Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    07/11/2026, 12:09

General

  • Target
    driver_booster_setup_13.6.exe
  • Size 31.9MB
  • Sample261107-pbqe8aeg65
  • SHA256 094ac7317028cdd851d712f6beeaca669046c2c3c4dc24e8d019e65c9b825667
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 42 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Looks up external IP address via web service 1 TTPs 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 3 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 22 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 40 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 8 IoCs

    Inno Setup installer

  • NSIS installer 1 IoCs
  • Checks SCSI registry key(s) 3 TTPs 64 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 9 IoCs
  • Modifies registry class 18 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 52 IoCs
  • Suspicious behavior: LoadsDriver 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 33 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe
    "C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:364
    • C:\Users\Admin\AppData\Local\Temp\is-UOIEU.tmp\driver_booster_setup_13.6.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-UOIEU.tmp\driver_booster_setup_13.6.tmp" /SL5="$90052,32734017,139264,C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4736
      • C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\SetupHlp.exe
        "C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\SetupHlp.exe" /SetupInit /setup="C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe"
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        PID:4964
      • C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp-dbinst\setup.exe
        "C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp-dbinst\setup.exe" "C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe" /PrName="iobit" /title="Driver Booster 13" /dbver=13.6.0.438 /eula="C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp-dbinst\EULA.rtf" /showlearnmore /pmtproduct /nochromepmt /runupt
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Enumerates system info in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:1768
        • C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe
          "C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe" /sp- /verysilent /Installer /norestart /DIR="C:\Program Files (x86)\IObit\Driver Booster" /Installer-DeskIcon /Installer-TaskIcon /runupt
          4⤵
          • System Location Discovery: System Language Discovery
          • Suspicious use of WriteProcessMemory
          PID:4572
          • C:\Users\Admin\AppData\Local\Temp\is-7VTN4.tmp\driver_booster_setup_13.6.tmp
            "C:\Users\Admin\AppData\Local\Temp\is-7VTN4.tmp\driver_booster_setup_13.6.tmp" /SL5="$110042,32734017,139264,C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe" /sp- /verysilent /Installer /norestart /DIR="C:\Program Files (x86)\IObit\Driver Booster" /Installer-DeskIcon /Installer-TaskIcon /runupt
            5⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Drops file in Program Files directory
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4580
            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe
              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe" /brandname
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              • Suspicious use of AdjustPrivilegeToken
              PID:4272
            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe
              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe" /install /setup="C:\Users\Admin\AppData\Local\Temp\driver_booster_setup_13.6.exe"
              6⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Drops file in Program Files directory
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              • Modifies registry class
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of WriteProcessMemory
              PID:888
              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe" /winstdate
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Drops file in Program Files directory
                • System Location Discovery: System Language Discovery
                PID:3328
            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe" /install
              6⤵
              • Executes dropped EXE
              • System Location Discovery: System Language Discovery
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              PID:3492
            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\TaskbarPin\ICONPIN64.exe
              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\TaskbarPin\ICONPIN64.exe" pin "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe"
              6⤵
              • Executes dropped EXE
              • Suspicious use of FindShellTrayWindow
              PID:1968
            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\InstStat.exe
              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\InstStat.exe" /install db13
              6⤵
              • Executes dropped EXE
              • Reads the TCP/IP host and domain name from the registry
              • System Location Discovery: System Language Discovery
              PID:3788
        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe
          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe" /autoscan
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:4692
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.iobit.com/appgoto.php?to=install&name=db&ver=13.6.0.438&lan=&ref=db13&type=free
          4⤵
          • Checks processor information in registry
          • Enumerates system info in registry
          • Modifies registry class
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of WriteProcessMemory
          PID:2632
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x35c,0x7ff97672c188,0x7ff97672c194,0x7ff97672c1a0
            5⤵
              PID:2944
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,3469049681724534674,2937289468794624850,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=2512 /prefetch:3
              5⤵
              • System Time Discovery
              PID:3584
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2156,i,8517065794364194870,8426985157747247508,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:8
              5⤵
                PID:2068
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1608,i,15416494436419940144,11211859207557673145,262144 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:2
                5⤵
                  PID:2832
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3408,i,6517059173366820088,15970687783002176477,2097152 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=3420 /prefetch:1
                  5⤵
                    PID:2492
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3412,i,17924750001453783024,6421512372690978190,2097152 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=3432 /prefetch:1
                    5⤵
                      PID:3340
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4148,i,11763857022837807151,9368922987391932327,2097152 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=4144 /prefetch:1
                      5⤵
                        PID:1344
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4208,i,7224088946382095481,4419449894597688441,2097152 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=4156 /prefetch:2
                        5⤵
                          PID:3052
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3560,i,4806745817942924732,10555755079207526295,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
                          5⤵
                            PID:2492
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5272,i,15806425293709985329,5530302193123290677,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:8
                            5⤵
                              PID:5848
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5048,i,8832489385185466106,14039279471368465642,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=5364 /prefetch:8
                              5⤵
                                PID:5856
                              • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,17933349078142972089,5959942603955972525,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
                                5⤵
                                  PID:5660
                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,17933349078142972089,5959942603955972525,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
                                  5⤵
                                    PID:4308
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6020,i,12946332115062072337,4665247705870133044,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6032 /prefetch:8
                                    5⤵
                                      PID:6120
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6028,i,17356321934278904836,9430982407187177685,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6084 /prefetch:8
                                      5⤵
                                        PID:3148
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6204,i,993820311024688468,16903551905469467437,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:8
                                        5⤵
                                          PID:4648
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6236,i,2860479240403951059,6117682000145295932,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6208 /prefetch:8
                                          5⤵
                                            PID:5104
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6272,i,8479197685045509993,17803147351039650990,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
                                            5⤵
                                              PID:5636
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4208,i,9386948117315593132,9918614937184380841,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6644 /prefetch:8
                                              5⤵
                                                PID:1560
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4204,i,2537678168922726056,11176176706962627377,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
                                                5⤵
                                                  PID:5012
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6656,i,12748030355698775405,14846407131577270894,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=5132 /prefetch:8
                                                  5⤵
                                                    PID:1384
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5304,i,7557816958064830476,8495027991903831565,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=5284 /prefetch:8
                                                    5⤵
                                                      PID:3760
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,11576776461349968526,13318570604152414201,524288 --field-trial-handle=2476,i,9026021633472418096,1935055490542925955,262144 --variations-seed-version --mojo-platform-channel-handle=2308 /prefetch:8
                                                      5⤵
                                                        PID:5484
                                                    • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\IObitDownloader.exe
                                                      "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\IObitDownloader.exe" "/Config=http://update.iobit.com/infofiles/db/rmd/freeware-db.upt" /show /lang=English.lng /product=db13 "Advanced SystemCare Installer_p4" "IObit Uninstaller Installer_p4" "IObit Software Updater Installer_p2"
                                                      4⤵
                                                      • Executes dropped EXE
                                                      • Reads the TCP/IP host and domain name from the registry
                                                      • System Location Discovery: System Language Discovery
                                                      • Suspicious behavior: EnumeratesProcesses
                                                      • Suspicious use of FindShellTrayWindow
                                                      • Suspicious use of SendNotifyMessage
                                                      PID:772
                                                      • C:\ProgramData\IObit\Driver Booster\Downloader\db13\ASCSetup.exe
                                                        "C:\ProgramData\IObit\Driver Booster\Downloader\db13\ASCSetup.exe" /sp- /verysilent /suppressmsgboxes /NoRestart /insur=db_inw /autoini /trial
                                                        5⤵
                                                          PID:5756
                                                          • C:\Users\Admin\AppData\Local\Temp\is-6RSCG.tmp\ASCSetup.tmp
                                                            "C:\Users\Admin\AppData\Local\Temp\is-6RSCG.tmp\ASCSetup.tmp" /SL5="$5041E,60554465,139264,C:\ProgramData\IObit\Driver Booster\Downloader\db13\ASCSetup.exe" /sp- /verysilent /suppressmsgboxes /NoRestart /insur=db_inw /autoini /trial
                                                            6⤵
                                                              PID:1800
                                                              • C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\ASCUpgrade.exe
                                                                "C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\ASCUpgrade.exe" /upgrade "c:\program files (x86)\iobit\advanced systemcare"
                                                                7⤵
                                                                  PID:2984
                                                                • C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\ASCUpgrade.exe
                                                                  "C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\ASCUpgrade.exe" /CleanDir "C:\Program Files (x86)\IObit\Advanced SystemCare\"
                                                                  7⤵
                                                                    PID:4708
                                                              • C:\ProgramData\IObit\Driver Booster\Downloader\db13\IUSetup.exe
                                                                "C:\ProgramData\IObit\Driver Booster\Downloader\db13\IUSetup.exe" /sp- /verysilent /suppressmsgboxes /install_start /dt /insur=db_inw /dlini
                                                                5⤵
                                                                  PID:1836
                                                                  • C:\Users\Admin\AppData\Local\Temp\is-1UF8Q.tmp\IUSetup.tmp
                                                                    "C:\Users\Admin\AppData\Local\Temp\is-1UF8Q.tmp\IUSetup.tmp" /SL5="$50652,33702673,137216,C:\ProgramData\IObit\Driver Booster\Downloader\db13\IUSetup.exe" /sp- /verysilent /suppressmsgboxes /install_start /dt /insur=db_inw /dlini
                                                                    6⤵
                                                                      PID:5776
                                                                      • C:\Users\Admin\AppData\Local\Temp\is-LT1PB.tmp\Installer\iushrun.exe
                                                                        "C:\Users\Admin\AppData\Local\Temp\is-LT1PB.tmp\Installer\iushrun.exe" /ii "C:\Program Files (x86)\IObit\IObit Uninstaller" /soi
                                                                        7⤵
                                                                          PID:5628
                                                                        • C:\Program Files (x86)\IObit\IObit Uninstaller\iush.exe
                                                                          "C:\Program Files (x86)\IObit\IObit Uninstaller\iush.exe" /if "C:\Program Files (x86)\IObit\IObit Uninstaller" /dt /dlini /insur=db_inw /SetupPkg="C:\ProgramData\IObit\Driver Booster\Downloader\db13\IUSetup.exe"
                                                                          7⤵
                                                                            PID:5392
                                                                            • C:\Windows\SysWOW64\regsvr32.exe
                                                                              "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll"
                                                                              8⤵
                                                                                PID:5596
                                                                                • C:\Windows\system32\regsvr32.exe
                                                                                  /s "C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll"
                                                                                  9⤵
                                                                                    PID:4232
                                                                                • C:\Windows\SysWOW64\regsvr32.exe
                                                                                  "C:\Windows\System32\regsvr32.exe" /s "C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll"
                                                                                  8⤵
                                                                                    PID:1756
                                                                                    • C:\Windows\system32\regsvr32.exe
                                                                                      /s "C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll"
                                                                                      9⤵
                                                                                        PID:744
                                                                                    • C:\Program Files (x86)\IObit\IObit Uninstaller\TaskbarPin\ICONPIN64.exe
                                                                                      "C:\Program Files (x86)\IObit\IObit Uninstaller\TaskbarPin\ICONPIN64.exe" Pin "C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe"
                                                                                      8⤵
                                                                                        PID:5724
                                                                                • C:\ProgramData\IObit\Driver Booster\Downloader\db13\ISUSetup.exe
                                                                                  "C:\ProgramData\IObit\Driver Booster\Downloader\db13\ISUSetup.exe" /sp- /verysilent /suppressmsgboxes /install_start /insur=db_in /autoini
                                                                                  5⤵
                                                                                    PID:5372
                                                                                    • C:\Users\Admin\AppData\Local\Temp\is-AGFGE.tmp\ISUSetup.tmp
                                                                                      "C:\Users\Admin\AppData\Local\Temp\is-AGFGE.tmp\ISUSetup.tmp" /SL5="$C01EC,23331980,137216,C:\ProgramData\IObit\Driver Booster\Downloader\db13\ISUSetup.exe" /sp- /verysilent /suppressmsgboxes /install_start /insur=db_in /autoini
                                                                                      6⤵
                                                                                        PID:5860
                                                                                  • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\CareScan.exe
                                                                                    "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\CareScan.exe" /savefile /silentscan /low /output="C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanData\ScanResult_all.ini"
                                                                                    4⤵
                                                                                    • Executes dropped EXE
                                                                                    • Drops file in Program Files directory
                                                                                    • System Location Discovery: System Language Discovery
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    PID:3364
                                                                                  • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe
                                                                                    "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe" /afterinstall /setup="C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp-dbinst\setup.exe"
                                                                                    4⤵
                                                                                    • Executes dropped EXE
                                                                                    • Drops file in Program Files directory
                                                                                    • System Location Discovery: System Language Discovery
                                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                                    PID:1232
                                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe
                                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe"
                                                                              1⤵
                                                                              • Checks computer location settings
                                                                              • Executes dropped EXE
                                                                              • Loads dropped DLL
                                                                              • Drops file in Program Files directory
                                                                              • Reads the TCP/IP host and domain name from the registry
                                                                              • System Location Discovery: System Language Discovery
                                                                              • Checks SCSI registry key(s)
                                                                              • Checks processor information in registry
