990034eea06c068b8384741d36fab9e53c7cf7de10e8531b915f34c1ed0c0885

Resubmissions

13/07/2023, 13:40

230713-qykc6ahg5x 7

13/07/2023, 13:35

230713-qv4mmagh59 7

13/07/2023, 13:31

230713-qsdcnagh49 7

Analysis

max time kernel
43s
max time network
83s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2023, 13:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

advanced-systemcare-setup.exe
Size

48.5MB
MD5

f14d068cfae207f898fb76eaf1367043
SHA1

c3dbda0acaf1e5fd1a493d2dd1cc3da0c017f0bc
SHA256

990034eea06c068b8384741d36fab9e53c7cf7de10e8531b915f34c1ed0c0885
SHA512

544b9fecc1923d12ae027b48383fe4811b3684d7ddd797b2096b10a35fe9a1670d125110f4a2e77222bd6d434681af738cc519be326bfcc551e3fd141a27e663
SSDEEP

786432:yK021ALYXrd2i5u5ySyYTcER34bgeIT10qcbVR5i7ecLrqF1O029nSeJ4z:9IKU0udTdIbgBqbiScLr0h29SNz

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1420546310-613437930-2990200354-1000\Control Panel\International\Geo\Nation	advanced-systemcare-setup.tmp
Key value queried	\REGISTRY\USER\S-1-5-21-1420546310-613437930-2990200354-1000\Control Panel\International\Geo\Nation	advanced-systemcare-setup.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-R2K9O.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-5V7R5.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-1167P.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-S506K.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-LOGQF.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-KB1LT.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-7R7DC.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-IA3UT.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\History\is-49SI5.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-RS07H.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-03FTK.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-G5988.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-QLPO2.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-J8RTI.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-64S0V.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-6J989.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-LGEHF.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\History\is-7JHEI.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-OV7HE.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-CE7NJ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-JUU35.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-HCS2N.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-IQ438.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-P48KB.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-I4G8Q.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-SCRVL.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_ia64\is-6OA08.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\is-DIBIN.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-389BK.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-IL4EB.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-OFGRR.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\SPNativeMessage_Edge.exe	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\unins000.dat	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-70JNF.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-M1J15.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-MOVHD.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\InBoxDriverFeature\is-SAQMJ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\wlh_amd64\is-I3TFI.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-2PNIA.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-C7JTH.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-55RP8.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-T0IAE.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-PQD4H.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-8STFF.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-MOA4O.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-N36R3.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-IAIES.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-ADCTO.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Language\is-SPBUG.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-OJM95.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-JSIVS.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-E5TFF.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-2AITG.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-934HQ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-81GGL.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win7_amd64\is-71VCI.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\images\is-AKKGT.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Database\is-EPDUT.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\is-KTC7F.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\is-HN2LJ.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_x86\is-CSABE.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\Language\is-HQ0FM.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-QCOCP.tmp	advanced-systemcare-setup.tmp
File created	C:\Program Files (x86)\IObit\Advanced SystemCare\Toolbox_Language\is-JCR0O.tmp	advanced-systemcare-setup.tmp

Executes dropped EXE 12 IoCs

pid	Process
4600	advanced-systemcare-setup.tmp
1672	Setup.exe
2984	advanced-systemcare-setup.tmp
2868	ASCUpgrade.exe
3480	ASCUpgrade.exe
636	LocalLang.exe
752	ASCInit.exe
1376	PPUninstaller.exe
3988	RealTimeProtector.exe
6372	RealTimeProtector.exe
7264	DiskDefrag.exe
7792	ASCService.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
5240	sc.exe

Loads dropped DLL 41 IoCs

pid	Process
1672	Setup.exe
1672	Setup.exe
752	ASCInit.exe
752	ASCInit.exe
752	ASCInit.exe
752	ASCInit.exe
752	ASCInit.exe
752	ASCInit.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
752	ASCInit.exe
752	ASCInit.exe
3988	RealTimeProtector.exe
3988	RealTimeProtector.exe
3988	RealTimeProtector.exe
3988	RealTimeProtector.exe
3988	RealTimeProtector.exe
6372	RealTimeProtector.exe
6372	RealTimeProtector.exe
6372	RealTimeProtector.exe
6372	RealTimeProtector.exe
6372	RealTimeProtector.exe
7264	DiskDefrag.exe
7264	DiskDefrag.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 32 IoCs

pid	Process
1672	Setup.exe
1672	Setup.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
2868	ASCUpgrade.exe
3480	ASCUpgrade.exe
3480	ASCUpgrade.exe
752	ASCInit.exe
752	ASCInit.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
3988	RealTimeProtector.exe
3988	RealTimeProtector.exe
1376	PPUninstaller.exe
1376	PPUninstaller.exe
6372	RealTimeProtector.exe
6372	RealTimeProtector.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe
7792	ASCService.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2868	ASCUpgrade.exe

Suspicious use of FindShellTrayWindow 8 IoCs

pid	Process
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe
2984	advanced-systemcare-setup.tmp
1376	PPUninstaller.exe

Suspicious use of SendNotifyMessage 5 IoCs

pid	Process
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe
1672	Setup.exe

Suspicious use of WriteProcessMemory 36 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 4600	2088	advanced-systemcare-setup.exe	87
PID 2088 wrote to memory of 4600	2088	advanced-systemcare-setup.exe	87
PID 2088 wrote to memory of 4600	2088	advanced-systemcare-setup.exe	87
PID 4600 wrote to memory of 1672	4600	advanced-systemcare-setup.tmp	94
PID 4600 wrote to memory of 1672	4600	advanced-systemcare-setup.tmp	94
PID 4600 wrote to memory of 1672	4600	advanced-systemcare-setup.tmp	94
PID 1672 wrote to memory of 3720	1672	Setup.exe	99
PID 1672 wrote to memory of 3720	1672	Setup.exe	99
PID 1672 wrote to memory of 3720	1672	Setup.exe	99
PID 3720 wrote to memory of 2984	3720	advanced-systemcare-setup.exe	100
PID 3720 wrote to memory of 2984	3720	advanced-systemcare-setup.exe	100
PID 3720 wrote to memory of 2984	3720	advanced-systemcare-setup.exe	100
PID 2984 wrote to memory of 2868	2984	advanced-systemcare-setup.tmp	102
PID 2984 wrote to memory of 2868	2984	advanced-systemcare-setup.tmp	102
PID 2984 wrote to memory of 2868	2984	advanced-systemcare-setup.tmp	102
PID 2984 wrote to memory of 3480	2984	advanced-systemcare-setup.tmp	103
PID 2984 wrote to memory of 3480	2984	advanced-systemcare-setup.tmp	103
PID 2984 wrote to memory of 3480	2984	advanced-systemcare-setup.tmp	103
PID 2984 wrote to memory of 636	2984	advanced-systemcare-setup.tmp	105
PID 2984 wrote to memory of 636	2984	advanced-systemcare-setup.tmp	105
PID 2984 wrote to memory of 636	2984	advanced-systemcare-setup.tmp	105
PID 2984 wrote to memory of 752	2984	advanced-systemcare-setup.tmp	107
PID 2984 wrote to memory of 752	2984	advanced-systemcare-setup.tmp	107
PID 2984 wrote to memory of 752	2984	advanced-systemcare-setup.tmp	107
PID 2984 wrote to memory of 1376	2984	advanced-systemcare-setup.tmp	108
PID 2984 wrote to memory of 1376	2984	advanced-systemcare-setup.tmp	108
PID 2984 wrote to memory of 1376	2984	advanced-systemcare-setup.tmp	108
PID 2984 wrote to memory of 3988	2984	advanced-systemcare-setup.tmp	115
PID 2984 wrote to memory of 3988	2984	advanced-systemcare-setup.tmp	115
PID 2984 wrote to memory of 3988	2984	advanced-systemcare-setup.tmp	115
PID 3988 wrote to memory of 6372	3988	RealTimeProtector.exe	114
PID 3988 wrote to memory of 6372	3988	RealTimeProtector.exe	114
PID 3988 wrote to memory of 6372	3988	RealTimeProtector.exe	114
PID 2984 wrote to memory of 7264	2984	advanced-systemcare-setup.tmp	113
PID 2984 wrote to memory of 7264	2984	advanced-systemcare-setup.tmp	113
PID 2984 wrote to memory of 7264	2984	advanced-systemcare-setup.tmp	113

