Overview

overview

10

Static

static

1

3uTools_v3...86.exe

windows7-x64

10

3uTools_v3...86.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    104s
  • max time network
    108s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/09/2024, 18:41

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    3uTools_v3.17.025_Setup_x86.exe

  • Size

    193.4MB

  • MD5

    1053009a1066b9e155fff9e9745a7368

  • SHA1

    297aa07257a87cb55e81bb2902f419c47f410ce2

  • SHA256

    d1c3690b4b7a5a955f9b4c1e19493437c7e057f668a8f3b0bcb511261d23528d

  • SHA512

    f66357d8580b7de76f8a3f149fceb9445a7b1a595599b0c770e84e2aa9fc2751c92b427bcf7849a616564c1c60377ed66e31a58af21a8e8e74893e031807343f

  • SSDEEP

    6291456:/p99hBcrsudS5yaLZ/7TFqN0mnIEwUE3WNoZ8:jyPd7G7TkN54WNq8

Score
10/10
discoveryevasionpersistenceprivilege_escalationspywarestealer

Malware Config

Signatures

  • Modifies firewall policy service 3 TTPs 1 IoCs
    evasion
  • Modifies file permissions 1 TTPs 3 IoCs
    discovery
  • Blocklisted process makes network request 3 IoCs
  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Drops file in System32 directory 55 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

    persistenceprivilege_escalation
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 11 IoCs
  • Launches sc.exe 2 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies data under HKEY_USERS 64 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 5 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3uTools_v3.17.025_Setup_x86.exe
    "C:\Users\Admin\AppData\Local\Temp\3uTools_v3.17.025_Setup_x86.exe"
    1⤵
    • Checks computer location settings
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3828
    • C:\Program Files (x86)\3uToolsV3\x86\3uTools.exe
      "C:\Program Files (x86)\3uToolsV3\x86\3uTools.exe"
      2⤵
      • Checks computer location settings
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:4944
      • C:\Program Files (x86)\3uToolsV3\x86\updater.exe
        "C:\Program Files (x86)\3uToolsV3\x86\updater.exe" /background
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:2012
      • C:\Program Files (x86)\3uToolsV3\x86\3uViewer.exe
        3uViewer.exe /reg 1
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        PID:2664
      • C:\Program Files (x86)\3uToolsV3\x86\3uViewer.exe
        3uViewer.exe /reg 2
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4472
      • C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe
        "C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe" -i "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\AppleKIS.inf"
        3⤵
        • Executes dropped EXE
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4996
        • C:\Windows\SYSTEM32\takeown.exe
          takeown /F C:\Windows\System32\DriverStore\FileRepository\ /A
          4⤵
          • Modifies file permissions
          • Suspicious use of AdjustPrivilegeToken
          PID:2060
        • C:\Windows\SYSTEM32\cacls.exe
          cacls C:\Windows\System32\DriverStore\FileRepository*.* /E /G Everyone:F
          4⤵
            PID:744
          • C:\Windows\SYSTEM32\pnputil.exe
            pnputil -i -a "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\AppleKIS.inf"
            4⤵
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            PID:3232
        • C:\Windows\SysWOW64\sc.exe
          sc start DeviceInstall
          3⤵
          • Launches sc.exe
          • System Location Discovery: System Language Discovery
          PID:2928
        • C:\Windows\SysWOW64\sc.exe
          sc start DsmSvc
          3⤵
          • Launches sc.exe
          • System Location Discovery: System Language Discovery
          PID:4256
        • C:\Program Files (x86)\3uToolsV3\x86\files\patchtools\7z-64\7z.exe
          "C:\Program Files (x86)\3uToolsV3\x86\files\patchtools\7z-64\7z.exe" x "C:\3uToolsV3\Other\iTunes(12.12.9.4).exe" -aoa -o"C:\Users\Admin\AppData\Local\Temp\3uTools\iTunes(12.12.9.4)"
          3⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:3356
        • C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe
          "C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe" -i "C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x64\usbaapl64.inf"
          3⤵
          • Executes dropped EXE
          • Suspicious use of WriteProcessMemory
          PID:2816
          • C:\Windows\SYSTEM32\takeown.exe
            takeown /F C:\Windows\System32\DriverStore\FileRepository\ /A
            4⤵
            • Modifies file permissions
            PID:1052
          • C:\Windows\SYSTEM32\cacls.exe
            cacls C:\Windows\System32\DriverStore\FileRepository*.* /E /G Everyone:F
            4⤵
              PID:4016
            • C:\Windows\SYSTEM32\pnputil.exe
              pnputil -i -a "C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x64\usbaapl64.inf"
              4⤵
              • Drops file in Windows directory
              • Checks SCSI registry key(s)
              PID:1900
          • C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe
            "C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe" -i "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\AppleKIS.inf"
            3⤵
            • Executes dropped EXE
            • Suspicious use of WriteProcessMemory
            PID:2408
            • C:\Windows\SYSTEM32\takeown.exe
              takeown /F C:\Windows\System32\DriverStore\FileRepository\ /A
              4⤵
              • Modifies file permissions
              PID:1052
            • C:\Windows\SYSTEM32\cacls.exe
              cacls C:\Windows\System32\DriverStore\FileRepository*.* /E /G Everyone:F
              4⤵
                PID:4016
              • C:\Windows\SYSTEM32\pnputil.exe
                pnputil -i -a "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\AppleKIS.inf"
                4⤵
                • Drops file in Windows directory
                • Checks SCSI registry key(s)
                PID:3424
        • C:\Windows\system32\svchost.exe
          C:\Windows\system32\svchost.exe -k DcomLaunch -p -s DeviceInstall
          1⤵
          • Drops file in Windows directory
          • Checks SCSI registry key(s)
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:1656
          • C:\Windows\system32\DrvInst.exe
            DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{1f097e1a-f3f4-d041-a870-2c69fb79fdbc}\AppleKIS.inf" "9" "4639b046f" "0000000000000148" "WinSta0\Default" "0000000000000158" "208" "C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64"
            2⤵
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Modifies data under HKEY_USERS
            PID:2100
          • C:\Windows\system32\DrvInst.exe
            DrvInst.exe "4" "0" "C:\Users\Admin\AppData\Local\Temp\{10bc8abf-de36-6942-b1b4-aaa795800e84}\usbaapl64.inf" "9" "452eabb2f" "0000000000000164" "WinSta0\Default" "0000000000000160" "208" "C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x64"
            2⤵
            • Drops file in System32 directory
            • Drops file in Windows directory
            • Checks SCSI registry key(s)
            • Modifies data under HKEY_USERS
            PID:3344
        • C:\Windows\system32\msiexec.exe
          C:\Windows\system32\msiexec.exe /V
          1⤵
          • Blocklisted process makes network request
          • Enumerates connected drives
          • Drops file in System32 directory
          • Drops file in Program Files directory
          • Drops file in Windows directory
          • Modifies data under HKEY_USERS
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2124
          • C:\Windows\syswow64\MsiExec.exe
            C:\Windows\syswow64\MsiExec.exe -Embedding 1C7A4B2ACDFBE6B38CB5D833F0841F1D
            2⤵
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:1372
          • C:\Windows\System32\MsiExec.exe
            C:\Windows\System32\MsiExec.exe -Embedding 435CA094FC210BC8F765958F06258643
            2⤵
              PID:3280
            • C:\Windows\syswow64\MsiExec.exe
              C:\Windows\syswow64\MsiExec.exe -Embedding 94AD9338AAD74046D2B968832270A738 E Global\MSI0000
              2⤵
              • Drops file in Windows directory
              • System Location Discovery: System Language Discovery
              PID:2496
            • C:\Windows\System32\MsiExec.exe
              C:\Windows\System32\MsiExec.exe -Embedding B705BDD38D978217B970E0178B31BFD5
              2⤵
                PID:2492
              • C:\Windows\syswow64\MsiExec.exe
                C:\Windows\syswow64\MsiExec.exe -Embedding 0C0E01C54350D72088F467304746D757
                2⤵
                • System Location Discovery: System Language Discovery
                PID:884
              • C:\Windows\syswow64\MsiExec.exe
                C:\Windows\syswow64\MsiExec.exe -Embedding 4C8B1EC202C35F8C0C998382D7895004 E Global\MSI0000
                2⤵
                • System Location Discovery: System Language Discovery
                • Modifies data under HKEY_USERS
                PID:1480
              • C:\Windows\System32\MsiExec.exe
                "C:\Windows\System32\MsiExec.exe" /Y "C:\Program Files\Bonjour\mdnsNSP.dll"
                2⤵
                  PID:2860
                • C:\Windows\syswow64\MsiExec.exe
                  "C:\Windows\syswow64\MsiExec.exe" /Y "C:\Program Files (x86)\Bonjour\mdnsNSP.dll"
                  2⤵
                  • System Location Discovery: System Language Discovery
                  PID:3144
              • C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
                "C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
                1⤵
                • Executes dropped EXE
                • Modifies data under HKEY_USERS
                PID:1724
              • C:\Program Files\Bonjour\mDNSResponder.exe
                "C:\Program Files\Bonjour\mDNSResponder.exe"
                1⤵
                • Modifies firewall policy service
                • Executes dropped EXE
                PID:1076

