Overview

overview

9

Static

static

3

2026-08-25...at.exe

windows10-2004-x64

9

2026-08-25...at.exe

windows11-ltsc_2024-x64

9

Analysis

  • max time kernel
    149s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    26/08/2026, 18:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-25_8c9364907e2f3629b954953253a76853_amadey_cryptbot_elex_luca-stealer_lynx_njrat.exe
  • Size 43.1MB
  • Sample260826-wm4kjstdph
  • SHA256 a1066fe939836a25afcd639d4570e6454d3f668fa03cbc978d5dbca1471e3cc4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryinstallerspywaretrojan

Malware Config

Signatures

  • UPX dump on OEP (original entry point) 2 IoCs
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 31 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Looks up external IP address via web service 1 TTPs 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  • Drops file in System32 directory 1 IoCs
  • Suspicious use of NtSetInformationThreadHideFromDebugger 22 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 8 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 31 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

    installer
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Delays execution with timeout.exe 1 IoCs
    defense_evasion
  • Enumerates system info in registry 2 TTPs 7 IoCs
  • Kills process with taskkill 1 IoCs
    defense_evasion
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 22 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 18 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-25_8c9364907e2f3629b954953253a76853_amadey_cryptbot_elex_luca-stealer_lynx_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-25_8c9364907e2f3629b954953253a76853_amadey_cryptbot_elex_luca-stealer_lynx_njrat.exe"
    1⤵
    • Checks computer location settings
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\Hook.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\Hook.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:540
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\driver_booster_setup.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\driver_booster_setup.exe" /silent
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:428
      • C:\Users\Admin\AppData\Local\Temp\is-EUT99.tmp\driver_booster_setup.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-EUT99.tmp\driver_booster_setup.tmp" /SL5="$50228,32734017,139264,C:\Users\Admin\AppData\Local\Temp\RarSFX0\driver_booster_setup.exe" /silent
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:4412
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe" /brandname
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious use of AdjustPrivilegeToken
          PID:4296
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe" /install /setup="C:\Users\Admin\AppData\Local\Temp\RarSFX0\driver_booster_setup.exe"
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:4620
          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe" /winstdate
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of NtSetInformationThreadHideFromDebugger
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:2424
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe" /install
          4⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          PID:5088
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\TaskbarPin\ICONPIN64.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\TaskbarPin\ICONPIN64.exe" pin "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe"
          4⤵
          • Executes dropped EXE
          • Suspicious use of FindShellTrayWindow
          PID:2896
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe" /skipuac
          4⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:2600
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\InstStat.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\InstStat.exe" /install db13
          4⤵
          • Executes dropped EXE
          • Suspicious use of NtSetInformationThreadHideFromDebugger
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          PID:840
    • C:\Windows\SysWOW64\timeout.exe
      "C:\Windows\System32\timeout.exe" /t 6
      2⤵
      • System Location Discovery: System Language Discovery
      • Delays execution with timeout.exe
      PID:3664
    • C:\Windows\SysWOW64\taskkill.exe
      "C:\Windows\System32\taskkill.exe" /f /im "DriverBooster.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Kills process with taskkill
      PID:2528
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.cybermania.ws/
      2⤵
      • Checks processor information in registry
      • Enumerates system info in registry
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5112
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ffb89b8c188,0x7ffb89b8c194,0x7ffb89b8c1a0
        3⤵
          PID:1656
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1960,i,16075500426506639566,11817440521068549468,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=2372 /prefetch:3
          3⤵
          • System Time Discovery
          PID:4148
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,16790781353322902840,6568110542282714790,262144 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:2
          3⤵
            PID:584
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2588,i,17214069037791629140,13063141844168812450,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=2596 /prefetch:8
            3⤵
              PID:4736
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,13585810948078106627,10289709948965144747,2097152 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
              3⤵
                PID:4392
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,8348156745790887378,8385067610329191569,2097152 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
                3⤵
                  PID:3600
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4268,i,3172064634562028975,12217453340144674217,2097152 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:1
                  3⤵
                    PID:4920
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4292,i,14475947422224952641,10627608672955964421,2097152 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:2
                    3⤵
                      PID:4208
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3672,i,8683803682997730169,9265502458171909930,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
                      3⤵
                        PID:3748
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5240,i,17674960880172323226,13284269047034933353,2097152 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=5252 /prefetch:1
                        3⤵
                          PID:1400
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,5848566297026270228,14628865440763865864,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
                          3⤵
                            PID:2632
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5592,i,4170614870218232780,7615059930343446856,2097152 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=5624 /prefetch:1
                            3⤵
                              PID:2704
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,12182776714817641246,5465407110767248292,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
