e8af356273b9629a724b14a9

SHA1
da984c46c90b83677f8dff7a9f97e671f7323b69

SHA256
024b327d6d3a8fe8605fe68f5c0438ea62cb6a560674644560ba94cec103e24d

SHA512
3426ede469be1fad1c4fe09a1a68e455f972f1bda40b8a03836d276bb8a07c5b5603fbb901464baf1f873f06b8934dd576664c0e0c7ec4fcabdd655ae3995357

Download Submit
C:\Program Files (x86)\3uTools\Qt5Svg.dll

Filesize
251KB

MD5
85b776b7e8af356273b9629a724b14a9

SHA1
da984c46c90b83677f8dff7a9f97e671f7323b69

SHA256
024b327d6d3a8fe8605fe68f5c0438ea62cb6a560674644560ba94cec103e24d

SHA512
3426ede469be1fad1c4fe09a1a68e455f972f1bda40b8a03836d276bb8a07c5b5603fbb901464baf1f873f06b8934dd576664c0e0c7ec4fcabdd655ae3995357

Download Submit
C:\Program Files (x86)\3uTools\Qt5WebKit.dll

Filesize
16.0MB

MD5
169775fd16d65025dc41522b996f91b6

SHA1
dc78ff94ee1bde1dae978fafc76859e0e63b4b21

SHA256
101a539148d34325b7bc5d7250a38c4be91af8483ae4a6a65b4f8ed54dadc693

SHA512
3f1a186d88c5af075dc0619e735633be14a21215d0d3c186a7d5a0c5e8bdaa4f52bf31bd46da22af3f521a7176ff6f20b4be3fce7e240f042c4da84cd417012c

Download Submit
C:\Program Files (x86)\3uTools\Qt5WebKit.dll

Filesize
16.0MB

MD5
169775fd16d65025dc41522b996f91b6

SHA1
dc78ff94ee1bde1dae978fafc76859e0e63b4b21

SHA256
101a539148d34325b7bc5d7250a38c4be91af8483ae4a6a65b4f8ed54dadc693

SHA512
3f1a186d88c5af075dc0619e735633be14a21215d0d3c186a7d5a0c5e8bdaa4f52bf31bd46da22af3f521a7176ff6f20b4be3fce7e240f042c4da84cd417012c

Download Submit
C:\Program Files (x86)\3uTools\Qt5WebKitWidgets.dll

Filesize
196KB

MD5
342040a9c9c5e671f761694773ae5db0

SHA1
6f4790dfae4a9e7cafd163edd7cdcc849ae85f02

SHA256
83b2fa1ddc5857fad43fe0243af5fd2a7fc20bca9330f66ce26e626c30f10391

SHA512
2b21af9e53b473a60d6765dff49cc0788a9f14f6541ff71a1b09f39a1d0ab4f7e9d1f9f4a34aabba7442caaa67e945786dc88e077fcb4ab63698980e0948129a

Download Submit
C:\Program Files (x86)\3uTools\Qt5WebKitWidgets.dll

Filesize
196KB

MD5
342040a9c9c5e671f761694773ae5db0

SHA1
6f4790dfae4a9e7cafd163edd7cdcc849ae85f02

SHA256
83b2fa1ddc5857fad43fe0243af5fd2a7fc20bca9330f66ce26e626c30f10391

SHA512
2b21af9e53b473a60d6765dff49cc0788a9f14f6541ff71a1b09f39a1d0ab4f7e9d1f9f4a34aabba7442caaa67e945786dc88e077fcb4ab63698980e0948129a

Download Submit
C:\Program Files (x86)\3uTools\Qt5Widgets.dll

Filesize
4.2MB

MD5
3b95b6b13df74cbd9edc43ae11576e0f

SHA1
5bdb22eb90102b386cdd0e630f9cf0d91de3a8c5

SHA256
0eda2bbe9f757d96ac5284dd59263be1523a9aa3671a3282a04aaea37f3b4c93

SHA512
14838a0517d58eacc36fc8690ab6a17282e6355b3cb7166c4b88409c5fd0cb3408b63450b9b2c25933b49aa88e370df5a5a338f18584ec4ef974f52363d0ee18

Download Submit
C:\Program Files (x86)\3uTools\Qt5Widgets.dll

Filesize
4.2MB

MD5
3b95b6b13df74cbd9edc43ae11576e0f

SHA1
5bdb22eb90102b386cdd0e630f9cf0d91de3a8c5

SHA256
0eda2bbe9f757d96ac5284dd59263be1523a9aa3671a3282a04aaea37f3b4c93

SHA512
14838a0517d58eacc36fc8690ab6a17282e6355b3cb7166c4b88409c5fd0cb3408b63450b9b2c25933b49aa88e370df5a5a338f18584ec4ef974f52363d0ee18

Download Submit
C:\Program Files (x86)\3uTools\Uninstall.exe

Filesize
930KB

MD5
409662fe55b9b8c60153f90b5e9d68ef

SHA1
fde126117c2947b31f843b6eba4dfdf8fc6d6ccb

SHA256
02ee55416f16fdc51b39e33c5166a55de4f5dc2e7735caac7395834f44462917

SHA512
54968e00a173c11b027c51e399ce41db8a3b6849ca35dbc13067aa744b63e878c784554d4151cc1962fa4ade8e3af3c78c4f9899be32d37ac7b3df25b2dd33bb

Download Submit
C:\Program Files (x86)\3uTools\cache\libidevicerestore_hotupdate.dll

Filesize
364KB

MD5
11612b9b1484a310337ae2b0ace9844c

SHA1
2a1c4dd3b77d18e551b09248317b62467ae77818

SHA256
9ccd3bea21796a1cff21f8708e6cb0a9290d2a6a76b71d80e77264465b06499e

SHA512
fbb8a835e594d21dc7d28f583e25373e0aadf0b3827057320d3d00f190bc11de5517a333dcc19db80fa3e16f2bcbb5c3cf09e9ac5a1c93208dfacbf7b49d8289

Download Submit
C:\Program Files (x86)\3uTools\files\OpenStreetMap\search.png

Filesize
1KB

MD5
a73bcc83dc2729d19d9d0e1eb36bbd96

SHA1
9d15df65438cab48d07ebe7e9359258ff1011423

SHA256
29739779fd76b21175d4ea24d7ded3e057233127062d05c164b9ab4df9e11a3f

SHA512
c37de466294c22c9b3ed6587c639a7d53ae6f5cc8d352931035885191a2fd329dae3ff28d1bdeb363c2c12243505584354acc5f88bb8e21da9c2942d03cacf03

Download Submit
C:\Program Files (x86)\3uTools\files\bonjour\Bonjour64.msi

Filesize
2.6MB

MD5
86e2b390629665fbc20e06dfbf01a48f

SHA1
d9f4697a6f4eceea24735822cb1df501268ca0b0

SHA256
46e31e284da64d6c2d366352b8a8abcf7db28d3e2a870d8fcf15c4a6fe0a6dd1

SHA512
05ecd3be5779f39db09329dda4dce0e3c49ac5d3950e92833031622b53542dadbe9e2948df35faeb4c41dbc8e01992935087c4a2975c797bd008ae177f7c3fea

Download Submit
C:\Program Files (x86)\3uTools\files\shsh\iPhone3,2_SHSH_6.1.3(10B329).3u

Filesize
12KB

MD5
f7b171c156813778f6c5a3cdfc3836ea

SHA1
b577c1d23947c6697e5790d639f836b63d2c82fc

SHA256
be36a0b30a37ac88816d2f61b4d3bb9d2e3e195f3401cfb58ba5d9e2a3ec7b3d

SHA512
43411dcba10066e577e04682ee58ac502fddbbda585e965cbd68335248354aaa260499a1a8356394b224d609e4954c11928a4ec72cc3d92eed08bbd2fa155e26

Download Submit
C:\Program Files (x86)\3uTools\files\tutorial\ios9trustapp\jquery-1.11.1.min.js

Filesize
93KB

MD5
8101d596b2b8fa35fe3a634ea342d7c3

SHA1
d6c1f41972de07b09bfa63d2e50f9ab41ec372bd

SHA256
540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441

SHA512
9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\ASL.dll

Filesize
62KB

MD5
62328e297a0a20b3ad631f63adfe7242

SHA1
b6f2b79c4fa3c27a79711369b0164033fb071687

SHA256
064efe6c2c64c8c2a48246c2ae902c78f25cc2d5823984fceee87489983d5b41

SHA512
008a03a094db8c9a79e05a884e449429c8d34067dc3b697f58c6e9153462583278ff85a3c1b948c2b5f1805b16710c0ffc99f2d6603d7ff0edb738f7b57a4d6d

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\CFNetwork.dll

Filesize
1.5MB

MD5
dfd35230e121bec9d11dce1ef2bc9914

SHA1
f2b42d25a28af394fbfd3388b8c178a7c4561dce

SHA256
63736f2781d10f55eeaa148932886c0c355f7e1a7ad113a0bc00427409c72bdc

SHA512
7e6da46168315cf424fe5bfe79d5682c45047a8385327562a6b655b7c5de6842bbae56fa851f5e94619927bd2d4607f69d516f6fcb2ab153c32c0982d12b133f

