3212aa98f6c8d67aa997a074578010b36d3df5d1a6d2055f5434ba8632fc260e

Analysis

max time kernel
44s
max time network
62s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
11/03/2023, 19:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fdm_x64_setup.exe
Size

34.0MB
MD5

ca2ead342a22fcd891f73f99cba91005
SHA1

6e6470b49e9e9791acc6854b3d3823e97b058407
SHA256

3212aa98f6c8d67aa997a074578010b36d3df5d1a6d2055f5434ba8632fc260e
SHA512

39e8e285f3bc169ce3306cecf7a06317a93126dfce2d128acbb0a82d693d98ba0297601e258e4fa48ab8d2f235c6f8b5b648b48f15c02022e22893095a470bc6
SSDEEP

786432:5fzVFV7zFAsPBoyK32MlH8CSC9xSWEjh/dlCBS1Y/qemqa:/fWyKGMlcnelEdlO0YLa

Score

8^/10

discovery evasion persistence

Malware Config

Signatures

Modifies Windows Firewall 1 TTPs 2 IoCs

evasion

Modify Existing Service

T1031

pid	Process
1496	netsh.exe
3164	netsh.exe

Executes dropped EXE 15 IoCs

pid	Process
4932	fdm_x64_setup.tmp
3908	helperservice.exe
3788	fdm.exe
1428	fdm.exe
4104	fdm.exe
4652	importwizard.exe
2828	importwizard.exe
2240	fdm.exe
3552	importwizard.exe
4732	fdm.exe
3820	importwizard.exe
3576	importwizard.exe
2376	importwizard.exe
2024	fdm5rhwin.exe
4004	fdm5rhwin.exe

Loads dropped DLL 64 IoCs

pid	Process
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3908	helperservice.exe
3908	helperservice.exe
3908	helperservice.exe
3908	helperservice.exe
3908	helperservice.exe
3908	helperservice.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
3788	fdm.exe
1428	fdm.exe
1428	fdm.exe
4104	fdm.exe
4104	fdm.exe
4104	fdm.exe
4104	fdm.exe
4104	fdm.exe
4104	fdm.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Free Download Manager = "\"C:\\Program Files\\Softdeluxe\\Free Download Manager\\fdm.exe\" --hidden"	fdm.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Free Download Manager = "\"C:\\Program Files\\Softdeluxe\\Free Download Manager\\fdm.exe\" --hidden"	fdm.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQml\StateMachine\is-LI77M.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Fusion\is-59DUB.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Window.2\is-R6TCD.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\is-65J10.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-7FJ1M.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Private\is-CEOPI.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Desktop\is-77A68.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Dialogs\qml\is-A4BV5.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Private\is-GRBHT.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-85IVC.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\Private\is-40EKC.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\Private\is-SK086.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Dialogs\qml\is-5B879.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-VBG52.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtGraphicalEffects\private\is-00SFU.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-JJ9RK.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-L7CRF.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-7AS9G.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Dialogs\qml\is-UTQ8F.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Particles.2\is-HP48A.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-I4TL5.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtGraphicalEffects\is-NGP3C.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-53UAP.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-U0F00.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Dialogs\is-RFQR9.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\images\is-LJA24.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-HQG46.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\Private\is-H3EDB.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-PADNF.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\torrents\is-P9M1K.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-21HPB.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-EFQVE.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-2G9SC.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\unins000.dat	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Fusion\is-GS3KE.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Extras\Private\is-KMMH0.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\is-UES92.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-2GRK3.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-B293B.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-6CJ1H.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\torrents\is-N1HO8.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Material\is-JPN92.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Dialogs\is-HT8CD.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\translations\torrents\is-II2EF.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Imagine\is-OHQ9T.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Particles.2\is-7PO4S.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-JNUJP.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtGraphicalEffects\is-647P8.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-56CK3.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Desktop\is-2ILJD.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Desktop\is-KE1M7.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\is-JLP4F.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Private\is-STNJ0.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Desktop\is-JIG4Q.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls.2\Universal\is-4Q73Q.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Templates.2\is-L48QJ.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-U33OC.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\qmltooling\is-05UN5.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Layouts\is-CR453.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-VNKIQ.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-QHN4B.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtGraphicalEffects\is-6UUH9.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\QtQuick\Controls\Styles\Base\is-2FM8N.tmp	fdm_x64_setup.tmp
File created	C:\Program Files\Softdeluxe\Free Download Manager\is-I37FP.tmp	fdm_x64_setup.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Creates scheduled task(s) 1 TTPs 1 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence

Scheduled Task

T1053

pid	Process
2112	schtasks.exe

Modifies Internet Explorer settings 1 TTPs 8 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\fdm.exe = "11000"	fdm_x64_setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING	fdm_x64_setup.tmp
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\fdm.exe = "1"	fdm_x64_setup.tmp
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_GPU_RENDERING	fdm_x64_setup.tmp
Set value (int)	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_GPU_RENDERING\fdm.exe = "1"	fdm_x64_setup.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION	fdm_x64_setup.tmp
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\fdm.exe = "11000"	fdm_x64_setup.tmp
Key created	\REGISTRY\USER\S-1-5-21-1529757233-3489015626-3409890339-1000\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION	fdm_x64_setup.tmp

Suspicious behavior: AddClipboardFormatListener 5 IoCs

pid	Process
1428	fdm.exe
4104	fdm.exe
2240	fdm.exe
4732	fdm.exe
3788	fdm.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1428	fdm.exe
1428	fdm.exe
2024	fdm5rhwin.exe
2024	fdm5rhwin.exe
4004	fdm5rhwin.exe
4004	fdm5rhwin.exe
2688	msedge.exe
2688	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	1428	fdm.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4932	fdm_x64_setup.tmp