                              3⤵
                                PID:4024
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6076,i,8534810746315133971,1626923591320313626,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:8
                                3⤵
                                  PID:1700
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,17904532128275198520,5336342700459403,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:8
                                  3⤵
                                    PID:5312
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5212,i,17904532128275198520,5336342700459403,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:8
                                    3⤵
                                      PID:5364
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,13842538517419623095,946035487277858584,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:8
                                      3⤵
                                        PID:5596
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7140,i,7024414093875416098,11131898274445360678,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=7152 /prefetch:8
                                        3⤵
                                          PID:5648
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5408,i,17224680930424354737,2247434228161517442,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6968 /prefetch:8
                                          3⤵
                                            PID:5848
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5124,i,2237421357572471623,4797423575690581827,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=7144 /prefetch:8
                                            3⤵
                                              PID:5900
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6860,i,7514279322507336193,10832912016184143108,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:8
                                              3⤵
                                                PID:5316
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4688,i,17060323484075859383,15046576379783136588,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=4320 /prefetch:8
                                                3⤵
                                                  PID:5744
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4384,i,8487023215708620979,16471639023639373283,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6956 /prefetch:8
                                                  3⤵
                                                    PID:5676
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4376,i,5093493590091011874,8872050865895826438,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=3776 /prefetch:8
                                                    3⤵
                                                      PID:5756
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5428,i,9918071447082823392,7675752897558147251,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
                                                      3⤵
                                                        PID:3780
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6068,i,3612484319254450484,17126984265669086974,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6092 /prefetch:8
                                                        3⤵
                                                          PID:4868
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,9229796455515928464,5350861310345641764,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:8
                                                          3⤵
                                                            PID:1692
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,12764074867610185266,17127189402963157909,524288 --field-trial-handle=2320,i,7094364736296329932,8733630408038948910,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
                                                            3⤵
                                                              PID:5804
                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe
                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe"
                                                          1⤵
                                                          • Checks computer location settings
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                          • Drops file in Program Files directory
                                                          • System Location Discovery: System Language Discovery
                                                          • Checks processor information in registry
                                                          • Enumerates system info in registry
                                                          • Modifies system certificate store
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of AdjustPrivilegeToken
                                                          • Suspicious use of FindShellTrayWindow
                                                          • Suspicious use of SendNotifyMessage
                                                          • Suspicious use of WriteProcessMemory
                                                          PID:4536
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe" /brandname
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • System Location Discovery: System Language Discovery
                                                            PID:1928
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="602" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • Drops file in Program Files directory
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:1272
                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 602 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 2 /insur "other" /type 0 /pr "iobit" /ver "13.6.0.438"
                                                              3⤵
                                                              • Executes dropped EXE
                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                              • System Location Discovery: System Language Discovery
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:4308
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe" /main /App=db13 /MainHwnd=0
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Loads dropped DLL
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of FindShellTrayWindow
                                                            • Suspicious use of SendNotifyMessage
                                                            PID:4076
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\NoteIcon.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\NoteIcon.exe" "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe"
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • System Location Discovery: System Language Discovery
                                                            PID:5068
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe" /cnt