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\CoreFoundation.dll

Filesize
1.6MB

MD5
dfae044d3d97dccb615ca19aed76d1a1

SHA1
cac95414365e3edfc2208faa33dbfc2fef9f7910

SHA256
7b737d80a4414bb07e19fb2603b07109cd9f9d4ce5d53970a1468b5cd227b447

SHA512
7d105afb03d6a9dab34d35c8d8a53e4de78a0d8eee9757e0afe0335c19f7807540e40415ccdb77cbcf55c531eb32bb6b715182fbe7e3d26a1bd266852638e21e

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\SQLite3.dll

Filesize
778KB

MD5
ca426ad13949eb03954cf6af14ed9ccb

SHA1
f5f46048711a3b10fdd243d450f38c70b2bda65d

SHA256
383f6a8aac6ecde29d4cbde8e31be84a528892cc7295985f1c877fdfbe9e2a2f

SHA512
42494f56d3cd9048b7f912e907bbedf1db140d45834e1f5f79957d6453ea0468f97fe7de6e0e5f4d494cb5eff9a7c5b9005e9a506f82a1d7dcd18f5c3790dee1

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-console-l1-1-0.dll

Filesize
18KB

MD5
11e55839fcb3a53bdfed2a27fb7d5e80

SHA1
e585a1ed88696cd310c12f91ffa27f17f354b4f4

SHA256
f6bdc8ffd172b44f4d169707d9a457aeef619872661229b8629ee4f15eefff0d

SHA512
bec9419e35de03cc145b3c974833f73f1a5082d886de4739351b93bb4cc6c0234efd0e35ad845faba83fa600c4a7d5343eaae949a837d00d5528e6db79438ee4

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-datetime-l1-1-0.dll

Filesize
18KB

MD5
9f3cf9f22836c32d988d7c7e0a977e1b

SHA1
1e7bbd6175bdb04826e60de07aa496493c9b3a3b

SHA256
7d588a5a958e32875d7bd346d1371e6ebfd9d5d2ede47755942badfc9c74e207

SHA512
16c98e6aec67ffe4558c6d3f881301490be5d8a714c1adc6735005613251adb8e1c2cb9b1c0d2504a9a99c61a06b0e30c944ca603fc00fbb18cd20ba1c9bd697

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-debug-l1-1-0.dll

Filesize
18KB

MD5
64978e199a7239d2c911876447a7f05b

SHA1
0048ce6724db08c64441ce6e573676bc8ae94bf9

SHA256
92b947f1d6236f86ed7e105cff19e23c13d1968861426511b775905e1d26b47a

SHA512
9c64211895473ffc7162b56b0b8e732dec54cf03ea9b9b36fe3cc3339c35fc71fc7173d4e146989db399cb1bcb063079378bb6f778f7d2591cd545550038397c

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
18KB

MD5
9d74d89f2679c0c5ddb35a1ef30bd182

SHA1
22eaed07a6e477a4001f9467b5462cf4cc15cc16

SHA256
e207ffc6fef144e5d393e79de75f8f20d223f1ac33a011eeb822d30fa2031046

SHA512
725626e961d32398ea5aa120ac0339deeb493fc02ee7ef4d8e586173fdbf768b5cbb1f16f093ae4ecfee87e661170f8f832777640a353df5d651af4a62a2d819

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-file-l1-1-0.dll

Filesize
21KB

MD5
d826d27c73d9f2420fb39fbe0745c7f0

SHA1
6e68e239f1a58185c7dad0fcfaac9ecfd2e5726c

SHA256
c0e5d482bd93bf71a73c01d0c1ec0722ea3260eba1f4c87e797bae334b5e9870

SHA512
c49843eb10e4e54c66e0e194dbd29ceab9094bdfe745b6a858cb03e34d73a6326f54804e5e5505deacc87146cbdfba17a0f02e62e76c685bce0cd1ff41962ff4

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-file-l1-2-0.dll

Filesize
18KB

MD5
ec4f2cb68dcf7e96516eb284003be8bb

SHA1
fb9237719b5e21b9db176e41bdf125e6e7c01b11

SHA256
3816bbb7dd76d8fc6a7b83a0ed2f61b23dd5fc0843d3308ee077cb725d5c9088

SHA512
6cbda80c476a9fcf46458cac45229c96dc9df251230531e25088e834cd954db9ff4561e744f76495f9c57a4068b7635c72c6f9ff838436c54142297ee310b236

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-file-l2-1-0.dll

Filesize
18KB

MD5
b9287eb7bcbfdcec2e8d4198fd266509

SHA1
1375b6ff6121ec140668881f4a0b02f0c517f6c7

SHA256
096409422ecd1894e4d6289fd2d1c7490bd83daff0c1e3d16c36c78bd477b895

SHA512
b86348d3f42d0ff465066a14c281088c73ec5e03efacdaabe27a410b054a8a81b438d7e5d030b0d95f53b07783911b8b8200581d4e0b6f1b3cc79f4aae1d67df

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-handle-l1-1-0.dll

Filesize
18KB

MD5
6a35a52d536e34ba060a19d06b1dac80

SHA1
0494a9cbf898e5babb6e697fc2de04a128d2fc35

SHA256
a369ef130749bf8cd9f67055179e6f537f200c060af47493d49473912a95021e

SHA512
a8aeb58bcf4b314212c2ab5a8fd3c2edeb97e680f774171d4a79390aa23bb62a414aef0ecd5286ffb68b7ed8f6e713ff1892d6d4cc2cbb67de916c6062e762d9

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-heap-l1-1-0.dll

Filesize
18KB

MD5
ee5c2fb7bc23bfd06ff32556cc7c3b4d

SHA1
5d60ebf016219bbec340d353a4fa541fff596d3f

SHA256
efc9f0e32bce971900ddf66a1a9e68daa3bfb2099a1ba9f24c6ee82da2cbd6e8

SHA512
5d1b8a130c27d8eb63ca0c836bdf63e76afb311de26ed4f25b073bda843ebfa25e136849e3882822257e3783058f30af818a96764d60821a40329cff4e1badac

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
18KB

MD5
48a5e206d92f3102256ec65e8d570ee0

SHA1
76024fad398dfa4734afce0cc2e5ac117f090ba6

SHA256
a272ae4fc60e511f48950b08f106fcdd3bc86831df908ee78d630f1ae921880c

SHA512
65407da566b571e050c25448be6042e84b0c1c7248422cba00b543af9de425a723b0c7c54c4eb6f534e42b1679a058562d500875ddc4f2b52e6b8e6107b1b575

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
18KB

MD5
e33f52e89dfc376eaf7aa655f260ca76

SHA1
b66e1f934f491544190714966031b6dfd2e349ec

SHA256
0bd03e89a539aaa3100e2f7d9a058964730320e55aee1f85be8fd243eea7017a

SHA512
95cb889599801ba7fa225b633d0fe25fdcc8b495dee5eba05b15a6e53a8a3643b5defe1a881236c40f4fa4365d6775ece067dbb526afdf2015f4d1355c9dfc57

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
dbb81fcc74c59490008ee59bffff5a6d

SHA1
edbb465ab3bea3a4df3f05e5a4e816edbe195c3b

SHA256
f33e6ac5d3e1c4f1d89564fb6aeeac170486c073b67694380755049dbc48eec1

SHA512
2847a73e952bd5f2448264e0bfc8dc1dcd37f8b02d6d6f525ef0cb69c8e634fdcc4637876361b22c53244659039ed305c015435834b61eea15015fed45e9c374

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-memory-l1-1-0.dll

Filesize
18KB

MD5
0ee9e0c830a7534dcfc9be72146796f9

SHA1
cecc860b494135482ae693f8e252301073a98578

SHA256
8f3f0fd765a37f48162f0bd00c3047e79b4eda355223bfcbed4d35b51349cfcc

SHA512
47161e02f4478464ab45c1e3bf9d244d34613e0e68ebe48511a9a0c4e7f8ddb0c1dfd59707c6968c5d76d5027cd19ef748d1235bf74b976410ea6672a6a4bcaf

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
18KB

MD5
1557093add722d1c5a97c359bfcd0d77

SHA1
a8ce995f00a12a81a13d3ef47ce0834178ed69a4

SHA256
3a20635a223e68418c22858413e8c603aac25723de1cb0f54dd675349ec3213d

SHA512
b7acd6882b4d36b52f1e49e4b61ddd025de8503f765b72c94ec5a0d85b6ced513c348f7c4898675728c851a2632ad71c78937cdec9dff994b7b27ed2d85cdddd

