3212aa98f6c8d67aa997a074578010b36d3df5d1a6d2055f5434ba8632fc260e

Analysis

max time kernel
150s
max time network
64s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
02-03-2023 15:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fdm_x64_setup (1).exe
Size

34.0MB
MD5

ca2ead342a22fcd891f73f99cba91005
SHA1

6e6470b49e9e9791acc6854b3d3823e97b058407
SHA256

3212aa98f6c8d67aa997a074578010b36d3df5d1a6d2055f5434ba8632fc260e
SHA512

39e8e285f3bc169ce3306cecf7a06317a93126dfce2d128acbb0a82d693d98ba0297601e258e4fa48ab8d2f235c6f8b5b648b48f15c02022e22893095a470bc6
SSDEEP

786432:5fzVFV7zFAsPBoyK32MlH8CSC9xSWEjh/dlCBS1Y/qemqa:/fWyKGMlcnelEdlO0YLa

Score

8^/10

discovery evasion

Malware Config

Signatures

Modifies Windows Firewall 1 TTPs 2 IoCs
evasion

Modify Existing Service
T1031

Processes:

netsh.exenetsh.exe

pid process

4248 netsh.exe
164 netsh.exe

pid	process
4248	netsh.exe
164	netsh.exe

Executes dropped EXE 10 IoCs

Processes:

fdm_x64_setup (1).tmphelperservice.exefdm.exeimportwizard.exefdm5rhwin.exefdm5rhwin.exefdm.exeimportwizard.exefdm.exeimportwizard.exe

pid	process
2680	fdm_x64_setup (1).tmp
800	helperservice.exe
752	fdm.exe
4220	importwizard.exe
528	fdm5rhwin.exe
988	fdm5rhwin.exe
2140	fdm.exe
820	importwizard.exe
1744	fdm.exe
2360	importwizard.exe

Loads dropped DLL 64 IoCs

Processes:

fdm.exeimportwizard.exehelperservice.exefdm.exe

pid	process
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
752	fdm.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
4220	importwizard.exe
800	helperservice.exe
800	helperservice.exe
800	helperservice.exe
800	helperservice.exe
800	helperservice.exe
752	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe
2140	fdm.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

Processes:

fdm_x64_setup (1).tmp

description	ioc	process
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Private\is-JK3B1.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Private\is-4K9Q5.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\torrents\is-HVJAS.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-48NHU.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\Qt\labs\folderlistmodel\is-5EAL5.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-4RBDF.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-UD4KM.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\Private\is-VHBJO.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\is-K8GSF.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\qmltooling\is-BIBEV.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtGraphicalEffects\is-79AKJ.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\is-TC4UI.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-8IOM5.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Fusion\is-O6ACB.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-L61I6.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-7G6TL.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-VLGGJ.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\is-PEKPC.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\main\is-J8C3U.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQml\Models.2\is-MSOV2.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-60BG3.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\main\is-E1542.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-5ORIK.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Fusion\is-JBPNJ.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-M755B.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-URO2S.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-8F9QE.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-NSO81.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-M0PT1.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\is-FLSUK.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\is-7TIQ0.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\main\is-ASE58.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-OV7MJ.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Shapes\is-4G9AE.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\torrents\is-CKRHU.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\main\is-C7PFS.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtGraphicalEffects\is-91BBS.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\is-8MKIT.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-T1P57.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-SDTI7.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\is-O7EJJ.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-FRVLE.tmp	fdm_x64_setup (1).tmp
File opened for modification	C:\Program Files\Softdeluxe\Free Download Manager\unins000.dat	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-PG9QJ.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-JH01S.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-CE5QO.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-7MIGG.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-VEKUS.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\images\is-P56R4.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Fusion\is-2CSH6.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-CJJCH.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\audio\is-PLJG3.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\Qt\labs\platform\is-V5M95.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-PV4B5.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Private\is-D2OPH.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Desktop\is-I0300.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-MF4HD.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-KD1M5.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-QG9BP.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\qmltooling\is-RK339.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\images\is-B42II.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Flat\is-VN080.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Fusion\is-33KGB.tmp	fdm_x64_setup (1).tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Desktop\is-62HAV.tmp	fdm_x64_setup (1).tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Creates scheduled task(s) 1 TTPs 1 IoCs
Schtasks is often used by malware for persistence or to perform post-infection execution.
persistence

Scheduled Task
T1053

Processes:

schtasks.exe

pid process

1248 schtasks.exe

pid	process
1248	schtasks.exe

Modifies Internet Explorer settings 1 TTPs 8 IoCs

adware spyware

Modify Registry

T1112

Processes:

fdm_x64_setup (1).tmp

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1311743041-1167936498-546579926-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING	fdm_x64_setup (1).tmp
Set value (int)	\REGISTRY\USER\S-1-5-21-1311743041-1167936498-546579926-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\fdm.exe = "1"	fdm_x64_setup (1).tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION	fdm_x64_setup (1).tmp
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\fdm.exe = "11000"	fdm_x64_setup (1).tmp
Key created	\REGISTRY\USER\S-1-5-21-1311743041-1167936498-546579926-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION	fdm_x64_setup (1).tmp
Set value (int)	\REGISTRY\USER\S-1-5-21-1311743041-1167936498-546579926-1000\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\fdm.exe = "11000"	fdm_x64_setup (1).tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING	fdm_x64_setup (1).tmp
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\fdm.exe = "1"	fdm_x64_setup (1).tmp