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:4320
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="100" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3656
                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 100 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "other" /type 0 /pr "iobit" /ver "13.6.0.438"
                                                              3⤵
                                                              • Executes dropped EXE
                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                              • System Location Discovery: System Language Discovery
                                                              PID:4940
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe" /0 "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Icons\Main\"
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • Drops file in Program Files directory
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious behavior: EnumeratesProcesses
                                                            PID:3992
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanWinUpd.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanWinUpd.exe" /db_os_arch
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • System Location Discovery: System Language Discovery
                                                            PID:4224
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe" /fix-errorcode-1
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • Drops file in Windows directory
                                                            • System Location Discovery: System Language Discovery
                                                            • Checks SCSI registry key(s)
                                                            PID:2884
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe" /fix-clean-1
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • Drops file in Program Files directory
                                                            • Drops file in Windows directory
                                                            • System Location Discovery: System Language Discovery
                                                            • Checks SCSI registry key(s)
                                                            PID:812
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe" /stat
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • System Location Discovery: System Language Discovery
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:3524
                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AUpdate.exe
                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AUpdate.exe" /u https://stats.iobit.com/active_month.php /a db13 /p iobit /v 13.6.0.438 /t 2 /d 7 /db /user
                                                              3⤵
                                                              • Executes dropped EXE
                                                              • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                              • System Location Discovery: System Language Discovery
                                                              PID:748
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe" /afterupgrade
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • System Location Discovery: System Language Discovery
                                                            PID:4024
                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Hvcifix.exe
                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Hvcifix.exe" /silent
                                                            2⤵
                                                            • Executes dropped EXE
                                                            • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                            • Drops file in Program Files directory
                                                            • Drops file in Windows directory
                                                            • System Location Discovery: System Language Discovery
                                                            • Checks SCSI registry key(s)
                                                            • Suspicious use of WriteProcessMemory
                                                            PID:4060
                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\x64Proxy.exe
                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\x64Proxy.exe" /IncompDrivers
                                                              3⤵
                                                              • Executes dropped EXE
                                                              PID:4340
                                                            • C:\Users\Admin\AppData\Local\Temp\DFEEA587-D2F0-46A8-AF94-29978C609180\dismhost.exe
                                                              C:\Users\Admin\AppData\Local\Temp\DFEEA587-D2F0-46A8-AF94-29978C609180\dismhost.exe {C3A320CF-35CA-4964-BB32-335729A40E7F}
                                                              3⤵
                                                              • Executes dropped EXE
                                                              • Drops file in Windows directory
                                                              PID:2696
                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe"
                                                          1⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Drops file in System32 directory
                                                          • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                          • Drops file in Program Files directory
                                                          • System Location Discovery: System Language Discovery
                                                          • Enumerates system info in registry
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          • Suspicious use of FindShellTrayWindow
                                                          • Suspicious use of SendNotifyMessage
                                                          PID:2916
                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Scheduler.exe
                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Scheduler.exe"
                                                          1⤵
                                                          • Executes dropped EXE
                                                          • Loads dropped DLL
                                                          • Suspicious use of NtSetInformationThreadHideFromDebugger
                                                          • System Location Discovery: System Language Discovery
                                                          • Suspicious behavior: EnumeratesProcesses
                                                          PID:1704
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                          1⤵
                                                            PID:4940

