990034eea06c068b8384741d36fab9e53c7cf7de10e8531b915f34c1ed0c0885

Resubmissions

13/07/2023, 13:40

230713-qykc6ahg5x 7

13/07/2023, 13:35

230713-qv4mmagh59 7

13/07/2023, 13:31

230713-qsdcnagh49 7

Analysis

max time kernel
94s
max time network
135s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
13/07/2023, 13:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

advanced-systemcare-setup.exe
Size

48.5MB
MD5

f14d068cfae207f898fb76eaf1367043
SHA1

c3dbda0acaf1e5fd1a493d2dd1cc3da0c017f0bc
SHA256

990034eea06c068b8384741d36fab9e53c7cf7de10e8531b915f34c1ed0c0885
SHA512

544b9fecc1923d12ae027b48383fe4811b3684d7ddd797b2096b10a35fe9a1670d125110f4a2e77222bd6d434681af738cc519be326bfcc551e3fd141a27e663
SSDEEP

786432:yK021ALYXrd2i5u5ySyYTcER34bgeIT10qcbVR5i7ecLrqF1O029nSeJ4z:9IKU0udTdIbgBqbiScLr0h29SNz

Score

4^/10

discovery

Malware Config

Signatures

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-D0JC6.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-1D7CR.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-3S5N0.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-JQPV3.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win7_ia64\is-GKFDH.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Adblock\js\is-20L76.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\is-PE1UD.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-JU1UP.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-7GBKT.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-K8TB5.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\InBoxDriverFeature\is-1IHB7.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-FU8KE.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\SPNativeMessage_Edge.exe	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-1SCCS.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\InBoxDriverFeature\is-A7DD2.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-I5LG6.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-IPAUV.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-JHVSQ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-01IC9.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_ia64\is-NQ5EM.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\is-FLU8H.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-5FLM6.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Update\is-N6FIL.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-PE466.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-1MDUB.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-JAQRN.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-T3N2J.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-E1I5K.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_ia64\is-BIPAN.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-90J7N.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\ActionCenter\is-OB8K4.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-S7NL0.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-P3LVD.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\is-G6KAG.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\is-R17LP.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Adblock\js\is-P3NBR.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-FB25I.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-0EIU1.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-57LL5.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-946FG.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-AKEGQ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-OS3AF.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-7US4V.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-J6KUR.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-I2F7G.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-BTK6E.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-JLKSV.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-U2CS7.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-HOMOQ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\PinLink\is-ANE2B.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\History\is-PAQ6S.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_x86\is-NIVI8.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-0UK8J.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\unins000.msg	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-FKDC7.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-O5ARM.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-1O79A.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-99FBG.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-UPF9B.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_x86\is-0NN0G.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\unins000.dat	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-N4CAU.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-IRBVJ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\InBoxDriverFeature\is-GU1CG.tmp	advanced-systemcare-setup.tmp

Executes dropped EXE 11 IoCs

pid	Process
2480	advanced-systemcare-setup.tmp
2924	Setup.exe
1452	advanced-systemcare-setup.tmp
2992	ASCUpgrade.exe
2572	ASCUpgrade.exe
1996	LocalLang.exe
3052	ASCInit.exe
2268	PPUninstaller.exe
2892	RealTimeProtector.exe
2180	DiskDefrag.exe
932	RealTimeProtector.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
5716	sc.exe