              Network

                    MITRE ATT&CK Enterprise v15

                    Reconnaissance

                    Resource Development

                    Initial Access

                    Execution

                    Persistence

                    Create or Modify System Process

                    1
                    T1543

                    Windows Service

                    1
                    T1543.003

                    Event Triggered Execution

                    1
                    T1546

                    Component Object Model Hijacking

                    1
                    T1546.015

                    Privilege Escalation

                    Create or Modify System Process

                    1
                    T1543

                    Windows Service

                    1
                    T1543.003

                    Event Triggered Execution

                    1
                    T1546

                    Component Object Model Hijacking

                    1
                    T1546.015

                    Defense Evasion

                    File and Directory Permissions Modification

                    1
                    T1222

                    Impair Defenses

                    1
                    T1562

                    Disable or Modify System Firewall

                    1
                    T1562.004

                    Modify Registry

                    1
                    T1112

                    Credential Access

                    Credentials from Password Stores

                    1
                    T1555

                    Credentials from Web Browsers

                    1
                    T1555.003

                    Unsecured Credentials

                    1
                    T1552

                    Credentials In Files

                    1
                    T1552.001

                    Discovery

                    Peripheral Device Discovery

                    2
                    T1120

                    Query Registry

                    4
                    T1012

                    System Information Discovery

                    4
                    T1082

                    System Location Discovery

                    1
                    T1614

                    System Language Discovery

                    1
                    T1614.001

                    Lateral Movement

                    Collection

                    Data from Local System

                    1
                    T1005

                    Command and Control

                    Exfiltration

                    Impact

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\3uToolsV3\Other\iTunes(12.12.9.4).exe.tmp.cfg
                      Filesize

                      262B

                      MD5

                      59ef704b787544edeaf21f3a98a29565

                      SHA1

                      df4c7b9d0f77b6ebf42e44cde788288f0680a217

                      SHA256

                      0da95a9a4fab3c7e8a75f8f76b5d58de7110e5c410c2066925420ec36baaf597

                      SHA512

                      061980e7852f51e46bbc5da4934ccda3a02fa00ffcdb686c574b0d484dd84c2577bdae604b56020faa1d26892dbfe1d558353f3cbc94e0dbc17f78773dca7a18

                      Download Submit

                    • C:\Config.Msi\e58ac3c.rbs
                      Filesize

                      332KB

                      MD5

                      cfb73bcb43153cdf7a2726c97df1ea2f

                      SHA1

                      ad462f899b911bc0f9dbe301000b1c928260222e

                      SHA256

                      b22eda29eff587d4d1857ea252966b6474f33200ce9a4df997ab2f8c224edd88

                      SHA512

                      2b575a042278c7a0f8cd75481ffc69e54317b95aa7e9c1607ade6137e5c9a594e8fe8a9af61809c872b97b41bce90a9db718daf45dcbc393cbe7c8f64512dee0

                      Download Submit

                    • C:\Config.Msi\e58ac41.rbs
                      Filesize

                      126KB

                      MD5

                      a6264e1c1767795414d7f8844f1b8520

                      SHA1

                      fc1826c3ec7fd5a602ebc59cfbe81568bf79fa14

                      SHA256

                      ccbb37e5cb3b85407bff220124461920d7038a248371cee7e4844fe14625dcb9

                      SHA512

                      f6f2976992a5c91f621456775bbb64d0314ae8fc5305baace727805d9ca1bad70f1ae46ddf0ce0e00d0036f803ca65a0bc94f6e7459e4995ea5881de73125459

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\3uTools.exe
                      Filesize

                      13.0MB

                      MD5

                      db99be2db62df78e98d22275c0ab7b6b

                      SHA1

                      ed45462948a6e186c224d0214174fe32c8ad0c6a

                      SHA256

                      b0e7002abb2b379c299ca6af684e4d78a8b0b9413b521b8a81807d8a718faba5

                      SHA512

                      6ebe1d8c73d65a41c48c2ad5ed4b103028202c42def6f06fde5bb429476de4b25dc06cac6f1a311971fe7322c7de344ea0db5dac081efd24303418a36c227545

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Concurrent.dll
                      Filesize

                      45KB

                      MD5

                      63d3501f7f002daa96e31b463c566925

                      SHA1

                      bee2e5318f4d86c0a6abc7ad48469b8eb5773c7a

                      SHA256

                      82e98a575074e0509fb7b4b386e3882ca0251e3a2177cb06cd9136cc168d6916

                      SHA512

                      3bdb875e630a4f68186aa491279a829dfda78a0f64ee84d6276dbde5530339fe42373e220eff7a14b42a938e477fcc888655ca17d57061a92d202d7b220bc5f6

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Core.dll
                      Filesize

                      4.7MB

                      MD5

                      4ce26f9aa264e3ddacb8545dec7a7c05

                      SHA1

                      92fb679c3ede5b9e769609f6639025cc336e6147

                      SHA256

                      27aed4e6f7746ab33def0a38940d46b11bf0f34a702c5c6a0a38e9a41a3f9f3e

                      SHA512

                      ad47741d0236bc95e52050d9dd65fe23891fe7ddec25f9a5487b4038a8bdc097e618414dd49c5ac1101cb604406f15492c14b20365829d07c3c40f394ff3cf08