                                                          Network

                                                                MITRE ATT&CK Enterprise v16

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                AutoUpdate.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
                                                                • Size 2.4MB
                                                                • SHA256 793ad19064b25850cdd660b1b99c359df55eafcaf769be30fbed8e242ea18b12
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                DataState.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DataState.dll
                                                                • Size 77KB
                                                                • SHA256 0b9e80726a2dc59741fb7d951b1bd31de99c2c79f714f3101988b2eb3f6eeff4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                initial.wlst
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\initial.wlst
                                                                • Size 2.0MB
                                                                • SHA256 1796cb853cd4aaf1309d8e19f959f23433bd25834bf31aa3b652d73360bbb9c4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                DriverBooster.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe
                                                                • Size 8.3MB
                                                                • SHA256 b8ca41c46214888091a1f52c79d71276b2a79d370297f8f013bb9cac185c91b2
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                HWiNFO.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe
                                                                • Size 590KB
                                                                • SHA256 146e416e162af03c667b9968f9d69f3eb1973f9dadb09db4ca4eff04821c326b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                HWiNFO32.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO32.dll
                                                                • Size 1.2MB
                                                                • SHA256 cb81c7cbd229b639f24db6655edc67f4c32954778d24e086d45a7229cc58351c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                HistoryTemp.txt
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HistoryTemp.txt
                                                                • Size 6KB
                                                                • SHA256 45d32bf3fbf9cde80762cffafd75b24b9497debbbdb0cf218bcc4ff4b0977078
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                is-0UBN6.tmp
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Icons\Apps\is-0UBN6.tmp
                                                                • Size 1KB
                                                                • SHA256 ac4531a4b4fe3b34054eb33f2caabe2776be0ea5fc5056670c139caffd51b4f4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                InstStat.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\InstStat.exe
                                                                • Size 1.7MB
                                                                • SHA256 c7a3795b67137998cd3db766c2fc4c9506c01d00b4f49011ed7bca77546d86ec
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                NewsData_v2.dat
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\LatestNews\NewsData_v2.dat
                                                                • Size 4KB
                                                                • SHA256 2a1838a3af18651bc06f9d862d6779a40fd0e00f887e8b0e65efdb07d60bb2e0
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                NewsData_v2.dat.tmp.dat
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\LatestNews\NewsData_v2.dat.tmp.dat
                                                                • Size 267B
                                                                • SHA256 e03c2bb4c530716eb3ed5290a9712e8b2166f555d237cccb8deb7464b3787b4e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                PowerMgr.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\PowerMgr.dll
                                                                • Size 75KB
                                                                • SHA256 4b4c3be51b5a01082ca287c1e572e46f602edc020d3ef1b20b77620d08c3225a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ProductNews2.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductNews2.dll
                                                                • Size 2.0MB
                                                                • SHA256 c904ea273867421ee7de692626869185ed9092357254a57e2f9909e16c8155a4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Register.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Register.dll
                                                                • Size 1.1MB
                                                                • SHA256 99adb1b7592678c30fc9f9be07663233b85abc84f761600885b7525483936117
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                RttHlp.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                                                                • Size 167KB
                                                                • SHA256 d6e6831b8a3e27d75fbbf7ab106ba955282e9625f8d6a0db1628a5d540c4032e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                scan.dat
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanData\scan.dat
                                                                • Size 130B
                                                                • SHA256 a9c5e2c5aad2a658cf843e4ec3cc91429baf83fc89fcf0e138f6a93ea1475fd6
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Scheduler.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Scheduler.exe
                                                                • Size 160KB
                                                                • SHA256 24c761a32df6024702e8339e716cc95d9736bd54ed85c8871ab13094a15b7490
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                SetupHlp.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe
                                                                • Size 2.0MB
                                                                • SHA256 e125dead08c432ea0dc29a5614ca739a8b34be976e8866793f91cb43228f6231
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                ICONPIN64.exe
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\TaskbarPin\ICONPIN64.exe
                                                                • Size 1.6MB
                                                                • SHA256 0b63193c6556834c0043cf27c592eb2e76584617a17ffa4cab5f3a0f13afc473
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Update-ext.ini.tmp
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Update-ext.ini.tmp
                                                                • Size 70B
                                                                • SHA256 cfafcd887b4817ec10a743e026d8f5aa5291321f71beb46b054ce02097477195
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Update.ini
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Update.ini
                                                                • Size 18KB
                                                                • SHA256 b4c68f5eff8ab780d35f4292fff988c49ee5b84cb2ac8092b4efdc06c6c9a649
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Zip.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Zip.dll
                                                                • Size 1.2MB
                                                                • SHA256 e6c5bcff1d5158f4b1b7372397d4c4a15b4568ec99e56eef347f9233f3a7f29a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                lang.dat
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\lang.dat
                                                                • Size 60B
                                                                • SHA256 b16f3d34196d371bee19b1407d3747e90a213cb9c759551366d5c8fb53c24573
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                local.dat