                                                                              • Enumerates system info in registry
                                                                              • Modifies system certificate store
                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                              • Suspicious use of FindShellTrayWindow
                                                                              • Suspicious use of SendNotifyMessage
                                                                              • Suspicious use of WriteProcessMemory
                                                                              PID:4720
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe" /brandname
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:2640
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="602" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:1316
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 602 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 2 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:1972
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe" /main /App=db13 /MainHwnd=0
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Loads dropped DLL
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                • Suspicious use of FindShellTrayWindow
                                                                                • Suspicious use of SendNotifyMessage
                                                                                PID:4312
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\NoteIcon.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\NoteIcon.exe" "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DriverBooster.exe"
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:1492
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe" /cnt
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Drops file in Program Files directory
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:2404
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="100" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:5096
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 100 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:1440
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe" /0 "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Icons\Main\"
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:4816
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanWinUpd.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanWinUpd.exe" /db_os_arch
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:4356
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe" /fix-errorcode-1
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Drops file in Windows directory
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Checks SCSI registry key(s)
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:4396
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe" /fix-clean-1
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Checks SCSI registry key(s)
                                                                                PID:3788
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe" /stat
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:4732
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AUpdate.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AUpdate.exe" /u https://stats.iobit.com/active_month.php /a db13 /p iobit /v 13.6.0.438 /t 1 /d 7 /db /user
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • Reads the TCP/IP host and domain name from the registry
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  • Suspicious behavior: EnumeratesProcesses
                                                                                  PID:4756
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\SetupHlp.exe" /afterupgrade
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Drops file in Program Files directory
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:4964
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Hvcifix.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Hvcifix.exe" /silent
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Drops file in Windows directory
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Checks SCSI registry key(s)
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:1816
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\x64Proxy.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\x64Proxy.exe" /IncompDrivers
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:2268
                                                                                • C:\Users\Admin\AppData\Local\Temp\0F060581-16E0-412E-BD1F-3A85BA346427\dismhost.exe
                                                                                  C:\Users\Admin\AppData\Local\Temp\0F060581-16E0-412E-BD1F-3A85BA346427\dismhost.exe {BB2E45B8-C9E7-44BE-BA20-330B22C3580F}
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • Drops file in Windows directory
                                                                                  PID:5696
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="101" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Drops file in Program Files directory
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious use of WriteProcessMemory
                                                                                PID:2564
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 101 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                  3⤵
                                                                                  • Executes dropped EXE
                                                                                  • System Location Discovery: System Language Discovery
                                                                                  PID:396
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DBDownloader.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DBDownloader.exe" {"proxytype":0,"task":[{"exp":"C:\\Program Files (x86)\\IObit\\Driver Booster\\13.6.0\\Database\\Scan\\WhiteList.db","u":"https://www.cd4o.com/drivers/wlst/c15b866440a9b68d52f6b7a440c31c80.wlst","t":3,"p":"C:\\Program Files (x86)\\IObit\\Driver Booster\\13.6.0\\Database\\Scan\\WhiteListtmp","m":"c15b866440a9b68d52f6b7a440c31c80","d":false}],"downtype":1}
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:5980
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanWinUpd.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanWinUpd.exe" /db_gather_driver_tmp
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Checks SCSI registry key(s)
                                                                                PID:5260
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DBDownloader.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DBDownloader.exe" {"proxytype":0,"hosthandle":197182,"timeout":10,"id":48040,"task":[{"u":"http://download.windowsupdate.com/d/msdownload/update/driver/drvs/2013/07/20578753_999fee3ed6b5ef3a08f51ced090c4827a420736e.cab","t":0,"p":""}],"downtype":4}
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • Reads the TCP/IP host and domain name from the registry
                                                                                • System Location Discovery: System Language Discovery
                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                PID:5300
                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="208" /PostNow=-1 /Wait=0 /Path="" /ExtParam=""
                                                                                2⤵
                                                                                • Executes dropped EXE
                                                                                • System Location Discovery: System Language Discovery
                                                                                PID:5232
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 208 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438" /postnow
                                                                                  3⤵
                                                                                    PID:5788
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe" /10 "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Icons\Main\"
                                                                                  2⤵
                                                                                  • Executes dropped EXE
                                                                                  PID:5832
                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="170" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                  2⤵
                                                                                    PID:5536
                                                                                    • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                      "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 170 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                      3⤵
                                                                                        PID:5484
                                                                                    • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                      "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="608" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                      2⤵
                                                                                        PID:5648
                                                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 608 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                          3⤵
                                                                                            PID:5956
                                                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="147" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                          2⤵
                                                                                            PID:5608
                                                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 147 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                              3⤵
                                                                                                PID:5692
                                                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="105" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                              2⤵
                                                                                                PID:5660
                                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 105 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                                  3⤵
                                                                                                    PID:3440
                                                                                                • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                  "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /PostCommStat /Days=7 /Wait=0 /Path=""
                                                                                                  2⤵
                                                                                                    PID:1004
                                                                                                    • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                      "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /postcache /days 7
                                                                                                      3⤵
                                                                                                        PID:4452
                                                                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /postspcache "C:\ProgramData\ProductData3\StatSpCache.dat"
                                                                                                          4⤵
                                                                                                            PID:5740
                                                                                                      • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                        "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="171" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                                        2⤵
                                                                                                          PID:5488
                                                                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 171 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                                            3⤵
                                                                                                              PID:6012
                                                                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="172" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                                            2⤵
                                                                                                              PID:5136
                                                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 172 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                                                3⤵
                                                                                                                  PID:5784
                                                                                                              • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                                "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="173" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                                                2⤵
                                                                                                                  PID:2880
                                                                                                                  • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                                    "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 173 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                                                    3⤵
                                                                                                                      PID:2052
                                                                                                                  • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\IObitDownloader.exe
                                                                                                                    "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\IObitDownloader.exe" "/Config=https://update.iobit.com/infofiles/db/rmd/freeware-db.upt" /product=db13 "Smart Game Booster Boost"
                                                                                                                    2⤵
                                                                                                                      PID:4288
                                                                                                                    • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                                      "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="120" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                                                      2⤵
                                                                                                                        PID:5760
                                                                                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 120 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                                                          3⤵
                                                                                                                            PID:5896
                                                                                                                        • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                                          "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe" /CommStat /DoCommStat /Code="115" /PostNow=0 /Wait=0 /Path="" /ExtParam=""
                                                                                                                          2⤵
                                                                                                                            PID:5084
                                                                                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe" /statcom /stflag 115 /appid "db13" /pd "db" /url "https://stats.iobit.com/usage_v2.php" /user 0 /insur "ruseo_dbfpdp" /type 1 /pr "iobit" /ver "13.6.0.438"
                                                                                                                              3⤵
                                                                                                                                PID:3136
                                                                                                                          • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe
                                                                                                                            "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AutoUpdate.exe"
                                                                                                                            1⤵
                                                                                                                            • Executes dropped EXE
                                                                                                                            • Loads dropped DLL
                                                                                                                            • Drops file in Program Files directory
                                                                                                                            • Reads the TCP/IP host and domain name from the registry
                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                            • Enumerates system info in registry
                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                            • Suspicious use of FindShellTrayWindow
                                                                                                                            • Suspicious use of SendNotifyMessage
                                                                                                                            PID:2336
                                                                                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\rma.exe
                                                                                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\rma.exe" /run /auto
                                                                                                                              2⤵
                                                                                                                                PID:3020
                                                                                                                            • C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Scheduler.exe
                                                                                                                              "C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Scheduler.exe"
                                                                                                                              1⤵
                                                                                                                              • Executes dropped EXE
                                                                                                                              • Loads dropped DLL
                                                                                                                              • Drops file in Program Files directory
                                                                                                                              • System Location Discovery: System Language Discovery
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:436
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                                                                                              1⤵
                                                                                                                                PID:3552
                                                                                                                              • C:\Windows\system32\taskmgr.exe
                                                                                                                                "C:\Windows\system32\taskmgr.exe" /4
                                                                                                                                1⤵
                                                                                                                                  PID:1200
                                                                                                                                • C:\Windows\System32\rundll32.exe
                                                                                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                  1⤵
                                                                                                                                    PID:4036
                                                                                                                                  • C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe
                                                                                                                                    "C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe"
                                                                                                                                    1⤵
                                                                                                                                      PID:5840