C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe
"C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Users\Admin\AppData\Local\Temp\is-AK8U0.tmp\advanced-systemcare-setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-AK8U0.tmp\advanced-systemcare-setup.tmp" /SL5="$601B4,50323178,137216,C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Suspicious use of WriteProcessMemory
  PID:4600
- - C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\Setup.exe" /InnoSetup "C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:1672
  - - C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe
      "C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe" /VerySilent /DIR="C:\Program Files (x86)\IObit\Advanced SystemCare\" /UNINSTALL /INSTALLER /NORESTART /TASKS="desktopicon" /CreateTaskbar
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3720
    - - C:\Users\Admin\AppData\Local\Temp\is-QE78P.tmp\advanced-systemcare-setup.tmp
        
        "C:\Users\Admin\AppData\Local\Temp\is-QE78P.tmp\advanced-systemcare-setup.tmp" /SL5="$D0176,50323178,137216,C:\Users\Admin\AppData\Local\Temp\advanced-systemcare-setup.exe" /VerySilent /DIR="C:\Program Files (x86)\IObit\Advanced SystemCare\" /UNINSTALL /INSTALLER /NORESTART /TASKS="desktopicon" /CreateTaskbar
        5⤵
        Checks computer location settings
        Drops file in Program Files directory
        Executes dropped EXE
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:2984
      - C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe
        
        "C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe" /upgrade "c:\program files (x86)\iobit\advanced systemcare"
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:2868
      - C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe
        
        "C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe" /CleanDir "C:\Program Files (x86)\IObit\Advanced SystemCare\"
        6⤵
        Executes dropped EXE
        Suspicious behavior: EnumeratesProcesses
        
        PID:3480
      - C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe"
        6⤵
        Executes dropped EXE
        
        PID:636
      - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe" /install /CreateTaskBar /Installer=true /insur=
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        
        PID:752
        
        C:\Windows\SysWOW64\cmd.exe
        
        "C:\Windows\System32\cmd.exe" /c SC description AdvancedSystemCareService16 "Advanced SystemCare Service"
        7⤵
        
        PID:8172
        
        C:\Windows\SysWOW64\sc.exe
        
        SC description AdvancedSystemCareService16 "Advanced SystemCare Service"
        8⤵
        Launches sc.exe
        
        PID:5240
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\UninstallInfo.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\UninstallInfo.exe" /install asc16
        7⤵
        
        PID:5284
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\PinLink\ICONPIN64.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\PinLink\ICONPIN64.exe" Pin "C:\Users\Public\Desktop\Advanced SystemCare.lnk"
        7⤵
        
        PID:5308
        
        C:\Windows\System32\regsvr32.exe
        
        "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll"
        7⤵
        
        PID:5352
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserCleaner.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserCleaner.exe" /InitData
        7⤵
        
        PID:5420
        
        C:\Program Files (x86)\IObit\Advanced SystemCare\PrivacyShield.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\PrivacyShield.exe" /ShowStr=silentWriteCache
        7⤵
        
        PID:5524
      - C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe" /i
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of FindShellTrayWindow
        
        PID:1376
      - C:\Program Files (x86)\IObit\Advanced SystemCare\DiskDefrag.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\DiskDefrag.exe" /install
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:7264
      - C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
        
        "C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /install
        6⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of WriteProcessMemory
        
        PID:3988
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.iobit.com/appgoto.php?name=asc&ver=16.5.0.237&lan=&st=asc_install&ref=asc16&aff=&idata=eyJhc2MiOjEsImRiIjoxMCwiaW1mIjoxMCwiaXUiOjEwLCJzZCI6MTAsImlzdSI6MTB9&usr=0&instd=1&litype=free&expd=0&insur=other
      4⤵
      PID:1444
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x9c,0x108,0x7ff9136546f8,0x7ff913654708,0x7ff913654718
        5⤵
        
        PID:6184
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12753682628483152510,5425853994503899566,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2904 /prefetch:1
        5⤵
        
        PID:4336
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,12753682628483152510,5425853994503899566,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2884 /prefetch:1
        5⤵
        
        PID:4704
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,12753682628483152510,5425853994503899566,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3444 /prefetch:8
        5⤵
        
        PID:3896
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,12753682628483152510,5425853994503899566,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3416 /prefetch:3
        5⤵
        
        PID:4564
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,12753682628483152510,5425853994503899566,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3368 /prefetch:2
        5⤵
        
        PID:3816
  - - C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserProtect.exe
      "C:\Program Files (x86)\IObit\Advanced SystemCare\BrowserProtect.exe" /TurnOn
      4⤵
      PID:6168
  - - C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
      "C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe"
      4⤵
      PID:6284
  - - C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
      "C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe"
      4⤵
      PID:6988
  - - C:\Program Files (x86)\IObit\Advanced SystemCare\ActionCenterDownloader.exe
      "C:\Program Files (x86)\IObit\Advanced SystemCare\ActionCenterDownloader.exe" /Product=ASC16 "/Config=http://update.iobit.com/infofiles/installer/Freeware-asc.upt" "iTop VPN Installer B" "iTop Screen Recorder Installer" "iTop Data Recovery Installer"
      4⤵
      PID:6968

C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTimebase.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTimebase.exe" /boottime
1⤵
PID:8100

C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:7792
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe" /UpdateTaskschd
  2⤵
  PID:4896
- C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /RunCurUs
  2⤵
  PID:8172
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe" /start
  2⤵
  PID:5244
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe" /AddAutoRun /3 /43003A005C00570069006E0064006F00770073005C00730079007300740065006D00330032005C005400610073006B0073005C004D006900630072006F0073006F00660074005C00570069006E0064006F00770073005C004100700070006C00690063006100740069006F006E00200045007800700065007200690065006E00630065005C0050006300610050006100740063006800440062005400610073006B00
  2⤵
  PID:7192
- C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\smBootTime.exe" /AddAutoRun /3 /43003A005C00570069006E0064006F00770073005C00730079007300740065006D00330032005C005400610073006B0073005C004100530043005F0050006500720066006F0072006D0061006E00630065004D006F006E00690074006F007200
  2⤵
  PID:7208
- C:\Program Files (x86)\IObit\Advanced SystemCare\Display.exe
  "C:\Program Files (x86)\IObit\Advanced SystemCare\Display.exe" /service
  2⤵
  PID:7696

C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe" /Run
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:6372

C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /manual
1⤵
PID:6712

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:7240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:7328

C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe
"C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe" /manual
1⤵
PID:7296

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

T1081

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.EXE

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe

Filesize
10.4MB

MD5
d7906166b7b3d2c2c070711224008eb0

SHA1
18bffcfa80b9cebaa4ad5a7be50504c3cdd6de64

SHA256
1baf1813ee58c8c22407e5a260ac8a599281caae7abb7ff7d77d167cf71c49bc

SHA512
16bad4a59105b55e36a9bd08c46c914e0e7dac9c1ca9a215d8f613460ad18766c41ed6e53e71584f25ee67c57b20b17479f20ef6e0c6f5f5c9df61856e400441

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.log

Filesize
1KB

MD5
44a84a9de744ac1dafb8e994bb6f560a

SHA1
544ef5da52c29de2e85a476f71887038949fe1a7

SHA256
4f88f52630d604b1f81cd73e0138122a18dd7304f49fe4ea8a77e6a21fcd7930

SHA512
5c1924c7a4a541b294528a0d31d21a072445363e247fca9d6fc7bedf714f44e0dac7cc6fe2ed38db7dfe25acfd5c7f182889660c51852599e73793cdc14721ee

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.log

Filesize
2KB

MD5
94eb7b1d581385b5b28ef3e8612339f2

SHA1
42e302fc2e7e9fb9d1bc2bfa714d5564acdd666e

SHA256
95ca153eb9f859a7018eec3fbd58337993cc52e6e6826e829514b1521cfe4428

SHA512
2738ef5dee9d99433aca6aafde9a62934a03236f3cc7b6661e1c066d839d67f1f05725dc56af47b241801392e6ed989db7c7ba5c6a2c218813b976f8236eb2fe

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.log

Filesize
5KB

MD5
bd0b9847252fa5fe256da8e45fa69c38

SHA1
5dcd3c3ff77f767fdbd4f563a00a6b26c73df5d3

SHA256
f95cca8554e25388758c5ec014827dd63a4a0208d67b59854274f87101a2e204

SHA512
5505d89e6c6e34ec3581c95012b111a674b17ba65ff34bd30081302377b9b054a96a73b65c4b6f406cd27417f8c94a7e13b43bf5591e82b082f9ed4df2c69e15