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\local.dat
                                                                • Size 1KB
                                                                • SHA256 c4e847a4f1d815b65e1eebc3948483bc9cf989c5a30d53b4ad30515ab67adf61
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                madBasic_.bpl
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\madBasic_.bpl
                                                                • Size 212KB
                                                                • SHA256 4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                madDisAsm_.bpl
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\madDisAsm_.bpl
                                                                • Size 64KB
                                                                • SHA256 20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                madExcept_.bpl
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\madExcept_.bpl
                                                                • Size 438KB
                                                                • SHA256 655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                rtl120.bpl
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\rtl120.bpl
                                                                • Size 1.1MB
                                                                • SHA256 b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                sqlite3.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\sqlite3.dll
                                                                • Size 908KB
                                                                • SHA256 7cc676d23aa669a035fe9a2b35144ca97a1753e3c99ef76c519d5016bc672975
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                vcl120.bpl
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\vcl120.bpl
                                                                • Size 1.9MB
                                                                • SHA256 52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                version.dll
                                                                • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\version.dll
                                                                • Size 5.3MB
                                                                • SHA256 4e12ff9a72b7c2357f46ef645400cb6311330ced73ee787244c85ba7c57e8c8e
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                manifest.json
                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5112_1733537414\manifest.json
                                                                • Size 43B
                                                                • SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                manifest.json
                                                                • Path C:\Program Files\chrome_Unpacker_BeginUnzipping5112_260661375\manifest.json
                                                                • Size 135B
                                                                • SHA256 bf066a2cf10074e847bef7c066a9c84deada6586412e181cb417c6426a5d60a4
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                DBRtt.ept
                                                                • Path C:\ProgramData\IObit\IObitRtt\DBRtt.ept
                                                                • Size 340B
                                                                • SHA256 d99d8c5ae7f5808d25495838ef8e01b3ab92c1270293c935ff4cd13c99b149e0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Install.ini
                                                                • Path C:\ProgramData\IObit\Install.ini
                                                                • Size 202B
                                                                • SHA256 4117918d46a3cbb778e78b5e66a0ab9c13a84b9e19973a8f1b561bc975708b25
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                NewsStatV2.po
                                                                • Path C:\ProgramData\ProductData3\NewsStatV2.po
                                                                • Size 12B
                                                                • SHA256 472e48643c0b957bb7c612448330f07ce0cb71e14541c6b0b9ce789bc82e91da
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                StatCache3.db
                                                                • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                • Size 403B
                                                                • SHA256 416e2e73515c8cd22bf4fcf00184650f7038443c1620e9bd69d81a65d9a19aec
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                StatCache3.db
                                                                • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                • Size 774B
                                                                • SHA256 ca3dd3de099b4113dcedb16cd715b31422fa864e72650aa0b969f935dfcb5935
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                db13Stat3.ini
                                                                • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                • Size 100B
                                                                • SHA256 1d4ee130d06e3e0cc7482d168b6ffc6ed09e7ee9810ecf7bb3c0de3e184e6c53
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                db13Stat3.ini
                                                                • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                • Size 157B
                                                                • SHA256 32a71c4b0ed7970094044e059f41372724a9ee1b64dc58a4c207d91636ef7712
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                AUpdate.ini
                                                                • Path C:\Users\Admin\AppData\LocalLow\IObit\AUpdate.ini
                                                                • Size 65B
                                                                • SHA256 df0fa3afd3f55921ccf43e74c1798546701b95505f5c3db463b9c784b802d10b
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                protocols.json
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.12\protocols.json
                                                                • Size 3KB
                                                                • SHA256 2edf732da5fd827859e7a1a5b69a4a622cfc416f60a6ae04154d5aad3a1bccec
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 7d64d2777f444a09968d6c155732e22d743fcf7c319c222bc06f6bb97808e489
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                settings.dat
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                • Size 280B
                                                                • SHA256 92b83a0e542b7bb3ed324c35b5f2a40c47a6351981065b804e4d9d80ddd6d7ee
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                1faeca69-449d-4731-88f0-d70af266a83c.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1faeca69-449d-4731-88f0-d70af266a83c.tmp
                                                                • Size 11KB
                                                                • SHA256 9802b4fea1916227db68cf104f307ba5a4b38140df340f2664e866e776a51905
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                the-real-index
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                • Size 3KB
                                                                • SHA256 5b81ac6eef08fa764a8bd4c85767979c591ca83d5201fe575541a85b2fcf06b5
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                the-real-index~RFe59865d.TMP
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59865d.TMP
                                                                • Size 3KB
                                                                • SHA256 7a3962c36134f0a0876ae3e89db612534f7e0fca4da0c0072358abdce97a0b0a
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Edge Profile.ico