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Gui.dll
                      Filesize

                      5.4MB

                      MD5

                      627f6981811410b10a37c73ec8aff39d

                      SHA1

                      e2ff30f1d50b55e4cbb358d3eb9268352ff20130

                      SHA256

                      ffa2fca013f9b10fe27d819b33b780addff2159cacba90318d781b588bf40a2d

                      SHA512

                      902f94614f0f344618f055237339a0d59a09c012d3623607e82995e68883a3b2be9f4496cee87761fec753134d11c4b1585285cfc40573584b8d06ed04336a6f

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Multimedia.dll
                      Filesize

                      604KB

                      MD5

                      bcae351d67c96a26496ff33a0d075209

                      SHA1

                      5a9a6f9c92d2d93338214168e2172634a4e4cf85

                      SHA256

                      5f612abd914087980a4245f1508411b514cb8c419bdba34f39a00ffa59372274

                      SHA512

                      dc7f9ccb2067dc03ac06145661d1a662c4ebf3aadb7f554ef053d2a4ad84937773bad738680613e0df70590560e691ea2e355ce587bf9d1e2423643c5dd51c85

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Network.dll
                      Filesize

                      1014KB

                      MD5

                      fe506eed9283c8a1c412d097762b812f

                      SHA1

                      c35be316cea9064392d975fab244030b2a02dfb0

                      SHA256

                      fff4613a020e81605dbe4d0d361aceb1943325ee555025580ec931244f8303f7

                      SHA512

                      c33d40f5732bcd3f9ad5006a64093daacad54b4fdd66cd76d2c8581bd7f4991dcbe7a2852419ad2f5732db242688be74045fef88f45322c79f81214c5c600665

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5PrintSupport.dll
                      Filesize

                      277KB

                      MD5

                      fff04e545ac70f296983ae09cdb8c724

                      SHA1

                      f212b21e12e0d36f276c3d38af97378a711c37fc

                      SHA256

                      a93799ecaa973529eb67a49671d2f04fd121625997a23755f505dd0791774d66

                      SHA512

                      c9f2b195f62424ca947fc2a439f683e5aea20bdaac28e1b85c24ae93f7b4ef51549b7dafbf41f50ef256a24d7163cf33c2e95cbd7303b3df455766e503f0f4b9

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Quick.dll
                      Filesize

                      3.3MB

                      MD5

                      87237f29152adbbc26406f9fc49b121e

                      SHA1

                      1fbb3f1fda36d3d8d56db6c835f1d652e5a01db2

                      SHA256

                      b96dc4157bb53e205005f7096d36c2af69551edfbc3c07b4146fa45b61f2a117

                      SHA512

                      533d0ef0b82335e51f7848aabcdf6b83aa5942a364bd914c63a0da8443ac16fd22dafbb7a3786a6a570375673aed24bd09bd6ec757b6ddba4281b339493d4249

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Svg.dll
                      Filesize

                      274KB

                      MD5

                      f0d8f516e1065e1e0d0626c21e8acbdc

                      SHA1

                      81292194e8c9c446b67cba87e0c12780acc1af3a

                      SHA256

                      2dcf8a941bd06dbd8426db484cda2aee48b9fa9eb9b22a498eeed269c2fca19d

                      SHA512

                      df8971a9812fe209c368007afe00dccfbdb756fcee511f5495dd6b998296b7a88606c8269567b5fcfa6307752e7d49272ca83221388fd2913282688ad0fbb571

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5WebEngineWidgets.dll
                      Filesize

                      213KB

                      MD5

                      c57f73a2008dfc9ee53d469820583487

                      SHA1

                      29d596078068ec51bcaaff495176ac63012bfd60

                      SHA256

                      0a51fe6a9c577fc0b3e831b7bb22054ab992812dcd15fc617b4bc906d8041baf

                      SHA512

                      ca42feca121f9ee7726ee9db4cd2c381a39d8e1c9341bb9c30db01928f1fd6e51918c680eb2124304fb19e6d29b61bc42b23a71745a72a5016299abcb947f4de

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Widgets.dll
                      Filesize

                      4.2MB

                      MD5

                      2ecaab6e87a870dbcc4ff3020b8999fa

                      SHA1

                      f1b38ed9c859e1e7538006b1cf29c1a8b0dd7a10

                      SHA256

                      e25db7540bd89bf4ef9b46dfe471da6fdcaaa79996785deee9de0d1715e943f6

                      SHA512

                      4d8c36984bdaca039e5b4143d4b7fae3bec57d0e669c458f3ebc36c1982a9b1aa4e8215abcee73f1efef277e3f400e31bb2c9a698d286e82a98f125b2c585183

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Qt5Xml.dll
                      Filesize

                      186KB

                      MD5

                      bb08f8268b62aa158ab66fd8058ab833

                      SHA1

                      7c17621234682c2821571598a0c33821028ef1b7

                      SHA256

                      69062d64a743b9733cfa703bafd52376e28650d35f569445833cf3de7e1a67fa

                      SHA512

                      33e7c6f946236a739080008835c6e82ad3b289ff0a97fd96e1ae98029008ded43284277cf5bcdf3394845c2a6f0a6cb136d5bdc24135d2c2bac40c2e64dc863b

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\Uninstall.exe
                      Filesize

                      1.1MB

                      MD5

                      bb65f68a98ece21bb4291f9c32f7dde5

                      SHA1

                      cc67611ef6b41e711571e7eecf15bf7d1f29e12c

                      SHA256

                      5cf614af4f2a6aadb672dce95ab6bfb3eaa2d513de1a9159e4565582f194d9d0

                      SHA512

                      fdd73e175707a20380fb62c38043479eada9492b95ae6edd5b269eed72abbed4b21287f043a72a9ec22042effeabcbc54fc7f59ab8244dd1ea1a5dfcd57ee515

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\cache\devices_table\border_14Pro_SpaceBlack.svg.tmp
                      Filesize

                      25KB

                      MD5

                      7f2390f5032c2a01f2af2efd2fbf0fe6

                      SHA1

                      155dfa69d939cbba1a6f147d608a102347af3509

                      SHA256

                      65d4e961734340bcc372fb5789c5ee02070239e6209b9cdeedae54623ec2b7f3

                      SHA512

                      7cfa63e91cf4f6569cf37fd49134cdc417758fefbf9720560bba36f7e85263954bc3979750213757550b7794f5d588bb2583273334fa44161248e2e36fa78a6e

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\cache\hometmp\1691646872461_895937.png
                      Filesize

                      85KB

                      MD5

                      417a9a266186eba0b5c0e7fae060d5b6

                      SHA1

                      cbedf7bd71f7737c076069565fcab54cd040cf3a

                      SHA256

                      fb536ebf3436a353ca42d3efe03204d9bd13f6d073887f8f38b875896d1b51eb

                      SHA512

                      bd6fd68e74312501cfe4701ed8627e341d53cb59c6f5bd23a86ee3ae7310762e0dbabaf0f96c5dd99e60a616242d4410e30f3ee083d9b54880ce3073c63a3c62

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\cache\hometmp\1691646971451_957085.png
                      Filesize