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.exe

Filesize
845KB

MD5
d0d95ed48c274ede3ec3d81b644ada3d

SHA1
93981f04409bf7fa5d163f10c7fcbe1c8bc18500

SHA256
cefb7c31d2da85081eb5ff1244c757e283a6d5197a1c7ab56971be678128afab

SHA512
254e84a971e44917dc072023a780eda5be32ab78cf78976bb6ef13f0c5071e4c809397596f28b0022ab4f7b1b873e7f1273571237ece97f3d56989473cc1f361

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCInit.log

Filesize
868B

MD5
808b3206f5aae5bcdd3322e08df36d7e

SHA1
3373a1d8437e5b7917e33ebd44538560f596f89d

SHA256
2351eb17c0f545b078358afd4ebff6a3e034e4068be31fa576c088b42f9fa327

SHA512
02a89dcb2088208409b6bfb7334e017136e391e5f7d7c24e3d0225895f1b35231cb1a248cff010413d66d047460a9b85668a041f6f7b25f9dd875eaaa60f8aa3

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.log

Filesize
1KB

MD5
cae4258a04a0af9cfd56e87e704bf594

SHA1
b65ff7b091ad5450bcfa4261250cd09c53905ac6

SHA256
042db754c98f0e54ffd1ef38173433bc9edc4a074502c2cbaec5ebb5b826057c

SHA512
6d7efcae213ba59a51f05c137d4d04719e83866a29806d92ea1cc911f7a1ff08114791557e5ad9d888b3e3f76e426c1d768bb63b0d7ca5de0bb5bf02e998434a

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.log

Filesize
2KB

MD5
819d47731182a2722100997128f47232

SHA1
a276bdd6db378889fe5e613743431ed4c81cf124

SHA256
860ff1cd5fbf69c3076d4fdc0ea607359fda4aff3f323279de6169de5c31b47f

SHA512
0ba76047231c1d7fe587d049f3a31f211c7600826d810fd5c18d90bfef5f6050438c84da19d4a63c554474c0ea01fc4c718a8296aa6305ce4850463f1be2bf0f

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.log

Filesize
3KB

MD5
1135cf35c007d81d7c686bdc3c19201d

SHA1
7b1572d085942c4d86e60e67836db139fc4f12cf

SHA256
7752893f630db528f9c3f4b258cae4e930a94c6eb01d83a344f3004c423260ac

SHA512
599f8c5b32b1172acaafd2c90ff50b54bec32aee56eab44ef574f357454788b5ca9877d31306416a5d445379213c13eb2794412cdee6d78766b720f58cc190fc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\Database\ignore.dbd

Filesize
12KB

MD5
2802a5adfe7744bfca1ad914491de635

SHA1
43a7182b44282bf5b8a9a6b01cfc726d8a27d511

SHA256
d65c68d86d849e867d6ccce13312377bfab9f9d10de1fd82ebfe4d096aa3c797

SHA512
b76335b6dbcea3497d8a5842decbe6db140ead51ba01c9d7bb0b59cb1847f8f989d08a3ea6a346ce03569d2da6609d2803f111c7c5e49f928ca4b16c34189dfa

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\DiskDefrag.exe

Filesize
32KB

MD5
f98a4521a2d99476b50fa4aeb71cd15d

SHA1
7a66ee7d7c88c5ff7f9d84277b97bfd66c4b20c6

SHA256
65d20649d14af3e6025765b5d0436c5396edd430bf155cbf8ad0b1483a7671f4

SHA512
b297763f3d9db97ca84c0509af0b6c289ee934327df280ddeae69573a934ad3fe7be7411e1f831a49080e9418b187864b205c31e8ebb1ce0e41d7cfc6efeabc9

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\HardwareLib.dll

Filesize
188KB

MD5
c534cd2ef9da6d3a50c27dad7a188a04

SHA1
0ec214523183fa2a47e434258fb4320c49cf851d

SHA256
040d71da31dae5b78f3e29149962f79d4cf53cf9a88a6e82d94a3f65cbefb09b

SHA512
b376eeaa837d8ee06b26e06cd31ab22a3ce30c4529cea9040fd876877ade3de8d76e74dc8eee52b7ec6c0880c8fec54b4bcd158f5c3bc676d1f360d09d9cb6e2

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\HardwareLib.dll

Filesize
188KB

MD5
c534cd2ef9da6d3a50c27dad7a188a04

SHA1
0ec214523183fa2a47e434258fb4320c49cf851d

SHA256
040d71da31dae5b78f3e29149962f79d4cf53cf9a88a6e82d94a3f65cbefb09b

SHA512
b376eeaa837d8ee06b26e06cd31ab22a3ce30c4529cea9040fd876877ade3de8d76e74dc8eee52b7ec6c0880c8fec54b4bcd158f5c3bc676d1f360d09d9cb6e2

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\LocalLang.exe

Filesize
229KB

MD5
bcb3518e3c4f380e7b26ce231997b0a1

SHA1
566fbf7a9272172b01c82d67d5d2345c7bb82577

SHA256
66c52f12265cd51d05a94f506dfea049ffe29c7e3705c6f0a8808455a877b5f5

SHA512
bb99790cb1465848d0d7d7376519823058f642bd7b69ec6573379d219a9147fd2af662904d75bb51a13d8010cfd7d125ca4b1921a4acd03845a0597d477f12cc

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\OFCommon.dll

Filesize
992KB

MD5
35f41fa498bfeff4b3d94aaa670f317b

SHA1
c0a75452c5eb5ff1d372892cd189502bd6ac5520

SHA256
6d5b5b0ec6d85e847007db9d0228f402e3fcf6b43c4e7fe6bb17ca2f89173807

SHA512
d609ebb49d907a6a9164d5b342c7ceb6ffe2a4947b07f81589423f693d6d26a09b45a39d155f5e3633d203e67bb3d4e6c1f637dde0f14b94eedde6b34fc5a0d5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\OFCommon.dll

Filesize
992KB

MD5
35f41fa498bfeff4b3d94aaa670f317b

SHA1
c0a75452c5eb5ff1d372892cd189502bd6ac5520

SHA256
6d5b5b0ec6d85e847007db9d0228f402e3fcf6b43c4e7fe6bb17ca2f89173807

SHA512
d609ebb49d907a6a9164d5b342c7ceb6ffe2a4947b07f81589423f693d6d26a09b45a39d155f5e3633d203e67bb3d4e6c1f637dde0f14b94eedde6b34fc5a0d5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\OFCommon.dll

Filesize
992KB

MD5
35f41fa498bfeff4b3d94aaa670f317b

SHA1
c0a75452c5eb5ff1d372892cd189502bd6ac5520

SHA256
6d5b5b0ec6d85e847007db9d0228f402e3fcf6b43c4e7fe6bb17ca2f89173807

SHA512
d609ebb49d907a6a9164d5b342c7ceb6ffe2a4947b07f81589423f693d6d26a09b45a39d155f5e3633d203e67bb3d4e6c1f637dde0f14b94eedde6b34fc5a0d5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe

Filesize
1.1MB

MD5
c058768b94f6552aa39061ff214bd065

SHA1
2b38062b78ea134273d676de3430b7031745271a

SHA256
34f09efde3f3e12d148de748757ae6149ba05c3763c167020e59c9dd57e1dfcf

SHA512
9c88c13c987f57b603fe48ff4e19bc951cf48281a57a98a0040f31d3d1d076c7db3550da5177cfd7de7a20eac48e2f7adddaccc4e9d079d6c2db22ca0679325e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe

Filesize
1.1MB

MD5
c058768b94f6552aa39061ff214bd065

SHA1
2b38062b78ea134273d676de3430b7031745271a

SHA256
34f09efde3f3e12d148de748757ae6149ba05c3763c167020e59c9dd57e1dfcf

SHA512
9c88c13c987f57b603fe48ff4e19bc951cf48281a57a98a0040f31d3d1d076c7db3550da5177cfd7de7a20eac48e2f7adddaccc4e9d079d6c2db22ca0679325e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PPUninstaller.exe

Filesize
1.1MB

MD5
c058768b94f6552aa39061ff214bd065

SHA1
2b38062b78ea134273d676de3430b7031745271a

SHA256
34f09efde3f3e12d148de748757ae6149ba05c3763c167020e59c9dd57e1dfcf

SHA512
9c88c13c987f57b603fe48ff4e19bc951cf48281a57a98a0040f31d3d1d076c7db3550da5177cfd7de7a20eac48e2f7adddaccc4e9d079d6c2db22ca0679325e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\PrivacyShield.log