Loads dropped DLL 58 IoCs

pid	Process
2132	advanced-systemcare-setup.exe
2480	advanced-systemcare-setup.tmp
2480	advanced-systemcare-setup.tmp
2480	advanced-systemcare-setup.tmp
2480	advanced-systemcare-setup.tmp
2480	advanced-systemcare-setup.tmp
2924	Setup.exe
2924	Setup.exe
2044	advanced-systemcare-setup.exe
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
3052	ASCInit.exe
3052	ASCInit.exe
3052	ASCInit.exe
3052	ASCInit.exe
3052	ASCInit.exe
3052	ASCInit.exe
2268	PPUninstaller.exe
1452	advanced-systemcare-setup.tmp
2268	PPUninstaller.exe
2268	PPUninstaller.exe
2268	PPUninstaller.exe
2892	RealTimeProtector.exe
2892	RealTimeProtector.exe
2892	RealTimeProtector.exe
2892	RealTimeProtector.exe
2892	RealTimeProtector.exe
2268	PPUninstaller.exe
1452	advanced-systemcare-setup.tmp
1452	advanced-systemcare-setup.tmp
2268	PPUninstaller.exe
2268	PPUninstaller.exe
2268	PPUninstaller.exe
2180	DiskDefrag.exe
2180	DiskDefrag.exe
932	RealTimeProtector.exe
932	RealTimeProtector.exe
932	RealTimeProtector.exe
932	RealTimeProtector.exe
932	RealTimeProtector.exe
3052	ASCInit.exe
3052	ASCInit.exe
3052	ASCInit.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
2924	Setup.exe
2924	Setup.exe
2992	ASCUpgrade.exe
2992	ASCUpgrade.exe
2992	ASCUpgrade.exe
2992	ASCUpgrade.exe
2992	ASCUpgrade.exe
2572	ASCUpgrade.exe
2572	ASCUpgrade.exe
3052	ASCInit.exe
3052	ASCInit.exe
2892	RealTimeProtector.exe
2892	RealTimeProtector.exe
2268	PPUninstaller.exe
2268	PPUninstaller.exe
932	RealTimeProtector.exe
932	RealTimeProtector.exe
2268	PPUninstaller.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2992	ASCUpgrade.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe
1452	advanced-systemcare-setup.tmp
2268	PPUninstaller.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe
2924	Setup.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2132 wrote to memory of 2480	2132	advanced-systemcare-setup.exe	28
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2480 wrote to memory of 2924	2480	advanced-systemcare-setup.tmp	29
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2924 wrote to memory of 2044	2924	Setup.exe	32
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 2044 wrote to memory of 1452	2044	advanced-systemcare-setup.exe	33
PID 1452 wrote to memory of 2992	1452	advanced-systemcare-setup.tmp	34
PID 1452 wrote to memory of 2992	1452	advanced-systemcare-setup.tmp	34
PID 1452 wrote to memory of 2992	1452	advanced-systemcare-setup.tmp	34
PID 1452 wrote to memory of 2992	1452	advanced-systemcare-setup.tmp	34
PID 1452 wrote to memory of 2572	1452	advanced-systemcare-setup.tmp	35
PID 1452 wrote to memory of 2572	1452	advanced-systemcare-setup.tmp	35
PID 1452 wrote to memory of 2572	1452	advanced-systemcare-setup.tmp	35
PID 1452 wrote to memory of 2572	1452	advanced-systemcare-setup.tmp	35
PID 1452 wrote to memory of 1996	1452	advanced-systemcare-setup.tmp	39
PID 1452 wrote to memory of 1996	1452	advanced-systemcare-setup.tmp	39
PID 1452 wrote to memory of 1996	1452	advanced-systemcare-setup.tmp	39
PID 1452 wrote to memory of 1996	1452	advanced-systemcare-setup.tmp	39
PID 1452 wrote to memory of 3052	1452	advanced-systemcare-setup.tmp	37
PID 1452 wrote to memory of 3052	1452	advanced-systemcare-setup.tmp	37
PID 1452 wrote to memory of 3052	1452	advanced-systemcare-setup.tmp	37
PID 1452 wrote to memory of 3052	1452	advanced-systemcare-setup.tmp	37
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2268	1452	advanced-systemcare-setup.tmp	40
PID 1452 wrote to memory of 2892	1452	advanced-systemcare-setup.tmp	42
PID 1452 wrote to memory of 2892	1452	advanced-systemcare-setup.tmp	42
PID 1452 wrote to memory of 2892	1452	advanced-systemcare-setup.tmp	42
PID 1452 wrote to memory of 2892	1452	advanced-systemcare-setup.tmp	42
PID 1452 wrote to memory of 2180	1452	advanced-systemcare-setup.tmp	41
PID 1452 wrote to memory of 2180	1452	advanced-systemcare-setup.tmp	41
PID 1452 wrote to memory of 2180	1452	advanced-systemcare-setup.tmp	41
PID 1452 wrote to memory of 2180	1452	advanced-systemcare-setup.tmp	41
PID 2892 wrote to memory of 932	2892	RealTimeProtector.exe	43
PID 2892 wrote to memory of 932	2892	RealTimeProtector.exe	43
PID 2892 wrote to memory of 932	2892	RealTimeProtector.exe	43
PID 2892 wrote to memory of 932	2892	RealTimeProtector.exe	43

C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe
"C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2132
- C:\Users\Admin\AppData\Local\Temp\is-F5M1L.tmp\advanced-systemcare-setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-F5M1L.tmp\advanced-systemcare-setup.tmp" /SL5="$80120,50323178,137216,C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:2480
- - C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Setup.exe" /InnoSetup "C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:2924
  - - C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe
      "C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe" /VerySilent /DIR="C:\Program Files (x86)\IObit\Advanced SystemCare\" /UNINSTALL /INSTALLER /NORESTART /TASKS="desktopicon" /CreateTaskbar
      4⤵
      Loads dropped DLL
      Suspicious use of WriteProcessMemory
      PID:2044
    - - C:\Users\Admin\AppData\Local\Temp\is-6UUHI.tmp\advanced-systemcare-setup.tmp
        
        "C:\Users\Admin\AppData\Local\Temp\is-6UUHI.tmp\advanced-systemcare-setup.tmp" /SL5="$70186,50323178,137216,C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe" /VerySilent /DIR="C:\Program Files (x86)\IObit\Advanced SystemCare\" /UNINSTALL /INSTALLER /NORESTART /TASKS="desktopicon" /CreateTaskbar
        5⤵
        Drops file in Program Files directory
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:1452
      - C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe
        
        "C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe" /upgrade "c:\program files (x86)\iobit\advanced systemcare"
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:2992
      - C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe
        