                      55KB

                      MD5

                      ddcce3bb78f7afe368ae73dc3ea96ac7

                      SHA1

                      adbc9d45e15c436b494a3141beeacfd94ad5dc46

                      SHA256

                      e8cae30319ecbd47cc171f1b594249b475ee6e21b3be7f647b8b498140fcc4c9

                      SHA512

                      70243d9e576e73797664e3abbf01aed97d8c74ebd5fb73d63e37222131f8f32a65aec7676d4357867d969adc30eb1037bf3841dc63a6b0bbc8468b3b9ceccbe1

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\ffmpegCore.dll
                      Filesize

                      269KB

                      MD5

                      0b7c3877f79adefbd1bc954c399e1415

                      SHA1

                      54360d9164c7b94590805e54d72c78f5aa74153c

                      SHA256

                      d6a0635c457897534da979166470f05bd3e9cb9e9e3342bb51139f8835d78a1b

                      SHA512

                      e95b486f2a3a6a90036e819be14347c87476f48bd50b5650b5d348a7c8d5b0acf2691d3699ff416ba8bd1bf314ab573f3ebf3fd94ea6c0fa777873f2991f97aa

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\files\OpenStreetMap\search.png
                      Filesize

                      1KB

                      MD5

                      a73bcc83dc2729d19d9d0e1eb36bbd96

                      SHA1

                      9d15df65438cab48d07ebe7e9359258ff1011423

                      SHA256

                      29739779fd76b21175d4ea24d7ded3e057233127062d05c164b9ab4df9e11a3f

                      SHA512

                      c37de466294c22c9b3ed6587c639a7d53ae6f5cc8d352931035885191a2fd329dae3ff28d1bdeb363c2c12243505584354acc5f88bb8e21da9c2942d03cacf03

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\files\bonjour\Bonjour64.msi
                      Filesize

                      2.6MB

                      MD5

                      86e2b390629665fbc20e06dfbf01a48f

                      SHA1

                      d9f4697a6f4eceea24735822cb1df501268ca0b0

                      SHA256

                      46e31e284da64d6c2d366352b8a8abcf7db28d3e2a870d8fcf15c4a6fe0a6dd1

                      SHA512

                      05ecd3be5779f39db09329dda4dce0e3c49ac5d3950e92833031622b53542dadbe9e2948df35faeb4c41dbc8e01992935087c4a2975c797bd008ae177f7c3fea

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\files\inf\InfInstallerx64.exe
                      Filesize

                      212KB

                      MD5

                      b8015e46837206c8260238061bc498d0

                      SHA1

                      7cc4f3b86b6a06057ec4dc66b0adc689b83648f9

                      SHA256

                      a6e5833ba92f9d2dee0f748b2d00a96ce4ae2b9c68141b329a41c599bf7c0bd3

                      SHA512

                      375d2bbdc835f84e4fc5848f44d616ff9ea6a20745949016ffe27f62e703e380541e82ffe3472a3710bc711ac1fa6f0e5706bb8634081e53e697066efe2636e9

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\files\tutorial\ios9trustapp\jquery-1.11.1.min.js
                      Filesize

                      93KB

                      MD5

                      8101d596b2b8fa35fe3a634ea342d7c3

                      SHA1

                      d6c1f41972de07b09bfa63d2e50f9ab41ec372bd

                      SHA256

                      540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441

                      SHA512

                      9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_aia.dll
                      Filesize

                      110KB

                      MD5

                      bac25e6149851e53e0e6374cbfdd8862

                      SHA1

                      da9098bfc64b658c9a1de75d59d2a8ef0d71fd4e

                      SHA256

                      21314f796f4d0517a3db7dfcc23aa02363eda49600e19210ed3544e61ef8453c

                      SHA512

                      b8565e82fd7df3ced6f338531a05b425d061f81e0b90f1c1ee719668faa415807ed7b06aea53537c65a73d553e71da9887a1f87f22a69fa272a53e51f5fa2b08

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_app.dll
                      Filesize

                      130KB

                      MD5

                      380f15afec9887f83b349adaeed5fd82

                      SHA1

                      2e3ae392ee080652ac20bb40351dcc65666d71c1

                      SHA256

                      3311adb86a9f172f2570cb627da8c900c272a8bde30e5f44783ca3a6ef23ec5c

                      SHA512

                      089eee9df2b82cc4e3d090b1639a03784a4afc9ff67017165ab43fdc6ab67a2be1b2d047d8facab5155f6b688c9ce5d4d56e223a30a2e95841f1fd1cbdda0bb9

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_backup.dll
                      Filesize

                      146KB

                      MD5

                      da609072c5d00ee3496e0b471ffdbe2d

                      SHA1

                      831aa76c55ed6913c8ba6e5226bb1da9549867de

                      SHA256

                      1a4bbc4ce5f8bd96af945d9db8eacad84f8605cf1979d7ea9727d8a5ec77a530

                      SHA512

                      f5a466de81bab9cd1b117d7957222f076cd8aaafb8501d2964825340401ae214f72562e6817876d59804d03b4f3fb451311c4d9ae2006c65b8f8a3b4dbb42d50

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_datamgr.dll
                      Filesize

                      111KB

                      MD5

                      611e73cd22afbea4e98503b84d193a34

                      SHA1

                      a72da70a629e882a60bf84ea90010d4f40e75007

                      SHA256

                      f2687d64d728dd442538845c38197cfc1fb1565b38f5cacba395f6aca85af73d

                      SHA512

                      1811ca12b3170cc44df3c6a6745077a441195e83cff1949a1baf27fc39fc73bf61cb6e7f8039e888dd2289485c1a32a21436b6799a399ac8d2fe70f96795fa87

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_fm.dll
                      Filesize

                      81KB

                      MD5

                      e42f52fd37f9de60c00730bcf53ef641

                      SHA1

                      95aed7d4c769f3d07e2112f307e14fb2e15759a5

                      SHA256

                      2d8814df342465d490792d71d7c1054ad92f2e911f8c9001c8da6ba8181ca3c0

                      SHA512

                      567498e2adc0c367009dc13244b932ddb9d7027b3a43aa85df547712b4cae1c635dcf9b965c46b53ed1af9f002bf328e0f8a336967aff8b0c4c8bf1f52755a0b

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_info.dll
                      Filesize

                      190KB

                      MD5

                      748e731622cf592ffb32a26476bdc473

                      SHA1

                      d5724a09fd5ad3a4531051c5ac73e6b465f20504

                      SHA256

                      b954075f4601dab546735005ab77facb0a2e90fb4392f6c183792267694c68a8

                      SHA512

                      4ee858a61064fdd9fb0b7bba774eab72e72eaffe23376db164ef3f5bed88db0e7cb67d912d193c548f442e7b32f50c786b98a88e098bde1b1e15b1ba990f010a

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_jb.dll
                      Filesize

                      97KB

                      MD5

                      b7b19bed26ba9b6234be4cf4a6342fc5

                      SHA1

                      a601694f166a5fcc4bdd5cc5abf6ada473faef73

                      SHA256

                      d58e0739ec139714fb753c4d31f9afeec5c97b1e97ad9f7534296e46205a7833

                      SHA512

                      7d914fae356d7af040716c6d710c853a2831c8e70d06cc15a1efaba9cedd1b8b68a01a8586cc4c34ebf075009eaefd02bd77d427e48aebf505aef669328ac1d1