Filesize
87KB

MD5
5c41b6191ac1165bc217625d09ea31b6

SHA1
6fc54f89254f8e6bf40f1106c2a5c2de77ea5f44

SHA256
76fdb30bfd2a451932d8c8fd2d0d1ac0fa7989dcd94dfcee3ff6514f4dc544c6

SHA512
5ba5db54c578b6ca2bc57f3e2f891ddde6a0be5adba61360e99772b7a9d777c1a963b7a82bb71b6769be87b72f07bac1af40e29a3063ef4ef54cad6f80564eff

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\RealTimeProtector.exe

Filesize
1.1MB

MD5
0e7882975ac8dd3a0f8f48734705c192

SHA1
4f617a3149ef53244b8715ac288af44ceee01467

SHA256
3ea20404b5592aeccc3466eacd93c0e3a1ed1294f525668837a6bd20bdd84383

SHA512
2a9193da99027bb3e1778277b913c0be33076f1d6d73fb6fdd7bf66dbdc07547c9007d0a8da6b10256db73a4ed80e7bba0b9861b4eaf6eebc05bf88cc31b53da

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\Register.exe

Filesize
2.9MB

MD5
c59538de5477005cd9264c57146a1b2e

SHA1
d421339822033d724fded9f330f43b8739826acc

SHA256
742445d540a7d3a96c95a12cb24a84780255c577a4280a65613be4352779e48f

SHA512
21a2e9f941a361e66eb61e78828d7d6445f176622495089c2d36370dbc544352629a2f24f1374f71300aa5b6d23367810533179050611822532885a5b22f4213

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ASCUrlScanner.dll

Filesize
484KB

MD5
9bbbacf7e04d12ded0b46a69ca785ea6

SHA1
1c66160f340ae8869bcdd0df061acf43616e3115

SHA256
39f78b45d8e587bfd83592bfc00bc553535581f7eac2189e796629c3e942e268

SHA512
b02445bd9d9b4f0d4056f241a1fb36d16c414e9afa85c9ffa2fadcde9223c5e3a1b33d363899402d4f418e706f851ec4b290994e3851670a1a12b04880246c3e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\Surfing Protection\SPNativeMessage.exe

Filesize
1.4MB

MD5
a4c4cb5cd7e4c30d4d7e0dfb58c00a22

SHA1
1cf21920ff7c3f14d9084ae72db87b14de8635e4

SHA256
a711deeca99de5187715b98d942ddc93ced74d426f2e7213bd1237d5fdc31bbd

SHA512
b3f36061b60a31f6620f634e2ed2944f59643de2e08e1186eb61592d1660291f294afd5f2f9974bec504e130904222b2239387958d7dea82fc22f856e89b6781

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\Update\Update.ini

Filesize
6KB

MD5
04b25f2f64a895e7d2ace377c00d3999

SHA1
4f7a382da9fc38d4b2ed02dc50c4b02d3c95c05b

SHA256
eb581eb57f0cd1a0fd9a1bce536fda7a843bb6b09bdc9c8e6617e74e9933bd1e

SHA512
146fa86e80dfdf21b7b568d420498aa573b6dfa8a092ef11c23411656c44834bae99e71b5f38843b021d3bedf53c2292694e8c483abe401641858027dd8d0783

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\datastate.dll

Filesize
78KB

MD5
86bdbc01aecd0a413ee4a0583949329d

SHA1
f921cd9c5e89c1acecd7b235583e6d65165a6614

SHA256
85c0c5b3e17c5f9e9f5531dd9dc848b946a29902ce1294ca7a32a1d169fa0faf

SHA512
3b13542a9354297b27415ab9d9bca6adda884d4e2238cc924715ef29f14d819a3c768b9d8a2c7fffe6c6500c9a79b5483e1265df870650a215e928ac28b1225f

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\datastate.dll

Filesize
78KB

MD5
86bdbc01aecd0a413ee4a0583949329d

SHA1
f921cd9c5e89c1acecd7b235583e6d65165a6614

SHA256
85c0c5b3e17c5f9e9f5531dd9dc848b946a29902ce1294ca7a32a1d169fa0faf

SHA512
3b13542a9354297b27415ab9d9bca6adda884d4e2238cc924715ef29f14d819a3c768b9d8a2c7fffe6c6500c9a79b5483e1265df870650a215e928ac28b1225f

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\is-DNNVS.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madBasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madDisAsm_.bpl

Filesize
64KB

MD5
f1d430eacd5aac17c5de78f0de3cf774

SHA1
b1c410ea2659d2d7a44b8458ffd98e14ef6ddb8d

SHA256
20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62

SHA512
bcbf4b4c7b02ddefd78d03f1d6d047aa5729a4e8ae673ca6d72488ca7d3fc6a03893d9a6b446e6bb629927352535d85745b882c80b5913c726d5674efaf2339e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madExcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madbasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madbasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madbasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madbasic_.bpl

Filesize
212KB

MD5
73bc46c0170de5d72d1e5e0df51ee68f

SHA1
bc92d0c16258b2a42ad9774fa7b6006bc32607ed

SHA256
4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8

SHA512
642b19235bc62c26610092a865a1cabb7421296ac1885d1a50e99affe92a732347723fd028f71ff3d641a8ac7ec1567a97c8423369f28c806da9dbe00cd09e9b

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\maddisAsm_.bpl

Filesize
64KB

MD5
f1d430eacd5aac17c5de78f0de3cf774

SHA1
b1c410ea2659d2d7a44b8458ffd98e14ef6ddb8d

SHA256
20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62

SHA512
bcbf4b4c7b02ddefd78d03f1d6d047aa5729a4e8ae673ca6d72488ca7d3fc6a03893d9a6b446e6bb629927352535d85745b882c80b5913c726d5674efaf2339e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\maddisAsm_.bpl

Filesize
64KB

MD5
f1d430eacd5aac17c5de78f0de3cf774

SHA1
b1c410ea2659d2d7a44b8458ffd98e14ef6ddb8d

SHA256
20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62

SHA512
bcbf4b4c7b02ddefd78d03f1d6d047aa5729a4e8ae673ca6d72488ca7d3fc6a03893d9a6b446e6bb629927352535d85745b882c80b5913c726d5674efaf2339e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\maddisAsm_.bpl

Filesize
64KB

MD5
f1d430eacd5aac17c5de78f0de3cf774

SHA1
b1c410ea2659d2d7a44b8458ffd98e14ef6ddb8d

SHA256
20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62

SHA512
bcbf4b4c7b02ddefd78d03f1d6d047aa5729a4e8ae673ca6d72488ca7d3fc6a03893d9a6b446e6bb629927352535d85745b882c80b5913c726d5674efaf2339e

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madexcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madexcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madexcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\madexcept_.bpl

Filesize
438KB

MD5
9ff9e6b33bee8e297bbdb47e8ac9b60f

SHA1
b49d037a12c43958ab24b3869359e6ddbe8cc551

SHA256
655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815

SHA512
7552139146d3cc913cb0c20ac612e194cdca01f202abb668e3451c343d8e4b5e967a3c90420817cea400a20c215b4cb4956a80896d6bb10c4f5ad720b9667109

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\rtl120.bpl

Filesize
1.1MB

MD5
4f2040add9f5b541db07a2e866e2c5ca

SHA1
b04da67e7ba7207deb99f56062661edc919f543a

SHA256
b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22

SHA512
4fc2f75a8999e1a463d97bb89ad3cfdef4dd35615df6538f794e01f98de205a19bdae9dee58ceff6e9e3f08b5497c0f62e1b971a859bce711974d5f2e2180914

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\sqlite3.dll

Filesize
908KB

MD5
5b5a926a887f4a9f3eecc54598f697db

SHA1
86044be248e9fac25a0d8a3dd3c617da8688b7ea

SHA256
bc0c750c98bd413e7975e8b17b1101c346dda53100020161bc5141f77ed98932

SHA512
3031b4cf17cd4261d9c36495cfb707c6be10bd1444c8e474d1f117df55cadb32fe1661f239499d6f1ba3d3d96def6f6b4eae7e3fba543c6a5c8b98dedeb91412

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\sqlite3.dll

Filesize
908KB

MD5
5b5a926a887f4a9f3eecc54598f697db

SHA1
86044be248e9fac25a0d8a3dd3c617da8688b7ea

SHA256
bc0c750c98bd413e7975e8b17b1101c346dda53100020161bc5141f77ed98932

SHA512
3031b4cf17cd4261d9c36495cfb707c6be10bd1444c8e474d1f117df55cadb32fe1661f239499d6f1ba3d3d96def6f6b4eae7e3fba543c6a5c8b98dedeb91412