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                                • Size 70KB
                                                                • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Network Persistent State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                • Size 7KB
                                                                • SHA256 6f98a59aa84105c7ddbb3aec8abd3b723718a5a331457079d28869515be15c5b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Network Persistent State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                • Size 111B
                                                                • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                SCT Auditing Pending Reports
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                • Size 2B
                                                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                • Size 11KB
                                                                • SHA256 19ebd0599ba8af2cbebcbbe3619da2de9006f577e6bf389ff4836a59e275529c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                • Size 11KB
                                                                • SHA256 0e38d00f0dcef012f0b45dff1ad209abd663e2853f559c631ca7093a22384d82
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Secure Preferences
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                • Size 32KB
                                                                • SHA256 a2609d8223fb21a1ae4d6887907b30734c28d6422867a2758197f5ec2abdb2cd
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                898033e8-60ab-422c-818b-d3f2b3f63900.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\898033e8-60ab-422c-818b-d3f2b3f63900.tmp
                                                                • Size 22KB
                                                                • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 15KB
                                                                • SHA256 a15fd4e3b6586aa8c97dc745aaac384715719c84fb7955737e6cb5dfad964d5c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 25KB
                                                                • SHA256 80f6cff47e3bfdcb68da35024b27403f8b277378f8f0b8ff5b68c0c445efe765
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 15KB
                                                                • SHA256 dea413e8ccadfcfb1deda7ce6336b1bfef436cca509bb1ae5539a71a5d617d91
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 8KB
                                                                • SHA256 ce3924e7d5004a578cba6b3feb4d2b0225906f3049a5a875cf82519d17d17228
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Local State
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                • Size 9KB
                                                                • SHA256 0ca4b90984d2b129a6597e6835dc1151ae34a46137eeb7c8120b7a7a04113d34
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                metadata.json
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
                                                                • Size 132B
                                                                • SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                3ae45d08-9a58-4474-9a5f-ba3d0072e905.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\3ae45d08-9a58-4474-9a5f-ba3d0072e905.tmp
                                                                • Size 13B
                                                                • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                • Size 2KB
                                                                • SHA256 88d9b225b1f7e1856d89e3fdf16e85651bfb278fc750b3d573cf479c4317b5d0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                34eef9e8-14fd-49f3-89c6-250fc2c58bed.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\34eef9e8-14fd-49f3-89c6-250fc2c58bed.tmp
                                                                • Size 1B
                                                                • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                HWiNFO64A_151.SYS
                                                                • Path C:\Users\Admin\AppData\Local\Temp\HWiNFO64A_151.SYS
                                                                • Size 61KB
                                                                • SHA256 a6e75c3a21436941e9a6a111fe3a708be1753ab656ba247a40b401206096641c
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                CyberMania.url
                                                                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\CyberMania.url
                                                                • Size 77B
                                                                • SHA256 ae6a476ce9024230ccaf426ba9f0f6f3dbe6a54547fd317f5e014dacd1671121
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Hook.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\Hook.exe
                                                                • Size 5.5MB
                                                                • SHA256 ca73ce96a1c88044bbc047227937ddcf680b373d1dd006914ff3383689373f31
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                driver_booster_setup.exe
                                                                • Path C:\Users\Admin\AppData\Local\Temp\RarSFX0\driver_booster_setup.exe
                                                                • Size 31.9MB
                                                                • SHA256 a67d4d48e93daae7a844bcdb235b83c88ad8b4d8f819c8241204a32e41696d61
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Setup Log 2026-08-26 #001.txt
                                                                • Path C:\Users\Admin\AppData\Local\Temp\Setup Log 2026-08-26 #001.txt
                                                                • Size 91KB
                                                                • SHA256 bb1bcfe3110776152ca22b33938063ae524eb9c289a42d8d90a6da394214b58f
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                d3835afc-ecd0-41d8-a048-a600014602c0.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\d3835afc-ecd0-41d8-a048-a600014602c0.tmp
                                                                • Size 10KB
                                                                • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Inno_English.lng
                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-9GN44.tmp\Inno_English.lng
                                                                • Size 8KB
                                                                • SHA256 5acf921d2b7d33d5fc9ab02569be5f46b5f3cf8656bf1c245f2f61f55529bb3b
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                driver_booster_setup.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\is-EUT99.tmp\driver_booster_setup.tmp
                                                                • Size 1.2MB
                                                                • SHA256 8dfc033ff5a1ebac9282f15f14ab048b73fb058fec927a1f5d188a359315c6eb
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                content_new.js
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5112_1005497598\CRX_INSTALL\content_new.js
                                                                • Size 10KB
                                                                • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                85b1d381-b4f1-4090-802b-b6ea1835667a.tmp
                                                                • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5112_1886365859\85b1d381-b4f1-4090-802b-b6ea1835667a.tmp
                                                                • Size 154KB
                                                                • SHA256 e56c9164b667ad97b0cefcb26e48bcb2b04d8cc1a362ee921f2119a6a8798000
                                                                • MD5 SHA1 SHA512 SSDEEP TLSH
                                                                Submit Download

