e6a023e2b1aa8b46cb944fdf146c2d6dde46b3955a84cbb15a66d825c933166e

Analysis

max time kernel
712s
max time network
740s
platform
windows10-1703_x64
resource
win10-20230703-en
resource tags

arch:x64arch:x86image:win10-20230703-enlocale:en-usos:windows10-1703-x64system
submitted
17/08/2023, 12:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

FreeCAD-0.21.0-WIN-x64-installer-1.exe
Size

491.5MB
MD5

886f8bdc1b472888e29114a7f69f5108
SHA1

3579656c087f8e25fffec88b63f50b881a1e0056
SHA256

e6a023e2b1aa8b46cb944fdf146c2d6dde46b3955a84cbb15a66d825c933166e
SHA512

96e57f4201fbade5431c20233dbc1a08200d4f65e800d60acb0e09e61021eda79f1c6a3ed1499bb375c16d02d718c8224b769f0aeeb6d7111803a90f5ee5005c
SSDEEP

12582912:I6K+ZY2FuhG6ZVTtYsBwdHTXQy9CtoH3aMaBpEszZheKg0t:I6TZY2Fuc6QXF9Ct83aMaBpEWveKzt

Score

7^/10

persistence spyware stealer

Malware Config

Signatures

Executes dropped EXE 3 IoCs

pid	Process
3360	FreeCAD.exe
4728	QtWebEngineProcess.exe
4612	QtWebEngineProcess.exe

Loads dropped DLL 64 IoCs

pid	Process
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
2316	regsvr32.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe
3360	FreeCAD.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Registers COM server for autorun 1 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\InprocServer32\ = "C:\\Windows\\system32\\FCStdThumbnail.dll"	regsvr32.exe