Suspicious behavior: AddClipboardFormatListener 3 IoCs

Processes:

fdm.exefdm.exefdm.exe

pid process

752 fdm.exe
2140 fdm.exe
1744 fdm.exe
Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

fdm5rhwin.exefdm5rhwin.exe

pid process

528 fdm5rhwin.exe
528 fdm5rhwin.exe
988 fdm5rhwin.exe
988 fdm5rhwin.exe
Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

fdm.exe

pid process

752 fdm.exe
Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

fdm_x64_setup (1).tmp

pid process

2680 fdm_x64_setup (1).tmp
Suspicious use of SetWindowsHookEx 7 IoCs

Processes:

fdm.exehelperservice.exefdm.exefdm.exe

pid process

752 fdm.exe
752 fdm.exe
800 helperservice.exe
2140 fdm.exe
2140 fdm.exe
1744 fdm.exe
1744 fdm.exe

pid	process
528	fdm5rhwin.exe
528	fdm5rhwin.exe
988	fdm5rhwin.exe
988	fdm5rhwin.exe

Suspicious use of WriteProcessMemory 29 IoCs

Processes:

fdm_x64_setup (1).exefdm_x64_setup (1).tmpfdm.exefdm.exefdm.exe

description	pid	process	target process
PID 2464 wrote to memory of 2680	2464	fdm_x64_setup (1).exe	fdm_x64_setup (1).tmp
PID 2464 wrote to memory of 2680	2464	fdm_x64_setup (1).exe	fdm_x64_setup (1).tmp
PID 2464 wrote to memory of 2680	2464	fdm_x64_setup (1).exe	fdm_x64_setup (1).tmp
PID 2680 wrote to memory of 5100	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 5100	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 1248	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 1248	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 4688	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 4688	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 4936	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 4936	2680	fdm_x64_setup (1).tmp	schtasks.exe
PID 2680 wrote to memory of 752	2680	fdm_x64_setup (1).tmp	fdm.exe
PID 2680 wrote to memory of 752	2680	fdm_x64_setup (1).tmp	fdm.exe
PID 752 wrote to memory of 4220	752	fdm.exe	importwizard.exe
PID 752 wrote to memory of 4220	752	fdm.exe	importwizard.exe
PID 2680 wrote to memory of 528	2680	fdm_x64_setup (1).tmp	fdm5rhwin.exe
PID 2680 wrote to memory of 528	2680	fdm_x64_setup (1).tmp	fdm5rhwin.exe
PID 2680 wrote to memory of 988	2680	fdm_x64_setup (1).tmp	fdm5rhwin.exe
PID 2680 wrote to memory of 988	2680	fdm_x64_setup (1).tmp	fdm5rhwin.exe
PID 2680 wrote to memory of 4248	2680	fdm_x64_setup (1).tmp	netsh.exe
PID 2680 wrote to memory of 4248	2680	fdm_x64_setup (1).tmp	netsh.exe
PID 2680 wrote to memory of 164	2680	fdm_x64_setup (1).tmp	netsh.exe
PID 2680 wrote to memory of 164	2680	fdm_x64_setup (1).tmp	netsh.exe
PID 2680 wrote to memory of 2140	2680	fdm_x64_setup (1).tmp	fdm.exe
PID 2680 wrote to memory of 2140	2680	fdm_x64_setup (1).tmp	fdm.exe
PID 2140 wrote to memory of 820	2140	fdm.exe	importwizard.exe
PID 2140 wrote to memory of 820	2140	fdm.exe	importwizard.exe
PID 1744 wrote to memory of 2360	1744	fdm.exe	importwizard.exe
PID 1744 wrote to memory of 2360	1744	fdm.exe	importwizard.exe

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup (1).exe
"C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup (1).exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2464

C:\Users\Admin\AppData\Local\Temp\is-JKQDD.tmp\fdm_x64_setup (1).tmp
"C:\Users\Admin\AppData\Local\Temp\is-JKQDD.tmp\fdm_x64_setup (1).tmp" /SL5="$C01E6,34943088,780288,C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup (1).exe"
2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2680

C:\Windows\SYSTEM32\schtasks.exe
"schtasks.exe" /end /tn FreeDownloadManagerHelperService
3⤵
PID:5100

C:\Windows\system32\schtasks.exe
"schtasks.exe" /create /RU SYSTEM /tn FreeDownloadManagerHelperService /f /xml "C:\Program Files\Softdeluxe\Free Download Manager\service.xml"
3⤵
- Creates scheduled task(s)
PID:1248

C:\Windows\system32\schtasks.exe
"schtasks.exe" /change /tn FreeDownloadManagerHelperService /tr "\"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"\"
3⤵
PID:4688

C:\Windows\system32\schtasks.exe
"schtasks.exe" /run /tn FreeDownloadManagerHelperService
3⤵
PID:4936

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --install
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:752

C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
"C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4220

C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase1
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:528

C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase2
3⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:988

C:\Windows\system32\netsh.exe
"netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=ALL
3⤵
- Modifies Windows Firewall
PID:4248

C:\Windows\system32\netsh.exe
"netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=CURRENT
3⤵
- Modifies Windows Firewall
PID:164

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --byinstaller
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2140

C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
"C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
4⤵
- Executes dropped EXE
PID:820

C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe
"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:800

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1744

C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
"C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
2⤵
- Executes dropped EXE
PID:2360

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

T1053

Persistence

Modify Existing Service

T1031

Scheduled Task

T1053

Privilege Escalation

Scheduled Task

T1053

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Softdeluxe\Free Download Manager\MSVCP140.dll