                                                                                                                                    Network

                                                                                                                                          MITRE ATT&CK Enterprise v16

                                                                                                                                          Replay Monitor

                                                                                                                                          Loading Replay Monitor...

                                                                                                                                          Downloads

                                                                                                                                          unins000.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Advanced SystemCare\unins000.exe
                                                                                                                                          • Size 1.2MB
                                                                                                                                          • SHA256 602976172cf8c4e8132b825846385fe05abd8372b5eb95011b8461749f671c16
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          AUpdate.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\AUpdate.exe
                                                                                                                                          • Size 493KB
                                                                                                                                          • SHA256 d7278d77705e0cd8524923fb29e2973323d21243c42476575e729b0992269a73
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ChangeIcon.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ChangeIcon.exe
                                                                                                                                          • Size 4.3MB
                                                                                                                                          • SHA256 644cb9bbfe6e64998b78a3960d03f101121a8eb3312e6b642529673bf5d6efed
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          DBDownloader.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DBDownloader.exe
                                                                                                                                          • Size 830KB
                                                                                                                                          • SHA256 6531439b6133334e6c48bae5abd67b082cf8af809d0c9705fe695518ea156369
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          DataState.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\DataState.dll
                                                                                                                                          • Size 77KB
                                                                                                                                          • SHA256 0b9e80726a2dc59741fb7d951b1bd31de99c2c79f714f3101988b2eb3f6eeff4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Reg.dbd

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Reg.dbd
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 6fdb5829bfaad49bd29b4fd3ca5b5e82e0d8e31d5b2d865e328e97e7a224ce6e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          WhiteList.db

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\WhiteList.db
                                                                                                                                          • Size 18.6MB
                                                                                                                                          • SHA256 67332aa062e47927e2eb1607f9ce670ccf6aac5359c211fdf65eaebb1341865c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          WhiteListtmp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\WhiteListtmp
                                                                                                                                          • Size 2.0MB
                                                                                                                                          • SHA256 6c598d2e078d031736b1b5acbc9ba1c49d281e4b155efb6b04b24c140a9cf7fa
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          WhiteListtmp.cfg

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\WhiteListtmp.cfg
                                                                                                                                          • Size 771B
                                                                                                                                          • SHA256 82873b87b05b78c7cdb4b191a4716a8cf12684167f7ee97a82a38d2788f000c1
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          WhiteListtmp.temp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\WhiteListtmp.temp
                                                                                                                                          • Size 2.0MB
                                                                                                                                          • SHA256 f9d9d04ed04e9b6b1524a6c45eb59313cbcef61dbc700c4821f49c3ce88167d9
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          initial.wlst

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\initial.wlst
                                                                                                                                          • Size 2.0MB
                                                                                                                                          • SHA256 1796cb853cd4aaf1309d8e19f959f23433bd25834bf31aa3b652d73360bbb9c4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          initial.wlst.temp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Database\Scan\initial.wlst.temp
                                                                                                                                          • Size 2.0MB
                                                                                                                                          • SHA256 046339ff46cdf31ca20013d5963baf916df56d4a4b74e1025375f997079e4a9d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          FaultFixes.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\FaultFixes.exe
                                                                                                                                          • Size 1.9MB
                                                                                                                                          • SHA256 cc8aa533eca2503a70300944e6bc32837f3d53ee225b8d11bd60685936a236b8
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          HVCIFix.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HVCIFix.exe
                                                                                                                                          • Size 2.9MB
                                                                                                                                          • SHA256 152de839463b04853097141c196517a8bbe95059d5fb475c1f4cbe8cfb3b54cc
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          HWiNFO.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO.exe
                                                                                                                                          • Size 590KB
                                                                                                                                          • SHA256 146e416e162af03c667b9968f9d69f3eb1973f9dadb09db4ca4eff04821c326b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          HWiNFO32.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\HWiNFO\HWiNFO32.dll
                                                                                                                                          • Size 1.2MB
                                                                                                                                          • SHA256 cb81c7cbd229b639f24db6655edc67f4c32954778d24e086d45a7229cc58351c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          is-A6TSF.tmp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Icons\Apps\is-A6TSF.tmp
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 ac4531a4b4fe3b34054eb33f2caabe2776be0ea5fc5056670c139caffd51b4f4
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          InstStat.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\InstStat.exe
                                                                                                                                          • Size 1.7MB
                                                                                                                                          • SHA256 c7a3795b67137998cd3db766c2fc4c9506c01d00b4f49011ed7bca77546d86ec
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          NewsData_v2.dat