Suspicious use of SetWindowsHookEx 30 IoCs

pid	Process
3908	helperservice.exe
1428	fdm.exe
4104	fdm.exe
1428	fdm.exe
4104	fdm.exe
2240	fdm.exe
2240	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
4732	fdm.exe
4732	fdm.exe
4732	fdm.exe
4732	fdm.exe
4732	fdm.exe
4732	fdm.exe
3788	fdm.exe
3788	fdm.exe
4732	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
1428	fdm.exe
4104	fdm.exe
4104	fdm.exe
2240	fdm.exe
2240	fdm.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4628 wrote to memory of 4932	4628	fdm_x64_setup.exe	87
PID 4628 wrote to memory of 4932	4628	fdm_x64_setup.exe	87
PID 4628 wrote to memory of 4932	4628	fdm_x64_setup.exe	87
PID 4932 wrote to memory of 4076	4932	fdm_x64_setup.tmp	93
PID 4932 wrote to memory of 4076	4932	fdm_x64_setup.tmp	93
PID 4932 wrote to memory of 2112	4932	fdm_x64_setup.tmp	98
PID 4932 wrote to memory of 2112	4932	fdm_x64_setup.tmp	98
PID 4932 wrote to memory of 3088	4932	fdm_x64_setup.tmp	100
PID 4932 wrote to memory of 3088	4932	fdm_x64_setup.tmp	100
PID 4932 wrote to memory of 4544	4932	fdm_x64_setup.tmp	102
PID 4932 wrote to memory of 4544	4932	fdm_x64_setup.tmp	102
PID 4932 wrote to memory of 3788	4932	fdm_x64_setup.tmp	105
PID 4932 wrote to memory of 3788	4932	fdm_x64_setup.tmp	105
PID 1428 wrote to memory of 4652	1428	fdm.exe	116
PID 1428 wrote to memory of 4652	1428	fdm.exe	116
PID 4104 wrote to memory of 2828	4104	fdm.exe	109
PID 4104 wrote to memory of 2828	4104	fdm.exe	109
PID 2240 wrote to memory of 3552	2240	fdm.exe	114
PID 2240 wrote to memory of 3552	2240	fdm.exe	114
PID 4732 wrote to memory of 3820	4732	fdm.exe	119
PID 4732 wrote to memory of 3820	4732	fdm.exe	119
PID 4732 wrote to memory of 3576	4732	fdm.exe	121
PID 4732 wrote to memory of 3576	4732	fdm.exe	121
PID 3788 wrote to memory of 2376	3788	fdm.exe	124
PID 3788 wrote to memory of 2376	3788	fdm.exe	124
PID 3280 wrote to memory of 2484	3280	msedge.exe	128
PID 3280 wrote to memory of 2484	3280	msedge.exe	128
PID 4932 wrote to memory of 2024	4932	fdm_x64_setup.tmp	129
PID 4932 wrote to memory of 2024	4932	fdm_x64_setup.tmp	129
PID 4932 wrote to memory of 4004	4932	fdm_x64_setup.tmp	131
PID 4932 wrote to memory of 4004	4932	fdm_x64_setup.tmp	131
PID 4932 wrote to memory of 1496	4932	fdm_x64_setup.tmp	133
PID 4932 wrote to memory of 1496	4932	fdm_x64_setup.tmp	133
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135
PID 3280 wrote to memory of 3028	3280	msedge.exe	135

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe
"C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:4628
- C:\Users\Admin\AppData\Local\Temp\is-G8JBB.tmp\fdm_x64_setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-G8JBB.tmp\fdm_x64_setup.tmp" /SL5="$401CE,34943088,780288,C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Modifies Internet Explorer settings
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4932
- - C:\Windows\SYSTEM32\schtasks.exe
    "schtasks.exe" /end /tn FreeDownloadManagerHelperService
    3⤵
    PID:4076
- - C:\Windows\system32\schtasks.exe
    "schtasks.exe" /create /RU SYSTEM /tn FreeDownloadManagerHelperService /f /xml "C:\Program Files\Softdeluxe\Free Download Manager\service.xml"
    3⤵
    - Creates scheduled task(s)
    PID:2112
- - C:\Windows\system32\schtasks.exe
    "schtasks.exe" /change /tn FreeDownloadManagerHelperService /tr "\"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"\"
    3⤵
    PID:3088
- - C:\Windows\system32\schtasks.exe
    "schtasks.exe" /run /tn FreeDownloadManagerHelperService
    3⤵
    PID:4544
- - C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
    "C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --install
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:3788
  - - C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
      "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
      4⤵
      Executes dropped EXE
      PID:2376
- - C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe
    "C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase1
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:2024
- - C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe
    "C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase2
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    PID:4004
- - C:\Windows\system32\netsh.exe
    "netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=ALL
    3⤵
    - Modifies Windows Firewall
    PID:1496
- - C:\Windows\system32\netsh.exe
    "netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=CURRENT
    3⤵
    - Modifies Windows Firewall
    PID:3164
- - C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
    "C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --byinstaller
    3⤵
    PID:2840
  - - C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
      "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
      4⤵
      PID:508

C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe
"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
PID:3908

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1428
- C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
  "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
  2⤵
  - Executes dropped EXE
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.freedownloadmanager.org/afterinstall.html?os=windows&osversion=10&osarchitecture=x86_64&architecture=x86_64&version=6.18.1.4920&uuid=9a352047-111e-4253-b436-ddbec3cca6d7&locale=en_US&ac=1&au=1
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9ba0f46f8,0x7ff9ba0f4708,0x7ff9ba0f4718
    3⤵
    PID:2484
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,10740960902327857159,10474187886372503998,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
    3⤵
    PID:3028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,10740960902327857159,10474187886372503998,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2688
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,10740960902327857159,10474187886372503998,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
    3⤵
    PID:4060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,10740960902327857159,10474187886372503998,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
    3⤵
    PID:2660
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,10740960902327857159,10474187886372503998,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
    3⤵
    PID:4984

C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
"C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
1⤵
- Executes dropped EXE
PID:2828

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
- Executes dropped EXE
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
  "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
  2⤵
  - Executes dropped EXE
  PID:3552

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4104

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
- Executes dropped EXE
- Adds Run key to start application
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4732
- C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
  "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
  2⤵
  - Executes dropped EXE
  PID:3820
- C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
  "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4 --printFdm5Setting=ExpectingUpdateToVersion
  2⤵
  - Executes dropped EXE
  PID:3576

C:\Windows\system32\werfault.exe
werfault.exe /hc /shared Global\f4f76f75a4f54287b63da4c7900a1481 /t 4016 /p 3852
1⤵
PID:2644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5104

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
PID:4568

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
PID:3936
- C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
  "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
  2⤵
  PID:2300

C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
"C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe"
1⤵
PID:216
- C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
  "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
  2⤵
  PID:3320

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Scheduled Task

T1053

Persistence

Modify Existing Service

T1031

Registry Run Keys / Startup Folder

T1060

Scheduled Task

T1053

Privilege Escalation

Scheduled Task

T1053

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\Softdeluxe\Free Download Manager\MSVCP140.dll

Filesize
553KB

MD5
6da7f4530edb350cf9d967d969ccecf8

SHA1
3e2681ea91f60a7a9ef2407399d13c1ca6aa71e9

SHA256
9fee6f36547d6f6ea7ca0338655555dba6bb0f798bc60334d29b94d1547da4da

SHA512
1f77f900215a4966f7f4e5d23b4aaad203136cb8561f4e36f03f13659fe1ff4b81caa75fef557c890e108f28f0484ad2baa825559114c0daa588cf1de6c1afab