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vcl120.bpl

Filesize
1.9MB

MD5
3370add5bdff47bc8ebb0dd2fca36b32

SHA1
573144b3427279e687ac1d0f131b58dceb47e186

SHA256
52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244

SHA512
0efc1d3a723d8ec15b5067812741b67c281c6b5aa29a057467e668f10d8e6379f48299e83ad35cf60a2ae26b5acee660d41f7aa12a122adb36a1bc512cd241e5

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vclx120.bpl

Filesize
223KB

MD5
49f74e40e1f7971be8d0ea71f2bfe90b

SHA1
a37b40b4bc153a2e76c1d62bcad6f2318f8db903

SHA256
de93bd10fdf546a57f24f97034f61699265dd80f973739f2ea5c68a0db540a5c

SHA512
84239ef5bf648196b4a9bf099d39f8c4603c22b72405485b17c25b0b767b8a08a209dccc800394a8152d4f5a0cc722fbc0390860cab020b269e110d42b310dea

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\vclx120.bpl

Filesize
223KB

MD5
49f74e40e1f7971be8d0ea71f2bfe90b

SHA1
a37b40b4bc153a2e76c1d62bcad6f2318f8db903

SHA256
de93bd10fdf546a57f24f97034f61699265dd80f973739f2ea5c68a0db540a5c

SHA512
84239ef5bf648196b4a9bf099d39f8c4603c22b72405485b17c25b0b767b8a08a209dccc800394a8152d4f5a0cc722fbc0390860cab020b269e110d42b310dea

Download Submit
C:\Program Files (x86)\IObit\Advanced SystemCare\winid.dat

Filesize
691B

MD5
257e156c11b8b7add49c39f8ca6a3f0f

SHA1
bb187acab93b07564574869fff60696c56d689be

SHA256
a3f9a47f0b48afb31464cbd4bed3338546094757cf7796cc6bec3bd7d2562852

SHA512
28d22fbd87a05d51af442b662befc06ecae1312136475d286cc1b747d255be4705a9ac5102825942a3b9c3d00cf2e9714f47ca25a246e30d3713ecbaa598fa7b

Download Submit
C:\ProgramData\IObit\ASCDownloader\ASC16DownloaderAC.log

Filesize
1KB

MD5
38d4fa0d2a652659ce408da79ace15a7

SHA1
52bdfb34251485f20717016d680af7ee1d9477c7

SHA256
0de7499cbc192e8f859de886580d8db08bd06b3656bf9aedbc86b2b25062426e

SHA512
5a8f13c44f01e84d103704a24fb9324ea73ad6adcb40ebd4929c0741e4f8bc9fd6d95f44db55dd3896548045f5a8ee3b16e503db4285e2760ef254ff87981e28

Download Submit
C:\ProgramData\IObit\ASCDownloader\ASC16DownloaderAC.log

Filesize
3KB

MD5
b63633fee9cf6e802d728c09c51e6d12

SHA1
bf2e8e529b74e0efcf109596f4e6027c126d5147

SHA256
911665192a235b093c36134be9d242efb0210083a9ce59ce507143954e9f0a90

SHA512
c224c29d3b72e40a965b3e6a8bfe58bf47c291f7070837d90235fcf8008a81de295278e3d004f68b049b0907c01b755e627a0faf3b0009cef727560271f1b9ee

Download Submit
C:\ProgramData\IObit\ASCDownloader\ASC16DownloaderAC.log

Filesize
5KB

MD5
b82f7ec0d94257ec16f628fc70a4bda0

SHA1
81059ad415f905fd1a22b009689c373217502a11

SHA256
fb7bfe5cb7d49d15eb1c5c61dee8d9ddb1b7d68640278cd17a9bcffe285df5fa

SHA512
7195da4d57c628bd473f7e6ca62e07900fa8b089e678eb796f17cc8b68ee3d4adcff126cddb1e4852c3f3c7566f58a5018e8dcd0ad1af6998239a3a4313bcc8b

Download Submit
C:\ProgramData\IObit\ASCDownloader\ASCInstaller_Downloader.log

Filesize
1KB

MD5
339dae371594b809b3841d658e06a960

SHA1
ed4100683e9c161574b66a446d29e5fb7668c165

SHA256
e2fb1588256334429677349fe44a9a8758363ec13a6e3cc1ec28ebb731e7dc7b

SHA512
735184b698943ef9b3da7882ae823678718f0132446e1ea63b77f0d0d18412b11b32cddf8e392766bc6b558c8abc9c94dc6bc74d785df44c901f785fe16a1f10

Download Submit
C:\ProgramData\IObit\IObitRtt\ASCRtt.ept

Filesize
148B

MD5
b15968aad9e33b0c74ab13dbcc7bdd05

SHA1
065e3ad65cf55e4ef66638f972d1a91ba02e9cbc

SHA256
26109c4c54ec5e237e4a0b1a97ce0a9aa158342066c27a43f388e4a0824a7c19

SHA512
a22f9c330e0d6c986777bd5c7b8ba25102346a3e5c92f50c0dd219cb061e3356e647791ac71595a850eee18301baed0ead065b53811a9738b24d0748ea000249

Download Submit
C:\ProgramData\IObit\Install.ini

Filesize
102B

MD5
b75af6466cd2bad627708bf29387ff72

SHA1
d5056c69ad56a3b0e613f18290a8ef001d7bbb14

SHA256
a38696412a175cb4400a6621b02949d0031236dcaad12650f70a98cfff6211c5

SHA512
b8f9b1359fc8fdb9ad8e7d85e8e34756f61290c49c7e9ed5a94fc6567bc2f0ef811afbeb5868978edf37c83101ca16a02c94b4d8160010c594543df491c1839b

Download Submit
C:\ProgramData\IObit\iobitpromotion.ini

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\ProgramData\IObit\iobitpromotion.ini

Filesize
256B

MD5
fc4e5f80bee6e21c477c312b9213087d

SHA1
9fd097b3d54ef4e04ac8f6f313abbd27fdf97eeb

SHA256
f4a8b66f6782c6f86b02efd3d6d87583c30e61872f0848edcfc29c7a9ce10aa1

SHA512
d8dd5be68eb8c4fc89db19cc819bbdfa9ac7d99d8547093f2562e1142316eefc274af25909ef184b7b2f33d5445ee488bba50c2aca85f343c8facb372f3d35a5

Download Submit
C:\ProgramData\ProductData\StatCache.db

Filesize
250B

MD5
0d2297a879e51776ef9b1c0f3b4a9c76

SHA1
9dd3b5e58f1f73e21dbd0824329cf19648934f1b

SHA256
34a0ea9e88fd6cb1fbb2974fb3c593155c144059d5b83ee72bfea3c6aa1c8c45

SHA512
ef40e2bd521c39cca3c136b4cbaf3f7af2544ac4d827c6568815f083b17162a4c78137cca65f969d77b5c54ce214b99225835e8e9c2c25b3b2d880d742be905d

Download Submit
C:\Users\Admin\AppData\LocalLow\IObit\Advanced SystemCare\Main.ini

Filesize
58B

MD5
93b446dd65d042839a2b8945297bfd27

SHA1
7ef7655ab2cac178f7de0fb202f49a1ede669629

SHA256
c1fa0ccf737521386cd519f7a021db26a67d28cde89da75f564ecc1d1d31ee6b

SHA512
53595d19e40dc3bb704c06efb97303020c053d8d114aff806891535de1c0469b61c4f8d66709f45f07215c44d810afaabc5bb20f67833c789fa18d9bba074cdc

Download Submit
C:\Users\Admin\AppData\LocalLow\IObit\Advanced SystemCare\ProtectRecords.ini

Filesize
138B

MD5
0e9856970f5cb2544dbf5ea83fe9391e

SHA1
1379805a305d9de0ba7eeb1f7cc46f40eb59a7f4

SHA256
dd5bf9c2f483789e8853dbc42429774e9c28d51a086a6c57ef78dd414e5a5422

SHA512
010591395be0eec618cc8e9625228ae7fd5e3c91162e24ee96bc2c818abff44b9ae9d0d1e0a6261cb40ccd2cebc1b7145bb1c3cd9abac25780ad41b4463f0c47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fc99b0086d7714fd471ed4acc862ccc0