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
19KB

MD5
2a61e4e21bf255107884b6520af5bbcc

SHA1
884eb1a835bcde4e7fd98134f0be797229f4239a

SHA256
64742ee0729cbe72555247b0165fae03bea7a6b0147869253dae3bb0072173e8

SHA512
d0ca104904352586bbd3da654125b3df9355fe250938a465e8e900d135cec397f1118fdf54829b076df82b8e45fcd7656c2c7aa33ad3c0af5189f7a55e43f498

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
20KB

MD5
d5c4b8f7260563f72150a84fe884ee31

SHA1
dae1185359ed25a4974504cd1ceaacde28d4318e

SHA256
02839f3b2bdf6adfc89d2f800cc8acda59a40c3e7ce14ef3026f4c72e202297d

SHA512
09ca23413eecf1df94aa36e53fc6fff0f402f21eda2ef79be6aa087818a5bb82ed98db790a2b5cf4ef91a8f70d8e27f56313bc2054a26872d2cad611c472f0b7

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
f61b9ecb79cd20fc2e8fce87286cfe43

SHA1
7a48accbe43e156f886f1f2836f74e1043feec59

SHA256
bfa24f94ba095174b82d3657f8ecc689eab8ff380c69b1c9a7e311eb70d66386

SHA512
42ab62087bbc9fc9c9003ae96ebb9e9bbfa3db4eb74bd6746da035d53d1002015d8482ecb92620ec65c42b8b2b41d9b0a7793e105b0cf8cb6f713a2bc03241db

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-profile-l1-1-0.dll

Filesize
17KB

MD5
a472bd416bdc12668523670360650910

SHA1
831d930ef9917e0dccacd8e7f7fd6f3d90082441

SHA256
48dceeea29558966c391cda34e5755386c2e7e252ea0a03d8d1f21e3cb370c5b

SHA512
166134e6c3403f4437e10afb514a55677481d3b03f7cfdf17917a0bb6fa1f387feae58d7dd5dfbc375eae66d24f10c3163ba5958c22beb6978c0b778c2883b6f

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
17KB

MD5
525a156e0ff61306fd44bf7937cacfae

SHA1
6a9a88317a55c939c0cb9f77256f5c3f961d0562

SHA256
41c69b545d931045a280f83b2f5fbe0ea18c35ac42dfca54b661b42fe8e4f982

SHA512
c99147eba45e9561b7a2802b0c15a2df2ac886ce95a95f2980f8bf4d1dff92a69b94f11cd17383b577303f24295b1b7e52b8c80ad26c0bb08862c726b9cd8841

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-string-l1-1-0.dll

Filesize
18KB

MD5
e57ec98e69961e45cc7a4e0666d26b7d

SHA1
70462a1d68bf49908fcb7186743a47a1affc5d7d

SHA256
52c9b061c4c74eeb70019edde2b690c7e9d9744979a3b718d6687b3a83f00def

SHA512
4a450bcbce0eb3f98f78af07673227a55cdf8e7840fa892196cbb8d0f90551b32731f70f171644f8097fda97d57caa4b7430023671b19881764613231a20cdc9

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-synch-l1-1-0.dll

Filesize
20KB

MD5
99572ae21d1c8afe3d02f1124979e911

SHA1
5b17addc80b1406a3eaa615f5e37d92e953a0bb7

SHA256
e7d39dcb79d739ec030e9a4e2165b264a24c400566056e1fda267fdd1a8b36bd

SHA512
27ca8149d1f0c625de90a3f4cd4a4930ab0c1362ee10a7131ebfd2a88065c2a34c8ad7fb6d95ce33072146b9309488cbfe122984606d631b99d925e3fc42fcff

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
e4110aa5c8a32b63de2c85e0bc297c54

SHA1
6039680f47750cf56d0c9a1768de815a44b83de7

SHA256
01bb32d692b86ebb39a76893125e0f3aaf957c6e4bd682fb46eac32f6fb65be7

SHA512
0631ea8224403ca113dff9b17852e92c1fcb2820e4f335b668b12689d2a8f058ba33905692f2fd0f4897f8f766db816747ec95478d854b75a0803d2c899e6d98

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
19KB

MD5
a13048905fc64cd2103094c871c6d826

SHA1
cebb1a74bd5196a3fe174a20543335074a1b7397

SHA256
fb23439a5982e723e8e4ae1a5a35f9bbbfba1e76feb4596668f57093b231da6b

SHA512
e23effc6c17177d07f43955cc8ffa17ed05cc2c0a6430078b37de8536170dc3cb4f8970eba1049b10a789ab5acb423745f9d842dac4d63d5714751186a3f071d

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
00b548bf3eab7a6debce296ee5e877de

SHA1
ae18022eb78c192ac3baee32664b9eb011194772

SHA256
d592b91a087c001f9ea38dc5912a90c78fad3a368879d04fd7e5650ed374c8dc

SHA512
3ba15d9a0f1680c2b182cf04fbbfcb0d4f1b607519c161c590928930ad1b3eba8bd417575a51305b9552f0abf0064c74267336ec09cea709aed9228e4eac799e

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-core-util-l1-1-0.dll

Filesize
18KB

MD5
96d9965ea02eefeadf1f122dfa724449

SHA1
c6f9eb1babe64b30fb1ff6b74e93db8ac41d1294

SHA256
4f31b2888ca82bd1ff40d71e2d11500456b99940dd469bfb097fcd304676fa38

SHA512
4018eae1e00899a5bd392c9b4f25561cf03292011f52387edd77058f49bd1b7456570f0108338088e5711bf5d6ba33aeb2c7bcd5d24d2744b173ff75bba0347b

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-conio-l1-1-0.dll

Filesize
19KB

MD5
032a139ea3cc41f2bb801cd580759a75

SHA1
4d88e10bcc4e75edc83bca578510d53fc827aa1a

SHA256
905f86530c56c9b453dd8bd9770440de0f6f35aa84b171de747a04d112e35aad

SHA512
4f574dfe92e90c7d6f162c0b69dd56c96031790abe15e52121c7e44980bbab86914ee06fc153fa5f3a77c4f1c6e4c24d7044507880a80b587872477708506a50

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-convert-l1-1-0.dll

Filesize
22KB

MD5
94e386a317faa200aa1dc270ce54e5fd

SHA1
e352ced285c04378bc3f6af4b30fa69df70b8974

SHA256
e4ccd13d5861e3e28984fc7263d79b580a0bc7bbe0d234ed8f1a69706ef908f3

SHA512
f622d303adecdce6ff88acc779d108556c2fdbe1f4140092d2d637c2fc1aaf651c1798291239e1334aabea702d7d380150922abd4e0122cbfc9c079a64dc0e76

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
e8ccecac4f06679b9d5e77333d216ee0

SHA1
377363813d0fc18083bdb0456a66efb6598a763a

SHA256
2cf24c6aac48261ab04eb616e85dd707417697764f860fc29dd3955dd2c49226

SHA512
e37db74e11138639e3bb02270589f977bfd803d450ff098d474ca461fd1fabc8e646a177a2082fd0a901fbe15225c4d352567a561c453f56ad8e0097838b945e

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
20KB

MD5
42153324a982f848d7a49bb7406125c2

SHA1
f0878690d23ad0c905f0a6ec37e9ea1edb813195

SHA256
fcd8b213e2e9962b84d1eec4296bbefdf4465398a235e118be12c878fdc08c05

SHA512
1710b3fd90210dd6603f2104de249704cad9d83acdc0c6b96ac24e20c4913679b1e4ee41bb7812d919ba76cadb36f7bd8210ee127325fd9db6b542cf2d0b7f69

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-heap-l1-1-0.dll

Filesize
19KB

MD5
aad41d33906cfdb31681ce8276648481

SHA1
6367d1990873c5af2f5d05d31ea083fb8b127883

SHA256
242cb185643df586a5f55735e8810b8d2b6b095c78be206e42cdaae7665bb2cf

SHA512
43b2cf09fcb13211f5bcab6942050e03dfb9ce36b727727f7c764df3754f332f04dc81f411e55caeecfa676c43dd1e977f29b0042c485babaaad609c239a84a9

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
bc75b80a80802146e79c383c94542f06

SHA1
7da2020a855ea6c003d905551a28af456e7519c2

SHA256
81a7a98e11ae94236f34a82a0d450a1100a9b8e752205248de0037a764b91a07

SHA512
0b6a8f6809f1a39c90bfe58ef0d05d997be307cb18771ff8fed6539bf7e19ee8cc3bedc44e1c22f34441db9b82a6470d3814fc7465d1ea82fa30d37278a0fe65

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-math-l1-1-0.dll

Filesize
28KB

MD5
1028042a84aefe816280f22a4517dc68

SHA1
b3437beb0e5a6a062678a0b32cea98f3c5e33580

SHA256
4a88f73cae12080b9a637f76f8ab1b8ac29829817ff03ddd611a25b6981ee573

SHA512
1da4a2d152943447950ae5de80360741c8a827647d1568c18b026376645f15cc9b5d1915dbdb43278adeac1423b20d6e1c97f6ad67ce724a0d91ec84c4e5250c