        "C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe" /CleanDir "C:\Program Files (x86)\IObit\Advanced SystemCare\"
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:2572
      - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe" /install /CreateTaskBar /Installer=true /insur=
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        
        PID:3052
        
        C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c SC description AdvancedSystemCareService16 "Advanced SystemCare Service"
        7⤵
        
        PID:5608
        
        C:\Windows\SysWOW64\sc.exe
        
        SC description AdvancedSystemCareService16 "Advanced SystemCare Service"
        8⤵
        Launches sc.exe
        
        PID:5716
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\UninstallInfo.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\UninstallInfo.exe" /install asc16
        7⤵
        
        PID:5844
        
        C:\Windows\System32\regsvr32.exe
        
        "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll"
        7⤵
        
        PID:6080
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserCleaner.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserCleaner.exe" /InitData
        7⤵
        
        PID:1504
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\PrivacyShield.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\PrivacyShield.exe" /ShowStr=silentWriteCache
        7⤵
        
        PID:1132
      - C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe"
        6⤵
        Executes dropped EXE
        
        PID:1996
      - C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe" /i
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of FindShellTrayWindow
        
        PID:2268
      - C:\Program Files (x86)\IObit\Advanced SystemCare\DiskDefrag.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\DiskDefrag.exe" /install
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:2180
      - C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /install
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:2892
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /Run
        7⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        
        PID:932
  - - C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
      "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe"
      4⤵
      PID:6712
  - - C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserProtect.exe
      "C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserProtect.exe" /TurnOn
      4⤵
      PID:6660
  - - C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" https://www.iobit.com/appgoto.php?name=asc&ver=16.5.0.237&lan=&st=asc_install&ref=asc16&aff=&idata=eyJhc2MiOjEsImRiIjoxMCwiaW1mIjoxMCwiaXUiOjEwLCJzZCI6MTAsImlzdSI6MTB9&usr=0&instd=1&litype=free&expd=0&insur=other
      4⤵
      PID:6636

C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
1⤵
PID:5352
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTimebase.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTimebase.exe" /boottime
  2⤵
  PID:5680
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe" /UpdateTaskschd
  2⤵
  PID:2236
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe" /start
  2⤵
  PID:6424
- C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /RunCurUs
  2⤵
  PID:6488
- C:\Program Files (x86)\IObit\Advanced SystemCare\Display.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\Display.exe" /service
  2⤵
  PID:6596
- C:\Program Files (x86)\IObit\Advanced SystemCare\AutoSweep.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\AutoSweep.exe" /SvcAutoClean
  2⤵
  PID:6904

C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /manual
1⤵
PID:6748

C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /manual
1⤵
PID:6740

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.log

Filesize
776B

MD5
9151d74e7187842a9da04ae9a91440b7

SHA1
e76ed03f5e59c7d2370f9a06b157381539b28e67

SHA256
2d940e19974f2b858a41f87a853c5eebffb57549fa8ef00f338a3350e9fe6934

SHA512
cca9aedb9e35d075fd706b4affaa5b86c46beefcfce495c5bb63c6f855ea58e1c3c39c8d40de6136152545b3a9bcb28c81fd89e4e7cd940ddb11cf1c4328c00e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.log

Filesize
814B

MD5
4a0c1713ca6f299ec403d2f0f131a3c2

SHA1
99f2eb2d59ef7f00b93a43a7a65245737d5e09e7

SHA256
940bde54435c7c50f0253048e7993158aa4b1c8056b2f8fcc9f491852296821e

SHA512
a5a14d10b0875f044196fe17693180b7f9796a2ff649b3ec2021cd3426f4178ffab6a4a51854b6c8ba7c175ffd09f7e551f13a09082c7d00f587397a1122c558

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.log

Filesize
2KB

MD5
55ad57a71d037a37e39444623768c25c

SHA1
90a735796d18cd862a28cef6bc285ad2834db344

SHA256
1f1d1656220cd33df9e7bdcfd7a5f159d4e17f35bc8641183f348df98818137f

SHA512
d1d4fa005f2d3437f23711c52b82cf27e76946073169c9e336a088cb31448a735e9412afef6fee70137d2327b40367908e53dc7818b486bb6cfd0ca9ea02377d

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.log

Filesize
3KB

MD5
2de980bd643113675e4f0c636dc410a2

SHA1
0bde8146a2fe1ede2cc4eddbe15d684a660cf3f4

SHA256
c7f2a0e3cfd85b072d3c18d0e3452c7e197191524d5a1fa1993ead5652b6a5ad

SHA512
d902e82b2041c8742dee0753c967cd98f9bbd8fb9c7fa6558c429affc9c96012e6aacfb50f65d5fc337d4fa6e87aa1fef34f7aa59b1f527c511f364819be145e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\DiskDefrag.exe

Filesize
32KB

MD5
f98a4521a2d99476b50fa4aeb71cd15d

SHA1
7a66ee7d7c88c5ff7f9d84277b97bfd66c4b20c6

SHA256
65d20649d14af3e6025765b5d0436c5396edd430bf155cbf8ad0b1483a7671f4

SHA512
b297763f3d9db97ca84c0509af0b6c289ee934327df280ddeae69573a934ad3fe7be7411e1f831a49080e9418b187864b205c31e8ebb1ce0e41d7cfc6efeabc9