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_media.dll
                      Filesize

                      143KB

                      MD5

                      61a3f978faf9ff23f7f9c02cb5e3e105

                      SHA1

                      2f13005e66f369c51161667e31ccad6343f90607

                      SHA256

                      1919b6fd12bb2864c43103067f6497ab72e44beb72113f7eb09e6d2532a6aeaa

                      SHA512

                      1545d8e5fed0538e9374162af0831600e1ad95ca889567da6c21e130014d5413b7192bf43cf122d9f4f2121e99aa07f5f97aebe08cdc9c8192d4aa27c6219841

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_other.dll
                      Filesize

                      175KB

                      MD5

                      f5ba9dce956803c1221b2e25da8ce61e

                      SHA1

                      5dd766a81cb6b288221fb8c1cc96b3ac9dcb2789

                      SHA256

                      daae76021d89046f14e43cc10b0077111108904f65eb6ec759c89dcd92ca3721

                      SHA512

                      00959c6ce52100fdca542a67f73a9efd4b6ee105f2e3baf9294790e12bff2fb802b1f0e9b14ce9ea238b3d0cdf704670fd32d7f17277eb023bf7e702dac3dfac

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\idm_sync.dll
                      Filesize

                      76KB

                      MD5

                      1ee835828b21a8ed51f8592fdfaa1b9c

                      SHA1

                      ab641f19562bbe72c01306683b1db2c58e247ba6

                      SHA256

                      880a5ab118457a30d299cbf1cdf86292d89ee293ebd97e97927dcb8c4d4b4b8d

                      SHA512

                      1f35be239a83e8a5c45950e59fc90512e0cfd362973857a03c042883892dc1f17f23796715cd26edc8362c5b2b78d309025b24f3f45a78e8a4fb3ab8d657b2db

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\libcjpeg.dll
                      Filesize

                      594KB

                      MD5

                      cd0d918e111403f63a148b6f2ca71850

                      SHA1

                      65a367a8dfdfbdaa846aa9b31d38d19ba3c88393

                      SHA256

                      b89533087167c4f4ff7778b7b7a08058309f9a084f116e809de76e7288df780c

                      SHA512

                      32f0a43dd087df613803109757db07e583ae155f9855210b0e0bf040ab79e0e9ee45b58d0fd95e1ca209b9cfc54f68d66d852c7376ff56c9e69f8a2bcf4f9c4d

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\libcurl.dll
                      Filesize

                      407KB

                      MD5

                      e46b1b73f342b2da63ddedadb51a6d1b

                      SHA1

                      08a883891204c82480a1d99b5891be628d859176

                      SHA256

                      b470fb3674d49256659cb45b9fcc1243150a4bd22ebc022bae9a746c3fb19c09

                      SHA512

                      83a48807585e30163fb4b60ddbaba80217ad680e4adc835dcb1aeee9b9703b4b8ec234958c44206c6d9e3745b0d1f91254e368dd7400f3263e963eb9dab42b60

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\libhpdf.dll
                      Filesize

                      760KB

                      MD5

                      2b005915d4f319af3da3cdf583042f09

                      SHA1

                      a56f0df76f9037f0c895a4184a116e2b519e7894

                      SHA256

                      44011c44c79f2c656d79253b4d149a0287c021553fed13680cbdfabc90981cb5

                      SHA512

                      af1c1ddd0adb0607396f7658984700f7311f294c511ea224dd07c2dff4abc474ac1eacb240b33dcb7f90bdd33890b1faefcd72a89ffccf45394124e76918e5d1

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\libplist2.dll
                      Filesize

                      128KB

                      MD5

                      b0a519baa02b97da1441279e765cefae

                      SHA1

                      e8789016ff2a738330ea02a483c09d198705dde0

                      SHA256

                      be2ab801146dc6cf3d59fd986fca4801931beea485ee009e22c19d25d267dd0e

                      SHA512

                      15bc99c3cfe194418aeebfc502615755fb808aa52123008b8f4b058b0fb00b2aef862ef00d4264b05fb6a330e70d8b58f1b20b3963b978f8593cdb4d99232a74

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\libzip.dll
                      Filesize

                      84KB

                      MD5

                      97e2549c216f8e6298f1cb6d06f09c60

                      SHA1

                      fe9e07b9ced45429673d8292aa8b4f11bc1bb3a8

                      SHA256

                      9e197fc0d1f26a7fec62b4008aaac33abf5025475809425cddbff3f0f2ad93f8

                      SHA512

                      6fc3fb3d5e127fd65a6b3d61b91498ea59ec34fce24506903dcecb5cd83812b2ab62cd3619409e749df24e3cf982ce5d5b2371c66e3c4259359385ed7d2a9f92

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\msvcp140.dll
                      Filesize

                      429KB

                      MD5

                      2b4ffec9d5fee9785112aeffc12772fd

                      SHA1

                      af4ce2133cacbdec1ff369bd161f9e9baf24b219

                      SHA256

                      3bad372a03a23d6b1f375edb643052b7c3aee288721ec4f46cd497112201fc78

                      SHA512

                      253728cb067125fad712b4af37bd5428a17b78a525b2c6f98a15e3c400adc5dbcddfc3c3e0ae0bbb94e77659f67d76de7114e1c97471f60fc0856f84721a582e

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\setting.cfg
                      Filesize

                      93B

                      MD5

                      c16e5126f505691990f1087d12d1d5e1

                      SHA1

                      e05e3e064d10e6696d5650be25aba52bc3b613d9

                      SHA256

                      f932d6b1497f5a527efb381b0e82f3026ea4e9ce9ff9f3462a7f1e34775744a2

                      SHA512

                      7a05841221e0b8e20db54fcc63aecdbcde1174223070b5365ed2b0d63f5884449175f49bab21d20e852667c28ec46375ce34af9fe6748d488b7e0f8dc1ffb501

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\setting.cfg
                      Filesize

                      236B

                      MD5

                      d4f3d30b0c176005b31b3c81f895c9a7

                      SHA1

                      2d7e43f712bfe15852ea4a37bf91a14ecc479bc1

                      SHA256

                      8e0609346a84bb8813aefa855cfd77d39a22c11c5d4f17aefb00f3c2dc6c08d2

                      SHA512

                      5bc83a4eb3d987a53f3d6a082d4dbc336bf995519b9da3e7686f96bf80d214f6da1743bd269bb42525ec936a7641edc2473ec9b07b8223b19baa53423c1754e7

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\setting.cfg
                      Filesize

                      209B

                      MD5

                      7e674b5daae4ef5970faa728c743f27a

                      SHA1

                      bb4b513aa5633a8903656c61e06cd8c7f5b2c2ad

                      SHA256

                      4ada182552b23d648ae2ed2ed9b7214aae7f1ff9051d6d0b2360cec71745b7a5

                      SHA512

                      3a9fe627063ddca784bb9b408222a5e5428421a80d933d81efb7daa4600427865f9c441addcf060754a9f520d4f2f8bd03c7d94580e6046399a93112252027f0