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\LatestNews\NewsData_v2.dat
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 0c4aefd05ea363bd1dff24ae1e326c8d4de5ab1bd74750ac435ee678a857f2db
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          NewsData_v2.dat.tmp.dat

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\LatestNews\NewsData_v2.dat.tmp.dat
                                                                                                                                          • Size 267B
                                                                                                                                          • SHA256 4205597ed173cbfac2ecc90aa92d4fba01285b304c5218bf5207aa04a20247b6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          WhiteList.ini

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\LocalData\WhiteList.ini
                                                                                                                                          • Size 132B
                                                                                                                                          • SHA256 674a858a663aef7c23f5ff1307ca26e6718b729f17bf4a8dbc23a2f65ceeacf3
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Manta.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Manta.exe
                                                                                                                                          • Size 830KB
                                                                                                                                          • SHA256 62713e79f1c8de0c29942f29d5c30e08644fbe78eafc0ef4e1431f30b3801d12
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          NoteIcon.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\NoteIcon.exe
                                                                                                                                          • Size 136KB
                                                                                                                                          • SHA256 e1065310be8ab98fad171cae2f25c825d6ceeac17a37dbd1d812d73889be269f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          PowerMgr.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\PowerMgr.dll
                                                                                                                                          • Size 75KB
                                                                                                                                          • SHA256 4b4c3be51b5a01082ca287c1e572e46f602edc020d3ef1b20b77620d08c3225a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ProductNews2.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductNews2.dll
                                                                                                                                          • Size 2.0MB
                                                                                                                                          • SHA256 c904ea273867421ee7de692626869185ed9092357254a57e2f9909e16c8155a4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ProductStat3.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ProductStat3.exe
                                                                                                                                          • Size 1.0MB
                                                                                                                                          • SHA256 7607dab169737b0751d541442a0cdc8411b4c8ae7f10b85f20e43bddab1c973f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Register.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Register.dll
                                                                                                                                          • Size 1.1MB
                                                                                                                                          • SHA256 99adb1b7592678c30fc9f9be07663233b85abc84f761600885b7525483936117
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          RttHlp.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\RttHlp.exe
                                                                                                                                          • Size 167KB
                                                                                                                                          • SHA256 d6e6831b8a3e27d75fbbf7ab106ba955282e9625f8d6a0db1628a5d540c4032e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          config.ini

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanData\config.ini
                                                                                                                                          • Size 53B
                                                                                                                                          • SHA256 ae0d4e56d5595091dfe279e31bb2cbfb407076f2e5b10b0122291beff5c32b56
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          scan.dat

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanData\scan.dat
                                                                                                                                          • Size 130B
                                                                                                                                          • SHA256 bb7caa6db4bf960fca67bc5590d7859885646d64d01ee14a3b48c0fcb431fea7
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          scan.dat

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\ScanData\scan.dat
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 e6025610a63396735cf779f7e0e6ab9c62e1b4f8be0caf5f5d15e061b8b32602
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Scheduler.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Scheduler.exe
                                                                                                                                          • Size 160KB
                                                                                                                                          • SHA256 24c761a32df6024702e8339e716cc95d9736bd54ed85c8871ab13094a15b7490
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ICONPIN64.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\TaskbarPin\ICONPIN64.exe
                                                                                                                                          • Size 1.6MB
                                                                                                                                          • SHA256 0b63193c6556834c0043cf27c592eb2e76584617a17ffa4cab5f3a0f13afc473
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Freeware.ini.tmp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Freeware.ini.tmp
                                                                                                                                          • Size 98KB
                                                                                                                                          • SHA256 59755257f79e4ecfc6b45cabb426c72aef2c2a8fc26b88a1e21469dabe3529de
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          iipfr.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Temp\Pub\iipfr.exe
                                                                                                                                          • Size 957KB
                                                                                                                                          • SHA256 8d25b9f662b27b485e766c65b77e5cffa4c25528a02f1f9e86daf864567f2aa5
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ExpSlistn.dat

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Temp\Update\ExpSlistn.dat
                                                                                                                                          • Size 253B
                                                                                                                                          • SHA256 ef4619bccaf1fc33ab747054b92d309d96aba073269cdc5e2374ae25f93b6de8
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Update-ext.ini

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Update-ext.ini
                                                                                                                                          • Size 70B
                                                                                                                                          • SHA256 cfafcd887b4817ec10a743e026d8f5aa5291321f71beb46b054ce02097477195
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Update.ini.tmp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Update\Update.ini.tmp
                                                                                                                                          • Size 16KB
                                                                                                                                          • SHA256 51516c6ce668a7a161f7fb6e3f382b42d41c194d535fb628ab4e44db4ac758e6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Zip.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\Zip.dll
                                                                                                                                          • Size 1.2MB
                                                                                                                                          • SHA256 e6c5bcff1d5158f4b1b7372397d4c4a15b4568ec99e56eef347f9233f3a7f29a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          is-1QBPD.tmp

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\is-1QBPD.tmp
                                                                                                                                          • Size 8.3MB
                                                                                                                                          • SHA256 b8ca41c46214888091a1f52c79d71276b2a79d370297f8f013bb9cac185c91b2
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          lang.dat

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\lang.dat
                                                                                                                                          • Size 60B
                                                                                                                                          • SHA256 b16f3d34196d371bee19b1407d3747e90a213cb9c759551366d5c8fb53c24573
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          madBasic_.bpl

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\madBasic_.bpl
                                                                                                                                          • Size 212KB
                                                                                                                                          • SHA256 4926203fdd4fd70b55409e84728faf927d71274fb368193205d44e4f04a605f8
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          madDisAsm_.bpl

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\madDisAsm_.bpl
                                                                                                                                          • Size 64KB
                                                                                                                                          • SHA256 20ddd0bdf076a91d9d82c8e447e1dbf6dba52fe6613cfe1e5373aeac7f889b62
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          madExcept_.bpl

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\madExcept_.bpl
                                                                                                                                          • Size 438KB
                                                                                                                                          • SHA256 655c2a4b484ce587c8c99cbc17f7cada640e79fc8f92b4de2d68882d79c0c815
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          rtl120.bpl

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\rtl120.bpl
                                                                                                                                          • Size 1.1MB
                                                                                                                                          • SHA256 b3dee68af7b2805f6cf74976b60564dcc7d6d38444078d32cdca99ee1bb5bb22
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          sqlite3.dll

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\sqlite3.dll
                                                                                                                                          • Size 908KB
                                                                                                                                          • SHA256 7cc676d23aa669a035fe9a2b35144ca97a1753e3c99ef76c519d5016bc672975
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          vcl120.bpl