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\HardwareLib.dll

Filesize
188KB

MD5
c534cd2ef9da6d3a50c27dad7a188a04

SHA1
0ec214523183fa2a47e434258fb4320c49cf851d

SHA256
040d71da31dae5b78f3e29149962f79d4cf53cf9a88a6e82d94a3f65cbefb09b

SHA512
b376eeaa837d8ee06b26e06cd31ab22a3ce30c4529cea9040fd876877ade3de8d76e74dc8eee52b7ec6c0880c8fec54b4bcd158f5c3bc676d1f360d09d9cb6e2

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe

Filesize
1.1MB

MD5
c058768b94f6552aa39061ff214bd065

SHA1
2b38062b78ea134273d676de3430b7031745271a

SHA256
34f09efde3f3e12d148de748757ae6149ba05c3763c167020e59c9dd57e1dfcf

SHA512
9c88c13c987f57b603fe48ff4e19bc951cf48281a57a98a0040f31d3d1d076c7db3550da5177cfd7de7a20eac48e2f7adddaccc4e9d079d6c2db22ca0679325e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe

Filesize
1.1MB

MD5
c058768b94f6552aa39061ff214bd065

SHA1
2b38062b78ea134273d676de3430b7031745271a

SHA256
34f09efde3f3e12d148de748757ae6149ba05c3763c167020e59c9dd57e1dfcf

SHA512
9c88c13c987f57b603fe48ff4e19bc951cf48281a57a98a0040f31d3d1d076c7db3550da5177cfd7de7a20eac48e2f7adddaccc4e9d079d6c2db22ca0679325e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PrivacyShield.log

Filesize
114KB

MD5
5ab8a28246cad48edec0b7bb9babb68f

SHA1
3ebf7423660a8e2100a8a1e6792d8970995336a5

SHA256
b434b7751a759925cec55f50eea50e5756a0c7f92877a726130070653edcf2cf

SHA512
405a5c264240e8bfa9b288fda56233e38a6a512572f2b50231e8591047d9d1a3fd2fb968ae8e957768524cce3976a368a3bdf9ee21de8417c402c5aac71d1ffc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\SPNativeMessage.exe

Filesize
1.4MB

MD5
a4c4cb5cd7e4c30d4d7e0dfb58c00a22

SHA1
1cf21920ff7c3f14d9084ae72db87b14de8635e4

SHA256
a711deeca99de5187715b98d942ddc93ced74d426f2e7213bd1237d5fdc31bbd

SHA512
b3f36061b60a31f6620f634e2ed2944f59643de2e08e1186eb61592d1660291f294afd5f2f9974bec504e130904222b2239387958d7dea82fc22f856e89b6781

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\is-JODB2.tmp

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madBasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madDisAsm_.bpl

Filesize
64KB

MD5
f1d430eacd5aac17c5de78f0de3cf774

SHA1
b1c410ea2659d2d7a44b8458ffd98e14ef6ddb8d

SHA256
20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62

SHA512
bcbf4b4c7b02ddefd78d03f1d6d047aa5729a4e8ae673ca6d72488ca7d3fc6a03893d9a6b446e6bb629927352535d85745b882c80b5913c726d5674efaf2339e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madExcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\winid.dat

Filesize
691B

MD5
257e156c11b8b7add49c39f8ca6a3f0f

SHA1
bb187acab93b07564574869fff60696c56d689be

SHA256
a3f9a47f0b48afb31464cbd4bed3338546094757cf7796cc6bec3bd7d2562852

SHA512
28d22fbd87a05d51af442b662befc06ecae1312136475d286cc1b747d255be4705a9ac5102825942a3b9c3d00cf2e9714f47ca25a246e30d3713ecbaa598fa7b

Download Submit
C:\ProgramData\IObit\ASCDownloader\ASCInstaller_Downloader.log

Filesize
1KB

MD5
45635e34fdc8d37281a931768712c7e7

SHA1
b79c98e3e2458a390e21ec30309ecb98b6d05026

SHA256
b11c6dabf21a285d079c29ca5a562727b77be73459aa835fbce7209dbe78ad63

SHA512
1170b1f123840bb95003cc9348fa4b6692c918baa7074b4c3fc514a66b791427359703a3245212c58850360bc1bf2bb0c151a115f66e074edaea6e677ced64e5

Download Submit
C:\ProgramData\IObit\ASCDownloader\ASCInstaller_Downloader.log

Filesize
1KB

MD5
576bf09d382efa9e5d954b7e2a5cdbeb

SHA1
f3d39d18c8fb622aec99fd7dbd51ab6b2f4c4688

SHA256
68c2333b47c0f124ebd9707ab52d7d583e4acfafbb10f27737e1c106b71c84a5

SHA512
6dd40753b307f304dce299f73430fcbb14472e0342138d5fdd2c0733b2788faaed21dadc33b023acf11ffdad14939f512514d7c1849d8ae05061b67002922f53