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\setting.cfg.lock
                      Filesize

                      60B

                      MD5

                      b48328c7df6fa201d75d0f7256d96f7f

                      SHA1

                      1bad796bd400faa9c565a2842fd483da8c879899

                      SHA256

                      dad51ab57ae3b4e7c03dbffb9229f806b057b5fa093c9c841017325b29c9c100

                      SHA512

                      2a03c6df250b86170ffda05872e30e05f1bb7c9166a44f8bcf482160b1f7955994ba5e41e2a1449a2fbd1a966d5988ce6ca274cdef371878e983f2a5a29bd354

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\sqlite.dll
                      Filesize

                      770KB

                      MD5

                      162a575fe043c22acd0275f8e04eecd4

                      SHA1

                      6cb3cf8a6153188630082c44f5f63814fc7cc664

                      SHA256

                      57a88dcd7d2bd5cb9d25c19391dc2bafd25ec1e7d9e58207ad909f6dafe90175

                      SHA512

                      7ea1be7dd4498ecc1d1affbccab51d5cc8c1ec42162399697c7ddcb5550771f3b27af643c0d25148980b854394c44da34b1c33f7ed8a77212639586df2eedb44

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\translations\qt_gd.qm
                      Filesize

                      185KB

                      MD5

                      d512456777500dc13ef834ed528d3704

                      SHA1

                      90a32284052c3fe12c18afec9f7ff56735e2e34b

                      SHA256

                      c515dd2a2e00765b5f651aae124a55d617b24777138019abc5a7001da7417561

                      SHA512

                      babef929ac600c117967b42389623f352d219a466c484ae68ef3c9da9ff61555875ffb0dafc3e5eada6fb43d37f7afe74a6b6c73458a93ffb42819e1068c9a3b

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\translations\qt_he.qm
                      Filesize

                      135KB

                      MD5

                      26b777c6c94c5aa6e61f949aa889bf74

                      SHA1

                      f78da73388c86d4d5e90d19bb3bd5f895c027f27

                      SHA256

                      4281c421984772665a9d72ab32276cfe1e2a3b0ebe21d4b63c5a4c3ba1f49365

                      SHA512

                      8e02ce06f6de77729aefa24410cbd4bfba2d935ef10dcf071da47bb70d9c5e0969f528bdb3db5cab00e3142d7c573fcf66ea5eb4a2bc557229ad082c0eb1dbcc

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\translations\qtmultimedia_en.qm
                      Filesize

                      16B

                      MD5

                      bcebcf42735c6849bdecbb77451021dd

                      SHA1

                      4884fd9af6890647b7af1aefa57f38cca49ad899

                      SHA256

                      9959b510b15d18937848ad13007e30459d2e993c67e564badbfc18f935695c85

                      SHA512

                      f951b511ffb1a6b94b1bcae9df26b41b2ff829560583d7c83e70279d1b5304bde299b3679d863cad6bb79d0beda524fc195b7f054ecf11d2090037526b451b78

                      Download Submit

                    • C:\Program Files (x86)\3uToolsV3\x86\zlib.dll
                      Filesize

                      140KB

                      MD5

                      8d10307fce6e6f2eea6fa2eebff113c2

                      SHA1

                      c3f1cec18511da233dc7f8678f02ab71e23b4917

                      SHA256

                      b8050871f7ffee1cf70c7e77ad17ecce33e1945525b6a7b33215d2f5a6305ebd

                      SHA512

                      aed383e6b127e8dfe67bc8c1fb5b3ac4e93bdf93a05baf0db6f62b9da6a9edc9486b6d7491a2c10d7c9e4c72e0374dd99032a8639cc3689e2eb2a5a49aeaaead

                      Download Submit

                    • C:\Program Files\Java\jre-1.8\lib\ext\dns_sd.jar
                      Filesize

                      17KB

                      MD5

                      ce9a2f5a7fcfff341d6d901ad919a2ab

                      SHA1

                      341f9d9a0b3fd8cfbefe0169b148dcc55688ee93

                      SHA256

                      cc36a44467f41cf2dc91c126e368e357b28a0d57101472d2dfd1c06a4091cdf7

                      SHA512

                      1f53e652b042ee27fe05b11ccda2ed9ae9a8f44b948b8658aa7a2d7ad2f5bd94ea16f3d9a92e65a8c65b7480517f1d05a066a4fb8d961b927d0d305399ca4e8f

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\applekis\x64\applekis.PNF
                      Filesize

                      8KB

                      MD5

                      37a0c53016335ce602cce6e6b83dfa95

                      SHA1

                      4419c5ee32abc967598fbb85f8663a307e71bcbf

                      SHA256

                      dddaf0ffcb4d019a1858491b3a8cf9715fcdf8dee27fcaacbd79706a690c09bc

                      SHA512

                      ce1dc55ca2553c6b813f820da9db77834c171eace8bd8b62072b6cf4b26f2bd334a7946dd64010ab3fd441bf654eb91ea599393c9099a5fe03ccda638f100738

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\driver.7z
                      Filesize

                      6.1MB

                      MD5

                      3652c0553af68dc5dbabc3a253f494d8

                      SHA1

                      80bd88444b189b96953e9ef159d23a3d975350ba

                      SHA256

                      52fb39fb4424f8cc862169de1d767529e0603b766b8c010e58a4de8f90080028

                      SHA512

                      9c9a0ec358d6f814c529d311593f82e72d7452678f7ea8329719b887c508dc955df80fdc02e399444003774655c9f3eea723337e420ef1dc928fe098c4cf0121

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x64\WdfCoInstaller01009.dll
                      Filesize

                      1.6MB

                      MD5

                      4da5da193e0e4f86f6f8fd43ef25329a

                      SHA1

                      68a44d37ff535a2c454f2440e1429833a1c6d810

                      SHA256

                      18487b4ff94edccc98ed59d9fca662d4a1331c5f1e14df8db3093256dd9f1c3e

                      SHA512

                      b3d73ed5e45d6f2908b2f3086390dd28c1631e298756cee9bdf26b185f0b77d1b8c03ad55e0495dba982c5bed4a03337b130c76f7112f3e19821127d2cf36853

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x64\netaapl64.cat
                      Filesize

                      10KB

                      MD5

                      168c4256eea6a76983d79d45f191469f

                      SHA1

                      2f4e6d8db4bcfeec816d31a70045895a3e6158e3

                      SHA256

                      2b8a6ebc3e10d06a6ebbcb4ef89992978836eb52d2ad1c09e19b137b0963c2f9

                      SHA512

                      743f28589f4357594c4490c6bdc46b6ca6e3164ab58495d686316ba8effc004e68507b26cb07032f3232ecf21045078a97aae0fad9ac78acff48ec2ae0c26585

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x64\netaapl64.inf
                      Filesize

                      4KB

                      MD5

                      2428e7f81420a9d7e81dfce9fa0613b3

                      SHA1

                      96605444de2721d553530179ea96024f29b32827

                      SHA256

                      6db20d1374088a64b5a435189e3cbf1c0f30496d4a2c80346bc904605f3d0261

                      SHA512

                      fc98a3010d5a71ce4c9ec2ef16914cc6fabf531fdbf1cfc487d42dc352111e47f970565a011cc6ebd18b2632af5bc107e5c0e784127b789b68e6cb3f214aaf5b