SHA1
39a3c43c97f778d67413a023d66e8e930d0e2314

SHA256
45ef01f81605bfd96126d5520c5aa0304c7fa7d5fdb3e4d5b2dd2bf84e2afd96

SHA512
c308fa3eda9235d67a506a5f058fefb9a769ec01d7b0d4f5a2397892cc4f8155301c55c1fac23bebacdd087ab3f47f1eacc9ff88eff4115a7d67aa7b1d6581a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1e3e46f3d66c9356582a77f450afeac0

SHA1
73be9f6920759b30e9b75e3f3e88ed8ebffdaf63

SHA256
a4946159813e9b4b9e745372a7f16eba281013f578d3157d045d33aa9473abc1

SHA512
5546c59fe4bd392d77ddeb5797dbd0d043ed094b052660750f04a28ff9b35ceef81bd1617728b922645d683b8546e740ce682ca81127d49849f60b11342b99fd

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\ASCUpgrade.exe

Filesize
1.4MB

MD5
59a2ccb20887a9240e8a94cc543eb2e3

SHA1
9aeeca3d1f4edd4b43db69f305ae4cbbfc7e3dce

SHA256
bce838df1abf389a6d92f757fd4607606a711b1a0d4a92b7697302f38a55bde6

SHA512
2aa01e97f25e445d6f36ce112cfc37bdb3a85bb2c4c371020ab12207bed635a1a24c8474786fa694176571a197c862123073b81d816929b81208dcf849b8aa75

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\_isetup\_shfoldr.dll

Filesize
22KB

MD5
92dc6ef532fbb4a5c3201469a5b5eb63

SHA1
3e89ff837147c16b4e41c30d6c796374e0b8e62c

SHA256
9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87

SHA512
9908e573921d5dbc3454a1c0a6c969ab8a81cc2e8b5385391d46b1a738fb06a76aa3282e0e58d0d2ffa6f27c85668cd5178e1500b8a39b1bbae04366ae6a86d3

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\libcrypto-1_1.dll

Filesize
1.7MB

MD5
b09a5c562bb1d521de69d37ce5286f3e

SHA1
5177d1c96fc389c6377d4256187f76579cdeb2ed

SHA256
c4e3f16290ce92d87c62da129249fae41bdb4f65b47d31d911ed722623fbb181

SHA512
5d2c0cd8d9625fb4424d01b1316064e8b4ec6106e76fb3f7972ad6f6d646464269a0351c228ee2e5cb247d3b8366a48d9791297e13244253a0e01c6793c148b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-6PU60.tmp\libssl-1_1.dll

Filesize
362KB

MD5
9405ea98989968e07b5c9497ff54b560

SHA1
2c8142bb1b667af133e03a51cfd7427deac1b900

SHA256
5d74920adc711daff4d22c45ff29693265381d5359b6a42cfb51e674e3db7cba

SHA512
1c1eb10f144aaa1ae4fcc42b9dd970cfa3f3514948d0d1dcdaf9f7d8cfec1e752b1ce6d70460622b475bcac331fdb8eaa847725c9612593ce3550c4da7112f3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-AK8U0.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\Rinside.dat

Filesize
22B

MD5
3115e02fd135942a8eb97ebffe751beb

SHA1
31764acb175a41b5342bb89e3a951e85084e5d57

SHA256
a9161ffe6690069e1267c6fdad055fc0112144273b66a8bdc59862941279b21b

SHA512
065dc4358ce8f88a044d1764503901cf4a1ba75cd45e3021c0f956955ebd0942718bc09dbed6214d70c1efbfc9fd3adf02abc10694677e5b8cc50b10e92582e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\Setup.exe

Filesize
6.0MB

MD5
d5a0a7b998ea00c38d6c7ea65d8352b9

SHA1
1b2142021f63d9b1bc058fd5f5ee9da1df19b56d

SHA256
2d2fa8ae4e98a9f21888876f26d9214fdc744fb437dd3428fc89f81b1a414ad0

SHA512
43ef234641da5f78f50805e0b9bdb34c2fbd43e4df8a59eb4bc2449d742dd869bd61c51e3757c5b9608a6e668679da35257625fa2c0f028e88b82efab6527b35

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\libcrypto-1_1.dll

Filesize
1.7MB

MD5
b09a5c562bb1d521de69d37ce5286f3e

SHA1
5177d1c96fc389c6377d4256187f76579cdeb2ed

SHA256
c4e3f16290ce92d87c62da129249fae41bdb4f65b47d31d911ed722623fbb181

SHA512
5d2c0cd8d9625fb4424d01b1316064e8b4ec6106e76fb3f7972ad6f6d646464269a0351c228ee2e5cb247d3b8366a48d9791297e13244253a0e01c6793c148b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\libcrypto-1_1.dll

Filesize
1.7MB

MD5
b09a5c562bb1d521de69d37ce5286f3e

SHA1
5177d1c96fc389c6377d4256187f76579cdeb2ed

SHA256
c4e3f16290ce92d87c62da129249fae41bdb4f65b47d31d911ed722623fbb181

SHA512
5d2c0cd8d9625fb4424d01b1316064e8b4ec6106e76fb3f7972ad6f6d646464269a0351c228ee2e5cb247d3b8366a48d9791297e13244253a0e01c6793c148b8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\libssl-1_1.dll

Filesize
362KB

MD5
9405ea98989968e07b5c9497ff54b560

SHA1
2c8142bb1b667af133e03a51cfd7427deac1b900

SHA256
5d74920adc711daff4d22c45ff29693265381d5359b6a42cfb51e674e3db7cba

SHA512
1c1eb10f144aaa1ae4fcc42b9dd970cfa3f3514948d0d1dcdaf9f7d8cfec1e752b1ce6d70460622b475bcac331fdb8eaa847725c9612593ce3550c4da7112f3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Installer\libssl-1_1.dll

Filesize
362KB

MD5
9405ea98989968e07b5c9497ff54b560

SHA1
2c8142bb1b667af133e03a51cfd7427deac1b900

SHA256
5d74920adc711daff4d22c45ff29693265381d5359b6a42cfb51e674e3db7cba

SHA512
1c1eb10f144aaa1ae4fcc42b9dd970cfa3f3514948d0d1dcdaf9f7d8cfec1e752b1ce6d70460622b475bcac331fdb8eaa847725c9612593ce3550c4da7112f3e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-EER5V.tmp\Rinside.dat

Filesize
22B

MD5
3115e02fd135942a8eb97ebffe751beb

SHA1
31764acb175a41b5342bb89e3a951e85084e5d57

SHA256
a9161ffe6690069e1267c6fdad055fc0112144273b66a8bdc59862941279b21b

SHA512
065dc4358ce8f88a044d1764503901cf4a1ba75cd45e3021c0f956955ebd0942718bc09dbed6214d70c1efbfc9fd3adf02abc10694677e5b8cc50b10e92582e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-QE78P.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-QE78P.tmp\advanced-systemcare-setup.tmp

Filesize
1.2MB

MD5
4100108c68330e46bb48acc5089e139f

SHA1
a467b13d5d4a63b662147af668ab858e957d73e9

SHA256
902757dcab1ab2d599232478e2386b9ae1157e1bc2c677fbe879472863dae3cd

SHA512
9ec9a7b67e46761fb7753d1e566fbf54c59edd67feed62d4b60f1c7b32b5fa63ba36b88306a1525cd172e1395eaace8f9580198ce11c8d13ff1846a56c8dc3c8

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\HomepageAdvisor.ini

Filesize
214B

MD5
8650b1755b632485f2dd439f3a3c6126

SHA1
8c1ca0c0cbc869d75c7f174a77b282e457e9d78a

SHA256
931b07b89eac79e4011037fb46a1922c3837f25b900598d3ad0f386a030e88d6

SHA512
c0bd889d248e05ff2be70765f48c756ec313e481d7747c676d7365af3fe0e332cc76f08463e07f829d412ea9cf42b2aaeae6eca3d12438e7497bd77a428d1bf6

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\HomepageAdvisor.ini

Filesize
3KB

MD5
0f0eb5751a2900ca3391b7bcad89c7fc

SHA1
1a77a3435f863e3d72985fc9a7298daad7127cd1

SHA256
fe6c4de7947e8c89fed319234c4ddd9075dd089fad2073fcccc2252fd85bbb36

SHA512
1b7e226f059d4e693ff6960e8333d3038c779cb46e52350dc47ad4115b6dad76f96507a4b3e28df43c44115e93a2eddba0b9fb342d066efb2cedaabc28bb445f