Drops file in System32 directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\dll\Qt5WinExtras.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\xerces-c_3_2.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\qwindows.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\Qt5Quick.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\MMDevAPI.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\MFCaptureEngine.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dbgcore.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\CLBCatQ.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\ole32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\userenv.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\pyd\QtCore.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\pyd\_ctypes.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\mfperfhelper.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\ws2_32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\nsi.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\qwbmp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\pyd\_socket.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\Qt5Xml.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\dxgi.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\msvcp140_1.amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\DWrite.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\CoreMessaging.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\vcruntime140.amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\qwbmp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\msctf.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\_bz2.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\qsvgicon.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\vcruntime140_1.amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\shfolder.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\rsaenh.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\CoreMessaging.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\mswsock.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\qsvgicon.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\mfperfhelper.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\rpcrt4.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\d3d9.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\qtga.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\apphelp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\FreeCADApp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\FreeCADApp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\Qt5Widgets.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\ole32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\Qt5Svg.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\qico.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\_asyncio.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\QtWebEngineCore.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\pyd\Start.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\imm32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\dbghelp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\qgif.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\dxva2.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\edputil.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\boost_filesystem-vc141-mt-x64-1_67.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\version.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\Qt5WebEngineWidgets.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\msvcrt.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\python3.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\libssl-1_1.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\symbols\dll\qsvgicon.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\pyside2.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\crypt32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\wtsapi32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\select.pdb	FreeCAD.exe
File opened for modification	C:\Windows\system32\dll\mswsock.pdb	FreeCAD.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\FreeCAD 0.21\bin\Tools\scripts\fixcid.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femsolver\calculix\writer.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\matplotlib\tests\test_scale.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\pip\_vendor\tenacity\tornadoweb.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femtest\app\test_material.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\translations\qtwebengine_locales\pl.pak	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\TKIVtk.dll	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\include\genobject.h	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\matplotlib-3.3.3.dist-info\LICENSE_COLORBREWER	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\numpy\lib\twodim_base.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\tcl\tcl8.6\tzdata\America\St_Barthelemy	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\Resources\ui\Material.ui	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femexamples\square_pipe_end_twisted_edgeforces.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femsolver\mystran\add_mesh.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\vtkexodusII-8.2.dll	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\matplotlib\contour.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Idf\Idflibs\2512_SMD.stp	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\TechDraw\TDTest\TechDrawTestUtilities.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File opened for modification	C:\Program Files\FreeCAD 0.21\bin\symbols\dll\qtga.pdb	FreeCAD.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\ctypes\macholib\fetch_macholib	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\lib\area.lib	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\matplotlib\_mathtext_data.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\matplotlib\backends\qt_editor\_formsubplottool.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\pivy\_coin.cp38-win_amd64.pyd	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\PartDesign\TestPartDesignGui.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\mkl_vml_avx.dll	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\vtkImagingMorphological-8.2.dll	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\unittest\test\test_suite.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Tools\demo\eiffel.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\data\Mod\TechDraw\LineGroup\LineGroup.csv	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\TKTopTest.dll	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\binhex.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\idlelib\Icons\idle_48.gif	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\lib2to3\fixes\fix_isinstance.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\numpy\core\tests\test_cpu_features.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\pip\_vendor\html5lib\_trie\_base.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Qt5PdfWidgets.dll	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\asyncio\protocols.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\scipy\spatial\transform\_rotation_spline.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\swig\Lib\typemaps\README	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\swig\Source\CParse\parser.c	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\tcl\tcl8.6\tzdata\America\St_Lucia	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\tcl\tcl8.6\tzdata\Asia\Istanbul	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femtest\data\calculix\box_frequency_expected_values	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\encodings\gb18030.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\PIL\GifImagePlugin.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File opened for modification	C:\Program Files\FreeCAD 0.21\bin\symbols\dll\MMDevAPI.pdb	FreeCAD.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femtest\data\z88\ccx_cantilever_nodeload\51.txt	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File opened for modification	C:\Program Files\FreeCAD 0.21\bin\symbols\dll\twinapi.appcore.pdb	FreeCAD.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Mesh\App\TestData\NASTRAN_Test_GRIDSTAR_CQUAD4.bdf	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\lib\site-packages\git\objects\__pycache__\tree.cpython-38.pyc.2428843433536	FreeCAD.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\tkinter\test\test_tkinter\test_misc.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\data\Mod\TechDraw\Symbols\misc\Cosmetic_Break_Medium.svg	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femsolver\z88\__init__.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\pip\_internal\models\candidate.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\pip\_vendor\html5lib\_tokenizer.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\AddonManager\addonmanager_devmode_person_editor.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\Mod\Fem\femsolver\equationbase.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\numpy\distutils\fcompiler\nag.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\tcl\tcl8.6\tzdata\America\Rosario	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\PIL\ImageTk.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\pip\_vendor\webencodings\mklabels.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\scipy\stats\_tukeylambda_stats.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe
File created	C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\wheel\vendored\__init__.py	FreeCAD-0.21.0-WIN-x64-installer-1.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Windows\Coin4.pdb	FreeCAD.exe
File opened for modification	C:\Windows\qtga.pdb	FreeCAD.exe
File opened for modification	C:\Windows\qwebp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\pyd\QtWebEngineCore.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\mfperfhelper.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\DLL\kernel32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\pyd\QtWidgets.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\version.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\ntmarta.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\pyd\_coin.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\DLL\sspicli.pdb	FreeCAD.exe
File opened for modification	C:\Windows\ucrtbase.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\winhttp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\nsi.pdb	FreeCAD.exe
File opened for modification	C:\Windows\QtWebChannel.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\MFReadWrite.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\d3d9.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\Qt5PrintSupport.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\boost_filesystem-vc141-mt-x64-1_67.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\qicns.pdb	FreeCAD.exe
File opened for modification	C:\Windows\powrprof.pdb	FreeCAD.exe
File opened for modification	C:\Windows\TextInputFramework.pdb	FreeCAD.exe
File opened for modification	C:\Windows\_lzma.pdb	FreeCAD.exe
File opened for modification	C:\Windows\StartGui.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\boost_date_time-vc141-mt-x64-1_67.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\vcruntime140.amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\Qt5Xml.pdb	FreeCAD.exe
File opened for modification	C:\Windows\WinTypes.pdb	FreeCAD.exe
File opened for modification	C:\Windows\Qt5QuickWidgets.pdb	FreeCAD.exe
File opened for modification	C:\Windows\winsta.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\kernelbase.pdb	FreeCAD.exe
File opened for modification	C:\Windows\_bz2.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\pyd\_queue.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\mf.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\mfperfhelper.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\userenv.pdb	FreeCAD.exe
File opened for modification	C:\Windows\Qt5Network.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\oleaut32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\python3.pdb	FreeCAD.exe
File opened for modification	C:\Windows\winhttp.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\devobj.pdb	FreeCAD.exe
File opened for modification	C:\Windows\hid.pdb	FreeCAD.exe
File opened for modification	C:\Windows\DLL\netutils.pdb	FreeCAD.exe
File opened for modification	C:\Windows\_coin.cp38-win_amd64.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\libssl-1_1.pdb	FreeCAD.exe
File opened for modification	C:\Windows\_asyncio.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\secur32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\iertutil.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\Qt5Core.pdb	FreeCAD.exe
File opened for modification	C:\Windows\DLL\cryptbase.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\qico.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\DataExchange.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\pyd\_hashlib.pdb	FreeCAD.exe
File opened for modification	C:\Windows\sspicli.pdb	FreeCAD.exe
File opened for modification	C:\Windows\UxTheme.pdb	FreeCAD.exe
File opened for modification	C:\Windows\pyd\WebGui.pdb	FreeCAD.exe
File opened for modification	C:\Windows\CoreMessaging.pdb	FreeCAD.exe
File opened for modification	C:\Windows\twinapi.appcore.pdb	FreeCAD.exe
File opened for modification	C:\Windows\pyd\_queue.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\ole32.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\shlwapi.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\msasn1.pdb	FreeCAD.exe
File opened for modification	C:\Windows\dll\version.pdb	FreeCAD.exe
File opened for modification	C:\Windows\symbols\dll\qtiff.pdb	FreeCAD.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 1 IoCs