Download Submit
C:\ProgramData\IObit\Install.ini

Filesize
102B

MD5
b75af6466cd2bad627708bf29387ff72

SHA1
d5056c69ad56a3b0e613f18290a8ef001d7bbb14

SHA256
a38696412a175cb4400a6621b02949d0031236dcaad12650f70a98cfff6211c5

SHA512
b8f9b1359fc8fdb9ad8e7d85e8e34756f61290c49c7e9ed5a94fc6567bc2f0ef811afbeb5868978edf37c83101ca16a02c94b4d8160010c594543df491c1839b

Download Submit
C:\ProgramData\IObit\iobitpromotion.ini

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\ProgramData\IObit\iobitpromotion.ini

Filesize
256B

MD5
fc4e5f80bee6e21c477c312b9213087d

SHA1
9fd097b3d54ef4e04ac8f6f313abbd27fdf97eeb

SHA256
f4a8b66f6782c6f86b02efd3d6d87583c30e61872f0848edcfc29c7a9ce10aa1

SHA512
d8dd5be68eb8c4fc89db19cc819bbdfa9ac7d99d8547093f2562e1142316eefc274af25909ef184b7b2f33d5445ee488bba50c2aca85f343c8facb372f3d35a5

Download Submit
C:\Users\Admin\AppData\LocalLow\IObit\Advanced SystemCare\Main.ini

Filesize
58B

MD5
93b446dd65d042839a2b8945297bfd27

SHA1
7ef7655ab2cac178f7de0fb202f49a1ede669629

SHA256
c1fa0ccf737521386cd519f7a021db26a67d28cde89da75f564ecc1d1d31ee6b

SHA512
53595d19e40dc3bb704c06efb97303020c053d8d114aff806891535de1c0469b61c4f8d66709f45f07215c44d810afaabc5bb20f67833c789fa18d9bba074cdc

Download Submit
C:\Users\Admin\AppData\LocalLow\IObit\Advanced SystemCare\ProtectRecords.ini

Filesize
138B

MD5
0e9856970f5cb2544dbf5ea83fe9391e

SHA1
1379805a305d9de0ba7eeb1f7cc46f40eb59a7f4

SHA256
dd5bf9c2f483789e8853dbc42429774e9c28d51a086a6c57ef78dd414e5a5422

SHA512
010591395be0eec618cc8e9625228ae7fd5e3c91162e24ee96bc2c818abff44b9ae9d0d1e0a6261cb40ccd2cebc1b7145bb1c3cd9abac25780ad41b4463f0c47

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Rinside.dat

Filesize
22B

MD5
3115e02fd135942a8eb97ebffe751beb

SHA1
31764acb175a41b5342bb89e3a951e85084e5d57

SHA256
a9161ffe6690069e1267c6fdad055fc0112144273b66a8bdc59862941279b21b

SHA512
065dc4358ce8f88a044d1764503901cf4a1ba75cd45e3021c0f956955ebd0942718bc09dbed6214d70c1efbfc9fd3adf02abc10694677e5b8cc50b10e92582e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\libcrypto-1_1.dll

Filesize
1.7MB

MD5
b09a5c562bb1d521de69d37ce5286f3e

SHA1
5177d1c96fc389c6377d4256187f76579cdeb2ed

SHA256
c4e3f16290ce92d87c62da129249fae41bdb4f65b47d31d911ed722623fbb181

SHA512
5d2c0cd8d9625fb4424d01b1316064e8b4ec6106e76fb3f7972ad6f6d646464269a0351c228ee2e5cb247d3b8366a48d9791297e13244253a0e01c6793c148b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\libssl-1_1.dll

Filesize
362KB

MD5
9405ea98989968e07b5c9497ff54b560

SHA1
2c8142bb1b667af133e03a51cfd7427deac1b900

SHA256
5d74920adc711daff4d22c45ff29693265381d5359b6a42cfb51e674e3db7cba

SHA512
1c1eb10f144aaa1ae4fcc42b9dd970cfa3f3514948d0d1dcdaf9f7d8cfec1e752b1ce6d70460622b475bcac331fdb8eaa847725c9612593ce3550c4da7112f3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\Rinside.dat

Filesize
22B

MD5
3115e02fd135942a8eb97ebffe751beb

SHA1
31764acb175a41b5342bb89e3a951e85084e5d57

SHA256
a9161ffe6690069e1267c6fdad055fc0112144273b66a8bdc59862941279b21b

SHA512
065dc4358ce8f88a044d1764503901cf4a1ba75cd45e3021c0f956955ebd0942718bc09dbed6214d70c1efbfc9fd3adf02abc10694677e5b8cc50b10e92582e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\libcrypto-1_1.dll

Filesize
1.7MB

MD5
b09a5c562bb1d521de69d37ce5286f3e

SHA1
5177d1c96fc389c6377d4256187f76579cdeb2ed

SHA256
c4e3f16290ce92d87c62da129249fae41bdb4f65b47d31d911ed722623fbb181

SHA512
5d2c0cd8d9625fb4424d01b1316064e8b4ec6106e76fb3f7972ad6f6d646464269a0351c228ee2e5cb247d3b8366a48d9791297e13244253a0e01c6793c148b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\libssl-1_1.dll