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Ignore.ini

Filesize
9KB

MD5
31c3da942226b09f81bf6decaef8445d

SHA1
aa4cc066e1e65e3465d1ac40dc39d85224c2b97c

SHA256
7571e5e5df63c2d0db5fe330b5e10c032d19ffedfc54e7a7dfc2d8a7c0d1699b

SHA512
66e23a42b86e8bc9bf069587eb8a0979d31ae766147a9e4dba815efbe9ffb517fe2deb69698562862d4a746f2b5f64aad81a6ed7565d36b5b8ac6c990b8d0aeb

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Ignore.ini

Filesize
14KB

MD5
8cc6f7e704c72dda22035d5fff19759f

SHA1
90bbd43e42b2f46f327f26b01d782d94d8348bd4

SHA256
60b40150366fb7540d6da67f0719b8645d4513c270fe49234c25a664a7a7b623

SHA512
ac2469f5e48564f3e0ad2f645445f1aedc2cfabd53b7706a383cdaa2b1fdbd6f4a255779b079af2ac27c9cf109cf4a0b21e9b302aa68071b0af1d1ff65878673

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
1KB

MD5
d2250267cdd167695d8f175c7023fbb0

SHA1
210f188fab6f6f774bf258766e2c07722d98611d

SHA256
35abcb6a14c19c2b48fba0f1b32ce0ce6d6474a2f63b1b0330f2bc8efc66c739

SHA512
b03c240f0cc0fd4e202284920135ca78a752bf1c4901e8434768cc6387dc00f11546682d085d54026fdb5bdad3152571a04c183990b1fa9e6d5fe5db59a9a685

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
2KB

MD5
84393b38125ece51e71920f651bb0837

SHA1
9d9623ebe95768ad6a74a69de904b2335afa5129

SHA256
51b686a5400c6b87c2daef722da292c33965d681d3d0c29c756bd894a0f48dc0

SHA512
6df3c9810108ed8d15b137c37e9fe26a7983bb85ad1255f5da4b430980aa63dde98978bc42e602ba23ce36fb187306fa7355909895b8aea1d550af63d9390732

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
3KB

MD5
55d431a0c158413f1af8d0bd225f892b

SHA1
dcc5b65438565a417f168aa615619b71d409fcd0

SHA256
32ab446c486ff2a8297943d614458d6166b54a31e492ae7fca94c9c58fa952a2

SHA512
82e74c53d95adccfd25ee3911397eb7367d3708dbf03d3dbf589d037b5294933bdceea7fa14e96e9ea2a30a746c3006741ad7a09f531bdcefdef03a6e225ef58

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
3KB

MD5
55d431a0c158413f1af8d0bd225f892b

SHA1
dcc5b65438565a417f168aa615619b71d409fcd0

SHA256
32ab446c486ff2a8297943d614458d6166b54a31e492ae7fca94c9c58fa952a2

SHA512
82e74c53d95adccfd25ee3911397eb7367d3708dbf03d3dbf589d037b5294933bdceea7fa14e96e9ea2a30a746c3006741ad7a09f531bdcefdef03a6e225ef58

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\License.log

Filesize
4KB

MD5
bb93863dd74a1f5fccf87fb163b8e0e1

SHA1
9c6dc780a595927bfc0ec62b6d9d9818d0d18aa0

SHA256
15cd82ff2a6319ed8c28821c0358c377077d1cc74ffa8a849aaeb15e867d073b

SHA512
8facc0354ff6c8812769386ce68820c93c257c5dba24758f454fa1e0a3950cde3b1f879f77521b95026a2599a6929824542526335a6a5a2f33e7537dfc85d02d

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.Ini

Filesize
370B

MD5
e0a80324a0720611fcf27f580854446e

SHA1
33d7f39925e543f9fd5795e530e225ad3e81286d

SHA256
25c0b6ede829018f0cfd4bee1a0f115afbed5fffcd49ad4fa3a3fbdf989cda56

SHA512
868ea50d0fcb215836891199cd73393b6501388c8a0c9404ef0fed1991c1e3694f2546d2ef455296f56423c156dcab9428eda5837178c1be33d931d7c9b2053c

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
67B

MD5
f3559c9e27b813a1db7bd51096d8dc7d

SHA1
9dd9203c2e51d186529c8b38e1cf61f359014c6a

SHA256
8c9261c6f88b6a928fc5160fbaafa25c54bb4d4760716413627ff79d24f47bd7

SHA512
dc78b6f477c121c86d53b890b6a50d853945cee7066b4680f0d4edda2d92986625322fc3cff5b76885272b5e57a8f82677abbae01843f2030226b516c552217c

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
244B

MD5
f61bfae565161674e35bc25ee5e343c2

SHA1
2d89bec86c63e3382bd2911c90c695460a628849

SHA256
43ef64022cdc6c980b1e5c54805c5bf22e48d0c435df0ebb5f360fdf56b2f4ca

SHA512
7953c6188dce6d537f7fb71d98bdfaf59b7cfa60f54082bd7f5b2b18dc404ddeabb329c7c073f0c483aabbac5da0308580adb74a71db7b6ec226f4bdc4adbd50

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
1KB

MD5
01127ec10e9b315fd4d0f6e85743faa0

SHA1
e89b34fa146efe47b3dd088a3b58de20e0c81634

SHA256
11c7e60c5930caeb02c5cb063ce79a70637c10b8b753b647fcd5e734a9e59e91

SHA512
1b57cc340fffd2b28b9e1c6aefe709dda91de4b89c0f6857c4b2b15dfbc88864aebab57296761946e11420e5c6e17bb7ed1ab35af6bbf0cab8f19826244b2f11

Download Submit
C:\Users\Admin\AppData\Roaming\IObit\Advanced SystemCare\Main.ini

Filesize
316B

MD5
4cf14fab884c22914a757b3e07e79788

SHA1
ed798390998faee8737051a60cd27bcb4d183032

SHA256
cf3cfd938d3515c77c4a9d4704e83f02d5f7157ff8a83b37cba888e778e693ce

SHA512
ed4004b085acb833381c8af733acbb63587d25e17956e68586da95863aeab43aa763de89fe4d83db0eafa837aae395e235b6d806029569b8eae5a7ed6ca9e6e9

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Advanced SystemCare.lnk

Filesize
1KB

MD5
2aa51ae9865d50a9fec24447497cbd97

SHA1
cc1e2514e1b086d5be90502202b80245e2f4c888

SHA256
33950903062049d23bf7f11061bcffb88fac8b1d7b2df4ba6fbba38d403e8ea4

SHA512
efb7734f3c2890314ab89399dfe914350a102ec7c363767ecb459cdff754e07ac7253e59e24ac46251f52de25ccba6db6d4aa3a2dc6ce47f9328fa41e02c55ee

Download Submit
memory/636-970-0x0000000000400000-0x000000000043F000-memory.dmp

Filesize
252KB

Download
memory/752-1043-0x0000000003D30000-0x0000000003E6D000-memory.dmp

Filesize
1.2MB

Download
memory/752-2078-0x0000000003CF0000-0x0000000003CF1000-memory.dmp

Filesize
4KB

Download
memory/752-1557-0x0000000003FB0000-0x0000000003FB1000-memory.dmp

Filesize
4KB

Download
memory/752-3075-0x00000000046A0000-0x00000000046A1000-memory.dmp

Filesize
4KB

Download
memory/752-1023-0x0000000003CF0000-0x0000000003CF1000-memory.dmp

Filesize
4KB

Download
memory/752-2105-0x0000000004420000-0x000000000455D000-memory.dmp

Filesize
1.2MB

Download
memory/1256-2158-0x00000000031A0000-0x00000000031A5000-memory.dmp

Filesize
20KB

Download
memory/1256-2152-0x00000000031A0000-0x00000000031A5000-memory.dmp

Filesize
20KB

Download
memory/1376-1138-0x0000000003C70000-0x0000000003C71000-memory.dmp

Filesize
4KB

Download
memory/1376-3096-0x0000000000400000-0x0000000000566000-memory.dmp

Filesize
1.4MB

Download
memory/1376-1071-0x0000000002360000-0x0000000002361000-memory.dmp

Filesize
4KB

Download
memory/1672-720-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/1672-204-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/1672-233-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/1672-205-0x0000000002650000-0x0000000002651000-memory.dmp