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x64\netaapl64.sys
                      Filesize

                      22KB

                      MD5

                      ee00c544c025958af50c7b199f3c8595

                      SHA1

                      1a9320ad1ebcaaa21abb5527d9a55ca265deec5d

                      SHA256

                      d774db020d9c46d1aa0b2db9fa2c36c4a9c38d904cc6929695321d32aca0d4d1

                      SHA512

                      c08cfb84b6bc98a965b5195b06234646e8f500a0c7e167d8c2961dad3c10da47407d339f1fbd2c3af4104932b94ee042872680d968c3c9b086705d374fc9c94e

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x86\WdfCoInstaller01009.dll
                      Filesize

                      1.4MB

                      MD5

                      a9970042be512c7981b36e689c5f3f9f

                      SHA1

                      b0ba0de22ade0ee5324eaa82e179f41d2c67b63e

                      SHA256

                      7a6bf1f950684381205c717a51af2d9c81b203cb1f3db0006a4602e2df675c77

                      SHA512

                      8377049f0aaef7ffcb86d40e22ce8aa16e24cad78da1fb9b24edfbc7561e3d4fd220d19414fa06964692c54e5cbc47ec87b1f3e2e63440c6986cb985a65ce27d

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x86\netaapl.cat
                      Filesize

                      9KB

                      MD5

                      98b045f42f67bb602d8b768318a86018

                      SHA1

                      a04dd80cb60abf2dd73aae417b0a34e10c321346

                      SHA256

                      ad62ffdfba01af7222d95193d23bef0084115ee3aaba3ca1bcd808056dfe2437

                      SHA512

                      5d3295eb28685cd16e7da047d708f3f0d7fe0b2ea56fbe87d671fdb8371ae9d0e8fd18e3c456189954c8938ca96b4dd5937f21716348b27449d9eafdea104d83

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x86\netaapl.inf
                      Filesize

                      4KB

                      MD5

                      2e21c73e279f7d39222d038cb711d7c1

                      SHA1

                      493f1339c2dcaf82ad589158fd2f1b134cadbf8f

                      SHA256

                      7d256f65ad5b0a2767f9cdfdabe80ff9fe18c00be93e7df0e08c6508f309d519

                      SHA512

                      f5118e029fb911108eae967bd175a30eeee4a3898897120c38e92b92b43009b21f3810805b7a92ef68d2b8cdd84ff3a11d554114c0c4290e5bd9edb0c47e35d3

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\net\x86\netaapl.sys
                      Filesize

                      18KB

                      MD5

                      9213aa35bca94eb79d366da254e4bdf5

                      SHA1

                      e05ee5138270ef09bdaee37b31ddb57935e55cbb

                      SHA256

                      5e1c71beb6cfff5a6f149e9fe6e169d087a6cbe63a504fee8d42170284952f85

                      SHA512

                      51f147b5822b1adbc524712575a0d77cc28cdf69e3c6e01a81136043fe6fe57c64783b47d59f8e8dc0235abbbeefb658f9dc123ac104666a8f232abc121a6e5c

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\path.txt
                      Filesize

                      938B

                      MD5

                      8629beec6d2d530f4b06a816c78358a2

                      SHA1

                      e4fc314491e7af7783d82d452bad1cad6d535246

                      SHA256

                      348b6816e84c4ee4cfd6cd69d340df2e9a7129c25c24f385e58a06a3bd2a7834

                      SHA512

                      8d3887345d7389def047296613f1de77cdd8d925f94652c80d5b4b909a693838cbd09bc0df95458d25c25f1bf5b80d71bc030840da2c1ea5979d86677fbf7276

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x64\USBAAPL64.CAT
                      Filesize

                      14KB

                      MD5

                      26eee7af8aa1ef8c1bd7c9327c602844

                      SHA1

                      990a56215aac7000eac9371f489a0fc57d560078

                      SHA256

                      946b0a8150213d6a4dd3aef6248ebb923f8167c84c7ff1b10137e5030ec8bf30

                      SHA512

                      1cce53edb09f449720005ee9ca013fabb0be498991adf38ce738330a02b336790cb835e235e097c57a7cf983b4bf18664bc113b074cd94f9118901565d83e24d

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x64\usbaapl64.inf
                      Filesize

                      5KB

                      MD5

                      2da3a91b71919d035d8fd17b6b90bbc2

                      SHA1

                      c2c6a29f3abc80fd992777a92df30699124d37c5

                      SHA256

                      edea577e694efceec5b26d745fff8125e9fc8a78cacd7365e77ef35031ebc49b

                      SHA512

                      71b98c884c338902110c83f6c858b906bd8d63e09e5f92d3e019f586d82961fdc71a459e6456a3e9a56b9b109838b4556aee91e0befb68c2ae505c93a41fe56b

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x64\usbaapl64.sys
                      Filesize

                      53KB

                      MD5

                      f957092c63cd71d85903ca0d8370f473

                      SHA1

                      9d76d3df84ca8b3b384577cb87b7aba0ee33f08d

                      SHA256

                      4dec2fc20329f248135da24cb6694fd972dcce8b1bbea8d872fde41939e96aaf

                      SHA512

                      a43ca7f24281f67c63c54037fa9c02220cd0fa34a10b1658bae7e544236b939f26a1972513f392a5555dd97077bba91bbe920d41b19737f9960ef427599622bc

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x86\USBAAPL.CAT
                      Filesize

                      14KB

                      MD5

                      97f4158a43852869de6ba9f1c754bbc8

                      SHA1

                      0565f0874d623268529b86967b93a7ae8d57dab5

                      SHA256

                      1daa9a80eaf692e1c1490afafcc435e37cafa94e9a9dfe453a82b1b472f3b1ba

                      SHA512

                      ba75a483ac75deab29c4174f1991dbcf4a76857dac23c99065e07585a5958e49f1ade0133fabdb3c8a28ba35e8df06fb529f81c756ae549b35543ad39817a44e

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x86\usbaapl.PNF
                      Filesize

                      13KB

                      MD5

                      e70b88763cbd6ea996b231f2d1f22b77

                      SHA1

                      fa42e09d3bed60f7ad90f46ef142699ff6a376ca

                      SHA256

                      0cdad698563e00f2f7fcb88d8260428630f2cac3bd8f4a60b6862c1db0694961

                      SHA512

                      6c9c46fda2d6dc9076333981c5baada87a711d09394a4faa02d3c8d7dc40e08464c37e5439f604846f758684cacf7f78bf944dfcc84506b0ee709dbf4cdaa0cc

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x86\usbaapl.inf
                      Filesize

                      5KB

                      MD5

                      ca3a369e3993295e11d5fb6b7663f3b9

                      SHA1

                      7771a0176a543725d7bbf70a546c096a4ee2dd40

                      SHA256

                      4494c8af156d9dc7deea76491d73716e16b42e3e8b5b4555b0fd247b6cacab8b

                      SHA512

                      650b0f23b6470ad84a001821bd5ba6fc906db0e6fd616d734a87b9777ac1f5f6d6d0dc52f5aef223bf362109b77cd89c5b4e93562c1168fbd049756d714b64cf