                                                                Config.ini
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                • Size 54B
                                                                • SHA256 5e77484e2784e3ce36f6da5a8de91cebeb56e6aaee14c216367a973d65aaf774
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Config.ini
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                • Size 214B
                                                                • SHA256 d3d4cb3d86988ce140fc4fd24330f634735b88ac9dc633df11e2ede168849a09
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Config.ini
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                • Size 672B
                                                                • SHA256 eab93352bafcfb2e338ce3b9fa5beb81e0c20f9a4a2ce6bf249ce1d89af5ccf9
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Config.ini
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                • Size 772B
                                                                • SHA256 c796acc1f2e3c11a3749152ce57caefac7e0cabac4fb142c3a235fd6bc93e6d2
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Config.ini
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                • Size 886B
                                                                • SHA256 7414a66f4029fd46f667c5adc4eca69cddae3557813b7580ec386328c792d062
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                Config.ini
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                • Size 934B
                                                                • SHA256 d9e128a53a5cf022c19648391d6de10f672168370ee758a1bb3993a377e4838e
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                20260826.log
                                                                • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Logs\Scan\20260826.log
                                                                • Size 2B
                                                                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                • MD5 SHA1 SHA512
                                                                Submit Download

                                                                Driver Booster.lnk
                                                                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster.lnk
                                                                • Size 1KB
                                                                • SHA256 d913f5328c93df289fc1b47a522420ad2ac35258ba7ed51e09ec8b7c8c4a01d0
                                                                • MD5 SHA1 SHA512 TLSH
                                                                Submit Download

                                                                memory/428-39-0x0000000000400000-0x000000000042C000-memory.dmp
                                                                Download

                                                                memory/428-29-0x0000000000400000-0x000000000042C000-memory.dmp
                                                                Download

                                                                memory/428-31-0x0000000000419000-0x000000000041A000-memory.dmp
                                                                Download

                                                                memory/1272-682-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/1272-689-0x0000000002910000-0x0000000002A2B000-memory.dmp
                                                                Download

                                                                memory/1272-698-0x0000000050000000-0x0000000050117000-memory.dmp
                                                                Download

                                                                memory/1272-699-0x0000000050120000-0x000000005030E000-memory.dmp
                                                                Download

                                                                memory/1272-680-0x00000000004F0000-0x00000000004F1000-memory.dmp
                                                                Download

                                                                memory/1272-697-0x0000000000400000-0x00000000004D2000-memory.dmp
                                                                Download

                                                                memory/1272-681-0x0000000000640000-0x0000000000641000-memory.dmp
                                                                Download

                                                                memory/1704-622-0x0000000050000000-0x0000000050117000-memory.dmp
                                                                Download

                                                                memory/1704-623-0x0000000059800000-0x000000005986E000-memory.dmp
                                                                Download

                                                                memory/1704-621-0x0000000000400000-0x0000000000426000-memory.dmp
                                                                Download

                                                                memory/1704-625-0x0000000057800000-0x0000000057812000-memory.dmp
                                                                Download

                                                                memory/1704-626-0x0000000050120000-0x000000005030E000-memory.dmp
                                                                Download

                                                                memory/1704-617-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/1704-616-0x00000000006B0000-0x00000000006B1000-memory.dmp
                                                                Download

                                                                memory/1704-615-0x00000000006A0000-0x00000000006A1000-memory.dmp
                                                                Download

                                                                memory/1704-624-0x0000000057000000-0x000000005703F000-memory.dmp
                                                                Download

                                                                memory/1928-664-0x0000000000400000-0x0000000000498000-memory.dmp
                                                                Download

                                                                memory/2424-569-0x0000000000400000-0x0000000000428000-memory.dmp
                                                                Download

                                                                memory/2424-570-0x0000000050000000-0x0000000050117000-memory.dmp
                                                                Download

                                                                memory/2424-571-0x0000000050120000-0x000000005030E000-memory.dmp
                                                                Download

                                                                memory/2424-563-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/2424-562-0x0000000002140000-0x0000000002141000-memory.dmp
                                                                Download