Filesize
553KB

MD5
6da7f4530edb350cf9d967d969ccecf8

SHA1
3e2681ea91f60a7a9ef2407399d13c1ca6aa71e9

SHA256
9fee6f36547d6f6ea7ca0338655555dba6bb0f798bc60334d29b94d1547da4da

SHA512
1f77f900215a4966f7f4e5d23b4aaad203136cb8561f4e36f03f13659fe1ff4b81caa75fef557c890e108f28f0484ad2baa825559114c0daa588cf1de6c1afab

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Gui.dll

Filesize
6.2MB

MD5
1273c387e80db82ee6a96ac4788da8f7

SHA1
d0ba5c2c54e535254fb1ac5866c32b4c1398e045

SHA256
90b1a7c47965eafcc896b99e9520198c097f60975b74884f1c2bc91a5ce88160

SHA512
3356e4da246a05aaa959002463835afc4154077e112acde6531b78bcaf32272f1d81d8b8aa8407d31bee48b1f439b57427874660386147729749efe790a2ada2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Multimedia.dll

Filesize
713KB

MD5
d51ad7b8a4f98a8f584989c2e72679e5

SHA1
4f8bfb1a5ff09cd29b11dbd7acb805061d416dee

SHA256
e36cde2154a75b2267cf5ba8ae659d7e0750e9ac985d6923db0335c1ed734b10

SHA512
aed79d5bd7f197af96e02f11de289c9062f64c3956b4c6d66098c6f78b3d0159e180a5afb1e7baa58ac0a7dca98a98f147bb1a9e1fa8a4b1bdf5da06f583e064

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Network.dll

Filesize
1.3MB

MD5
20dc922278cd948ce6dbdcb74580f910

SHA1
1a34d4738955f99c17083fec22945b0d6af76f40

SHA256
f7c7a1ea2570d1238287470b479e384f87c39357d1a4b2eeedbf90901d9c3cbc

SHA512
90afc14985b51744e2f3ea11a0f6f0edc3c7306bf6e9539c9526adbed0caf47e2b19fa90b38a3269424f109adb80f2bd7394620a35360d5aeb0b3641eb92fb79

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Qml.dll

Filesize
3.8MB

MD5
bb53b42e1676fcdb5d5e71664ca592ba

SHA1
a781aaf2600658e868ba6950721ad8ced6ffb6d4

SHA256
a473856364e00c6fc9c25508089f078665464a64d5b50c8a1b48a853709bcf23

SHA512
53e6f72516f71b54179935829d1b425a43e5e65a211759bb2f1ef44815d6cc0e09cc651919436402983b41e51dc683d45c4683ae7131a0aa056244d3508e4e48

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Quick.dll

Filesize
3.6MB

MD5
c01cab6389a0b21d61bb77e56fd898aa

SHA1
84153b02aec718ae0881158dec3c5de257ef89f7

SHA256
d93f6a371e4fd92740d0c46dbf4a9ac82f2e79444a34a36d0be82266ed4fd93a

SHA512
3a351b5d71a7b0711d9117bb0ed04ca194e77684bd57314939e5dcbc4430b0f6fb8865f2f3427e0c9c0a1e662048fbd79f020b7e64bd3e3e4759f83fab103d16

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickControls2.dll

Filesize
175KB

MD5
83d2d8058e2beecfacecea3f773684ae

SHA1
410f95d0a5f550ed98ec072d1d039923b3b85cff

SHA256
c27ff75badc2ca3d60da3d5878aa777ae7ca2fb41ffd3931d65c390227a4bb3d

SHA512
b895eea653997753aca88c2df2dea8c79dd65314f38fc841103e5c286e2dc313063b9dfd951c4cf293ea18e38086d0a1f6714f5232d96d925acd1b0bc6ad5ab0

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickTemplates2.dll

Filesize
1010KB

MD5
4760f98a8a40e6d07db6b8506553fb80

SHA1
a9ddcddf81358253dfdf86e210a63ff28d556587

SHA256
4f3267d1871cfcda6c9cdf7240c2189eaa7f96aa4967d98a660c4d5e9cc0b101

SHA512
1860ae685868b554008a1dab2e8d4fa34588cb503509fddcfb5366bd49143fcacd2ff8141023146787a55f5a1b0d1bab09b5f436035f26e3b48c463c4c58e1d1

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Sql.dll

Filesize
209KB

MD5
d780e35d89a9d5389b03e5181832af75

SHA1
23ffc88e2026871a299065d55eb21d3b67546418

SHA256
1b9435197ea13aac313106822d61f36ab107a48341e5d09408918bd0fc3bbe44

SHA512
bba506404e85243098aba6a39ad6dceb06669058842b5e0ddc884f95c749a722c4ed15b9f22f3810f73b0605343f39ff82ca71e4da9e8c4d8a95eb42d18cca45

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Widgets.dll

Filesize
5.3MB

MD5
91439f0387898388cb1a3150c5848d73

SHA1
d57b3c8bb6ae88f98add39890c9a8c3fdc2a0f55

SHA256
9e38324e796eb66200498dbfdcda8ac92f92155a9accdc6c97f92f475ea4c8c2

SHA512
8a282440d5b2ba67ef4d9f490c0ef93946b60351b4019cb247eac67da92398b55745f6325fe6ab7f62088132614cc9f6332726e532e692f0b709bdcaa3999bac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\VCRUNTIME140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\VCRUNTIME140_1.dll