pid	pid_target	Process	procid_target
956	3360	WerFault.exe	72

Modifies registry class 23 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.FCStd\shellex\{E357FCCD-A995-4576-B01F-234630154E96}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document\ = "FreeCAD Document"	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document\Shell	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\ = "FCStd Thumbnail Provider"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\DisableProcessIsolation = "1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\InprocServer32\ = "C:\\Windows\\system32\\FCStdThumbnail.dll"	regsvr32.exe
Key created	\REGISTRY\MACHINE\Software\Classes\FreeCAD.Document	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\Software\Classes\FreeCAD.Document\Shell\open\command	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document\Shell\open	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.FCStd	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.FCStd\ = "FreeCAD.Document"	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.FCStd	regsvr32.exe
Key created	\REGISTRY\MACHINE\Software\Classes\FreeCAD.Document\DefaultIcon	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document\DefaultIcon\ = "C:\\Program Files\\FreeCAD 0.21\\bin\\FreeCAD.exe,0"	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document\Shell\open\command	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.FCStd\shellex	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\FreeCAD.Document\Shell\open\command\ = "\"C:\\Program Files\\FreeCAD 0.21\\bin\\FreeCAD.exe\" \"%1\""	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.FCStd\Content Type = "application/x-zip-compressed"	FreeCAD-0.21.0-WIN-x64-installer-1.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.FCStd\shellex\{E357FCCD-A995-4576-B01F-234630154E96}\ = "{4BBBEAB5-BE00-41f4-A209-FE838660B9B1}"	regsvr32.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
3360	FreeCAD.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe
4728	QtWebEngineProcess.exe
4728	QtWebEngineProcess.exe
4612	QtWebEngineProcess.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3360	FreeCAD.exe

Suspicious use of WriteProcessMemory 46 IoCs

description	pid	Process	procid_target
PID 4972 wrote to memory of 2316	4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe	70
PID 4972 wrote to memory of 2316	4972	FreeCAD-0.21.0-WIN-x64-installer-1.exe	70
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4612	3360	FreeCAD.exe	74
PID 3360 wrote to memory of 4728	3360	FreeCAD.exe	75
PID 3360 wrote to memory of 4728	3360	FreeCAD.exe	75

C:\Users\Admin\AppData\Local\Temp\FreeCAD-0.21.0-WIN-x64-installer-1.exe
"C:\Users\Admin\AppData\Local\Temp\FreeCAD-0.21.0-WIN-x64-installer-1.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4972
- C:\Windows\system32\regsvr32.exe
  "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\FCStdThumbnail.dll"
  2⤵
  - Loads dropped DLL
  - Registers COM server for autorun
  - Modifies registry class
  PID:2316

C:\Program Files\FreeCAD 0.21\bin\FreeCAD.exe
"C:\Program Files\FreeCAD 0.21\bin\FreeCAD.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3360
- C:\Program Files\FreeCAD 0.21\bin\QtWebEngineProcess.exe
  "C:\Program Files\FreeCAD 0.21\bin\QtWebEngineProcess.exe" --type=renderer --disable-speech-api --enable-threaded-compositing --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en-US --webengine-schemes=qrc:sLV --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --mojo-platform-channel-handle=2944 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:4612
- C:\Program Files\FreeCAD 0.21\bin\QtWebEngineProcess.exe
  "C:\Program Files\FreeCAD 0.21\bin\QtWebEngineProcess.exe" --type=utility --enable-features=AllowContentInitiatedDataUrlNavigations,TracingServiceInProcess --disable-features=BackgroundFetch,ConsolidatedMovementXY,DnsOverHttpsUpgrade,FormControlsRefresh,MojoVideoCapture,PictureInPicture,SmsReceiver,UseSkiaRenderer,WebPayments,WebUSB --lang=en-US --service-sandbox-type=network --use-gl=desktop --application-name=FreeCAD --webengine-schemes=qrc:sLV --mojo-platform-channel-handle=2964 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:4728
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 3360 -s 2440
  2⤵
  - Program crash
  PID:956