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Core.dll

Filesize
5.7MB

MD5
0e51ac35b4b2922288b956450a73cbab

SHA1
adee61361815b216ba5c6c3b1cab998f1093a06b

SHA256
3b2129169999b948ca6ef1931410c235ac2aece3088ff9fc486145dcf772dd46

SHA512
fd36ecf24fe17892817a3007d7cb1c730469f61e68c66ed2da090b9e84d782298d08849b80788f72e48e289332f6dbea7fa2222e7b9518165b0335643d710843

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Gui.dll

Filesize
6.2MB

MD5
1273c387e80db82ee6a96ac4788da8f7

SHA1
d0ba5c2c54e535254fb1ac5866c32b4c1398e045

SHA256
90b1a7c47965eafcc896b99e9520198c097f60975b74884f1c2bc91a5ce88160

SHA512
3356e4da246a05aaa959002463835afc4154077e112acde6531b78bcaf32272f1d81d8b8aa8407d31bee48b1f439b57427874660386147729749efe790a2ada2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Gui.dll

Filesize
6.2MB

MD5
1273c387e80db82ee6a96ac4788da8f7

SHA1
d0ba5c2c54e535254fb1ac5866c32b4c1398e045

SHA256
90b1a7c47965eafcc896b99e9520198c097f60975b74884f1c2bc91a5ce88160

SHA512
3356e4da246a05aaa959002463835afc4154077e112acde6531b78bcaf32272f1d81d8b8aa8407d31bee48b1f439b57427874660386147729749efe790a2ada2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Multimedia.dll

Filesize
713KB

MD5
d51ad7b8a4f98a8f584989c2e72679e5

SHA1
4f8bfb1a5ff09cd29b11dbd7acb805061d416dee

SHA256
e36cde2154a75b2267cf5ba8ae659d7e0750e9ac985d6923db0335c1ed734b10

SHA512
aed79d5bd7f197af96e02f11de289c9062f64c3956b4c6d66098c6f78b3d0159e180a5afb1e7baa58ac0a7dca98a98f147bb1a9e1fa8a4b1bdf5da06f583e064

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Multimedia.dll

Filesize
713KB

MD5
d51ad7b8a4f98a8f584989c2e72679e5

SHA1
4f8bfb1a5ff09cd29b11dbd7acb805061d416dee

SHA256
e36cde2154a75b2267cf5ba8ae659d7e0750e9ac985d6923db0335c1ed734b10

SHA512
aed79d5bd7f197af96e02f11de289c9062f64c3956b4c6d66098c6f78b3d0159e180a5afb1e7baa58ac0a7dca98a98f147bb1a9e1fa8a4b1bdf5da06f583e064

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Multimedia.dll

Filesize
713KB

MD5
d51ad7b8a4f98a8f584989c2e72679e5

SHA1
4f8bfb1a5ff09cd29b11dbd7acb805061d416dee

SHA256
e36cde2154a75b2267cf5ba8ae659d7e0750e9ac985d6923db0335c1ed734b10

SHA512
aed79d5bd7f197af96e02f11de289c9062f64c3956b4c6d66098c6f78b3d0159e180a5afb1e7baa58ac0a7dca98a98f147bb1a9e1fa8a4b1bdf5da06f583e064

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Network.dll

Filesize
1.3MB

MD5
20dc922278cd948ce6dbdcb74580f910

SHA1
1a34d4738955f99c17083fec22945b0d6af76f40

SHA256
f7c7a1ea2570d1238287470b479e384f87c39357d1a4b2eeedbf90901d9c3cbc

SHA512
90afc14985b51744e2f3ea11a0f6f0edc3c7306bf6e9539c9526adbed0caf47e2b19fa90b38a3269424f109adb80f2bd7394620a35360d5aeb0b3641eb92fb79

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Network.dll

Filesize
1.3MB

MD5
20dc922278cd948ce6dbdcb74580f910

SHA1
1a34d4738955f99c17083fec22945b0d6af76f40

SHA256
f7c7a1ea2570d1238287470b479e384f87c39357d1a4b2eeedbf90901d9c3cbc

SHA512
90afc14985b51744e2f3ea11a0f6f0edc3c7306bf6e9539c9526adbed0caf47e2b19fa90b38a3269424f109adb80f2bd7394620a35360d5aeb0b3641eb92fb79

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Network.dll

Filesize
1.3MB

MD5
20dc922278cd948ce6dbdcb74580f910

SHA1
1a34d4738955f99c17083fec22945b0d6af76f40

SHA256
f7c7a1ea2570d1238287470b479e384f87c39357d1a4b2eeedbf90901d9c3cbc

SHA512
90afc14985b51744e2f3ea11a0f6f0edc3c7306bf6e9539c9526adbed0caf47e2b19fa90b38a3269424f109adb80f2bd7394620a35360d5aeb0b3641eb92fb79

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Qml.dll

Filesize
3.8MB

MD5
bb53b42e1676fcdb5d5e71664ca592ba

SHA1
a781aaf2600658e868ba6950721ad8ced6ffb6d4

SHA256
a473856364e00c6fc9c25508089f078665464a64d5b50c8a1b48a853709bcf23

SHA512
53e6f72516f71b54179935829d1b425a43e5e65a211759bb2f1ef44815d6cc0e09cc651919436402983b41e51dc683d45c4683ae7131a0aa056244d3508e4e48

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Qml.dll

Filesize
3.8MB

MD5
bb53b42e1676fcdb5d5e71664ca592ba

SHA1
a781aaf2600658e868ba6950721ad8ced6ffb6d4

SHA256
a473856364e00c6fc9c25508089f078665464a64d5b50c8a1b48a853709bcf23

SHA512
53e6f72516f71b54179935829d1b425a43e5e65a211759bb2f1ef44815d6cc0e09cc651919436402983b41e51dc683d45c4683ae7131a0aa056244d3508e4e48

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Quick.dll

Filesize
3.6MB

MD5
c01cab6389a0b21d61bb77e56fd898aa

SHA1
84153b02aec718ae0881158dec3c5de257ef89f7

SHA256
d93f6a371e4fd92740d0c46dbf4a9ac82f2e79444a34a36d0be82266ed4fd93a

SHA512
3a351b5d71a7b0711d9117bb0ed04ca194e77684bd57314939e5dcbc4430b0f6fb8865f2f3427e0c9c0a1e662048fbd79f020b7e64bd3e3e4759f83fab103d16