Filesize
36KB

MD5
135359d350f72ad4bf716b764d39e749

SHA1
2e59d9bbcce356f0fece56c9c4917a5cacec63d7

SHA256
34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32

SHA512
cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsjsp.dll

Filesize
87KB

MD5
162788a111c3ee1937295a3827f68b7c

SHA1
d999f5ca96474f518faf371d3f63843114c80614

SHA256
cd147aefcd9339a24cc6cff4a961dfc6842423a503eb6f50284a6a3eaafc17f2

SHA512
08d9b858d7afa32776bed868a0787078a108deaf49cde71d03f8f2aa9beeb74e25002e328b1497d4ab418ebe9b96b15c15c6ca5e0906e1bbf256358825d8f7ac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsms.dll

Filesize
496KB

MD5
56693e67d67908997d885ce0bdacfa97

SHA1
f5cecfa55765ee4115beb21473fbd5975b15b6fd

SHA256
44ad96a7a555ccc19e07fb507b7a274194c4c7435ebd798019218175dc30c810

SHA512
65bb46eed9c4bb5f5f21f549251ae67e578164176afc2438396fc8e75a10fb5dece19d93036f5bb4515a3e91bbc7a16625438e2d208bdd8d5d5814e7f2b7c525

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe

Filesize
125KB

MD5
7cf96519fbb09c34d31cac4d272cfb76

SHA1
47da0b81bee168efd8e43598b739002d62c8a492

SHA256
1401ecd7535e0d38455b3229806525086021904b95336438d4c851347e2cf215

SHA512
af2a0bc3bc0f94650b4e7603bc20dcbfee74064a2b8d0f66108b2b01645a87008170f69d693d4f96f0438a41d9c627ec09ee5085ad4cd05a0fc8fb2af55bd8d2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\iconengines\qsvgicon.dll

Filesize
44KB

MD5
54f9023c9f25fc683f1b442c0b5a5734

SHA1
4c19a7aea2fa942ce54c4771af826a6ec97ea485

SHA256
d651ad610745fcc04f53d148bf1f592894688d9a8db2a4c6c0f7886a77a31df5

SHA512
9a76de4c0ef818609d5ed132b473009bad67451d0bd55aa24584a208902ca28b04e2fc40e609a845f3d1173c0bcd6e82ce73b7eb09f3e739caec6a180a2ba894

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qgif.dll

Filesize
40KB

MD5
1eea75d8c80d0863a1c31921eee4601c

SHA1
a534ebff8f14a3bd629cedd40acd81f7cddf7fbc

SHA256
eb52fb17a02f760565236987909c23c905baf2d0cdb876a13791edada6c563e1

SHA512
d2be14b97c9758d8185d586dd35df30f90c94252bf24d5f9e82db4cb623fdd7b234d6d97ba4951b263a1a210433a8eaf38d82238e29e34b516f09960d21be398

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qicns.dll

Filesize
49KB

MD5
411cc6b11eb112fe54b39685778cf3c9

SHA1
02b44edb0faf891be5d4a6dde767f8f8897c007e

SHA256
40c3798b27811fc27a1cbfba4c60bf32491c98c9ae2bca973ce3fcd2e11124bc

SHA512
a0953c004c0ff095683a6874638ec0bc06becb94a8d9b9636b8d748302c16615875df3b160eefc0f614007ac56dea555024a963abb0ea70012d657f11e6f549e

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qico.dll

Filesize
41KB

MD5
34af9a4b24c8f3fb83cb0d263693cab0

SHA1
d39c9835c9e2ac2d15e04ab5cedf1596847edd66

SHA256
5f77bdc72e5024cd8cca51ca1905a8d77cce99399ae7a0686d98abd3df5eb455

SHA512
b4a7d383e90bae66edca7641dd0b6d02972f37b5f58a4218c51f305a868da2efdc91dc394f1ebc8fb7a404181a4024fcbc55f280a0dc04841b2bc656c3a0a9f2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qjpeg.dll

Filesize
447KB

MD5
90564a7bbd984f6072cff8a5938138af

SHA1
898ff55492067256e70d24f6694aa9bc1abbaa94

SHA256
b6f871cb7e0c859af7004ded62764362e91acc536c8b37cce16ebe3502761e81

SHA512
2e84eda9fa79fd1795719323e9959007812f140621f9e4aa06649632364c5d3b1759480053de1335669e1c0ffe50a84048daf45ff59b01a6b2b909741ec607cb

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qsvg.dll

Filesize
34KB

MD5
ff5681f9f75da2cee375295028456740

SHA1
6eda3e9155120f35c28b9dec36c1d1aac9e398cf

SHA256
6c1c18d3ee7234eb0c773130bf5ae2c4bb7e3a4534a84208faaed94f51cd16b3

SHA512
d4b3105c50fdf10fc76e275267eb63bd34bdf1f5f351eea7d4f759de734bc9b613feb960800b568c597fb859829e1553d7b383663727ebfd10701e3243f47bef

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qtga.dll

Filesize
33KB

MD5
1785d6b8b241dc51a499991fcec21dfd

SHA1
e5834ab7d9dc59752bb8f9a46a71fdc968298e6f

SHA256
d01376aa70bff757dd60aa25b5ac38e246baa77a6b80d1a91c0fa12e930f9507

SHA512
79d47bfdd7845f6887de78f35137f1ba7768fd6a6e7871bb4ab0aaa3ddee8db3ede693f4469bf64378e2d58677248935dd1bdd7c1e66ccb66f2f4e5b8ed9a210