Filesize
362KB

MD5
9405ea98989968e07b5c9497ff54b560

SHA1
2c8142bb1b667af133e03a51cfd7427deac1b900

SHA256
5d74920adc711daff4d22c45ff29693265381d5359b6a42cfb51e674e3db7cba

SHA512
1c1eb10f144aaa1ae4fcc42b9dd970cfa3f3514948d0d1dcdaf9f7d8cfec1e752b1ce6d70460622b475bcac331fdb8eaa847725c9612593ce3550c4da7112f3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6UUHI.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6UUHI.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6UUHI.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-F5M1L.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\HomepageAdvisor.ini

Filesize
214B

MD5
8650b1755b632485f2dd439f3a3c6126

SHA1
8c1ca0c0cbc869d75c7f174a77b282e457e9d78a

SHA256
931b07b89eac79e4011037fb46a1922c3837f25b900598d3ad0f386a030e88d6

SHA512
c0bd889d248e05ff2be70765f48c756ec313e481d7747c676d7365af3fe0e332cc76f08463e07f829d412ea9cf42b2aaeae6eca3d12438e7497bd77a428d1bf6

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Ignore.ini

Filesize
14KB

MD5
8cc6f7e704c72dda22035d5fff19759f

SHA1
90bbd43e42b2f46f327f26b01d782d94d8348bd4

SHA256
60b40150366fb7540d6da67f0719b8645d4513c270fe49234c25a664a7a7b623

SHA512
ac2469f5e48564f3e0ad2f645445f1aedc2cfabd53b7706a383cdaa2b1fdbd6f4a255779b079af2ac27c9cf109cf4a0b21e9b302aa68071b0af1d1ff65878673

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
2KB

MD5
4eb604079db6671430a4f7d3fe717a84

SHA1
687eb1b4afeeb9593ed615fa799fb4b0a73a8056

SHA256
30897c60e368393412d9b844b718cb1b7f6a8b256ca9571be2115a4e79236b1e

SHA512
7c18bb85f4c7e70bd014f620f3748fdfa32aed34e28691b885306c46b354cfa32ca87a9f41e480c136c3ea5653b6f50f11b79c4c37377fedb1b54cdb51f35aa8

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
3KB

MD5
b0fc6c823857e2fbdaf4c3549f7dfbc9

SHA1
5ed3feed5b9634ba104fb3d694024db1874ebd88

SHA256
33c152f1f6b8c9505bce15a81203c3510b849df083deed9b60895b1662703844

SHA512
90a3dad47c0782472c0b175b3863adde3adb156e93b05eec50212af8c756746bda219354c0462dc432684bc40f2fcca634f5aef0b9a046cd510c126bc2385bb1

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
3KB

MD5
b0fc6c823857e2fbdaf4c3549f7dfbc9

SHA1
5ed3feed5b9634ba104fb3d694024db1874ebd88

SHA256
33c152f1f6b8c9505bce15a81203c3510b849df083deed9b60895b1662703844

SHA512
90a3dad47c0782472c0b175b3863adde3adb156e93b05eec50212af8c756746bda219354c0462dc432684bc40f2fcca634f5aef0b9a046cd510c126bc2385bb1

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
4KB

MD5
64ec77986a2e3ee111d5e3f69c2e24bc

SHA1
6b2afb9100e7fbe64882608d99ca8d4874d5a488

SHA256
375f3566721ec1c5acf48c06e51f92e729decaecea40e2e38434aff5873d5813

SHA512
7d3987eb7a80a20c2a543124e4e0cc08660039f0ebbd86120c552ac46f6a2fad1e951d37ed7bbaf942c17d5d4f07cb30a3920ea7332fb04abfd1a1ba23a141ef

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
1KB

MD5
59d420f548955adce5bd7a6c4ed41129

SHA1
bcd30e11393a8473fc685f1f30ab8c2190a1c49a

SHA256
a8474550995b76a23d7a3d46adcfda557f96237be0f79a6afd0afcc1ab581588

SHA512
471ae0b89d5df062944055746bda1de6541dedfe441c47c8349ceafc67e4b4b14601bc8a053e63828c549ea39ae8a4c1f58361f2c37b19a236c75b68fdd25979

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
67B

MD5
9127f8950ac197d285a49f095bd993a6

SHA1
a2d96db78439071d4f3709567b41da9c340d66ec

SHA256
00ee30fee1da34215478a32e2148eb70f0771c291a7bb1ce817d4d558ec2ff91

SHA512
2ba6fe06cabd509d565cde1115585e18f223088ad749cff4dc1459cd17b50c1c84396d2a8c23e4dc18657a6ffdbc1d80775dac4acea5464bbb952964ecdd2cd1