                                                                memory/2424-561-0x0000000002130000-0x0000000002131000-memory.dmp
                                                                Download

                                                                memory/2916-627-0x0000000006460000-0x000000000657B000-memory.dmp
                                                                Download

                                                                memory/2916-610-0x0000000000770000-0x0000000000771000-memory.dmp
                                                                Download

                                                                memory/2916-611-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/2916-620-0x00000000040B0000-0x00000000041CB000-memory.dmp
                                                                Download

                                                                memory/2916-629-0x0000000006800000-0x00000000069D5000-memory.dmp
                                                                Download

                                                                memory/2916-619-0x0000000003E30000-0x0000000003E4A000-memory.dmp
                                                                Download

                                                                memory/2916-609-0x0000000000750000-0x0000000000751000-memory.dmp
                                                                Download

                                                                memory/4076-677-0x00000000007D0000-0x00000000007D1000-memory.dmp
                                                                Download

                                                                memory/4076-708-0x0000000057000000-0x000000005703F000-memory.dmp
                                                                Download

                                                                memory/4076-678-0x00000000007E0000-0x00000000007E1000-memory.dmp
                                                                Download

                                                                memory/4076-679-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/4076-710-0x0000000050120000-0x000000005030E000-memory.dmp
                                                                Download

                                                                memory/4076-706-0x0000000050000000-0x0000000050117000-memory.dmp
                                                                Download

                                                                memory/4076-705-0x0000000000400000-0x00000000006AD000-memory.dmp
                                                                Download

                                                                memory/4076-707-0x0000000059800000-0x000000005986E000-memory.dmp
                                                                Download

                                                                memory/4296-496-0x0000000010000000-0x0000000010237000-memory.dmp
                                                                Download

                                                                memory/4296-510-0x0000000000400000-0x0000000000498000-memory.dmp
                                                                Download

                                                                memory/4412-40-0x0000000000400000-0x0000000000532000-memory.dmp
                                                                Download

                                                                memory/4412-560-0x0000000000400000-0x0000000000532000-memory.dmp
                                                                Download

                                                                memory/4536-633-0x0000000005F70000-0x000000000600F000-memory.dmp
                                                                Download

                                                                memory/4536-715-0x0000000050000000-0x0000000050117000-memory.dmp
                                                                Download

                                                                memory/4536-595-0x00000000013A0000-0x000000000159E000-memory.dmp
                                                                Download

                                                                memory/4536-642-0x000000000A5A0000-0x000000000A775000-memory.dmp
                                                                Download

                                                                memory/4536-612-0x0000000002D40000-0x0000000002D41000-memory.dmp
                                                                Download

                                                                memory/4536-613-0x0000000002D50000-0x0000000002D51000-memory.dmp
                                                                Download

                                                                memory/4536-614-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/4536-643-0x000000000A8D0000-0x000000000A9EB000-memory.dmp
                                                                Download

                                                                memory/4536-653-0x000000000B380000-0x000000000B39A000-memory.dmp
                                                                Download

                                                                memory/4536-662-0x000000000B9F0000-0x000000000BA14000-memory.dmp
                                                                Download

                                                                memory/4536-593-0x0000000001260000-0x0000000001399000-memory.dmp
                                                                Download

                                                                memory/4536-714-0x0000000000400000-0x0000000000C8B000-memory.dmp
                                                                Download

                                                                memory/4536-632-0x0000000006130000-0x0000000006200000-memory.dmp
                                                                Download

                                                                memory/4620-526-0x0000000004150000-0x000000000426B000-memory.dmp
                                                                Download

                                                                memory/4620-511-0x0000000000720000-0x0000000000721000-memory.dmp
                                                                Download

                                                                memory/4620-712-0x0000000004150000-0x000000000426B000-memory.dmp
                                                                Download

                                                                memory/4620-513-0x00000000729B0000-0x000000007322D000-memory.dmp
                                                                Download

                                                                memory/4620-607-0x0000000000400000-0x00000000005FD000-memory.dmp
                                                                Download

                                                                memory/4620-711-0x0000000000400000-0x00000000005FD000-memory.dmp
                                                                Download

                                                                memory/4620-512-0x0000000000730000-0x0000000000731000-memory.dmp
                                                                Download

                                                                memory/4620-608-0x0000000004150000-0x000000000426B000-memory.dmp
                                                                Download