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Quick.dll

Filesize
3.6MB

MD5
c01cab6389a0b21d61bb77e56fd898aa

SHA1
84153b02aec718ae0881158dec3c5de257ef89f7

SHA256
d93f6a371e4fd92740d0c46dbf4a9ac82f2e79444a34a36d0be82266ed4fd93a

SHA512
3a351b5d71a7b0711d9117bb0ed04ca194e77684bd57314939e5dcbc4430b0f6fb8865f2f3427e0c9c0a1e662048fbd79f020b7e64bd3e3e4759f83fab103d16

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Quick.dll

Filesize
3.6MB

MD5
c01cab6389a0b21d61bb77e56fd898aa

SHA1
84153b02aec718ae0881158dec3c5de257ef89f7

SHA256
d93f6a371e4fd92740d0c46dbf4a9ac82f2e79444a34a36d0be82266ed4fd93a

SHA512
3a351b5d71a7b0711d9117bb0ed04ca194e77684bd57314939e5dcbc4430b0f6fb8865f2f3427e0c9c0a1e662048fbd79f020b7e64bd3e3e4759f83fab103d16

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickControls2.dll

Filesize
175KB

MD5
83d2d8058e2beecfacecea3f773684ae

SHA1
410f95d0a5f550ed98ec072d1d039923b3b85cff

SHA256
c27ff75badc2ca3d60da3d5878aa777ae7ca2fb41ffd3931d65c390227a4bb3d

SHA512
b895eea653997753aca88c2df2dea8c79dd65314f38fc841103e5c286e2dc313063b9dfd951c4cf293ea18e38086d0a1f6714f5232d96d925acd1b0bc6ad5ab0

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickControls2.dll

Filesize
175KB

MD5
83d2d8058e2beecfacecea3f773684ae

SHA1
410f95d0a5f550ed98ec072d1d039923b3b85cff

SHA256
c27ff75badc2ca3d60da3d5878aa777ae7ca2fb41ffd3931d65c390227a4bb3d

SHA512
b895eea653997753aca88c2df2dea8c79dd65314f38fc841103e5c286e2dc313063b9dfd951c4cf293ea18e38086d0a1f6714f5232d96d925acd1b0bc6ad5ab0

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickControls2.dll

Filesize
175KB

MD5
83d2d8058e2beecfacecea3f773684ae

SHA1
410f95d0a5f550ed98ec072d1d039923b3b85cff

SHA256
c27ff75badc2ca3d60da3d5878aa777ae7ca2fb41ffd3931d65c390227a4bb3d

SHA512
b895eea653997753aca88c2df2dea8c79dd65314f38fc841103e5c286e2dc313063b9dfd951c4cf293ea18e38086d0a1f6714f5232d96d925acd1b0bc6ad5ab0

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickTemplates2.dll

Filesize
1010KB

MD5
4760f98a8a40e6d07db6b8506553fb80

SHA1
a9ddcddf81358253dfdf86e210a63ff28d556587

SHA256
4f3267d1871cfcda6c9cdf7240c2189eaa7f96aa4967d98a660c4d5e9cc0b101

SHA512
1860ae685868b554008a1dab2e8d4fa34588cb503509fddcfb5366bd49143fcacd2ff8141023146787a55f5a1b0d1bab09b5f436035f26e3b48c463c4c58e1d1

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5QuickTemplates2.dll

Filesize
1010KB

MD5
4760f98a8a40e6d07db6b8506553fb80

SHA1
a9ddcddf81358253dfdf86e210a63ff28d556587

SHA256
4f3267d1871cfcda6c9cdf7240c2189eaa7f96aa4967d98a660c4d5e9cc0b101

SHA512
1860ae685868b554008a1dab2e8d4fa34588cb503509fddcfb5366bd49143fcacd2ff8141023146787a55f5a1b0d1bab09b5f436035f26e3b48c463c4c58e1d1

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Sql.dll

Filesize
209KB

MD5
d780e35d89a9d5389b03e5181832af75

SHA1
23ffc88e2026871a299065d55eb21d3b67546418

SHA256
1b9435197ea13aac313106822d61f36ab107a48341e5d09408918bd0fc3bbe44

SHA512
bba506404e85243098aba6a39ad6dceb06669058842b5e0ddc884f95c749a722c4ed15b9f22f3810f73b0605343f39ff82ca71e4da9e8c4d8a95eb42d18cca45

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Sql.dll

Filesize
209KB

MD5
d780e35d89a9d5389b03e5181832af75

SHA1
23ffc88e2026871a299065d55eb21d3b67546418

SHA256
1b9435197ea13aac313106822d61f36ab107a48341e5d09408918bd0fc3bbe44

SHA512
bba506404e85243098aba6a39ad6dceb06669058842b5e0ddc884f95c749a722c4ed15b9f22f3810f73b0605343f39ff82ca71e4da9e8c4d8a95eb42d18cca45

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Widgets.dll

Filesize
5.3MB

MD5
91439f0387898388cb1a3150c5848d73

SHA1
d57b3c8bb6ae88f98add39890c9a8c3fdc2a0f55

SHA256
9e38324e796eb66200498dbfdcda8ac92f92155a9accdc6c97f92f475ea4c8c2

SHA512
8a282440d5b2ba67ef4d9f490c0ef93946b60351b4019cb247eac67da92398b55745f6325fe6ab7f62088132614cc9f6332726e532e692f0b709bdcaa3999bac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Widgets.dll

Filesize
5.3MB

MD5
91439f0387898388cb1a3150c5848d73

SHA1
d57b3c8bb6ae88f98add39890c9a8c3fdc2a0f55

SHA256
9e38324e796eb66200498dbfdcda8ac92f92155a9accdc6c97f92f475ea4c8c2

SHA512
8a282440d5b2ba67ef4d9f490c0ef93946b60351b4019cb247eac67da92398b55745f6325fe6ab7f62088132614cc9f6332726e532e692f0b709bdcaa3999bac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\Qt5Widgets.dll

Filesize
5.3MB

MD5
91439f0387898388cb1a3150c5848d73

SHA1
d57b3c8bb6ae88f98add39890c9a8c3fdc2a0f55

SHA256
9e38324e796eb66200498dbfdcda8ac92f92155a9accdc6c97f92f475ea4c8c2

SHA512
8a282440d5b2ba67ef4d9f490c0ef93946b60351b4019cb247eac67da92398b55745f6325fe6ab7f62088132614cc9f6332726e532e692f0b709bdcaa3999bac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\VCRUNTIME140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\VCRUNTIME140_1.dll