Filesize
4KB

Download
memory/1672-183-0x0000000004310000-0x0000000004320000-memory.dmp

Filesize
64KB

Download
memory/1672-2777-0x0000000000400000-0x0000000000A57000-memory.dmp

Filesize
6.3MB

Download
memory/1672-175-0x0000000002650000-0x0000000002651000-memory.dmp

Filesize
4KB

Download
memory/1672-208-0x00000000074F0000-0x00000000074F1000-memory.dmp

Filesize
4KB

Download
memory/1672-209-0x0000000004310000-0x0000000004320000-memory.dmp

Filesize
64KB

Download
memory/1672-211-0x0000000006310000-0x0000000006311000-memory.dmp

Filesize
4KB

Download
memory/2088-174-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2088-134-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2868-261-0x0000000000400000-0x0000000000564000-memory.dmp

Filesize
1.4MB

Download
memory/2868-260-0x0000000003C30000-0x0000000003C31000-memory.dmp

Filesize
4KB

Download
memory/2984-532-0x0000000000400000-0x0000000000530000-memory.dmp

Filesize
1.2MB

Download
memory/2984-533-0x00000000007E0000-0x00000000007E1000-memory.dmp

Filesize
4KB

Download
memory/2984-2020-0x0000000000400000-0x0000000000530000-memory.dmp

Filesize
1.2MB

Download
memory/2984-226-0x00000000007E0000-0x00000000007E1000-memory.dmp

Filesize
4KB

Download
memory/3480-270-0x0000000003C30000-0x0000000003C31000-memory.dmp

Filesize
4KB

Download
memory/3480-271-0x0000000000400000-0x0000000000564000-memory.dmp

Filesize
1.4MB

Download
memory/3720-221-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/3720-2050-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/3720-427-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/3988-2023-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/3988-2019-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/3988-2009-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/3988-1894-0x0000000000400000-0x0000000000551000-memory.dmp

Filesize
1.3MB

Download
memory/3988-2026-0x0000000057800000-0x0000000057812000-memory.dmp

Filesize
72KB

Download
memory/3988-2029-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/3988-1735-0x0000000003C20000-0x0000000003C21000-memory.dmp

Filesize
4KB

Download
memory/4600-139-0x00000000022E0000-0x00000000022E1000-memory.dmp

Filesize
4KB

Download
memory/4600-171-0x0000000000400000-0x0000000000530000-memory.dmp

Filesize
1.2MB

Download
memory/4896-2566-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/4896-2299-0x0000000000400000-0x0000000000657000-memory.dmp

Filesize
2.3MB

Download
memory/4896-3067-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/4896-3072-0x0000000061E00000-0x0000000061ECA000-memory.dmp

Filesize
808KB

Download
memory/4896-2141-0x00000000026D0000-0x00000000026D1000-memory.dmp

Filesize
4KB

Download
memory/4896-2778-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/5244-3090-0x0000000000400000-0x0000000000657000-memory.dmp

Filesize
2.3MB

Download
memory/5244-3084-0x0000000002450000-0x0000000002451000-memory.dmp

Filesize
4KB

Download
memory/5244-3094-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/5284-2779-0x0000000000EB0000-0x00000000012B1000-memory.dmp

Filesize
4.0MB

Download
memory/5284-2188-0x0000000003640000-0x0000000003641000-memory.dmp

Filesize
4KB

Download
memory/5284-2147-0x0000000002F20000-0x0000000002F21000-memory.dmp

Filesize
4KB

Download
memory/5284-2199-0x0000000003680000-0x0000000003681000-memory.dmp

Filesize
4KB

Download
memory/5284-2565-0x00000000033E0000-0x00000000033F0000-memory.dmp

Filesize
64KB

Download
memory/5420-3085-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/5420-3076-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/5420-3095-0x0000000061E00000-0x0000000061ECA000-memory.dmp

Filesize
808KB

Download
memory/5420-3073-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/5420-3070-0x0000000000400000-0x00000000005D1000-memory.dmp

Filesize
1.8MB

Download
memory/5420-3092-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/5420-3042-0x0000000002340000-0x0000000002341000-memory.dmp

Filesize
4KB

Download
memory/5524-3088-0x0000000061E00000-0x0000000061ECA000-memory.dmp

Filesize
808KB

Download
memory/5524-2293-0x0000000002510000-0x0000000002511000-memory.dmp

Filesize
4KB

Download
memory/5524-3071-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/5524-3086-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/5524-3083-0x0000000057800000-0x0000000057812000-memory.dmp

Filesize
72KB

Download
memory/5524-3074-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/5524-3038-0x0000000000400000-0x00000000005A2000-memory.dmp

Filesize
1.6MB

Download
memory/5524-3066-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/6168-3223-0x0000000003D20000-0x0000000003D21000-memory.dmp

Filesize
4KB

Download
memory/6284-3566-0x00000000075D0000-0x00000000075E0000-memory.dmp

Filesize
64KB

Download
memory/6284-3579-0x0000000007510000-0x0000000007511000-memory.dmp

Filesize
4KB

Download
memory/6284-3561-0x00000000031C0000-0x00000000031C1000-memory.dmp

Filesize
4KB

Download
memory/6284-3298-0x0000000007510000-0x0000000007511000-memory.dmp

Filesize
4KB

Download
memory/6372-2018-0x00000000021F0000-0x00000000021F1000-memory.dmp

Filesize
4KB

Download
memory/6372-2021-0x0000000000400000-0x0000000000551000-memory.dmp

Filesize
1.3MB

Download
memory/6372-2035-0x0000000057000000-0x000000005703F000-memory.dmp

Filesize
252KB

Download
memory/6372-2048-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/6372-2025-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/6372-2027-0x0000000059800000-0x000000005986E000-memory.dmp

Filesize
440KB

Download
memory/6712-3379-0x0000000003640000-0x0000000003641000-memory.dmp

Filesize
4KB

Download
memory/6968-3297-0x0000000002330000-0x0000000002331000-memory.dmp

Filesize
4KB

Download
memory/6968-3567-0x0000000002330000-0x0000000002331000-memory.dmp

Filesize
4KB

Download
memory/6968-3350-0x0000000003D90000-0x0000000003D91000-memory.dmp

Filesize
4KB

Download
memory/6988-3565-0x0000000004060000-0x0000000004061000-memory.dmp

Filesize
4KB

Download
memory/6988-3281-0x0000000004060000-0x0000000004061000-memory.dmp

Filesize
4KB

Download
memory/7192-3383-0x0000000002270000-0x0000000002271000-memory.dmp

Filesize
4KB

Download
memory/7208-3384-0x00000000022D0000-0x00000000022D1000-memory.dmp

Filesize
4KB

Download
memory/7264-2039-0x0000000050120000-0x000000005030E000-memory.dmp

Filesize
1.9MB

Download
memory/7264-2037-0x0000000050000000-0x0000000050117000-memory.dmp

Filesize
1.1MB

Download
memory/7264-2030-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/7264-2028-0x00000000006E0000-0x00000000006E1000-memory.dmp

Filesize
4KB

Download
memory/7296-3582-0x0000000003020000-0x0000000003021000-memory.dmp

Filesize
4KB

Download
memory/7792-2055-0x0000000005CE0000-0x0000000005CE1000-memory.dmp

Filesize
4KB

Download
memory/7792-2024-0x00000000008B0000-0x000000000093C000-memory.dmp

Filesize
560KB

Download
memory/7792-2148-0x0000000005B90000-0x0000000005B91000-memory.dmp

Filesize
4KB

Download
memory/7792-2079-0x0000000005900000-0x0000000005910000-memory.dmp

Filesize
64KB

Download
memory/7792-2157-0x0000000001440000-0x0000000001441000-memory.dmp

Filesize
4KB

Download
memory/7792-2036-0x0000000001440000-0x0000000001441000-memory.dmp

Filesize
4KB

Download
memory/7792-2053-0x00000000041E0000-0x00000000041E1000-memory.dmp

Filesize
4KB

Download
memory/7792-2022-0x0000000000A90000-0x0000000000B9A000-memory.dmp

Filesize
1.0MB

Download
memory/7792-2049-0x0000000004330000-0x0000000004448000-memory.dmp

Filesize
1.1MB

Download
memory/8100-2068-0x0000000000F00000-0x0000000000F01000-memory.dmp

Filesize
4KB

Download
memory/8172-3089-0x0000000003C20000-0x0000000003C21000-memory.dmp

Filesize
4KB

Download
memory/8172-3091-0x0000000003D00000-0x0000000003E3D000-memory.dmp

Filesize
1.2MB

Download