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
26KB

MD5
b7e1023ebbf0e5018c58b5488c03a643

SHA1
b10d3a570d4a44b87480d015aac4d04ef3f0a355

SHA256
e7238f5e38d3991e9d6219255e8cd951d6dd431402c4b4b295a68bd43efa3d48

SHA512
c5536416aeba4b37931e2961a29ea4c8679f6d942289325c9067d46b36797e404c0d8dfd01ce997e89bd42a7f084029d2f2d3cd7485b8cec5e66db50ac1df565

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-private-l1-1-0.dll

Filesize
71KB

MD5
538057da2c6ec8b927904346bb808792

SHA1
1156a3d1a653678b9f85aa64ff65bd3c10510b5e

SHA256
f8720e9250c5d5aace6918e1f67f6105f2cd08c0cf55633d2b6b28032d904e9a

SHA512
228531381ae55e7c1a24cfe36101325cd0b95899f2a125c72e82043f13248236171ad89a497e5b1d6c19a5febb8d2bd38cb43e81fbd753f3088aaee1c1791b7d

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-process-l1-1-0.dll

Filesize
19KB

MD5
4aa747ecc612240d522c23b51a8be7c1

SHA1
b037be0bc321e9329c7cf0dbf609fdb9b2d82fb4

SHA256
ecc116471ccfa09c599d389d71a574ebed01260b9760021a40665c4d8a22257d

SHA512
fb8c0d4f661fe6c8ce6cd04a3c0661a2f0b6058223edbfea811891aedd343d006c22a8524bf8508c2cc396853252477d5cf3c520889650a24d661f4964bce5c9

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
2f10f2255271b09d58af75f58476899c

SHA1
ca37f8e4c99fb178e718e99eed286d1ef32b00fc

SHA256
24bc147f7c8a2dfcbe9296d83ce75a1f2c02076d8f6e6c81f6032c927ed5888a

SHA512
74d85f5a40bd22eb9c85973bda5e596c3688096dc78fb6984f84ded4757ae82d77894c4cae0f24de77d211bbd869f9a4120a104d7c2ed161b4bb7b8568cf5103

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
24KB

MD5
65fe48962755451a1a5bab26e6fd978d

SHA1
d1322c477fe4ff61eedf9433b8deddee27f5adb9

SHA256
5a3d9a0a2c1f9b14cb52d9cce92b761ec1fe0460ea7d994179c96648455ead84

SHA512
940269af2c3a8b5b43ca936df1bb5338ae5166f04c34a163b5938895d19bdd7eadc156add1b96b5508e06088419a7d8f466f40bf01e64b4c547fbc1b20328ed7

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-string-l1-1-0.dll

Filesize
24KB

MD5
a3eccd7f2f2c45d1553055593278645a

SHA1
23cd6aed1b198ca515d7adb213efae780fbf0537

SHA256
d51dfd972e6df5e8185dce0b4eb26dccb0527c5f1c63bc081677335f69b92b67

SHA512
1dbf60f5df95e72b98b72faccb52f83585bc0bc5b1f65c259e8568d812461b738bb37c96e72e2f272370788cc7dcd7a8e5a698d9fb2c773ce0e17978c19ef858

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
c8f1a3b19e5103751202010805bce5c9

SHA1
179cf585ce939d05f9610d4b684e4dda6f452f76

SHA256
d5e2fb8495bbbfb66b2612cd5179c1a5f4746dcdd043ecd474363ffe4a8deb4f

SHA512
879fbe66e5440cbe01bd1814a36345fce6454196c8457969d2ee9e93b749df91d0d95b1da1d368063b7ef2a3ed538449b456eb2c7507a27de60105a0d37dcb71

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
e0aeba2d9d9ae584d6c1aa0f5929526b

SHA1
3f97b977d8877398d350b373fd441867167bd2ba

SHA256
4eca5b9e5be5750b0bc03fd74b6d5e351cb6d70fd63d5f740a1a122f906390e0

SHA512
cfa02a7afa052c5149a741500063f110462d272af417c33bedeac6ad3af424b181144c8045adc04a44a54dffca4639ae3c135f23d64bcfb66f7d3aa980143799

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\concrt140.dll

Filesize
238KB

MD5
bb7293add679a5688fcdd03f44de4b90

SHA1
4ffb7d8acd1bfec663d99694172c0c8c28a92900

SHA256
f3093cb216bf8ecc8d869e46d8cda3aaca28a326cb865ccbef329e1b13abc834

SHA512
ea094064c1454cceec03b4f54ad122be169c8bbfa6eece9b4f58eb6d59cbefa16af3a9b6f04461e438e4c208b6224a69a15c10cca6cf4cd5527cf0fe90052711

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\icudt62.dll

Filesize
25.9MB

MD5
9f023b3958b7d62ba237198d0fc45346

SHA1
58b7a03a13127e5beb664f4ad4a467c3a0ba832f

SHA256
fd79aa32f9ff48de4934ed5ded3e4cc1099a431f921527870ae454a4cea69286

SHA512
b43b1d8aca824c30c164ff75dedff6cc96b351a1f7ce5ad14ab530d1acb3f8a96c70779a2fe990b081abb94310e9015c3baeecb54329168821fe40ec6680e793

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\libdispatch.dll

Filesize
89KB

MD5
f630de53dab8e00c44948fab59e7c87d

SHA1
4f5e85012120cf6ad3c655a2c4bcc74578494961

SHA256
3bb2bf3f61a5f14ccc4a61c1619ff2fa3afd9a6c7ae3a4368dc64fa00f20ef8b

SHA512
ee0a3c8ef0939fe0fe5b35ecf04983e9ee69cd8e48ee6adb00100d533c716624768d9d1f07b0dca5981d04c4ee4e227a09907bd8dc9cace1350010b588a35ab8

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\libicuin.dll

Filesize
2.0MB

MD5
23c95e40a06060ff4f3c160ee03de64f

SHA1
66a903dd8d8be93e07923392f0b85988bb6d3f55

SHA256
3ac2977aaaba48dbf02d96ba35e2098f4cc65c3ccc7283e43023b866cc866284

SHA512
36bcbe1953496017b0f89c7db609f0c98739795a985ff958b342cb5f1e9695598284cdf86ef424a1a123bc55abbadf8638b12f80127231c3c3da24cf718b8ea0

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\libicuuc.dll

Filesize
1.2MB

MD5
fd867d739c489263d1831c26f96af98d

SHA1
d18638dc5a89d23cf8f2189a1a9c90307c258b27

SHA256
93b54b24cc39998597901f95f533c7046ba1b502ed6c7d4203349876e906bf25

SHA512
9dcfe225483c2b4667086f5b02f142b0213ce196fa1552789ada8087a16973b9e2f9c69b2b91fa535a94be32b9cc2054cb69d342e4cb32eaabbd55e04929d026

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\libxml2.dll

Filesize
1017KB

MD5
b22578e8a20584fd50d2df00fbfed2d6

SHA1
b2665e707c255b1fb022c8c001912f0fe065f09f

SHA256
c7788669c4232ec3b89f90044eeeb1e4e4ba504172641196be953a8eca035a23

SHA512
64de8a3bec74da6ac5affe80891e392e382aa6c2972ab1672e045a880d3c30d1eeacde3fbf1e64307038943ca679a1960cacf42b4daf1d00b0be4fbf855fdc99

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\msvcp100.dll

Filesize
411KB

MD5
e3c817f7fe44cc870ecdbcbc3ea36132

SHA1
2ada702a0c143a7ae39b7de16a4b5cc994d2548b

SHA256
d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf

SHA512
4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\msvcp120.dll

Filesize
444KB

MD5
8080160d77881130485100fbf51a619d

SHA1
af7ef1f90af489423439713eecaaaa81bded2585

SHA256
ac9ddd9f6132d5f05709bbe2cea3b3eabb2df8e4bd79365b336ac9ce7c2d8c3e

SHA512
9c4d928898445b757908266efaa79d16e57df4fd1d3fe162c6b25d9a98e3b5e819a989b94286d923c90e99e50beeeed74a83f4b20f11021ed8db28dd6ca412e1

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\msvcp140.dll

Filesize
429KB

MD5
d25c3ff7a4cbbffc7c9fff4f659051ce

SHA1
02fe8d84d7f74c2721ff47d72a6916028c8f2e8a

SHA256
9c1dc36d319382e1501cdeaae36bad5b820ea84393ef6149e377d2fb2fc361a5

SHA512
945fe55b43326c95f1eee643d46a53b69a463a88bd149f90e9e193d71b84f4875455d37fd4f06c1307bb2cdbe99c1f6e18cb33c0b8679cd11fea820d7e728065