Filesize
36KB

MD5
135359d350f72ad4bf716b764d39e749

SHA1
2e59d9bbcce356f0fece56c9c4917a5cacec63d7

SHA256
34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32

SHA512
cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsjsp.dll

Filesize
87KB

MD5
162788a111c3ee1937295a3827f68b7c

SHA1
d999f5ca96474f518faf371d3f63843114c80614

SHA256
cd147aefcd9339a24cc6cff4a961dfc6842423a503eb6f50284a6a3eaafc17f2

SHA512
08d9b858d7afa32776bed868a0787078a108deaf49cde71d03f8f2aa9beeb74e25002e328b1497d4ab418ebe9b96b15c15c6ca5e0906e1bbf256358825d8f7ac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsjsp.dll

Filesize
87KB

MD5
162788a111c3ee1937295a3827f68b7c

SHA1
d999f5ca96474f518faf371d3f63843114c80614

SHA256
cd147aefcd9339a24cc6cff4a961dfc6842423a503eb6f50284a6a3eaafc17f2

SHA512
08d9b858d7afa32776bed868a0787078a108deaf49cde71d03f8f2aa9beeb74e25002e328b1497d4ab418ebe9b96b15c15c6ca5e0906e1bbf256358825d8f7ac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsjsp.dll

Filesize
87KB

MD5
162788a111c3ee1937295a3827f68b7c

SHA1
d999f5ca96474f518faf371d3f63843114c80614

SHA256
cd147aefcd9339a24cc6cff4a961dfc6842423a503eb6f50284a6a3eaafc17f2

SHA512
08d9b858d7afa32776bed868a0787078a108deaf49cde71d03f8f2aa9beeb74e25002e328b1497d4ab418ebe9b96b15c15c6ca5e0906e1bbf256358825d8f7ac

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsms.dll

Filesize
496KB

MD5
56693e67d67908997d885ce0bdacfa97

SHA1
f5cecfa55765ee4115beb21473fbd5975b15b6fd

SHA256
44ad96a7a555ccc19e07fb507b7a274194c4c7435ebd798019218175dc30c810

SHA512
65bb46eed9c4bb5f5f21f549251ae67e578164176afc2438396fc8e75a10fb5dece19d93036f5bb4515a3e91bbc7a16625438e2d208bdd8d5d5814e7f2b7c525

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\downloadsms.dll

Filesize
496KB

MD5
56693e67d67908997d885ce0bdacfa97

SHA1
f5cecfa55765ee4115beb21473fbd5975b15b6fd

SHA256
44ad96a7a555ccc19e07fb507b7a274194c4c7435ebd798019218175dc30c810

SHA512
65bb46eed9c4bb5f5f21f549251ae67e578164176afc2438396fc8e75a10fb5dece19d93036f5bb4515a3e91bbc7a16625438e2d208bdd8d5d5814e7f2b7c525

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe

Filesize
5.4MB

MD5
af0e1046e67ed95adbdb90668964d3ab

SHA1
c7ae52bd3214d8cf864dd95a0399ceb90120a62c

SHA256
3d20a3544dd4e5e606525f74c7e323144cf564dcb7a6b9e8e94c0845e6ec800e

SHA512
dd3f8b3025531506628526640aa46ac8c05d3a06eb97b6ff3b32e425ee85104a269b8d4f00d886fd649b34f69dfc270c26288bebc7bfdf8fd5e324fb3bf7c046

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe

Filesize
125KB

MD5
7cf96519fbb09c34d31cac4d272cfb76

SHA1
47da0b81bee168efd8e43598b739002d62c8a492

SHA256
1401ecd7535e0d38455b3229806525086021904b95336438d4c851347e2cf215

SHA512
af2a0bc3bc0f94650b4e7603bc20dcbfee74064a2b8d0f66108b2b01645a87008170f69d693d4f96f0438a41d9c627ec09ee5085ad4cd05a0fc8fb2af55bd8d2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe

Filesize
125KB

MD5
7cf96519fbb09c34d31cac4d272cfb76

SHA1
47da0b81bee168efd8e43598b739002d62c8a492

SHA256
1401ecd7535e0d38455b3229806525086021904b95336438d4c851347e2cf215

SHA512
af2a0bc3bc0f94650b4e7603bc20dcbfee74064a2b8d0f66108b2b01645a87008170f69d693d4f96f0438a41d9c627ec09ee5085ad4cd05a0fc8fb2af55bd8d2

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\libcrypto-1_1-x64.dll

Filesize
2.7MB

MD5
8bf7134fd7c7b9f79fbaa46a820565fd

SHA1
c82732c10a0f03ef1868d2ca6a8c42ec430a8a02

SHA256
a8f38398b8e95919ce4f4eb4ce9e2db432b5b8da00b531e2f1633795b3fa622a

SHA512
9d48c50a08236df337ace9f7546d3db392d980d6b86111da0f1b72848d9a7e74aa05ec9eb83f35c4c0570334f5c3b8460e1864eb2ad9a7ff5dc67d0206616e61

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\libcrypto-1_1-x64.dll

Filesize
2.7MB

MD5
8bf7134fd7c7b9f79fbaa46a820565fd

SHA1
c82732c10a0f03ef1868d2ca6a8c42ec430a8a02

SHA256
a8f38398b8e95919ce4f4eb4ce9e2db432b5b8da00b531e2f1633795b3fa622a

SHA512
9d48c50a08236df337ace9f7546d3db392d980d6b86111da0f1b72848d9a7e74aa05ec9eb83f35c4c0570334f5c3b8460e1864eb2ad9a7ff5dc67d0206616e61

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\libcrypto-1_1-x64.dll

Filesize
2.7MB

MD5
8bf7134fd7c7b9f79fbaa46a820565fd

SHA1
c82732c10a0f03ef1868d2ca6a8c42ec430a8a02

SHA256
a8f38398b8e95919ce4f4eb4ce9e2db432b5b8da00b531e2f1633795b3fa622a

SHA512
9d48c50a08236df337ace9f7546d3db392d980d6b86111da0f1b72848d9a7e74aa05ec9eb83f35c4c0570334f5c3b8460e1864eb2ad9a7ff5dc67d0206616e61

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\logger.dll

Filesize
32KB

MD5
f86d67751f21fdf101048da34d3de812

SHA1
6a99f27ef16ce1025bde7c8a0e9780739b22adc0

SHA256
b4e28856c976425995e79f08fe39de72c6fddb6b53ece7c25bd3cc2b7ac43a5f

SHA512
e0829655fb0b5e17bda36bf93b5e1293efd88b86fca07a7e88f715996ff263b9ee3a72dd57f0cc0b0a5bf7856f17e6f9ecb71871c6f01deae361b87a86d82932