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
244B

MD5
4f0a62e85027d9cbb2c874e20a7fc052

SHA1
826e16d09091fb6b7c60cbe0a2d4a54b1e2d70a4

SHA256
68e428698d4955bfa3cbf9761f5d4947f912f95d919718cd1946f1f4e4322baa

SHA512
abb15aea16c85637553bf1966d77fc42204d9fb073014917caf7f2fcba48e3fb691b38de60eacf4cff0e4ffaa30572050a442f6c52a0a45b4c1ba914722b710c

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
316B

MD5
d3ceec252c5e41ea04d50b01283dbdc0

SHA1
af4fff049ca206bcb1ec2062fb7004121083169b

SHA256
aa627b7307366b8173532a69a9f7d6450569a836164cb51d1f6518d78e2059f0

SHA512
4ddae00f1e50688c8bcf88ae23a8e24393a03561d7dd0276b61cc7f82bc92f0f6755c1c1154fcdac7fb50ec86f3ea0df5c9899dd2cb45398c61c754d5ffa0e0c

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare.lnk

Filesize
1KB

MD5
6198acbfd402a9f531922308303ce262

SHA1
3f2c50cd7c5d16417f7c02b42cff4ddc4f93136b

SHA256
1f4789dfd79cfe882e12157517f6160f40c1d823ccb5ce848bf5684d657eace3

SHA512
eb2212aef1d0132ed3f62bdeeca417705bab7388cf8ac3a34e095231f9d0353d5aee639a001551658abd34219fa7054a1b7d7e24fef7149f273212e85d84c462

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\HardwareLib.dll

Filesize
188KB

MD5
c534cd2ef9da6d3a50c27dad7a188a04

SHA1
0ec214523183fa2a47e434258fb4320c49cf851d

SHA256
040d71da31dae5b78f3e29149962f79d4cf53cf9a88a6e82d94a3f65cbefb09b

SHA512
b376eeaa837d8ee06b26e06cd31ab22a3ce30c4529cea9040fd876877ade3de8d76e74dc8eee52b7ec6c0880c8fec54b4bcd158f5c3bc676d1f360d09d9cb6e2

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe

Filesize
1.1MB

MD5
c058768b94f6552aa39061ff214bd065

SHA1
2b38062b78ea134273d676de3430b7031745271a

SHA256
34f09efde3f3e12d148de748757ae6149ba05c3763c167020e59c9dd57e1dfcf

SHA512
9c88c13c987f57b603fe48ff4e19bc951cf48281a57a98a0040f31d3d1d076c7db3550da5177cfd7de7a20eac48e2f7adddaccc4e9d079d6c2db22ca0679325e

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\madbasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\madbasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\maddisAsm_.bpl

Filesize
64KB

MD5
f1d430eacd5aac17c5de78f0de3cf774

SHA1
b1c410ea2659d2d7a44b8458ffd98e14ef6ddb8d

SHA256
20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62

SHA512
bcbf4b4c7b02ddefd78d03f1d6d047aa5729a4e8ae673ca6d72488ca7d3fc6a03893d9a6b446e6bb629927352535d85745b882c80b5913c726d5674efaf2339e

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\madexcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\madexcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\unins000.exe

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\libcrypto-1_1.dll

Filesize
1.7MB

MD5
b09a5c562bb1d521de69d37ce5286f3e

SHA1
5177d1c96fc389c6377d4256187f76579cdeb2ed

SHA256
c4e3f16290ce92d87c62da129249fae41bdb4f65b47d31d911ed722623fbb181

SHA512
5d2c0cd8d9625fb4424d01b1316064e8b4ec6106e76fb3f7972ad6f6d646464269a0351c228ee2e5cb247d3b8366a48d9791297e13244253a0e01c6793c148b8

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Installer\libssl-1_1.dll

Filesize
362KB

MD5
9405ea98989968e07b5c9497ff54b560

SHA1
2c8142bb1b667af133e03a51cfd7427deac1b900

SHA256
5d74920adc711daff4d22c45ff29693265381d5359b6a42cfb51e674e3db7cba

SHA512
1c1eb10f144aaa1ae4fcc42b9dd970cfa3f3514948d0d1dcdaf9f7d8cfec1e752b1ce6d70460622b475bcac331fdb8eaa847725c9612593ce3550c4da7112f3e

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
\Users\Admin\AppData\Local\Temp\is-6AGFA.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
\Users\Admin\AppData\Local\Temp\is-6TCEB.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
\Users\Admin\AppData\Local\Temp\is-6UUHI.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
\Users\Admin\AppData\Local\Temp\is-F5M1L.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
memory/932-983-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/932-986-0x0000000000290000-0x0000000000291000-memory.dmp

Filesize
4KB

Download
memory/932-981-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/932-2102-0x0000000000290000-0x0000000000291000-memory.dmp

Filesize
4KB

Download
memory/932-968-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/932-967-0x0000000000400000-0x0000000000551000-memory.dmp

Filesize
1.3MB

Download
memory/1132-2122-0x00000000008D0000-0x00000000008D1000-memory.dmp

Filesize
4KB

Download
memory/1132-3183-0x0000000000400000-0x00000000005A2000-memory.dmp

Filesize
1.6MB

Download
memory/1452-949-0x0000000000400000-0x0000000000530000-memory.dmp

Filesize
1.2MB

Download
memory/1452-151-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1504-2592-0x00000000002A0000-0x00000000002A1000-memory.dmp