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qtiff.dll

Filesize
389KB

MD5
82cc9a9e2de9451d7ec2797eb47b1b80

SHA1
110798dc9a6a25d7c7c2791aca46a09d509cb21c

SHA256
4bc4e6773327264bd760da6030014da750ab27e2e1df69cec9e6804c593bc37e

SHA512
9b9eb4928cc6ac5e9e4a354f226caebfc8d97c7f047b653afe121ee17799be8cc45a918e1d08f307355beccbfa8320f884dc384658af17b0459dedf744295db6

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qwbmp.dll

Filesize
32KB

MD5
ae17471db14121bff24ad96210697f9f

SHA1
022f8fb205c640987955943ac4cb0fc15b8637d4

SHA256
9bb6e2ecf0ec33efdc827a148dee3f46a11e735638b679067cc67a230d8ae3a6

SHA512
f8465f3c2de9864b63e21b3541887bd1dc8823addd002687f9bf8f1c2ce97726b339dc11d21bb7e3b152b75edc6d585d94245baacec901482de9427441271f29

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\imageformats\qwebp.dll

Filesize
518KB

MD5
2116c143d2c458b727f76882a6b21c2f

SHA1
4a9cbcec3748e474b7960a9449d710c91bc340ae

SHA256
f345f43ce85f612269c026d9da52a788e118ef8a73d8e328e07941cbff6bdc25

SHA512
e998f55d49e3ca802e15e78ff7c719f9d0dd3324897189d5c171142fe4130a4a2a10d888fb4fb4ab54271356417a8bb8cd8cae777bd6c3b623a6dfea243bede7

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\libcrypto-1_1-x64.dll

Filesize
2.7MB

MD5
8bf7134fd7c7b9f79fbaa46a820565fd

SHA1
c82732c10a0f03ef1868d2ca6a8c42ec430a8a02

SHA256
a8f38398b8e95919ce4f4eb4ce9e2db432b5b8da00b531e2f1633795b3fa622a

SHA512
9d48c50a08236df337ace9f7546d3db392d980d6b86111da0f1b72848d9a7e74aa05ec9eb83f35c4c0570334f5c3b8460e1864eb2ad9a7ff5dc67d0206616e61

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\libssl-1_1-x64.dll

Filesize
669KB

MD5
8915e476444729db9f0a1c2ec7501c87

SHA1
01aecb1cc1e6821132729e6eb366b37c7933b8d5

SHA256
9a99670dcb874b67b47927611a1546c590b07d0580b62be57b1fa9a3df7934e7

SHA512
e1e7c9142339260811d31a32b9e2b0a7a44959f778b898e03ae968d26c98d72ea0bf3cfbac054520d3fa7808088391abca4c5f96db0114ff8b27a146b4d0fe03

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\logger.dll

Filesize
32KB

MD5
f86d67751f21fdf101048da34d3de812

SHA1
6a99f27ef16ce1025bde7c8a0e9780739b22adc0

SHA256
b4e28856c976425995e79f08fe39de72c6fddb6b53ece7c25bd3cc2b7ac43a5f

SHA512
e0829655fb0b5e17bda36bf93b5e1293efd88b86fca07a7e88f715996ff263b9ee3a72dd57f0cc0b0a5bf7856f17e6f9ecb71871c6f01deae361b87a86d82932

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\platforms\qwindows.dll

Filesize
1.4MB

MD5
ac584cbeb327e9d2364873f451e074be

SHA1
eb2d7b7f38c880ae4bc4f32c50e10e73ee15c816

SHA256
1fa4d2f13d22d9a859503d7b7c87ba39d379d9a14afcea7299d572eabb2bdf57

SHA512
4fca1fa9494799f382318d329a3040bc067d55e7cd99be6d768e975fb585f61f8c1360908284bb04c055dcf21a164464305e9255d52b1c57a0cfc49eea003203

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\quazip.dll

Filesize
203KB

MD5
9a08a2b7ec7edd0150e236104aa4d1f3

SHA1
b7ba88484afe6ad111f64db81519a1dc2ec68508

SHA256
d373c86239b2cb562f05dde6aa2086c7276239e138fafaad99ce8b3bd4ea2582

SHA512
684cc71fd090b24909e6bdfafb2bcb97e29450ea73f924cc3e9f5489d43ab86c310cd45056e31f387f59fe549fe19cc009fc2ba9f7e882f3e6d116cef26adb12

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\service.xml

Filesize
2KB

MD5
85c61b85b0ffe2609b00379a5512790d

SHA1
2dfaf069df408819b06916381ac80b3ec097214c

SHA256
24f6062b8679b4140b5c15900deefa8ba187ed5e3c5cb8efc91b26b31769664d

SHA512
3a18c17ddcd10cd89d1c666134f13be6ed441fbe2c36a9567e894c0e1674232d5882e696ad2d385bd5eb4d50b6a1b4225bb992389aad93a77b203318293ca6fa

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\styles\qwindowsvistastyle.dll

Filesize
142KB

MD5
085087d668776333d78d87ff579fce87

SHA1
861af820e28c6070fa22defbb527e55cdbe3590f

SHA256
59f3183245e4ea6a93f04eb3dc7460b3911397cb5a9f7aa429921b7957b62684

SHA512
10b2492ec88f0682264169478b966cb6584276d4dfb6a49d62ce21dff68013b3d1e17cfc51c658f5773d5cb9b374ec90205f1ebd07db70e8f0c76a96cda80e2e