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\logger.dll

Filesize
32KB

MD5
f86d67751f21fdf101048da34d3de812

SHA1
6a99f27ef16ce1025bde7c8a0e9780739b22adc0

SHA256
b4e28856c976425995e79f08fe39de72c6fddb6b53ece7c25bd3cc2b7ac43a5f

SHA512
e0829655fb0b5e17bda36bf93b5e1293efd88b86fca07a7e88f715996ff263b9ee3a72dd57f0cc0b0a5bf7856f17e6f9ecb71871c6f01deae361b87a86d82932

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\logger.dll

Filesize
32KB

MD5
f86d67751f21fdf101048da34d3de812

SHA1
6a99f27ef16ce1025bde7c8a0e9780739b22adc0

SHA256
b4e28856c976425995e79f08fe39de72c6fddb6b53ece7c25bd3cc2b7ac43a5f

SHA512
e0829655fb0b5e17bda36bf93b5e1293efd88b86fca07a7e88f715996ff263b9ee3a72dd57f0cc0b0a5bf7856f17e6f9ecb71871c6f01deae361b87a86d82932

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\msvcp140.dll

Filesize
553KB

MD5
6da7f4530edb350cf9d967d969ccecf8

SHA1
3e2681ea91f60a7a9ef2407399d13c1ca6aa71e9

SHA256
9fee6f36547d6f6ea7ca0338655555dba6bb0f798bc60334d29b94d1547da4da

SHA512
1f77f900215a4966f7f4e5d23b4aaad203136cb8561f4e36f03f13659fe1ff4b81caa75fef557c890e108f28f0484ad2baa825559114c0daa588cf1de6c1afab

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\msvcp140.dll

Filesize
553KB

MD5
6da7f4530edb350cf9d967d969ccecf8

SHA1
3e2681ea91f60a7a9ef2407399d13c1ca6aa71e9

SHA256
9fee6f36547d6f6ea7ca0338655555dba6bb0f798bc60334d29b94d1547da4da

SHA512
1f77f900215a4966f7f4e5d23b4aaad203136cb8561f4e36f03f13659fe1ff4b81caa75fef557c890e108f28f0484ad2baa825559114c0daa588cf1de6c1afab

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\quazip.dll

Filesize
203KB

MD5
9a08a2b7ec7edd0150e236104aa4d1f3

SHA1
b7ba88484afe6ad111f64db81519a1dc2ec68508

SHA256
d373c86239b2cb562f05dde6aa2086c7276239e138fafaad99ce8b3bd4ea2582

SHA512
684cc71fd090b24909e6bdfafb2bcb97e29450ea73f924cc3e9f5489d43ab86c310cd45056e31f387f59fe549fe19cc009fc2ba9f7e882f3e6d116cef26adb12

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\quazip.dll

Filesize
203KB

MD5
9a08a2b7ec7edd0150e236104aa4d1f3

SHA1
b7ba88484afe6ad111f64db81519a1dc2ec68508

SHA256
d373c86239b2cb562f05dde6aa2086c7276239e138fafaad99ce8b3bd4ea2582

SHA512
684cc71fd090b24909e6bdfafb2bcb97e29450ea73f924cc3e9f5489d43ab86c310cd45056e31f387f59fe549fe19cc009fc2ba9f7e882f3e6d116cef26adb12

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\quazip.dll

Filesize
203KB

MD5
9a08a2b7ec7edd0150e236104aa4d1f3

SHA1
b7ba88484afe6ad111f64db81519a1dc2ec68508

SHA256
d373c86239b2cb562f05dde6aa2086c7276239e138fafaad99ce8b3bd4ea2582

SHA512
684cc71fd090b24909e6bdfafb2bcb97e29450ea73f924cc3e9f5489d43ab86c310cd45056e31f387f59fe549fe19cc009fc2ba9f7e882f3e6d116cef26adb12

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\service.xml

Filesize
2KB

MD5
85c61b85b0ffe2609b00379a5512790d

SHA1
2dfaf069df408819b06916381ac80b3ec097214c

SHA256
24f6062b8679b4140b5c15900deefa8ba187ed5e3c5cb8efc91b26b31769664d

SHA512
3a18c17ddcd10cd89d1c666134f13be6ed441fbe2c36a9567e894c0e1674232d5882e696ad2d385bd5eb4d50b6a1b4225bb992389aad93a77b203318293ca6fa

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll

Filesize
95KB

MD5
f34eb034aa4a9735218686590cba2e8b

SHA1
2bc20acdcb201676b77a66fa7ec6b53fa2644713

SHA256
9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1

SHA512
d27d5e65e8206bd7923cf2a3c4384fec0fc59e8bc29e25f8c03d039f3741c01d1a8c82979d7b88c10b209db31fbbec23909e976b3ee593dc33481f0050a445af

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140_1.dll

Filesize
36KB

MD5
135359d350f72ad4bf716b764d39e749

SHA1
2e59d9bbcce356f0fece56c9c4917a5cacec63d7

SHA256
34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32

SHA512
cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140_1.dll

Filesize
36KB

MD5
135359d350f72ad4bf716b764d39e749

SHA1
2e59d9bbcce356f0fece56c9c4917a5cacec63d7

SHA256
34048abaa070ecc13b318cea31425f4ca3edd133d350318ac65259e6058c8b32

SHA512
cf23513d63ab2192c78cae98bd3fea67d933212b630be111fa7e03be3e92af38e247eb2d3804437fd0fda70fdc87916cd24cf1d3911e9f3bfb2cc4ab72b459ba

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vmsclshared.dll

Filesize
481KB

MD5
c5ec998da72d44adcb50d1b6544d5b3f

SHA1
63bec20d94dcf6e7bf7dbea41cff16d7120c4fee

SHA256
bb6fd71add89ad693227233598e4cb47f0f6d7d08b8168459e810a662b1f7e30

SHA512
24f71dc08eb2a1b5abb1effc3d71e8c0059fcb8d745e3cc0a8b47be8499727814cf7f0b7d0532f6fa9f861d142d00cfa30b3f6ea15c7437bb4800d2b4ffa7813

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vmsclshared.dll

Filesize
481KB

MD5
c5ec998da72d44adcb50d1b6544d5b3f

SHA1
63bec20d94dcf6e7bf7dbea41cff16d7120c4fee

SHA256
bb6fd71add89ad693227233598e4cb47f0f6d7d08b8168459e810a662b1f7e30

SHA512
24f71dc08eb2a1b5abb1effc3d71e8c0059fcb8d745e3cc0a8b47be8499727814cf7f0b7d0532f6fa9f861d142d00cfa30b3f6ea15c7437bb4800d2b4ffa7813

Download Submit
C:\Program Files\Softdeluxe\Free Download Manager\vmsclshared.dll