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\msvcr100.dll

Filesize
755KB

MD5
bf38660a9125935658cfa3e53fdc7d65

SHA1
0b51fb415ec89848f339f8989d323bea722bfd70

SHA256
60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa

SHA512
25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\msvcr120.dll

Filesize
948KB

MD5
7f8da89204332df95cfc41f6e85dc515

SHA1
7e8d71e1f2f9729a52b2938bfdde69e56e6de488

SHA256
1c8449f417566dd0fd69dc21ef77d46b9475fbaac731da35bdc71669f22242c8

SHA512
d48b833cbc9db97d7be4e986be25ae097d1f55a33d591c5f554ec95d0d329f7cdc50687e16429289308a212cb00a8e2a640039ca7a056c5e03f58e21d3b27b33

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\objc.dll

Filesize
181KB

MD5
889942db3c895f286339e84a33bc3768

SHA1
7e10c47e8b67e54245764060fc38dee403f09554

SHA256
19689d52145d9ba930ead5c14159c4adbb2daaae6247ec4b2f41c045abaa1bab

SHA512
f82666c9ad6001c2cb7cdcdf4d8ffa69345df74f44234e6965feba430d0c844b5a3e1c75ee64ee579589e7ff12e597ab15fe8b098ccc991ca3604d60f0245acb

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\pthreadVC2.dll

Filesize
70KB

MD5
6e78e68666cd66630716212ad8d80705

SHA1
dd00b2d3e4323c29cc5a80339bd04a71dcda9e86

SHA256
fcfe7bd53329b40f73758a0d7fbc858c0663a5cf1af5d139c41ff74998a73146

SHA512
151213fc79bbcd8abe8addfd1bf8446877cd5bcd2999e4b648c83fc62526e31bb649631bc87a399acc4403d69ed2d0f6bcf0fe235de5e372d7e4b954cf26cb9d

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\ucrtbase.dll

Filesize
899KB

MD5
015b30309491a911e75748ad69c9e680

SHA1
2f2243b6ea99689cd54e45b67d9b7d98847f904c

SHA256
dd32570b8183a8b117233333153da29cc8d2ac5b1c868440dd852d9c3f77baf5

SHA512
51159e407021ce78ad64ea91a5e53f59ee15d6d74b9c2891cd6dd532cae3f1d388198e0cd78648ce067e82fa7f01050b4773d95c5c827439f094b289f0ee0ac8

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\vcruntime140.dll

Filesize
81KB

MD5
a2523ea6950e248cbdf18c9ea1a844f6

SHA1
549c8c2a96605f90d79a872be73efb5d40965444

SHA256
6823b98c3e922490a2f97f54862d32193900077e49f0360522b19e06e6da24b4

SHA512
2141c041b6bdbee9ec10088b9d47df02bf72143eb3619e8652296d617efd77697f4dc8727d11998695768843b4e94a47b1aed2c6fb9f097ffc8a42ca7aaaf66a

Download Submit
C:\Program Files (x86)\3uTools\iCloudDll\zlib1.dll

Filesize
80KB

MD5
795b0d247c12984d5068624e6c711c20

SHA1
32119ecd7c92e58cf87e713414752aa6aafc097d

SHA256
46e25f842f8c2b9bd1712f56d87e50ac026c406c3866b4ee92d433b68c29f29f

SHA512
00595573b00125c4a35286fdd16e2c9628836a86e94127aa67dd3153bc29f729edc5892234443fbb9ac864e442efb0351ea29b6123a5f371caa577465c2db1f7

Download Submit
C:\Program Files (x86)\3uTools\idm_aia.dll

Filesize
103KB

MD5
4a13943178ab96a70b186f72a4f9d28d

SHA1
c64adec0466eeff58020c8bf35bb64ec53414ab8

SHA256
d96999005904dc9c1c6c5da33462792212aab84ed750fb182bb80bd41ad541a8

SHA512
755ceaf24af2dbc02b55fb81ab65568d84154e2f832daecc8f4d3b4ea377f435f7f3ed338772068c5e6a0485e99f13af48b84c9606a9c0ac22378b1a81b0fc73

Download Submit
C:\Program Files (x86)\3uTools\idm_aia.dll

Filesize
103KB

MD5
4a13943178ab96a70b186f72a4f9d28d

SHA1
c64adec0466eeff58020c8bf35bb64ec53414ab8

SHA256
d96999005904dc9c1c6c5da33462792212aab84ed750fb182bb80bd41ad541a8

SHA512
755ceaf24af2dbc02b55fb81ab65568d84154e2f832daecc8f4d3b4ea377f435f7f3ed338772068c5e6a0485e99f13af48b84c9606a9c0ac22378b1a81b0fc73

Download Submit
C:\Program Files (x86)\3uTools\idm_app.dll

Filesize
118KB

MD5
188d54ec59b1e6f0f518a1d5a540662f

SHA1
52e0bea1dcd06c5f35538a4f4a48c83b0ca14c55

SHA256
0bc4a592bd7dc17a78d2288060101756c7ef9c3a3b82400c382c09c62afc7b9d

SHA512
cb724068133982a7db1e1fe4241fb8981fe0b9cc2987bc7b755cbd5b87a728f8202bd5f688e74cf88a18651f3e7f47e5b98900f98bcdcf408e30dff8bc82bfa1

Download Submit
C:\Program Files (x86)\3uTools\idm_app.dll

Filesize
118KB

MD5
188d54ec59b1e6f0f518a1d5a540662f

SHA1
52e0bea1dcd06c5f35538a4f4a48c83b0ca14c55

SHA256
0bc4a592bd7dc17a78d2288060101756c7ef9c3a3b82400c382c09c62afc7b9d

SHA512
cb724068133982a7db1e1fe4241fb8981fe0b9cc2987bc7b755cbd5b87a728f8202bd5f688e74cf88a18651f3e7f47e5b98900f98bcdcf408e30dff8bc82bfa1

Download Submit
C:\Program Files (x86)\3uTools\idm_backup.dll

Filesize
134KB

MD5
9861bbe5b3c9d132f7e75eafec30d6e7

SHA1
841f97b18c654ef6849aaeaae7f34db367cf2508

SHA256
f198a615f56e96769f1971dfcbb98ccc6ba628f725cd5f1db2904344993dd3d2

SHA512
d41d3d268cd29e58a52e3c8cddd5d5cd09007df289beb48b10710a13a9b94d607454daf45c12314f814ba2e83b185fbcf0055df5b53028d1dcab799404784e50

Download Submit
C:\Program Files (x86)\3uTools\idm_backup.dll

Filesize
134KB

MD5
9861bbe5b3c9d132f7e75eafec30d6e7

SHA1
841f97b18c654ef6849aaeaae7f34db367cf2508

SHA256
f198a615f56e96769f1971dfcbb98ccc6ba628f725cd5f1db2904344993dd3d2

SHA512
d41d3d268cd29e58a52e3c8cddd5d5cd09007df289beb48b10710a13a9b94d607454daf45c12314f814ba2e83b185fbcf0055df5b53028d1dcab799404784e50

Download Submit
C:\Program Files (x86)\3uTools\idm_datamgr.dll

Filesize
104KB

MD5
20235290ab9c829a846eb58505afb910

SHA1
b0912476ee24e034af62fd12413f1703502f0a2a

SHA256
c386235c9d2fff73773de6ee9fe5eb2bfab155a7d0668d3e84ad6e419178035e

SHA512
447dd753e4435fa23e404f1f04d314894e99ba4675060040f9493f35823462d6d9e44783733bbfdc3acc6722a525ba8f412136febec58e6deb0dec87a9fb8296

Download Submit
C:\Program Files (x86)\3uTools\idm_datamgr.dll

Filesize
104KB

MD5
20235290ab9c829a846eb58505afb910

SHA1
b0912476ee24e034af62fd12413f1703502f0a2a

SHA256
c386235c9d2fff73773de6ee9fe5eb2bfab155a7d0668d3e84ad6e419178035e

SHA512
447dd753e4435fa23e404f1f04d314894e99ba4675060040f9493f35823462d6d9e44783733bbfdc3acc6722a525ba8f412136febec58e6deb0dec87a9fb8296

Download Submit
C:\Program Files (x86)\3uTools\idm_fm.dll

Filesize
75KB

MD5
b75f645c94924344561e8a32839c9cd9

SHA1
6e1dde8a3ab3ce7c2dfbf9b5bab920af2e8cdf55

SHA256
8582e668c826d25ab64b1170a7f62a273326b0baa0a58a56c8e03377d0ebcba7

SHA512
94862a51dcd6540ccc3813039636e5bf00c3a83be771c67dbb1a883a5291173473b9fce8518bb10ed595b4ec662596549337685501ec62ebb5c75bf5ad071cf3

Download Submit
C:\Program Files (x86)\3uTools\idm_fm.dll

Filesize
75KB

MD5
b75f645c94924344561e8a32839c9cd9

SHA1
6e1dde8a3ab3ce7c2dfbf9b5bab920af2e8cdf55

SHA256
8582e668c826d25ab64b1170a7f62a273326b0baa0a58a56c8e03377d0ebcba7

SHA512
94862a51dcd6540ccc3813039636e5bf00c3a83be771c67dbb1a883a5291173473b9fce8518bb10ed595b4ec662596549337685501ec62ebb5c75bf5ad071cf3