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x86\usbaapl.sys
                      Filesize

                      44KB

                      MD5

                      a176718f0df45f60f545cf3e14f4d108

                      SHA1

                      fb03c1b53709f65712df5a8318130d9788bc3cea

                      SHA256

                      5e767cb0b51b3ba05b6f99a7e46bec275489dcfe874343c9b992843aa1f2334e

                      SHA512

                      7af3e0b90cd175b6b6c24abf237dc4395e6b9d2f360ee2cc3721d3184811fb5b086199d4a27f36bce8d6462c2717b3d9e2e1814a9d5a24ea4dc4fea32e6ae427

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\itunes_fix\usb\x86\usbaaplrc.dll
                      Filesize

                      5.8MB

                      MD5

                      1428a8b3dbf4f73b257c4a461df9b996

                      SHA1

                      0fe85ab508bd44dfb2fa9830f98de4714dfce4fa

                      SHA256

                      5ed0d8f2066dd19d5aec42c5498fdd1db9cefab4d024a1015c707dfd0cfd5b20

                      SHA512

                      916a61feb9a36872a7c1adece8933599e55b46f7d113966ec4ad2af0e2568f1a339629ec48eca10bd1e071c88171fe88292dab27ce509ceea42afbd049599cc7

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\{1f097e1a-f3f4-d041-a870-2c69fb79fdbc}\SETAF8.tmp
                      Filesize

                      35KB

                      MD5

                      a46e8f947d629a169e6a8ee7e07902d4

                      SHA1

                      a594032671900ed8347f6bfd002896a5063fe08b

                      SHA256

                      c48bbbb4b43f8cd883cd4a7bbbc1e0ded312f92bb154d684b6bb1a91c683c4b8

                      SHA512

                      7f783b25a03dd0af80b79a85b7c246be74f7439c78b0b6cea97589316845a816b127ab47824f16d5c21d8557e8e62e03fd7e6561fc731526f3682226dfcd1615

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\{1f097e1a-f3f4-d041-a870-2c69fb79fdbc}\SETB08.tmp
                      Filesize

                      11KB

                      MD5

                      58abcd249f1473434aa93c88e3b447b0

                      SHA1

                      6de34052e1449512140f9d347d6a6cdf60ab84b3

                      SHA256

                      c461190c324e6d03fdc0a696057779ff736ebdb623a980834b40596c2c5d9c54

                      SHA512

                      3cc9b6ce6e36954627ad5f4bbebedb891052d12c1951d3642fee969d4102d59aea820394962f10bf26eef525c78ce32e752975c80e1beac688eead75a9f95323

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\{1f097e1a-f3f4-d041-a870-2c69fb79fdbc}\SETB09.tmp
                      Filesize

                      2KB

                      MD5

                      50748d6d5cb2454514988bafb5ff2db5

                      SHA1

                      e714d33c809926d2b2f374f20df5d51d02e6d397

                      SHA256

                      bb1e8e64ba611e90be4bee7f7a52fcbd236cfa22c19b166405e9e1c86850839d

                      SHA512

                      e597a9e6188bb847f4ae80f20282e9abb4a9396c707b9e9536ad960a9232e1f0426cd3be6a441e2a20c39c14a94d89984a440cbba4774ad8d7b3f8d6e5327871

                      Download Submit

                    • C:\Users\Admin\AppData\Local\Temp\{1f097e1a-f3f4-d041-a870-2c69fb79fdbc}\SETB0A.tmp
                      Filesize

                      65KB

                      MD5

                      9456e82e53efeb584ffac8dcf4e5d53b

                      SHA1

                      8f14c5c3f6b01fff5a73ea8b8437de60974f62d5

                      SHA256

                      0d87321e343c44210857635425a077a4416450f653dc67a89f1044ec58987e1f

                      SHA512

                      07f0ca73eddc02965e8bce65779aba83e34204d52a984a18bdc0a758be42f378d69661863f2a5848564b6b8407ca439c13f49d17951f8e1f06fb1e8a2d5b02a7

                      Download Submit

                    • C:\Windows\Installer\MSIB0BF.tmp
                      Filesize

                      135KB

                      MD5

                      fe11c4804b99dc5328b62f266a34546b

                      SHA1

                      b9e4b99c71d01a5105263b1b351325ad60ac31be

                      SHA256

                      774992b8ffbb893475392387ff449532c9d75ef65b1e45718a03967bc526c739

                      SHA512

                      29f9f52f36de3501c60a9c41f5f16580c4f2b1c30bbbb2fbbc002b21ff514b3fdf5f1ad809fb84c9927c48a1cad9322ad92fd0a40522e115be8443946332a6a7

                      Download Submit

                    • C:\Windows\Installer\MSIC405.tmp
                      Filesize

                      76KB

                      MD5

                      950087e828e1b7426f703678e446c799

                      SHA1

                      c9f28be9b9f810132ec8d78c161e5a232491e60e

                      SHA256

                      8a41eaa0d699f48661c2560aeffe4b0432cf755f1b15e31ac9aff667d498b3ee

                      SHA512

                      9ab24bf84a4534e219df132a0b43874c1d6410ef802c69e65c5aaf3d0c46085470690851ef23303f9a48076e8ae552d816903e02c43c1af83e6fc3457d2acb93

                      Download Submit

                    • C:\Windows\Installer\MSIC5AE.tmp
                      Filesize

                      75KB

                      MD5

                      6f8e3e4f72620bddc633f0175f47161e

                      SHA1

                      53ed75a208cc84f1a065e9e4ece356371cac0341

                      SHA256

                      2adf199f6baf245f0b07d31a3a1401d4262c3e6c98b8f10df923ceb2c937291e

                      SHA512

                      80187277e78f59b7ea71ed3caa55452e730d93b8c296d5820d470776a428cbb7e7fead87240e811436f85e4d89df2b9f31d6d16658d21abf59395cab7074a869

                      Download Submit

                    • C:\Windows\Installer\e58ac39.msi
                      Filesize

                      38.2MB

                      MD5

                      5fa31f33afa76e4ff8387d526abb70e5

                      SHA1

                      c45e907c6189429b231579988cbe1010dd7f0f9b

                      SHA256

                      b6accb2caf4f4668f130eee803387588d31cb9e8d16c9e02ea010c554c1193e1

                      SHA512

                      6e2221ce35ee00b86ca4494ea41eefe9174290119f0798a351a2ffc51f3c8a35af3181c3d366f6232d5b2cada6729a265fdbc6de42ac56d8598516b2c9722072

                      Download Submit

                    • memory/4944-1684-0x0000000000610000-0x0000000001312000-memory.dmp

                      Filesize

                      13.0MB

                      Download

                    • memory/4944-2092-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download

                    • memory/4944-1685-0x0000000000610000-0x0000000001312000-memory.dmp

                      Filesize

                      13.0MB

                      Download

                    • memory/4944-2049-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download

                    • memory/4944-2062-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download

                    • memory/4944-2036-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download

                    • memory/4944-2781-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download

                    • memory/4944-2893-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download

                    • memory/4944-2894-0x0000000061B40000-0x000000006203B000-memory.dmp

                      Filesize

                      5.0MB

                      Download