Filesize
481KB

MD5
c5ec998da72d44adcb50d1b6544d5b3f

SHA1
63bec20d94dcf6e7bf7dbea41cff16d7120c4fee

SHA256
bb6fd71add89ad693227233598e4cb47f0f6d7d08b8168459e810a662b1f7e30

SHA512
24f71dc08eb2a1b5abb1effc3d71e8c0059fcb8d745e3cc0a8b47be8499727814cf7f0b7d0532f6fa9f861d142d00cfa30b3f6ea15c7437bb4800d2b4ffa7813

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0820611471c1bb55fa7be7430c7c6329

SHA1
5ce7a9712722684223aced2522764c1e3a43fbb9

SHA256
f00d04749a374843bd118b41f669f8b0a20d76526c34b554c3ccac5ebd2f4f75

SHA512
77ea022b4265f3962f5e07a0a790f428c885da0cc11be0975285ce0eee4a2eec0a7cda9ea8f366dc2a946679b5dd927c5f94b527de6515856b68b8d08e435148

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
425e83cc5a7b1f8edfbec7d986058b01

SHA1
432a90a25e714c618ff30631d9fdbe3606b0d0df

SHA256
060a2e5f65b8f3b79a8d4a0c54b877cfe032f558beb0888d6f810aaeef8579bd

SHA512
4bf074de60e7849ade26119ef778fe67ea47691efff45f3d5e0b25de2d06fcc6f95a2cfcdbed85759a5c078bb371fe57de725babda2f44290b4dc42d7b6001af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
7e0a2d295c2b883604087e13da81dbe6

SHA1
96a8571165e21ee7095caf89e6daf94270c009b2

SHA256
836a6f253a65fef5a2ed5967f35ba3acf3b90dff21c17a1137f0d5027c16b626

SHA512
d0d1b110e6b2aa66345126fc3c463b1d5d8c383cc5f55820005c3cb62f2bb77e7db690c32aaa22c7bca29a1448376b8e123041ae067b96bea80379c6c89398cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5758de.TMP

Filesize
48B

MD5
a9695096ae5e59a9c57db02bbcffa11c

SHA1
d2ac81305f9de91c718791c847b68cba45cab37a

SHA256
095e95827191954e4dd9ba9126704525661ec696df2372caca838f1a652c2dff

SHA512
738f96e6dc7eaa645a21445c1490831597d09b6dd4b2744c0f9865be8fb379877237564b97acd1efb05da8342d18e3fc0c7b6b5933670a3bddad9b5a264ed7de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
ed253b2b42c012321f8860d59d7b4dad

SHA1
c42483d1d74f212a1f64c689f2f33edd69d0c695

SHA256
41ff55b17a96eb880ebd11f37cc08b2017160d60198d726ac2b5c5d4a7224b39

SHA512
3abe42d19893ee886babea6d81eb34337c803bda14b5e8faa9c50ae93306028fe01c64624cd7e34ccc44584b044ec2640ec0b5cd39e36be7d65f76cb08b1cf13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
7420ed42875a5c6c5826546529de2a7a

SHA1
23a554ebd54dadfc87cd703a119b6c0a8f9b3927

SHA256
519adc21cae1dd25709797173a3485ecf137611eb006753417ed4f40db214dbb

SHA512
233c5e378f2b2300e94fc6feb1ccc0a8843d979661f3b81f9727d5957a76a436b8eaf7b30b552b5086d546d76c9cb578e127ccef11247e4c91f289bdf4cddf78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
cb9ea8c2f2d3f68b3b51d5041ac67b3b

SHA1
f6c8b61c7aca36d887ef8b0c79d4d79c1e129d37

SHA256
9aaf71e9bb1f16ae6611824b70333fe519a7949acae19da7ce6bfea9f8ef74b0

SHA512
2783973c329467858b8cb66d56d2ac099dffae3461e667f8eae8e756b3aa384190e818fb2c2e0d9500a7725e1d08dd1b404fb7962a2ae7248bc35e87379fcfb2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
292ad68030f894591603ec1b3c313734

SHA1
b695ae2315b58973a2a8b9b8b50b2c52a5e190a7

SHA256
589a0a5a7634b8db9f8213acca60a050fd67856313266fe59bf2b7eaa5e6a8d5

SHA512
ce2a2bf25cb133e35b7908291abad327f608dedd8a690ad58e1b433ffea4c599ddc2478ea8aecd5c777b3c81536acd4a5fa7dabfc2a2562bb52e88fd2b83d925

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
d53ac35ab3976e67caeed75c4d44ffc1

SHA1
c139ab66d75dc06f98ada34b5baf4d5693266176

SHA256
647867c7236bcb78b7d585b476d82a101a077fac43c78dc59e612253fbf69437

SHA512
391355c71734ded913239a6db10a3202087e756bccc8e29411108f21b3f2460d9a9c606619aadd785285be70eddcf61ef9519441cd387cd3823c1399a6967cc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
3ca121f7a45250beeda1a99ed711cd24

SHA1
a4d5f101be3920484ac67a464c9606a8bbadb3fc

SHA256
4fabb98b2cc1d419de721b6a0f3cc94219ebbb4d6499cf866b5ef8927f3b033c

SHA512
a983b2a5abe2b97d8e0f7bb304c93450f6d9472c04ede8d061c9982a5935ee2e3954446a23beb7cde5570e0dd9414fa0b41fb958b0d352fee72072699a14100d

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache133230398638828412.txt

Filesize
77KB

MD5
38ea9eacc063131a11c4a7015c7e8e2f

SHA1
88d824491f1a5de4cc02075d8b0455e3eec75c33

SHA256
9197536e4bb043bf4645af8f41bb63b2693b40e321b835e7e30d9a68377accc7

SHA512
2c7bac603c57b498e96d59dfeec2812c27097d49dbf47361058454bb960ef22c8d9398bd451ecb83f51d4bb8c51ec37e7d0c26934176646e0abc7a02262ce91f

Download Submit
C:\Users\Admin\AppData\Local\Softdeluxe\Free Download Manager\settings.ini.JUtVoW

Filesize
87B

MD5
af6708854aa559ca1e7a9f799d979cda

SHA1
92c2b13b870c1dadd4a42f7d20e368632752ade4

SHA256
e23874866bdc552610b0e6d967aa3d870100c72497981a8e811b278d402c1802

SHA512
4b35809bf1144277487b96cb6e4f21fdb7ee642be9ae04ae00633645af4ee25f21fc05001849b546ffdfdb644545c65914c3b8d26923ff972d2a3ce86e09275b

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-G8JBB.tmp\fdm_x64_setup.tmp