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\vcl120.bpl
                                                                                                                                          • Size 1.9MB
                                                                                                                                          • SHA256 52b78e79ae9b9cccd8f85dea12dd8f5dbc8ffb62f9bc537efb1ced7a4b21c244
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          x64Proxy.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\Driver Booster\13.6.0\x64Proxy.exe
                                                                                                                                          • Size 217KB
                                                                                                                                          • SHA256 91294ca4bc61f53c10b7a1c231126e9630fc089b739a49c1d8304bf20f4cd8ad
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IUFileFilter.sys
                                                                                                                                          • Size 27KB
                                                                                                                                          • SHA256 a67a546f6b31b27fa6307e109ee16cbe27f11072523c3550318070374a73b3a6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IUForceDelete.sys
                                                                                                                                          • Size 35KB
                                                                                                                                          • SHA256 7a3d3e17bae1ea5ff7c2c113194f4f64973129c8811240fe07c0082aaaf040b6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IUProcessFilter.sys
                                                                                                                                          • Size 21KB
                                                                                                                                          • SHA256 c3225a48339e90b013d033bdf56b93fa97479a912b1fcf8703743b7145484326
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IURegistryFilter.sys
                                                                                                                                          • Size 35KB
                                                                                                                                          • SHA256 7d6be4978ffec641cb160408bcdff0f5877dc5a7a557af7d751c702d1b51e21a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_arm64\IUFileFilter.sys
                                                                                                                                          • Size 36KB
                                                                                                                                          • SHA256 533662ca649bc7091327b6fdb735313284cb13b3a90ccb377bb08b32abd73ab0
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_arm64\IUForceDelete.sys
                                                                                                                                          • Size 42KB
                                                                                                                                          • SHA256 06131785c32ad3fd5af1bddaa582e83b134ed1dee875b367d392322886aeb831
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_arm64\IUProcessFilter.sys
                                                                                                                                          • Size 30KB
                                                                                                                                          • SHA256 ca084a0b02954baf7f000b1d855a3d21f90692711a590ec95469064f30e6cc2d
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_arm64\IURegistryFilter.sys
                                                                                                                                          • Size 46KB
                                                                                                                                          • SHA256 406db8b640687390b9009ebc6d99bca4ed8ba1f2e48eb4ce12fdf761605eb6f2
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_ia64\IUFileFilter.sys
                                                                                                                                          • Size 49KB
                                                                                                                                          • SHA256 6ef01a954fc3e2e638905802ffad0d2e22934c3d52b5979ea10cb817f948f188
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_ia64\IUForceDelete.sys
                                                                                                                                          • Size 31KB
                                                                                                                                          • SHA256 eef91d521be1a33211bfca0c98f64fdc25bc1887b1048899373c968d15d97852
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_ia64\IUProcessFilter.sys
                                                                                                                                          • Size 33KB
                                                                                                                                          • SHA256 f0933221364fd107ddd9cd1576ece71bbc6ea0480455ec03c307842f56e1f894
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_ia64\IURegistryFilter.sys
                                                                                                                                          • Size 66KB
                                                                                                                                          • SHA256 01ab9fc246705987c510e759191a202462963938af007c1a627b4c789fd771c8
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_x86\IUFileFilter.sys
                                                                                                                                          • Size 23KB
                                                                                                                                          • SHA256 54ac843c1b95ee9a843343b33f1416e0e3ded0eb89d4ed0fec745fdff13da0bb
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_x86\IUForceDelete.sys
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 327c1313806544676ce71a0eb4afd1eee07a4614815f8a7b1638973ff46ebf87
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_x86\IUProcessFilter.sys
                                                                                                                                          • Size 19KB
                                                                                                                                          • SHA256 dde7a5d62ea568b383fb484810b73d77e1105964bd5cdc8cb706bcb01a9f95ea
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_x86\IURegistryFilter.sys
                                                                                                                                          • Size 32KB
                                                                                                                                          • SHA256 34525085afd50d65dd4247696145f1c74fd92f91547f9dd68a008bd2871e721e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_amd64\IUFileFilter.sys
                                                                                                                                          • Size 26KB
                                                                                                                                          • SHA256 b79a4fe423828c1eb5a95081fc69a39ec009c2164a22aab2861b835bad8ef25b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_amd64\IUForceDelete.sys
                                                                                                                                          • Size 17KB
                                                                                                                                          • SHA256 bdc3bef457e5c94fa567159fa4b01c54496c5f093c92ce24b1c8c0d91f56a3fe
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_amd64\IUProcessFilter.sys
                                                                                                                                          • Size 20KB
                                                                                                                                          • SHA256 2d4c70b8adb8c634548cb75862c6b9fab580a701d13c8da0c50581852705571e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_amd64\IURegistryFilter.sys
                                                                                                                                          • Size 33KB
                                                                                                                                          • SHA256 b0421712a01d8bc334f20d2396a9115f68f7d1552a9569231d11027ddc46e15c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_ia64\IUFileFilter.sys
                                                                                                                                          • Size 47KB
                                                                                                                                          • SHA256 013e41477253e9dd06448fcb1661c897fa843478d97ad87431128f515a20e095
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_ia64\IUForceDelete.sys
                                                                                                                                          • Size 25KB
                                                                                                                                          • SHA256 1d446beda416eaa5a8cde930f951022a67d1614320170fca3921313e09414703
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_ia64\IUProcessFilter.sys
                                                                                                                                          • Size 32KB
                                                                                                                                          • SHA256 46de160933a1b8fa695e9cf3bcf085e2224d0f47a7961700a7b848c8b7dbd052
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_ia64\IURegistryFilter.sys
                                                                                                                                          • Size 63KB
                                                                                                                                          • SHA256 040264acdab0408ad2ab18cb99eb85125f6202ef5c1b68fc539e56b7f9f2362a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUFileFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_x86\IUFileFilter.sys
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 3e7a722bcfe3f342bab141ec3362144f310b825a426b49437b88fe52dcea1615
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUForceDelete.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_x86\IUForceDelete.sys
                                                                                                                                          • Size 15KB
                                                                                                                                          • SHA256 3223856aea40ac49247d18827b4e3d8f5a3a76f5c4f694c36f4ad75e5efc387f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUProcessFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_x86\IUProcessFilter.sys
                                                                                                                                          • Size 18KB
                                                                                                                                          • SHA256 d1e930e80d6fea70c21349028952b956cec03180ba7c0bdb81f2fc9863e0fd1c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IURegistryFilter.sys

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win7_x86\IURegistryFilter.sys
                                                                                                                                          • Size 30KB
                                                                                                                                          • SHA256 b8e92f6f63754b4089cacc86ad1ce107e12020f58683b0da7650f0144627cd2b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IObitUninstaler.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
                                                                                                                                          • Size 10.2MB
                                                                                                                                          • SHA256 320c59f6d0f29af8a75342fc0242c4bf5dffa100d300a25666c514eb84ec2617
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          unins000.exe

                                                                                                                                          • Path C:\Program Files (x86)\IObit\IObit Uninstaller\unins000.exe
                                                                                                                                          • Size 1.2MB
                                                                                                                                          • SHA256 1a2b10c72a7740e3853ea0aac4928bdf1e492a1eabdbd71720f540d696919306
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          db13DownloaderAC.log

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13DownloaderAC.log
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 e185ca061f75e5b5c674ed170bb7a4d2279d007de4cff380ac1dd7a4dbdcdfd8
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13DownloaderAC.log

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13DownloaderAC.log
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 4547bb7170629a477888b2be05ff774a2b9495b9cbf9a1f1ccbe6bb2caeab80e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13DownloaderAC.log

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13DownloaderAC.log
                                                                                                                                          • Size 4KB
                                                                                                                                          • SHA256 068411f7187ce278c78a2e7841da161e5913455a929530f00468f1803fd7b090
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ASCSetup.exe.dat

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\ASCSetup.exe.dat
                                                                                                                                          • Size 777B
                                                                                                                                          • SHA256 ec0af5722232e7432b1ba57c1adc97ea3b1c7662a68d12b0313baafd601adeea
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Freeware.dat

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\Freeware.dat
                                                                                                                                          • Size 44KB
                                                                                                                                          • SHA256 f055b604481e9ec65bbafe912808a4774f95296b434765d2b9703380d29d4d1a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Freeware.dat.dat

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\Freeware.dat.dat
                                                                                                                                          • Size 413B
                                                                                                                                          • SHA256 81fbe46beba4cc3cb61409b53bcb215b02de3bf651130cd422db6d084ddb3dbc
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          ISUSetup.exe

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\ISUSetup.exe
                                                                                                                                          • Size 13.5MB
                                                                                                                                          • SHA256 9c4ae49892d1b33715a6831db396c6bc7f6de4dc9d08a05a65478af486ba3968
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ISUSetup.exe.dat

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\ISUSetup.exe.dat
                                                                                                                                          • Size 766B
                                                                                                                                          • SHA256 9f2bc253d7ec6657f025a81c1797e6437f5c8f9588efbf813e9caf6be5f32db9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          IUSetup.exe

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\IUSetup.exe
                                                                                                                                          • Size 32.7MB
                                                                                                                                          • SHA256 effe8eea77153b3cf544dfdd6f8c056b3e1fd726e7e067e1735e947963bbfec7
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          IUSetup.exe.dat

                                                                                                                                          • Path C:\ProgramData\IObit\Driver Booster\Downloader\db13\IUSetup.exe.dat
                                                                                                                                          • Size 766B
                                                                                                                                          • SHA256 fc7309adf5dfa207346b0174fd2ad584926a252111b9ff3596a8360f66b484c7
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          DBRtt.ept

                                                                                                                                          • Path C:\ProgramData\IObit\IObitRtt\DBRtt.ept
                                                                                                                                          • Size 340B
                                                                                                                                          • SHA256 2163b2d423c156b5953f0f8585907591e91e2855e49e169efdb6fb70507f5c5d
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          iobitpromotion.ini

                                                                                                                                          • Path C:\ProgramData\IObit\iobitpromotion.ini
                                                                                                                                          • Size 96B
                                                                                                                                          • SHA256 7c158ac10881dc889e66da5db80d10633ca18aefe573c5b102ac376884a64ffe
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          iobitpromotion.ini

                                                                                                                                          • Path C:\ProgramData\IObit\iobitpromotion.ini
                                                                                                                                          • Size 286B
                                                                                                                                          • SHA256 d7d70f7b616278defe8f17841af1de7a7917aaedfe437b4268351026958128b0
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          NewsStatV2.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\NewsStatV2.db
                                                                                                                                          • Size 12B
                                                                                                                                          • SHA256 472e48643c0b957bb7c612448330f07ce0cb71e14541c6b0b9ce789bc82e91da
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          NewsStatV2.po