Download Submit
C:\Program Files (x86)\3uTools\idm_info.dll

Filesize
157KB

MD5
d84d4eee2487e448c57423eb97a4d154

SHA1
66b837aa8edbed2cee872d4a85bfd16c187e1b8f

SHA256
51bcd50a43d7da6e060386a1ed2af5d0b6cde73536818266927574f435385d6d

SHA512
2eec71ce7a2f2c7df2e2df1132e407053749ac3923ebe69c620e2e799edce52caa66795b5ddeba5b00bb0f79a607c1156a153ca0d74bfd72fcf5ce6a5efa6142

Download Submit
C:\Program Files (x86)\3uTools\idm_info.dll

Filesize
157KB

MD5
d84d4eee2487e448c57423eb97a4d154

SHA1
66b837aa8edbed2cee872d4a85bfd16c187e1b8f

SHA256
51bcd50a43d7da6e060386a1ed2af5d0b6cde73536818266927574f435385d6d

SHA512
2eec71ce7a2f2c7df2e2df1132e407053749ac3923ebe69c620e2e799edce52caa66795b5ddeba5b00bb0f79a607c1156a153ca0d74bfd72fcf5ce6a5efa6142

Download Submit
C:\Program Files (x86)\3uTools\idm_jb.dll

Filesize
89KB

MD5
02e2589d158b4effb4e314307d2b6f5c

SHA1
77f64527c6d84610e8522d546e3eb44b72641f85

SHA256
3179d42685246c1dc5589062ea71d1e02451ef81729a55f4f2a6a83a8ff5ce99

SHA512
b065ed18f9092d2ac2f47e8b29c5d3c02d8ae77683599159255b7c28effd36e85748ffd28efcb6c9c2e23038f79f5ee8a07c90e067dafa10ce9f487b77b6d1ff

Download Submit
C:\Program Files (x86)\3uTools\idm_jb.dll

Filesize
89KB

MD5
02e2589d158b4effb4e314307d2b6f5c

SHA1
77f64527c6d84610e8522d546e3eb44b72641f85

SHA256
3179d42685246c1dc5589062ea71d1e02451ef81729a55f4f2a6a83a8ff5ce99

SHA512
b065ed18f9092d2ac2f47e8b29c5d3c02d8ae77683599159255b7c28effd36e85748ffd28efcb6c9c2e23038f79f5ee8a07c90e067dafa10ce9f487b77b6d1ff

Download Submit
C:\Program Files (x86)\3uTools\idm_media.dll

Filesize
140KB

MD5
44a462a5e6ab21758e75c561a4d3d416

SHA1
c87efecd641cc78f83a701834d85a1564b16284c

SHA256
c328a81ef7a5c17b2d5e7c8082dfa86b6e7cc2af48fc7070e776df7071ccbf72

SHA512
51f9da295af81bd409761a4960b69a5058876bc60e30de6771488debd0b06896f21451be5798b677ea4d88c9dbb5d7e1efb101cc70a8bcce630b057d041c024b

Download Submit
C:\Program Files (x86)\3uTools\idm_media.dll

Filesize
140KB

MD5
44a462a5e6ab21758e75c561a4d3d416

SHA1
c87efecd641cc78f83a701834d85a1564b16284c

SHA256
c328a81ef7a5c17b2d5e7c8082dfa86b6e7cc2af48fc7070e776df7071ccbf72

SHA512
51f9da295af81bd409761a4960b69a5058876bc60e30de6771488debd0b06896f21451be5798b677ea4d88c9dbb5d7e1efb101cc70a8bcce630b057d041c024b

Download Submit
C:\Program Files (x86)\3uTools\idm_other.dll

Filesize
172KB

MD5
fb8c1aaa741718618380543c68e630fc

SHA1
0531cb8fd4137848ab37b262f8d1710311085ce4

SHA256
396c004b0b460134b9565a5682976bb01f89bea772934f98a80436f1307e9b6c

SHA512
23aa62472904199a12b72029b46e62b8c717f724b3427f81ca4d9a3d2d64593b04e223357fec79653453019aeb3f36e8e18eff18ffb040f6e09b31fafab2ac50

Download Submit
C:\Program Files (x86)\3uTools\idm_other.dll

Filesize
172KB

MD5
fb8c1aaa741718618380543c68e630fc

SHA1
0531cb8fd4137848ab37b262f8d1710311085ce4

SHA256
396c004b0b460134b9565a5682976bb01f89bea772934f98a80436f1307e9b6c

SHA512
23aa62472904199a12b72029b46e62b8c717f724b3427f81ca4d9a3d2d64593b04e223357fec79653453019aeb3f36e8e18eff18ffb040f6e09b31fafab2ac50

Download Submit
C:\Program Files (x86)\3uTools\idm_sync.dll

Filesize
71KB

MD5
c239dec567e80d422075f6f2baaaa2ed

SHA1
3d230b61c4d7d70d505400812681828b5d70e11d

SHA256
f234e6982a6d1a69fce231341316466dc4130f409a4c105a937f83534b4f5296

SHA512
3fa93c9a93e10fc7a04e628008bbc9c4035e3dd3bbebd5c08f66b64cf07f34039d82633cc958f21c0e9849fc629ad4d30e6e22e504a60cd9bf7dcaafad0cb9e2

Download Submit
C:\Program Files (x86)\3uTools\idm_sync.dll

Filesize
71KB

MD5
c239dec567e80d422075f6f2baaaa2ed

SHA1
3d230b61c4d7d70d505400812681828b5d70e11d

SHA256
f234e6982a6d1a69fce231341316466dc4130f409a4c105a937f83534b4f5296

SHA512
3fa93c9a93e10fc7a04e628008bbc9c4035e3dd3bbebd5c08f66b64cf07f34039d82633cc958f21c0e9849fc629ad4d30e6e22e504a60cd9bf7dcaafad0cb9e2

Download Submit
C:\Program Files (x86)\3uTools\itunesDll\asrp.dll

Filesize
100KB

MD5
999787af94ee8c480495f953620f138f

SHA1
5c0eb17e17f38eb576017b778438ff47009b0ce2

SHA256
f571a207967a714f57e8107c5299279baa8f99680dcd883db46f00f2651d213c

SHA512
9686e5915fc60c59c337fb28c20e5d6554f226b0cebb1c8e06e2e0a264204e796192108dd786be4e801a4518ec68aa2e2b78cc6536950f155beca7fe24faf4c7

Download Submit
C:\Program Files (x86)\3uTools\libcrypto-1_1.dll

Filesize
2.0MB

MD5
1bac76988ccbc84c221b22fbfd63320c

SHA1
9409e4722a893ae1c41424744355b4db3cee14d3

SHA256
acb28d7608527cf17c4dd478b3e438d290c56c032c2d26e84b3e36bea6e6c6bb

SHA512
ce3efe02f892b84a5e6a3c050eec9cae2472456945c14e4388d1a919fca536ea264a485f16b232f3cc427adefe6d31220231ea7f66896538ae0fe8d63a53d56c

Download Submit
C:\Program Files (x86)\3uTools\libcrypto-1_1.dll

Filesize
2.0MB

MD5
1bac76988ccbc84c221b22fbfd63320c

SHA1
9409e4722a893ae1c41424744355b4db3cee14d3

SHA256
acb28d7608527cf17c4dd478b3e438d290c56c032c2d26e84b3e36bea6e6c6bb

SHA512
ce3efe02f892b84a5e6a3c050eec9cae2472456945c14e4388d1a919fca536ea264a485f16b232f3cc427adefe6d31220231ea7f66896538ae0fe8d63a53d56c

Download Submit
C:\Program Files (x86)\3uTools\libcurl.dll

Filesize
311KB

MD5
b382025c48cb7d2ed98c7141b1290a9a

SHA1
b53272c6e21e9e15bcb8d76796573be7f67028fd

SHA256
d46be226a4c9e2a9f3e0853512e19e17ba8d9652d6eb368fd692e757dd8e648a

SHA512
a736ce4ad3e469fe4df7eea3efed8c86aa03dfe826ae54d36997c4e6d899e89faf918b706ebb1ca27b3b661f054d23d2d9ccecbaebd39245040485f969f1e11e

Download Submit
C:\Program Files (x86)\3uTools\libcurl.dll

Filesize
311KB

MD5
b382025c48cb7d2ed98c7141b1290a9a

SHA1
b53272c6e21e9e15bcb8d76796573be7f67028fd

SHA256
d46be226a4c9e2a9f3e0853512e19e17ba8d9652d6eb368fd692e757dd8e648a

SHA512
a736ce4ad3e469fe4df7eea3efed8c86aa03dfe826ae54d36997c4e6d899e89faf918b706ebb1ca27b3b661f054d23d2d9ccecbaebd39245040485f969f1e11e