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vmsclshared.dll

Filesize
481KB

MD5
c5ec998da72d44adcb50d1b6544d5b3f

SHA1
63bec20d94dcf6e7bf7dbea41cff16d7120c4fee

SHA256
bb6fd71add89ad693227233598e4cb47f0f6d7d08b8168459e810a662b1f7e30

SHA512
24f71dc08eb2a1b5abb1effc3d71e8c0059fcb8d745e3cc0a8b47be8499727814cf7f0b7d0532f6fa9f861d142d00cfa30b3f6ea15c7437bb4800d2b4ffa7813

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-JKQDD.tmp\fdm_x64_setup (1).tmp

Filesize
2.5MB

MD5
869c50863faef0fa7052b5551698ed58

SHA1
feb12f73e0a68d43db51a35f04be3f9d2aac90a3

SHA256
7e49962115092d3709b9a3e68934972931bb900f23bf4b42ac90d250725e7d4e

SHA512
19076555396601758b0b62a9b9fc68bb96b83387c5a345c3e68f5794b67c45bec7905654fe1243e2daf3ae8fe11c2ad243e962633370535a7a3f41bcb7fec1df

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-JKQDD.tmp\fdm_x64_setup (1).tmp

Filesize
2.5MB

MD5
869c50863faef0fa7052b5551698ed58

SHA1
feb12f73e0a68d43db51a35f04be3f9d2aac90a3

SHA256
7e49962115092d3709b9a3e68934972931bb900f23bf4b42ac90d250725e7d4e

SHA512
19076555396601758b0b62a9b9fc68bb96b83387c5a345c3e68f5794b67c45bec7905654fe1243e2daf3ae8fe11c2ad243e962633370535a7a3f41bcb7fec1df

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Gui.dll

Filesize
6.2MB

MD5
1273c387e80db82ee6a96ac4788da8f7

SHA1
d0ba5c2c54e535254fb1ac5866c32b4c1398e045

SHA256
90b1a7c47965eafcc896b99e9520198c097f60975b74884f1c2bc91a5ce88160

SHA512
3356e4da246a05aaa959002463835afc4154077e112acde6531b78bcaf32272f1d81d8b8aa8407d31bee48b1f439b57427874660386147729749efe790a2ada2

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Multimedia.dll

Filesize
713KB

MD5
d51ad7b8a4f98a8f584989c2e72679e5

SHA1
4f8bfb1a5ff09cd29b11dbd7acb805061d416dee

SHA256
e36cde2154a75b2267cf5ba8ae659d7e0750e9ac985d6923db0335c1ed734b10

SHA512
aed79d5bd7f197af96e02f11de289c9062f64c3956b4c6d66098c6f78b3d0159e180a5afb1e7baa58ac0a7dca98a98f147bb1a9e1fa8a4b1bdf5da06f583e064

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Network.dll

Filesize
1.3MB

MD5
20dc922278cd948ce6dbdcb74580f910

SHA1
1a34d4738955f99c17083fec22945b0d6af76f40

SHA256
f7c7a1ea2570d1238287470b479e384f87c39357d1a4b2eeedbf90901d9c3cbc

SHA512
90afc14985b51744e2f3ea11a0f6f0edc3c7306bf6e9539c9526adbed0caf47e2b19fa90b38a3269424f109adb80f2bd7394620a35360d5aeb0b3641eb92fb79

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Qml.dll

Filesize
3.8MB

MD5
bb53b42e1676fcdb5d5e71664ca592ba

SHA1
a781aaf2600658e868ba6950721ad8ced6ffb6d4

SHA256
a473856364e00c6fc9c25508089f078665464a64d5b50c8a1b48a853709bcf23

SHA512
53e6f72516f71b54179935829d1b425a43e5e65a211759bb2f1ef44815d6cc0e09cc651919436402983b41e51dc683d45c4683ae7131a0aa056244d3508e4e48

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Quick.dll

Filesize
3.6MB

MD5
c01cab6389a0b21d61bb77e56fd898aa

SHA1
84153b02aec718ae0881158dec3c5de257ef89f7

SHA256
d93f6a371e4fd92740d0c46dbf4a9ac82f2e79444a34a36d0be82266ed4fd93a

SHA512
3a351b5d71a7b0711d9117bb0ed04ca194e77684bd57314939e5dcbc4430b0f6fb8865f2f3427e0c9c0a1e662048fbd79f020b7e64bd3e3e4759f83fab103d16

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5QuickControls2.dll

Filesize
175KB

MD5
83d2d8058e2beecfacecea3f773684ae

SHA1
410f95d0a5f550ed98ec072d1d039923b3b85cff

SHA256
c27ff75badc2ca3d60da3d5878aa777ae7ca2fb41ffd3931d65c390227a4bb3d

SHA512
b895eea653997753aca88c2df2dea8c79dd65314f38fc841103e5c286e2dc313063b9dfd951c4cf293ea18e38086d0a1f6714f5232d96d925acd1b0bc6ad5ab0

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5QuickTemplates2.dll

Filesize
1010KB

MD5
4760f98a8a40e6d07db6b8506553fb80

SHA1
a9ddcddf81358253dfdf86e210a63ff28d556587

SHA256
4f3267d1871cfcda6c9cdf7240c2189eaa7f96aa4967d98a660c4d5e9cc0b101

SHA512
1860ae685868b554008a1dab2e8d4fa34588cb503509fddcfb5366bd49143fcacd2ff8141023146787a55f5a1b0d1bab09b5f436035f26e3b48c463c4c58e1d1