Filesize
4KB

Download
memory/1996-885-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download
memory/2044-144-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2044-958-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2044-987-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2132-54-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2132-94-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2180-955-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2180-965-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/2180-966-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/2180-963-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/2236-2104-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/2268-1927-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/2268-1922-0x0000000000400000-0x0000000000566000-memory.dmp

Filesize
1.4MB

Download
memory/2268-1935-0x00000000745B0000-0x00000000745C1000-memory.dmp

Filesize
68KB

Download
memory/2268-1934-0x0000000050310000-0x0000000050349000-memory.dmp

Filesize
228KB

Download
memory/2268-1932-0x0000000061E00000-0x0000000061ECA000-memory.dmp

Filesize
808KB

Download
memory/2268-962-0x00000000002B0000-0x00000000002B1000-memory.dmp

Filesize
4KB

Download
memory/2268-959-0x0000000000390000-0x0000000000391000-memory.dmp

Filesize
4KB

Download
memory/2268-1926-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/2268-1924-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/2268-1923-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/2480-91-0x0000000000400000-0x0000000000530000-memory.dmp

Filesize
1.2MB

Download
memory/2480-61-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2572-186-0x0000000000400000-0x0000000000564000-memory.dmp

Filesize
1.4MB

Download
memory/2892-953-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/2892-956-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/2892-954-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/2892-957-0x0000000057800000-0x0000000057812000-memory.dmp

Filesize
72KB

Download
memory/2892-951-0x0000000000400000-0x0000000000551000-memory.dmp

Filesize
1.3MB

Download
memory/2892-952-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/2924-124-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/2924-941-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/2924-95-0x0000000000290000-0x0000000000291000-memory.dmp

Filesize
4KB

Download
memory/2924-103-0x00000000003B0000-0x00000000003F0000-memory.dmp

Filesize
256KB

Download
memory/2924-960-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/2924-125-0x0000000000290000-0x0000000000291000-memory.dmp

Filesize
4KB

Download
memory/2924-2050-0x00000000097E0000-0x000000000991D000-memory.dmp

Filesize
1.2MB

Download
memory/2924-126-0x00000000003B0000-0x00000000003F0000-memory.dmp

Filesize
256KB

Download
memory/2924-133-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/2924-1718-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/2992-178-0x0000000000400000-0x0000000000564000-memory.dmp

Filesize
1.4MB

Download
memory/3052-1918-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/3052-1917-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/3052-984-0x0000000004240000-0x000000000437D000-memory.dmp

Filesize
1.2MB

Download
memory/3052-1921-0x0000000057800000-0x0000000057812000-memory.dmp

Filesize
72KB

Download
memory/3052-964-0x0000000000390000-0x0000000000391000-memory.dmp

Filesize
4KB

Download
memory/3052-2047-0x0000000000390000-0x0000000000391000-memory.dmp

Filesize
4KB

Download
memory/3052-1916-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/3052-1982-0x0000000004500000-0x000000000463D000-memory.dmp

Filesize
1.2MB

Download
memory/3052-1919-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/3052-1948-0x0000000000860000-0x0000000000861000-memory.dmp

Filesize
4KB

Download
memory/3052-1915-0x0000000000400000-0x00000000004D7000-memory.dmp

Filesize
860KB

Download
memory/5352-1949-0x0000000003C40000-0x0000000003C41000-memory.dmp

Filesize
4KB

Download
memory/5352-1925-0x0000000000230000-0x00000000002BC000-memory.dmp

Filesize
560KB

Download
memory/5352-1920-0x00000000005E0000-0x00000000006EA000-memory.dmp

Filesize
1.0MB

Download
memory/5352-1944-0x0000000003EE0000-0x0000000003FF8000-memory.dmp

Filesize
1.1MB

Download
memory/5352-1945-0x0000000000920000-0x0000000000921000-memory.dmp

Filesize
4KB

Download
memory/5680-2123-0x0000000000400000-0x00000000005DD000-memory.dmp

Filesize
1.9MB

Download
memory/5680-3184-0x0000000061E00000-0x0000000061ECA000-memory.dmp

Filesize
808KB

Download
memory/5680-2001-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/5844-2002-0x0000000000100000-0x0000000000101000-memory.dmp

Filesize
4KB

Download
memory/5844-2454-0x0000000000130000-0x0000000000531000-memory.dmp

Filesize
4.0MB

Download
memory/5844-2103-0x0000000002FA0000-0x0000000002FE0000-memory.dmp

Filesize
256KB

Download
memory/5844-2051-0x00000000005F0000-0x00000000005F1000-memory.dmp

Filesize
4KB

Download
memory/5844-2025-0x00000000005B0000-0x00000000005B1000-memory.dmp

Filesize
4KB

Download
memory/5844-2003-0x0000000003A60000-0x0000000003B9D000-memory.dmp

Filesize
1.2MB

Download