Filesize
2.5MB

MD5
869c50863faef0fa7052b5551698ed58

SHA1
feb12f73e0a68d43db51a35f04be3f9d2aac90a3

SHA256
7e49962115092d3709b9a3e68934972931bb900f23bf4b42ac90d250725e7d4e

SHA512
19076555396601758b0b62a9b9fc68bb96b83387c5a345c3e68f5794b67c45bec7905654fe1243e2daf3ae8fe11c2ad243e962633370535a7a3f41bcb7fec1df

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-G8JBB.tmp\fdm_x64_setup.tmp

Filesize
2.5MB

MD5
869c50863faef0fa7052b5551698ed58

SHA1
feb12f73e0a68d43db51a35f04be3f9d2aac90a3

SHA256
7e49962115092d3709b9a3e68934972931bb900f23bf4b42ac90d250725e7d4e

SHA512
19076555396601758b0b62a9b9fc68bb96b83387c5a345c3e68f5794b67c45bec7905654fe1243e2daf3ae8fe11c2ad243e962633370535a7a3f41bcb7fec1df

Download Submit
memory/216-3940-0x000001C63A980000-0x000001C63A990000-memory.dmp

Filesize
64KB

Download
memory/1428-2305-0x000001E159400000-0x000001E159410000-memory.dmp

Filesize
64KB

Download
memory/1428-2244-0x000001E1574B0000-0x000001E1575FB000-memory.dmp

Filesize
1.3MB

Download
memory/1428-2104-0x00007FF9B7D50000-0x00007FF9B80F8000-memory.dmp

Filesize
3.7MB

Download
memory/1428-2103-0x00007FF659B30000-0x00007FF65A0A4000-memory.dmp

Filesize
5.5MB

Download
memory/1428-2102-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/2240-2250-0x00000277100B0000-0x00000277101FB000-memory.dmp

Filesize
1.3MB

Download
memory/2240-2463-0x00000277120F0000-0x0000027712100000-memory.dmp

Filesize
64KB

Download
memory/2240-2121-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/2240-2135-0x00007FF9B7D50000-0x00007FF9B80F8000-memory.dmp

Filesize
3.7MB

Download
memory/2240-2132-0x00007FF659B30000-0x00007FF65A0A4000-memory.dmp

Filesize
5.5MB

Download
memory/2376-2318-0x000001B515AE0000-0x000001B515C2B000-memory.dmp

Filesize
1.3MB

Download
memory/2376-2249-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/2828-2260-0x000001B70E5C0000-0x000001B70E70B000-memory.dmp

Filesize
1.3MB

Download
memory/2828-2248-0x000001B70E5C0000-0x000001B70E70B000-memory.dmp

Filesize
1.3MB

Download
memory/2828-2114-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/2840-3345-0x00000236385B0000-0x00000236385C0000-memory.dmp

Filesize
64KB

Download
memory/3552-2251-0x00000151E04B0000-0x00000151E05FB000-memory.dmp

Filesize
1.3MB

Download
memory/3552-2173-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/3552-2306-0x00000151E04B0000-0x00000151E05FB000-memory.dmp

Filesize
1.3MB

Download
memory/3576-2245-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/3576-2247-0x0000025F7E900000-0x0000025F7EA4B000-memory.dmp

Filesize
1.3MB

Download
memory/3788-2105-0x00007FF659B30000-0x00007FF65A0A4000-memory.dmp

Filesize
5.5MB

Download
memory/3788-2243-0x0000024C8EA00000-0x0000024C8EB4B000-memory.dmp

Filesize
1.3MB

Download
memory/3788-2106-0x00007FF9B7D50000-0x00007FF9B80F8000-memory.dmp

Filesize
3.7MB

Download
memory/3788-2406-0x0000024C8EA00000-0x0000024C8EB4B000-memory.dmp

Filesize
1.3MB

Download
memory/3788-2107-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/3820-2185-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/3820-2194-0x0000025F41050000-0x0000025F4119B000-memory.dmp

Filesize
1.3MB

Download
memory/3908-2242-0x0000019FD1090000-0x0000019FD10AB000-memory.dmp

Filesize
108KB

Download
memory/3936-3663-0x0000022FA7660000-0x0000022FA7670000-memory.dmp

Filesize
64KB

Download
memory/4104-2109-0x00007FF659B30000-0x00007FF65A0A4000-memory.dmp

Filesize
5.5MB

Download
memory/4104-2108-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/4104-2110-0x00007FF9B7D50000-0x00007FF9B80F8000-memory.dmp

Filesize
3.7MB

Download
memory/4104-2246-0x000002089F8B0000-0x000002089F9FB000-memory.dmp

Filesize
1.3MB

Download
memory/4104-2316-0x00000208A17F0000-0x00000208A1800000-memory.dmp

Filesize
64KB

Download
memory/4568-2868-0x0000020FADDC0000-0x0000020FADDE0000-memory.dmp

Filesize
128KB

Download
memory/4568-2877-0x0000020FADD80000-0x0000020FADDA0000-memory.dmp

Filesize
128KB

Download
memory/4628-133-0x0000000000400000-0x00000000004CC000-memory.dmp

Filesize
816KB

Download
memory/4628-140-0x0000000000400000-0x00000000004CC000-memory.dmp

Filesize
816KB

Download
memory/4652-2113-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/4652-2162-0x000002145ED20000-0x000002145EE6B000-memory.dmp

Filesize
1.3MB

Download
memory/4732-2307-0x000001954F090000-0x000001954F290000-memory.dmp

Filesize
2.0MB

Download
memory/4732-2182-0x00007FF9B6D50000-0x00007FF9B72A5000-memory.dmp

Filesize
5.3MB

Download
memory/4732-2867-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2875-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2872-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2869-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2878-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2883-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2865-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2863-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2862-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2873-0x0000019551040000-0x0000019551041000-memory.dmp

Filesize
4KB

Download
memory/4732-2183-0x00007FF659B30000-0x00007FF65A0A4000-memory.dmp

Filesize
5.5MB

Download
memory/4732-2304-0x000001954DB90000-0x000001954DBA0000-memory.dmp

Filesize
64KB

Download
memory/4732-2184-0x00007FF9B7D50000-0x00007FF9B80F8000-memory.dmp

Filesize
3.7MB

Download
memory/4732-2273-0x000001954EC50000-0x000001954F090000-memory.dmp

Filesize
4.2MB

Download
memory/4732-2270-0x000001954BA50000-0x000001954BB9B000-memory.dmp

Filesize
1.3MB

Download
memory/4932-245-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download
memory/4932-226-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/4932-2037-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/4932-2456-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/4932-2241-0x0000000000400000-0x0000000000682000-memory.dmp

Filesize
2.5MB

Download
memory/4932-138-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download