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Sql.dll

Filesize
209KB

MD5
d780e35d89a9d5389b03e5181832af75

SHA1
23ffc88e2026871a299065d55eb21d3b67546418

SHA256
1b9435197ea13aac313106822d61f36ab107a48341e5d09408918bd0fc3bbe44

SHA512
bba506404e85243098aba6a39ad6dceb06669058842b5e0ddc884f95c749a722c4ed15b9f22f3810f73b0605343f39ff82ca71e4da9e8c4d8a95eb42d18cca45

Download Submit
\Program Files\Softdeluxe\Free Download Manager\Qt5Widgets.dll

Filesize
5.3MB

MD5
91439f0387898388cb1a3150c5848d73

SHA1
d57b3c8bb6ae88f98add39890c9a8c3fdc2a0f55

SHA256
9e38324e796eb66200498dbfdcda8ac92f92155a9accdc6c97f92f475ea4c8c2

SHA512
8a282440d5b2ba67ef4d9f490c0ef93946b60351b4019cb247eac67da92398b55745f6325fe6ab7f62088132614cc9f6332726e532e692f0b709bdcaa3999bac

Download Submit
\Program Files\Softdeluxe\Free Download Manager\downloadsjsp.dll

Filesize
87KB

MD5
162788a111c3ee1937295a3827f68b7c

SHA1
d999f5ca96474f518faf371d3f63843114c80614

SHA256
cd147aefcd9339a24cc6cff4a961dfc6842423a503eb6f50284a6a3eaafc17f2

SHA512
08d9b858d7afa32776bed868a0787078a108deaf49cde71d03f8f2aa9beeb74e25002e328b1497d4ab418ebe9b96b15c15c6ca5e0906e1bbf256358825d8f7ac

Download Submit
\Program Files\Softdeluxe\Free Download Manager\downloadsms.dll

Filesize
496KB

MD5
56693e67d67908997d885ce0bdacfa97

SHA1
f5cecfa55765ee4115beb21473fbd5975b15b6fd

SHA256
44ad96a7a555ccc19e07fb507b7a274194c4c7435ebd798019218175dc30c810

SHA512
65bb46eed9c4bb5f5f21f549251ae67e578164176afc2438396fc8e75a10fb5dece19d93036f5bb4515a3e91bbc7a16625438e2d208bdd8d5d5814e7f2b7c525

Download Submit
\Program Files\Softdeluxe\Free Download Manager\imageformats\qgif.dll

Filesize
40KB

MD5
1eea75d8c80d0863a1c31921eee4601c

SHA1
a534ebff8f14a3bd629cedd40acd81f7cddf7fbc

SHA256
eb52fb17a02f760565236987909c23c905baf2d0cdb876a13791edada6c563e1

SHA512
d2be14b97c9758d8185d586dd35df30f90c94252bf24d5f9e82db4cb623fdd7b234d6d97ba4951b263a1a210433a8eaf38d82238e29e34b516f09960d21be398

Download Submit
\Program Files\Softdeluxe\Free Download Manager\imageformats\qico.dll

Filesize
41KB

MD5
34af9a4b24c8f3fb83cb0d263693cab0

SHA1
d39c9835c9e2ac2d15e04ab5cedf1596847edd66

SHA256
5f77bdc72e5024cd8cca51ca1905a8d77cce99399ae7a0686d98abd3df5eb455

SHA512
b4a7d383e90bae66edca7641dd0b6d02972f37b5f58a4218c51f305a868da2efdc91dc394f1ebc8fb7a404181a4024fcbc55f280a0dc04841b2bc656c3a0a9f2

Download Submit
\Program Files\Softdeluxe\Free Download Manager\libcrypto-1_1-x64.dll

Filesize
2.7MB

MD5
8bf7134fd7c7b9f79fbaa46a820565fd

SHA1
c82732c10a0f03ef1868d2ca6a8c42ec430a8a02

SHA256
a8f38398b8e95919ce4f4eb4ce9e2db432b5b8da00b531e2f1633795b3fa622a

SHA512
9d48c50a08236df337ace9f7546d3db392d980d6b86111da0f1b72848d9a7e74aa05ec9eb83f35c4c0570334f5c3b8460e1864eb2ad9a7ff5dc67d0206616e61

Download Submit
\Program Files\Softdeluxe\Free Download Manager\libssl-1_1-x64.dll

Filesize
669KB

MD5
8915e476444729db9f0a1c2ec7501c87

SHA1
01aecb1cc1e6821132729e6eb366b37c7933b8d5

SHA256
9a99670dcb874b67b47927611a1546c590b07d0580b62be57b1fa9a3df7934e7

SHA512
e1e7c9142339260811d31a32b9e2b0a7a44959f778b898e03ae968d26c98d72ea0bf3cfbac054520d3fa7808088391abca4c5f96db0114ff8b27a146b4d0fe03

Download Submit
\Program Files\Softdeluxe\Free Download Manager\logger.dll

Filesize
32KB

MD5
f86d67751f21fdf101048da34d3de812

SHA1
6a99f27ef16ce1025bde7c8a0e9780739b22adc0

SHA256
b4e28856c976425995e79f08fe39de72c6fddb6b53ece7c25bd3cc2b7ac43a5f

SHA512
e0829655fb0b5e17bda36bf93b5e1293efd88b86fca07a7e88f715996ff263b9ee3a72dd57f0cc0b0a5bf7856f17e6f9ecb71871c6f01deae361b87a86d82932