                                                                                                                                          • Path C:\ProgramData\ProductData3\NewsStatV2.po
                                                                                                                                          • Size 260B
                                                                                                                                          • SHA256 b2189382f3bd600638b1e9ece5798b5a85b9fa9ab7c3480268696493efae29bb
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 411B
                                                                                                                                          • SHA256 c92c1c65ff84a89b09f816485982cb96ed804c2224af6d730e953769b6a3c44b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 790B
                                                                                                                                          • SHA256 2e63a6945cdf4214c3a2e62c63c9e6a4c7e58f2cf52896d7840e3ae76551f542
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 826B
                                                                                                                                          • SHA256 f67e304c6d7e8e92821eed2654fa3b24e577ae4eaeadd1968f14ab237e81e317
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 934B
                                                                                                                                          • SHA256 449781525e0557047bdfacb1537316254334fbc4180ad3e2d3a1d96c3d0479a4
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 970B
                                                                                                                                          • SHA256 d6c3bf0a9ee379df09d8e3593b65c59c7f8014711b106e858dad615a18bce15c
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 1006B
                                                                                                                                          • SHA256 2b4b0f389574ccdbcef5f83c5c97c0dd61e0fba794395fa28e16cf56d7433edd
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 c7940566ab066746c31a8e07c7fbff017ce2f4bde371408934d175feec7b2c28
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 d837b948c4da71cec44e7bafcb604b2e3302a709a004b4b67aacb197f3bb357b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 398d6d785ddb695ee26ca0ea4b3bd7ea94bc9af65310e3dcd713717b77f889e3
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          StatCache3.db

                                                                                                                                          • Path C:\ProgramData\ProductData3\StatCache3.db
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 6dc5b2aa2d0d060ebd83942293d60caeb325456dc007d1e49ea41753a326b7ac
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 100B
                                                                                                                                          • SHA256 440d4b4d936e7b97bae370b0c197b8e1edba59632968697bfbc0b7743a3c023a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 157B
                                                                                                                                          • SHA256 b5a25f11508bc1c8c6129d113547bee3d9267840553d5083916672e563cd77b6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 214B
                                                                                                                                          • SHA256 8d8ce015dcddb90d7defdd58ba2ea06a63e5b7b9b7e096771daada39f57192cd
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 271B
                                                                                                                                          • SHA256 524c4efd8e28de7318ef08ca98c1ebce080ea45f1ef61cbd1dd57d965e84d83e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 442B
                                                                                                                                          • SHA256 ad6bc57972c5b1079af7dfe6e25d5ddba1887a5bfb580342a128b7d030277a4a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 499B
                                                                                                                                          • SHA256 9b3e8b17a5b49dcf043c37cd1cef30acb1c816f2fdd070546f8f9f3fc8a5d3e2
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 556B
                                                                                                                                          • SHA256 e0b782b632a0754054eefaffba1dcf6fd71019b3c65e5da361a4a63d3f352368
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 613B
                                                                                                                                          • SHA256 df6ae59fc10af0dd388066bc31effabdd845f76d466360a87336a23d4491fbea
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 670B
                                                                                                                                          • SHA256 961fad5c7f4f64570a539d865f938f5bcb1df6d049d4fd9c8c7c5bc5c03cda38
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 727B
                                                                                                                                          • SHA256 12664207d126f3b416b9e04dc3b2970063b8dddaafc6ee65c08db69a9aa8ccbb
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          db13Stat3.ini

                                                                                                                                          • Path C:\ProgramData\ProductData3\db\db13Stat3.ini
                                                                                                                                          • Size 784B
                                                                                                                                          • SHA256 b47f0412f853071a768dff3348b66c906cb0b3b755db0354fc401f88c389c246
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          pdinst.ini

                                                                                                                                          • Path C:\ProgramData\pdinst.ini
                                                                                                                                          • Size 102B
                                                                                                                                          • SHA256 b181fea908face3d00fc12fb2694b30f72cfae9b797d9101d31b825906a9e2c5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          pdinst.ini

                                                                                                                                          • Path C:\ProgramData\pdinst.ini
                                                                                                                                          • Size 204B
                                                                                                                                          • SHA256 1e95bbb3bcb2079e205c8bba1f54dedc19a0582aae1a372c434c9dc6d324f7ff
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          AUpdate.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\LocalLow\IObit\AUpdate.ini
                                                                                                                                          • Size 65B
                                                                                                                                          • SHA256 08541ea0795d435d5b613e0a627d280f0f65e77a208b65accb214ab84813866d
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          1a28af5b-194f-40fc-8af0-a1ef17281b88.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a28af5b-194f-40fc-8af0-a1ef17281b88.tmp
                                                                                                                                          • Size 18KB
                                                                                                                                          • SHA256 163e9c937bb01ac7ddb4a4c77ebd209b3c57ca7abcb03e1793db884d6fe4c34b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          45c16330-82dc-440d-8612-ae887cf21233.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\45c16330-82dc-440d-8612-ae887cf21233.tmp
                                                                                                                                          • Size 18KB
                                                                                                                                          • SHA256 bcb2b728ca0b8e261911a585314575c90e59519e374d7f3f8c34b1ae6f2026e6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          4e29a0c5-0c36-434f-8efc-ada958ba225f.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4e29a0c5-0c36-434f-8efc-ada958ba225f.tmp
                                                                                                                                          • Size 23KB
                                                                                                                                          • SHA256 e225f85a0a1c005cb51f9b9b8c88559d46d4bd71c33aca001fe172ecf8650af6
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          settings.dat

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 e6cd13b34cf3f758c2f4e7c55e8801132cc91647c947cbafe475ce8928ff2c2f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          settings.dat

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                                                                                          • Size 280B
                                                                                                                                          • SHA256 a82246f88da27a43b1718bd24e8cdfa3c17ae97a8d238e7befd5fac9a384a0a9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          0352423a-55b8-483c-b5ed-424fc7c0bb70.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0352423a-55b8-483c-b5ed-424fc7c0bb70.tmp
                                                                                                                                          • Size 70KB
                                                                                                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          23bc934f-6f9a-4985-ae5e-ccc340114756.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23bc934f-6f9a-4985-ae5e-ccc340114756.tmp
                                                                                                                                          • Size 10KB
                                                                                                                                          • SHA256 2d8d01ea7b126c7988f59ef010ef4226173c620cbe667739a2df6c6ea2a24aeb
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          3f566c71-8ebd-4edc-a583-da96fe3abcb5.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3f566c71-8ebd-4edc-a583-da96fe3abcb5.tmp
                                                                                                                                          • Size 27KB
                                                                                                                                          • SHA256 7bc0714c82113afd68d8f62bdb40e9a17204355d8956724ea346047658b17df3
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          8770e5cf-24a8-48a4-86a4-5474a544f93c.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\8770e5cf-24a8-48a4-86a4-5474a544f93c.tmp
                                                                                                                                          • Size 11KB
                                                                                                                                          • SHA256 3c8c1a1af1360f2f47be94f0bf8508077216c620ed371a216118209874bd49a7
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          LOG.old

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
                                                                                                                                          • Size 334B
                                                                                                                                          • SHA256 0ccce883de48e39a6345bb87d6022799c3e42178979eaf4f9ec15badfa066214
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          temp-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 3cf10a1ff5670265fd9a4ded45c80940738ff3e21a96917f6151e564e2985885
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          the-real-index

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                                                                                          • Size 3KB
                                                                                                                                          • SHA256 55485b9155737f11873572d191e50a6be48f19e41b219cde2e4dafe2614f8c7f
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          f5076a26-7dfc-4b44-b31b-34a18a93f2a5.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f5076a26-7dfc-4b44-b31b-34a18a93f2a5.tmp
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          dasherSettingSchema.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.111.1_0\dasherSettingSchema.json
                                                                                                                                          • Size 854B
                                                                                                                                          • SHA256 6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          4574bc96-5856-4f20-84b7-4956fc9003c4.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\4574bc96-5856-4f20-84b7-4956fc9003c4.tmp
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          5e0fcd01-fc34-4e1a-908f-a995e01fc588.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\5e0fcd01-fc34-4e1a-908f-a995e01fc588.tmp
                                                                                                                                          • Size 111B
                                                                                                                                          • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          d17f7e4a-2356-469a-8496-20663a6ced90.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d17f7e4a-2356-469a-8496-20663a6ced90.tmp
                                                                                                                                          • Size 11KB
                                                                                                                                          • SHA256 5a15f0edf014c29d94da9f7887a980ad6843e811e5d14ede3dbe25fbb1d22509
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          32dc4e74-a3a0-4dd8-90f5-e0862b2e40e4.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\32dc4e74-a3a0-4dd8-90f5-e0862b2e40e4.tmp
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          d066435d-a4f7-43ec-8d1f-503e374b6e49.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d066435d-a4f7-43ec-8d1f-503e374b6e49.tmp
                                                                                                                                          • Size 8KB
                                                                                                                                          • SHA256 ad9f772883976a975cacf00d0c76be8029ba09b10d5928787d12d8c110cbd46e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          d5280612-afb8-4a0c-a4f5-05e4eb2788d7.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d5280612-afb8-4a0c-a4f5-05e4eb2788d7.tmp
                                                                                                                                          • Size 8KB
                                                                                                                                          • SHA256 1ecc3c38d4d83abd85ff86f9e9f4d4e12505b96548c5ea48f11814e829e5a0e0
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          6f301e30-2758-4199-bea2-fb79c3301e5e.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6f301e30-2758-4199-bea2-fb79c3301e5e.tmp
                                                                                                                                          • Size 13B
                                                                                                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 ca49f05c9ce7d60785c783ee389782aeb78974a842e2f8336acb4277ca8be2a6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          0c135695-88bb-41aa-8a8d-41c006a721d6.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\0c135695-88bb-41aa-8a8d-41c006a721d6.tmp
                                                                                                                                          • Size 1B
                                                                                                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          ENGLISH.lng