Download Submit
C:\Program Files (x86)\3uTools\libphoto.dll

Filesize
177KB

MD5
ec511db5fa20039c7311fdb110bb8132

SHA1
4dbecadf7c8d94b54f284ba682e6a4032e38ed53

SHA256
537eedcaae05aabf41888ad507785c176c6b32dad54d555bc3c6a44c302d9db9

SHA512
d63f2b949742b88b87c52fd58e19b735d118813c8b57bd1b8354436709d8d4352846455276473d626fb68677dfa9e3a00f411dac1ff0bb41b94cde9a7f02ac51

Download Submit
C:\Program Files (x86)\3uTools\libphoto.dll

Filesize
177KB

MD5
ec511db5fa20039c7311fdb110bb8132

SHA1
4dbecadf7c8d94b54f284ba682e6a4032e38ed53

SHA256
537eedcaae05aabf41888ad507785c176c6b32dad54d555bc3c6a44c302d9db9

SHA512
d63f2b949742b88b87c52fd58e19b735d118813c8b57bd1b8354436709d8d4352846455276473d626fb68677dfa9e3a00f411dac1ff0bb41b94cde9a7f02ac51

Download Submit
C:\Program Files (x86)\3uTools\libplist2.dll

Filesize
52KB

MD5
118834a9bc50d5df9e5dd540114653d3

SHA1
828a170036d295c3de85340bd1193bcc8d4d9e9a

SHA256
807b43eb36a9b8f0676964524e101eaf8295acf1641ec17c0aa2320b45b16ed0

SHA512
b242026039ee11437c5cd8bf0ab983e0a1cca8c93d344051cfb898c8b36e6c3a577d75c38a1b046161f44d904cb1a3a754a51ce2c46f9f7db8de631444e713c5

Download Submit
C:\Program Files (x86)\3uTools\libplist2.dll

Filesize
52KB

MD5
118834a9bc50d5df9e5dd540114653d3

SHA1
828a170036d295c3de85340bd1193bcc8d4d9e9a

SHA256
807b43eb36a9b8f0676964524e101eaf8295acf1641ec17c0aa2320b45b16ed0

SHA512
b242026039ee11437c5cd8bf0ab983e0a1cca8c93d344051cfb898c8b36e6c3a577d75c38a1b046161f44d904cb1a3a754a51ce2c46f9f7db8de631444e713c5

Download Submit
C:\Program Files (x86)\3uTools\libqrcode.dll

Filesize
49KB

MD5
f822e734f31b869680cb8491cf17b3fd

SHA1
37ee57139c6007cde4eee5822ee4329c9a404137

SHA256
deeaf306c5210dcdefbaeebf7f7e653cc864dcbb9c294742276fce7fcc0ad3e5

SHA512
980ffba0531bcf92f9599d2c45111129909307998fce2c93a2c843aeacce119b196e055ca9a86ccc79dda1a318c277fe28d0aa9b17945eaea067fd54c7edb7b7

Download Submit
C:\Program Files (x86)\3uTools\libqrcode.dll

Filesize
49KB

MD5
f822e734f31b869680cb8491cf17b3fd

SHA1
37ee57139c6007cde4eee5822ee4329c9a404137

SHA256
deeaf306c5210dcdefbaeebf7f7e653cc864dcbb9c294742276fce7fcc0ad3e5

SHA512
980ffba0531bcf92f9599d2c45111129909307998fce2c93a2c843aeacce119b196e055ca9a86ccc79dda1a318c277fe28d0aa9b17945eaea067fd54c7edb7b7

Download Submit
C:\Program Files (x86)\3uTools\libzip.dll

Filesize
59KB

MD5
9cf5a8ef6bc33f3c379b81a0865ccb0d

SHA1
66e21c024f9518730801369be8b28fcee7b83e09

SHA256
c9d73c9eaf26ca369601d9b6b9f30c2ac87150531ca30864e0c68ba2c10ab9ea

SHA512
af655704153700244fa7cc832bb9b44022f047eddadd7c602d6d7b8c2945c9b8c74d51e5d03efb36a37bc628d0048e6e92380b6e27c31790293bae1a16aafb72

Download Submit
C:\Program Files (x86)\3uTools\libzip.dll

Filesize
59KB

MD5
9cf5a8ef6bc33f3c379b81a0865ccb0d

SHA1
66e21c024f9518730801369be8b28fcee7b83e09

SHA256
c9d73c9eaf26ca369601d9b6b9f30c2ac87150531ca30864e0c68ba2c10ab9ea

SHA512
af655704153700244fa7cc832bb9b44022f047eddadd7c602d6d7b8c2945c9b8c74d51e5d03efb36a37bc628d0048e6e92380b6e27c31790293bae1a16aafb72

Download Submit
C:\Program Files (x86)\3uTools\msvcp100.dll

Filesize
411KB

MD5
e3c817f7fe44cc870ecdbcbc3ea36132

SHA1
2ada702a0c143a7ae39b7de16a4b5cc994d2548b

SHA256
d769fafa2b3232de9fa7153212ba287f68e745257f1c00fafb511e7a02de7adf

SHA512
4fcf3fcdd27c97a714e173aa221f53df6c152636d77dea49e256a9788f2d3f2c2d7315dd0b4d72ecefc553082f9149b8580779abb39891a88907f16ec9e13cbe

Download Submit
C:\Program Files (x86)\3uTools\msvcr100.dll

Filesize
755KB

MD5
bf38660a9125935658cfa3e53fdc7d65

SHA1
0b51fb415ec89848f339f8989d323bea722bfd70

SHA256
60c06e0fa4449314da3a0a87c1a9d9577df99226f943637e06f61188e5862efa

SHA512
25f521ffe25a950d0f1a4de63b04cb62e2a3b0e72e7405799586913208bf8f8fa52aa34e96a9cc6ee47afcd41870f3aa0cd8289c53461d1b6e792d19b750c9a1

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg

Filesize
81B

MD5
fd793f60c53fcebd5bbc5573341a1c4c

SHA1
70be6956d4856ca53619181daaaa399eb379204c

SHA256
abf8ed6ad3986e919fed5446af72a524ceca464525b6adf0e891b724fe1b4271

SHA512
3dbd1d3314581b40e074837f07173f5b924c8427f486ba51b6533974a3c86a6a3cf29c6a29f75ab27823377a0494cdc73b26ffd0f8e4e2f24db036eda459ead1

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.Hp4704

Filesize
226B

MD5
cae03e7e9e983a8c79da447cce01939e

SHA1
d0446e564e492cf5dfca6b60301d0054a36c55c9

SHA256
c56b569d5b79948b3fba5b3538a5073d2f9bc7fbda5d01ac2c2817d46133562a

SHA512
f26f3f850dd8464d021f070d435a611f0dd83892a4115f07067d1f7f0196ad18c164046690e3037c2641d7475e84e8e0c7affd864fbd05577e70f1e9b1dbc65e

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.Nl4704

Filesize
194B

MD5
76f1a7606ed229caa398bc663f3b6ef0

SHA1
3d215f72aad5282cfc939e10492e223926172047

SHA256
78b7b16da7a70fdf3a04ecbc51372ac8b93bd24f5902781dc3fabc824e0d485b

SHA512
34df7f1ef6657326f60fe93505411be28c773036246ca748334e64d2a26a4bb44f02b51bff3553e9e9ccc1c08a1cd7a926620256f8e5a9180774feda2ddb3133

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.PJ4704

Filesize
260B

MD5
f6bbdf8246b643111c29ad8140e762b0

SHA1
7ab502aab3f385afd14888f985682b1d6f491724

SHA256
98a27b45f450745bc6e8f7b33560e05b5e83ef28cde53539dc21d3246584cc16

SHA512
9569d4ae3a52944ec320dbca1ca4af2d27b14f12e25378391a1dff7449c849aa4cf77cfad024d409a2cab0146fc34f99d5850eba800e20c07ed153cf6479bf33

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.Ya4704

Filesize
101B

MD5
1abda57a7e8712dde4203dd89d990be1

SHA1
ceb1e9d63750b135d115a2d8f3e5fef24812ae24

SHA256
9964cf8b5c22e6da002b11fbca35a3dd36b8915880d201d0a4392dbd1f4f6eee

SHA512
0bad5806db37e22f140082bb02042d10b93d1e31d0d18e9b6f90a300ad37983439f15579542a68b83de993aa9e68101e6d1e00a7b00d3ff081b779be554f0b40

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.if4704

Filesize
213B

MD5
7eec35b4aa4bdcfe43cc26ab6e9ff02d

SHA1
2c8d0b9832da795b788e43438f3cc77dd693d1a0

SHA256
c2d30c35bf5d9e7d3990832a29065b582ba24d55e0d12cf7396711dcc91e9017

SHA512
c4c3e88ef2e75bfc03067bbf4ed26d30e4eb55123cef12c4fabff3665b248484fa75167dc94af2b245e2235bc5170613b1bf4ef53038e7787c6d668c456f28ef