Download Submit
\Program Files\Softdeluxe\Free Download Manager\msvcp140.dll

Filesize
553KB

MD5
6da7f4530edb350cf9d967d969ccecf8

SHA1
3e2681ea91f60a7a9ef2407399d13c1ca6aa71e9

SHA256
9fee6f36547d6f6ea7ca0338655555dba6bb0f798bc60334d29b94d1547da4da

SHA512
1f77f900215a4966f7f4e5d23b4aaad203136cb8561f4e36f03f13659fe1ff4b81caa75fef557c890e108f28f0484ad2baa825559114c0daa588cf1de6c1afab

Download Submit
\Program Files\Softdeluxe\Free Download Manager\platforms\qwindows.dll

Filesize
1.4MB

MD5
ac584cbeb327e9d2364873f451e074be

SHA1
eb2d7b7f38c880ae4bc4f32c50e10e73ee15c816

SHA256
1fa4d2f13d22d9a859503d7b7c87ba39d379d9a14afcea7299d572eabb2bdf57

SHA512
4fca1fa9494799f382318d329a3040bc067d55e7cd99be6d768e975fb585f61f8c1360908284bb04c055dcf21a164464305e9255d52b1c57a0cfc49eea003203

Download Submit
\Program Files\Softdeluxe\Free Download Manager\quazip.dll

Filesize
203KB

MD5
9a08a2b7ec7edd0150e236104aa4d1f3

SHA1
b7ba88484afe6ad111f64db81519a1dc2ec68508

SHA256
d373c86239b2cb562f05dde6aa2086c7276239e138fafaad99ce8b3bd4ea2582

SHA512
684cc71fd090b24909e6bdfafb2bcb97e29450ea73f924cc3e9f5489d43ab86c310cd45056e31f387f59fe549fe19cc009fc2ba9f7e882f3e6d116cef26adb12

Download Submit
\Program Files\Softdeluxe\Free Download Manager\styles\qwindowsvistastyle.dll

Filesize
142KB

MD5
085087d668776333d78d87ff579fce87

SHA1
861af820e28c6070fa22defbb527e55cdbe3590f

SHA256
59f3183245e4ea6a93f04eb3dc7460b3911397cb5a9f7aa429921b7957b62684

SHA512
10b2492ec88f0682264169478b966cb6584276d4dfb6a49d62ce21dff68013b3d1e17cfc51c658f5773d5cb9b374ec90205f1ebd07db70e8f0c76a96cda80e2e

Download Submit
\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
\Program Files\Softdeluxe\Free Download Manager\vcruntime140_1.dll

Filesize
36KB

MD5
135359d350f72ad4bf716b764d39e749

SHA1
2e59d9bbcce356f0fece56c9c4917a5cacec63d7

SHA256
34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32

SHA512
cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba

Download Submit
\Program Files\Softdeluxe\Free Download Manager\vmsclshared.dll

Filesize
481KB

MD5
c5ec998da72d44adcb50d1b6544d5b3f

SHA1
63bec20d94dcf6e7bf7dbea41cff16d7120c4fee

SHA256
bb6fd71add89ad693227233598e4cb47f0f6d7d08b8168459e810a662b1f7e30

SHA512
24f71dc08eb2a1b5abb1effc3d71e8c0059fcb8d745e3cc0a8b47be8499727814cf7f0b7d0532f6fa9f861d142d00cfa30b3f6ea15c7437bb4800d2b4ffa7813

Download Submit
memory/752-2075-0x00007FFD27540000-0x00007FFD27A95000-memory.dmp

Filesize
5.3MB

Download
memory/752-2073-0x00007FF69D120000-0x00007FF69D694000-memory.dmp

Filesize
5.5MB

Download
memory/752-2076-0x00007FFD27AA0000-0x00007FFD27E48000-memory.dmp

Filesize
3.7MB

Download
memory/820-2136-0x00007FFD27540000-0x00007FFD27A95000-memory.dmp

Filesize
5.3MB

Download
memory/1744-2139-0x00007FFD27540000-0x00007FFD27A95000-memory.dmp

Filesize
5.3MB

Download
memory/1744-2137-0x00007FF69D120000-0x00007FF69D694000-memory.dmp

Filesize
5.5MB

Download
memory/1744-2138-0x00007FFD27AA0000-0x00007FFD27E48000-memory.dmp

Filesize
3.7MB

Download
memory/2140-2129-0x00007FF69D120000-0x00007FF69D694000-memory.dmp

Filesize
5.5MB

Download
memory/2140-2130-0x00007FFD27AA0000-0x00007FFD27E48000-memory.dmp

Filesize
3.7MB

Download
memory/2140-2131-0x00007FFD27540000-0x00007FFD27A95000-memory.dmp

Filesize
5.3MB

Download
memory/2360-2140-0x00007FFD27540000-0x00007FFD27A95000-memory.dmp

Filesize
5.3MB

Download
memory/2464-121-0x0000000000400000-0x00000000004CC000-memory.dmp

Filesize
816KB

Download
memory/2464-2135-0x0000000000400000-0x00000000004CC000-memory.dmp

Filesize
816KB

Download
memory/2464-128-0x0000000000400000-0x00000000004CC000-memory.dmp

Filesize
816KB

Download
memory/2680-2127-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/2680-2100-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/2680-2133-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/2680-126-0x0000000000730000-0x0000000000731000-memory.dmp

Filesize
4KB

Download
memory/2680-129-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/2680-130-0x0000000000730000-0x0000000000731000-memory.dmp

Filesize
4KB

Download
memory/2680-235-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/2680-1581-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/4220-2096-0x00007FFD27540000-0x00007FFD27A95000-memory.dmp

Filesize
5.3MB

Download