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\1794053395\ENGLISH.lng
                                                                                                                                          • Size 25KB
                                                                                                                                          • SHA256 62a3aa429e068e562ff0e0094807867593dc47dc8880bdfb76101875b458101e
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          HWiNFO64A_151.SYS

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\HWiNFO64A_151.SYS
                                                                                                                                          • Size 61KB
                                                                                                                                          • SHA256 a6e75c3a21436941e9a6a111fe3a708be1753ab656ba247a40b401206096641c
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Setup Log 2026-11-07 #002.txt

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\Setup Log 2026-11-07 #002.txt
                                                                                                                                          • Size 91KB
                                                                                                                                          • SHA256 a3365aec2fcfd0d93afb73aa5862eb350ee7b435670a31070047cba7f064a4da
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          appver-ac.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\appver-ac.ini
                                                                                                                                          • Size 873B
                                                                                                                                          • SHA256 371061424e0675acc5d67fdc9c72adac099018231dc8a18633142a5cd54f8511
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          c90a6a6d-2681-4620-8f19-e3327ed8ee74.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\c90a6a6d-2681-4620-8f19-e3327ed8ee74.tmp
                                                                                                                                          • Size 158KB
                                                                                                                                          • SHA256 3d0a40deb15b80333a0b152bac6856a3345cbfcd29fd6a5c33a6e4bd22c1b272
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          filectl.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\filectl.dll
                                                                                                                                          • Size 63KB
                                                                                                                                          • SHA256 63ed2a1c8f49336a005428fb59c3304cb69c073d60e497e83e81ad7ef23f9f37
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          ASCUpgrade.exe

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\ASCUpgrade.exe
                                                                                                                                          • Size 1.5MB
                                                                                                                                          • SHA256 32ef6f93b8cdba01be285f65270bc994c0757fe52c427a0ed89543c33df8ec94
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Rinside.dat

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\Installer\Rinside.dat
                                                                                                                                          • Size 22B
                                                                                                                                          • SHA256 a9161ffe6690069e1267c6fdad055fc0112144273b66a8bdc59862941279b21b
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Setup.exe

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\Setup.exe
                                                                                                                                          • Size 7.4MB
                                                                                                                                          • SHA256 eca895149cffeafbc359d145a7febb78c2cfad8489486126ac1f994ba6f86dac
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          libcrypto-1_1.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\libcrypto-1_1.dll
                                                                                                                                          • Size 1.7MB
                                                                                                                                          • SHA256 a1a0f65380b575ad59cac705e4283a3f2e9b46aea162569515b6c3479521b853
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          libssl-1_1.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-ENE0V.tmp\libssl-1_1.dll
                                                                                                                                          • Size 367KB
                                                                                                                                          • SHA256 8e6013a3197ca2af3ee1444d82f912201f474532e10a66b0015f3a191385e1d4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          EULA.rtf

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp-dbinst\EULA.rtf
                                                                                                                                          • Size 28KB
                                                                                                                                          • SHA256 44bc9472169403484a0d384f1ca81989ef7e4b07441758e8a0110078933cbcb5
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          DBInstaller.exe

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\DBInstaller.exe
                                                                                                                                          • Size 5.5MB
                                                                                                                                          • SHA256 671e1005955cc4b0c6f5d9223fcfc31d7a9b488cffb284bcf33f155599e7e93f
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          Inno_English.lng

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\Inno_English.lng
                                                                                                                                          • Size 8KB
                                                                                                                                          • SHA256 5acf921d2b7d33d5fc9ab02569be5f46b5f3cf8656bf1c245f2f61f55529bb3b
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          SetupHlp.exe

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\SetupHlp.exe
                                                                                                                                          • Size 2.0MB
                                                                                                                                          • SHA256 e125dead08c432ea0dc29a5614ca739a8b34be976e8866793f91cb43228f6231
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          SetupInit.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\SetupInit.tmp
                                                                                                                                          • Size 46B
                                                                                                                                          • SHA256 75ec9d429dbed3f5fbbdc7bc1e069f7aa7caab18d5326d775751458345e351f6
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          libcrypto-1_1.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\libcrypto-1_1.dll
                                                                                                                                          • Size 1.7MB
                                                                                                                                          • SHA256 078d662af771a3b93c44415447294db364e22710cedc274b685ec639783ac928
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          libssl-1_1.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\libssl-1_1.dll
                                                                                                                                          • Size 355KB
                                                                                                                                          • SHA256 76eb04aa269163a918e09a82717d39f51bfd9934f4671f8b81eb7a71cf1b3ba4
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          local.dat

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-KLE99.tmp\local.dat
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 c4e847a4f1d815b65e1eebc3948483bc9cf989c5a30d53b4ad30515ab67adf61
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          iushrun.exe

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-LT1PB.tmp\Installer\iushrun.exe
                                                                                                                                          • Size 4.7MB
                                                                                                                                          • SHA256 661a6bc5ccd572f92f9bce1428d21dfb9742fb2d1d250a4c9c8191ce93574488
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          _shfoldr.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-Q9AR4.tmp\_isetup\_shfoldr.dll
                                                                                                                                          • Size 22KB
                                                                                                                                          • SHA256 9884e9d1b4f8a873ccbd81f8ad0ae257776d2348d027d811a56475e028360d87
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          driver_booster_setup_13.6.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-UOIEU.tmp\driver_booster_setup_13.6.tmp
                                                                                                                                          • Size 1.2MB
                                                                                                                                          • SHA256 8dfc033ff5a1ebac9282f15f14ab048b73fb058fec927a1f5d188a359315c6eb
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          rgfpctl.dll

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\rgfpctl.dll
                                                                                                                                          • Size 524KB
                                                                                                                                          • SHA256 addd846ee0dfca4a2b8ca2b2b5f72294568a8016d67ce5769d108fd6dc9e905a
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          content.js

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2632_1142790392\CRX_INSTALL\content.js
                                                                                                                                          • Size 9KB
                                                                                                                                          • SHA256 0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          fc0b1a7b-affb-427a-91a6-dd4f0c021bea.tmp

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2632_1142790392\fc0b1a7b-affb-427a-91a6-dd4f0c021bea.tmp
                                                                                                                                          • Size 10KB
                                                                                                                                          • SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
                                                                                                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                                                                                          messages.json

                                                                                                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2632_1546952889\CRX_INSTALL\_locales\en_CA\messages.json
                                                                                                                                          • Size 711B
                                                                                                                                          • SHA256 2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 730B
                                                                                                                                          • SHA256 45f5f3bb2c643a62c1d0d9c8532769e737435d3fc327cf080ccd023f8d6d307b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 822B
                                                                                                                                          • SHA256 e109209266f5610fc3f93eb4e1622b3fa9e926d3a583582f41a6b4141b8aaa13
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 936B
                                                                                                                                          • SHA256 91861ed1cae8e1120778ef4b94f7788fc98ec6f615c80a6611c7b9c01337cf1a
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 984B
                                                                                                                                          • SHA256 b697f70ecf4e73a4029bb0a0096e7e24c0880a75bb9ddba6fd6108f18f820b7d
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 6bd73a1ea082fc684f08aa9f169b4e3fd1ec44bf746a7019c3e05a087abf121c
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 9614be356fba53bc3794ee5caa2ccb8cb0a824dae7f7e98d94762d26c00c2254
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 1f163751e23e96b2d5048376b5df5f96fbf1ec16766046a579435dd3e4d50170
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 812371343fdffc0cf559e3a76680a709b220c5b44ac3d2837065701ff35e79a5
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 277e801a2962204a2ff600ff6601883449588c1924081834734c6340eca4dc3b
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 118B
                                                                                                                                          • SHA256 59e77ecd405761b1d2c28749afa394cc6fa602854e0bc388011e3d3dc92a9484
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 2KB
                                                                                                                                          • SHA256 eb8326c275c3f2506d4889066eaf949ff53076d899cc3d67d23482b314b451d6
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 2B
                                                                                                                                          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                                                                                          • MD5 SHA1 SHA512