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.lock

Filesize
22B

MD5
828258e71810e9be521add71a42beadf

SHA1
11226db0af9acf7d743a569801d4d99f0fa10aa2

SHA256
adea43971755cad95b12257da9fd849a493285ce0db4b5b816d617e476715943

SHA512
ce873c91aa359aebd356687fb69705102b0a7d7b58ff1e80739050879145a3f1c661a2ffa8149386fccd95535de4b5d9f1def44eb720af41f286017cf27917f2

Download Submit
C:\Program Files (x86)\3uTools\setting.cfg.sv4704

Filesize
134B

MD5
2a95491fcfef2b31805126893c49d769

SHA1
6244a518f102426d32d24944d8bda8735f86417e

SHA256
6fe168a391deb952338cee6cfa7cf96468cc476b101b0f2913c8e8487cf4b123

SHA512
d74d910a5e1d36ce83628f4499c3cbb9919fea1779675472840e4525c9af2cf61c0f98decdde7f5e6710eabf929ef1621197946250fb27f91e0526f73b41b9f2

Download Submit
C:\Program Files (x86)\3uTools\zint.dll

Filesize
580KB

MD5
791ab3afe192d4f98c4bfb147c24f1f8

SHA1
56a0047b2594b4187bb753172f77a9df0902b68a

SHA256
9a5cbbe9be21c9430be6eb1410152d134ee21874ac35d3997685e7c5a2e9b010

SHA512
e78f8c164aaa24d0bf0f518ee9344ebe7417efc923448d421e572cf36a74ab84fb56fded99af60cd56f682c3904b81db2fcecb4a48519936b812944084608355

Download Submit
C:\Program Files (x86)\3uTools\zint.dll

Filesize
580KB

MD5
791ab3afe192d4f98c4bfb147c24f1f8

SHA1
56a0047b2594b4187bb753172f77a9df0902b68a

SHA256
9a5cbbe9be21c9430be6eb1410152d134ee21874ac35d3997685e7c5a2e9b010

SHA512
e78f8c164aaa24d0bf0f518ee9344ebe7417efc923448d421e572cf36a74ab84fb56fded99af60cd56f682c3904b81db2fcecb4a48519936b812944084608355

Download Submit
C:\Program Files (x86)\3uTools\zlib1.dll

Filesize
86KB

MD5
4402130fb8a4e0efdd14e1e8562384c5

SHA1
7c06c494a6731f24c849bf67515e64ca87da9818

SHA256
f170ed22008d7f3ffa19a886ecd76a24e02e3d9b16927177f8ce5a4054406f2f

SHA512
40ba4e2bb3319cb045eec465ac85e7bae38b6d7f43c41ecaab28f151c346d333f1c272ef9d6e00a8c987cfe63d891cf1d855530ca9b771768a4c9fa118051c50

Download Submit
C:\Program Files (x86)\3uTools\zlib1.dll

Filesize
86KB

MD5
4402130fb8a4e0efdd14e1e8562384c5

SHA1
7c06c494a6731f24c849bf67515e64ca87da9818

SHA256
f170ed22008d7f3ffa19a886ecd76a24e02e3d9b16927177f8ce5a4054406f2f

SHA512
40ba4e2bb3319cb045eec465ac85e7bae38b6d7f43c41ecaab28f151c346d333f1c272ef9d6e00a8c987cfe63d891cf1d855530ca9b771768a4c9fa118051c50

Download Submit
C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x86\usbaaplrc.dll

Filesize
5.8MB

MD5
1428a8b3dbf4f73b257c4a461df9b996

SHA1
0fe85ab508bd44dfb2fa9830f98de4714dfce4fa

SHA256
5ed0d8f2066dd19d5aec42c5498fdd1db9cefab4d024a1015c707dfd0cfd5b20

SHA512
916a61feb9a36872a7c1adece8933599e55b46f7d113966ec4ad2af0e2568f1a339629ec48eca10bd1e071c88171fe88292dab27ce509ceea42afbd049599cc7

Download Submit
C:\Users\Admin\AppData\Local\Temp\{ba2dd2d1-b096-324c-9ca4-b0a420decbc9}\SETC692.tmp

Filesize
35KB

MD5
a46e8f947d629a169e6a8ee7e07902d4

SHA1
a594032671900ed8347f6bfd002896a5063fe08b

SHA256
c48bbbb4b43f8cd883cd4a7bbbc1e0ded312f92bb154d684b6bb1a91c683c4b8

SHA512
7f783b25a03dd0af80b79a85b7c246be74f7439c78b0b6cea97589316845a816b127ab47824f16d5c21d8557e8e62e03fd7e6561fc731526f3682226dfcd1615

Download Submit
C:\Users\Admin\AppData\Local\Temp\{ba2dd2d1-b096-324c-9ca4-b0a420decbc9}\SETC693.tmp

Filesize
11KB

MD5
58abcd249f1473434aa93c88e3b447b0

SHA1
6de34052e1449512140f9d347d6a6cdf60ab84b3

SHA256
c461190c324e6d03fdc0a696057779ff736ebdb623a980834b40596c2c5d9c54

SHA512
3cc9b6ce6e36954627ad5f4bbebedb891052d12c1951d3642fee969d4102d59aea820394962f10bf26eef525c78ce32e752975c80e1beac688eead75a9f95323

Download Submit
C:\Users\Admin\AppData\Local\Temp\{ba2dd2d1-b096-324c-9ca4-b0a420decbc9}\SETC694.tmp

Filesize
2KB

MD5
50748d6d5cb2454514988bafb5ff2db5

SHA1
e714d33c809926d2b2f374f20df5d51d02e6d397

SHA256
bb1e8e64ba611e90be4bee7f7a52fcbd236cfa22c19b166405e9e1c86850839d

SHA512
e597a9e6188bb847f4ae80f20282e9abb4a9396c707b9e9536ad960a9232e1f0426cd3be6a441e2a20c39c14a94d89984a440cbba4774ad8d7b3f8d6e5327871

Download Submit
C:\Users\Admin\AppData\Local\Temp\{ba2dd2d1-b096-324c-9ca4-b0a420decbc9}\SETC6A5.tmp

Filesize
65KB

MD5
9456e82e53efeb584ffac8dcf4e5d53b

SHA1
8f14c5c3f6b01fff5a73ea8b8437de60974f62d5

SHA256
0d87321e343c44210857635425a077a4416450f653dc67a89f1044ec58987e1f

SHA512
07f0ca73eddc02965e8bce65779aba83e34204d52a984a18bdc0a758be42f378d69661863f2a5848564b6b8407ca439c13f49d17951f8e1f06fb1e8a2d5b02a7

Download Submit
C:\Windows\Installer\MSIDEEE.tmp

Filesize
135KB

MD5
fe11c4804b99dc5328b62f266a34546b

SHA1
b9e4b99c71d01a5105263b1b351325ad60ac31be

SHA256
774992b8ffbb893475392387ff449532c9d75ef65b1e45718a03967bc526c739

SHA512
29f9f52f36de3501c60a9c41f5f16580c4f2b1c30bbbb2fbbc002b21ff514b3fdf5f1ad809fb84c9927c48a1cad9322ad92fd0a40522e115be8443946332a6a7

Download Submit
C:\Windows\Installer\e59d315.msi

Filesize
38.2MB

MD5
5fa31f33afa76e4ff8387d526abb70e5

SHA1
c45e907c6189429b231579988cbe1010dd7f0f9b

SHA256
b6accb2caf4f4668f130eee803387588d31cb9e8d16c9e02ea010c554c1193e1

SHA512
6e2221ce35ee00b86ca4494ea41eefe9174290119f0798a351a2ffc51f3c8a35af3181c3d366f6232d5b2cada6729a265fdbc6de42ac56d8598516b2c9722072

Download Submit
memory/4704-1367-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1390-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1357-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1358-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1359-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1361-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1362-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1364-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1365-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1355-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1368-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1370-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1372-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1374-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1376-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1379-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1381-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1383-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1386-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1388-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1391-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1394-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1397-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1401-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1400-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1399-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1398-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1396-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1395-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1393-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1392-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1356-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1389-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1387-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1385-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1384-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1382-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1380-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1378-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1377-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1375-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1373-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1371-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1369-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1366-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1363-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1360-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1354-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1353-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1352-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1351-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1350-0x000000006DAC0000-0x000000006DD2C000-memory.dmp

Filesize
2.4MB

Download
memory/4704-1349-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1348-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1347-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1346-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1345-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1344-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1343-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1342-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1341-0x000000006DF90000-0x000000006F9DE000-memory.dmp

Filesize
26.3MB

Download
memory/4704-1339-0x0000000002960000-0x0000000002983000-memory.dmp

Filesize
140KB

Download
memory/4704-1340-0x0000000000350000-0x0000000000FB1000-memory.dmp

Filesize
12.4MB

Download
memory/4704-1338-0x0000000000350000-0x0000000000FB1000-memory.dmp

Filesize
12.4MB

Download