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 176B
                                                                                                                                          • SHA256 818612db6339edbdaa4bba6ae3794f71ac671e3935b5541f2acf1c0e335f5d8e
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 226B
                                                                                                                                          • SHA256 2b4e8ac085c3da72b7b097f7b0fa87b23ef7a73f3d7c924f2fb5c8407fb3df23
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 318B
                                                                                                                                          • SHA256 73e0e9a4f7cb5d3bff3452b1f51a288b69035514a5de27f4293a1ca3b77e86d8
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 508B
                                                                                                                                          • SHA256 6f005f1425fd345f9637ce483779c3c227893cd86caa85f1f7e3ddd315a183a9
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Config.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\Driver Booster\Config.ini
                                                                                                                                          • Size 564B
                                                                                                                                          • SHA256 e3203e461973dd689fa8ba0254b54a2b0051d3e3c8af7ce26ac93c9798d764a0
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          main.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\IObit Uninstaller\main.ini
                                                                                                                                          • Size 332B
                                                                                                                                          • SHA256 7a4ae21db2d6a7148905d97057dc5b48596437f823f94d7607adcfe5e6607b92
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          main.ini

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\IObit\IObit Uninstaller\main.ini
                                                                                                                                          • Size 510B
                                                                                                                                          • SHA256 3dadd3cfee941c923f7ae01900c9590aa821f8c5e33296da704c5961c49b9e77
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          Driver Booster.lnk

                                                                                                                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Driver Booster.lnk
                                                                                                                                          • Size 1KB
                                                                                                                                          • SHA256 c07c6d5b256805a6ee180a1f2e1f8811b5738f3c973932f64b12dd2baac1aa4d
                                                                                                                                          • MD5 SHA1 SHA512 TLSH

                                                                                                                                          memory/364-73-0x0000000000400000-0x000000000042C000-memory.dmp

                                                                                                                                          memory/364-0-0x0000000000400000-0x000000000042C000-memory.dmp

                                                                                                                                          memory/364-69-0x0000000000400000-0x000000000042C000-memory.dmp

                                                                                                                                          memory/436-985-0x0000000059800000-0x000000005986E000-memory.dmp

                                                                                                                                          memory/436-987-0x0000000057800000-0x0000000057812000-memory.dmp

                                                                                                                                          memory/436-983-0x0000000000400000-0x0000000000426000-memory.dmp

                                                                                                                                          memory/436-984-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/436-986-0x0000000057000000-0x000000005703F000-memory.dmp

                                                                                                                                          memory/436-988-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/888-1054-0x0000000004110000-0x000000000422B000-memory.dmp

                                                                                                                                          memory/888-903-0x0000000004110000-0x000000000422B000-memory.dmp

                                                                                                                                          memory/888-1053-0x0000000000400000-0x00000000005FD000-memory.dmp

                                                                                                                                          memory/1316-1041-0x0000000000400000-0x00000000004D2000-memory.dmp

                                                                                                                                          memory/1316-1043-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/1316-1018-0x00000000028D0000-0x00000000029EB000-memory.dmp

                                                                                                                                          memory/1316-1042-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/1440-1239-0x0000000000400000-0x0000000000506000-memory.dmp

                                                                                                                                          memory/1768-183-0x0000000000400000-0x00000000009BF000-memory.dmp

                                                                                                                                          memory/1768-217-0x0000000000400000-0x00000000009BF000-memory.dmp

                                                                                                                                          memory/1768-994-0x0000000000400000-0x00000000009BF000-memory.dmp

                                                                                                                                          memory/1968-1122-0x0000000000400000-0x0000000000599000-memory.dmp

                                                                                                                                          memory/1972-1044-0x0000000000400000-0x0000000000506000-memory.dmp

                                                                                                                                          memory/2336-982-0x00000000067C0000-0x0000000006995000-memory.dmp

                                                                                                                                          memory/2336-979-0x0000000003E20000-0x0000000003E3A000-memory.dmp

                                                                                                                                          memory/2336-981-0x0000000006420000-0x000000000653B000-memory.dmp

                                                                                                                                          memory/2404-1223-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/2404-1222-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/2404-1221-0x0000000000400000-0x0000000000428000-memory.dmp

                                                                                                                                          memory/2640-1014-0x0000000000400000-0x0000000000498000-memory.dmp

                                                                                                                                          memory/3328-934-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/3328-933-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/3328-932-0x0000000000400000-0x0000000000428000-memory.dmp

                                                                                                                                          memory/3492-1083-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/3492-1080-0x0000000059800000-0x000000005986E000-memory.dmp

                                                                                                                                          memory/3492-1079-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/3492-1078-0x0000000000400000-0x00000000006AD000-memory.dmp

                                                                                                                                          memory/3788-1142-0x0000000000400000-0x00000000005B0000-memory.dmp

                                                                                                                                          memory/4272-890-0x0000000000400000-0x0000000000498000-memory.dmp

                                                                                                                                          memory/4272-873-0x0000000010000000-0x0000000010237000-memory.dmp

                                                                                                                                          memory/4312-1050-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/4312-1047-0x0000000059800000-0x000000005986E000-memory.dmp

                                                                                                                                          memory/4312-1045-0x0000000000400000-0x00000000006AD000-memory.dmp

                                                                                                                                          memory/4312-1048-0x0000000057000000-0x000000005703F000-memory.dmp

                                                                                                                                          memory/4312-1046-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/4572-202-0x0000000000400000-0x000000000042C000-memory.dmp

                                                                                                                                          memory/4572-857-0x0000000000400000-0x000000000042C000-memory.dmp

                                                                                                                                          memory/4572-1111-0x0000000000400000-0x000000000042C000-memory.dmp

                                                                                                                                          memory/4580-1109-0x0000000000400000-0x0000000000532000-memory.dmp

                                                                                                                                          memory/4580-861-0x0000000000400000-0x0000000000532000-memory.dmp

                                                                                                                                          memory/4580-1092-0x0000000000400000-0x0000000000532000-memory.dmp

                                                                                                                                          memory/4720-995-0x000000000A410000-0x000000000A5E5000-memory.dmp

                                                                                                                                          memory/4720-1016-0x000000000B860000-0x000000000B884000-memory.dmp

                                                                                                                                          memory/4720-977-0x0000000005D90000-0x0000000005E2F000-memory.dmp

                                                                                                                                          memory/4720-976-0x0000000005F60000-0x0000000006030000-memory.dmp

                                                                                                                                          memory/4720-968-0x0000000001120000-0x0000000001259000-memory.dmp

                                                                                                                                          memory/4720-970-0x0000000001260000-0x000000000145E000-memory.dmp

                                                                                                                                          memory/4720-996-0x000000000A740000-0x000000000A85B000-memory.dmp

                                                                                                                                          memory/4720-1004-0x000000000B370000-0x000000000B38A000-memory.dmp

                                                                                                                                          memory/4736-71-0x0000000000400000-0x0000000000532000-memory.dmp

                                                                                                                                          memory/4736-70-0x0000000000400000-0x0000000000532000-memory.dmp

                                                                                                                                          memory/4736-50-0x0000000000800000-0x0000000000801000-memory.dmp

                                                                                                                                          memory/4736-5-0x0000000000800000-0x0000000000801000-memory.dmp

                                                                                                                                          memory/4816-1224-0x0000000000400000-0x0000000000858000-memory.dmp

                                                                                                                                          memory/4964-46-0x0000000000400000-0x00000000005FD000-memory.dmp

                                                                                                                                          memory/4964-42-0x0000000000405000-0x0000000000406000-memory.dmp

                                                                                                                                          memory/4964-45-0x0000000000400000-0x00000000005FD000-memory.dmp

                                                                                                                                          memory/4964-48-0x0000000000400000-0x00000000005FD000-memory.dmp

                                                                                                                                          memory/4964-52-0x0000000000400000-0x00000000005FD000-memory.dmp

                                                                                                                                          memory/5096-1218-0x0000000050000000-0x0000000050117000-memory.dmp

                                                                                                                                          memory/5096-1210-0x00000000027E0000-0x00000000028FB000-memory.dmp

                                                                                                                                          memory/5096-1219-0x0000000050120000-0x000000005030E000-memory.dmp

                                                                                                                                          memory/5096-1217-0x0000000000400000-0x00000000004D2000-memory.dmp