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\FreeCAD 0.21\bin\Coin4.dll

Filesize
6.0MB

MD5
8059c358aa703d0305e059d8a7b6f933

SHA1
9150a8cc483f6e910ff1cd2dfc33b6378e88cfe6

SHA256
c02cd76730599773df7752b6550217547967971686909dcac83e50d1aaabe34f

SHA512
58513a1015c611aabc3d3b3ece97e7786505cdeb386c2bdbeaadc6329a5d412f19962b7573902ff0d8205aad24ebc988b961cddaba8ba15e3c852a2e88aefad6

Download Submit
C:\Program Files\FreeCAD 0.21\bin\FreeCAD.exe

Filesize
211KB

MD5
c0a5b58f0038c6e86d884a166f63d680

SHA1
b30d42e2aa9255eea97d32dadaaa5167a6753634

SHA256
22bae991157b9d918c20b82600640a680a6d252dee9ad1e612da816e1aff25b8

SHA512
9cd73bb3557d0429b0622226140ddf55683d1b5f1d5f8dabeae5cff8065dbb2261a50e2abe9c3590e6f69947f4fe515dd27a8d23d064f357f213fc886cac60e1

Download Submit
C:\Program Files\FreeCAD 0.21\bin\FreeCAD.exe

Filesize
211KB

MD5
c0a5b58f0038c6e86d884a166f63d680

SHA1
b30d42e2aa9255eea97d32dadaaa5167a6753634

SHA256
22bae991157b9d918c20b82600640a680a6d252dee9ad1e612da816e1aff25b8

SHA512
9cd73bb3557d0429b0622226140ddf55683d1b5f1d5f8dabeae5cff8065dbb2261a50e2abe9c3590e6f69947f4fe515dd27a8d23d064f357f213fc886cac60e1

Download Submit
C:\Program Files\FreeCAD 0.21\bin\FreeCAD.exe

Filesize
211KB

MD5
c0a5b58f0038c6e86d884a166f63d680

SHA1
b30d42e2aa9255eea97d32dadaaa5167a6753634

SHA256
22bae991157b9d918c20b82600640a680a6d252dee9ad1e612da816e1aff25b8

SHA512
9cd73bb3557d0429b0622226140ddf55683d1b5f1d5f8dabeae5cff8065dbb2261a50e2abe9c3590e6f69947f4fe515dd27a8d23d064f357f213fc886cac60e1

Download Submit
C:\Program Files\FreeCAD 0.21\bin\FreeCADApp.dll

Filesize
7.3MB

MD5
34e86a6b2cf470c12dc8da92b51fea2f

SHA1
06121aec952ab5917d775e765ff70162ce494dc7

SHA256
583fccac9e5ea367c2e5910118cfa30f6859e74480742809f837e4e94d60054e

SHA512
5edd03a1acc876f06e32ff0a5b76d585d72b48b2193fa8c86b889f1fcbf282564e86a49836f0de828d4de064314a9f2e703d48e888e512097fbcfd8c908b71a9

Download Submit
C:\Program Files\FreeCAD 0.21\bin\FreeCADBase.dll

Filesize
2.7MB

MD5
c61320811eca530e1c83ac708f91e687

SHA1
4ba92b9fbc57e2fef2f807a5be07e4026aaac86f

SHA256
c11dc5c61eaa5a96f9bfa6be9369d5b01e246055eaf05cddb8b37a922e8b3ec6

SHA512
e7841c92a64780ad687c7ed3c3b8574ffcf5324010e21f9856c058277dd30488f8005a978623286bc2ba658a993846c578f67309cc724a332bde1d97be8853f0

Download Submit
C:\Program Files\FreeCAD 0.21\bin\FreeCADGui.dll

Filesize
21.9MB

MD5
d7433a7c07395fabdd1d6f1b1aa89f26

SHA1
972f663221bd979c0ff6fc5795430c1a7c79f16b

SHA256
a47a4ef7de2786b19635698cf8b6d1377d358bdd2959053cb8db3543e1333579

SHA512
58778ac9cb8cdd096c8f48c128a3d3a723505eace94f10853f25bc2504305f13ca3d02c6463db4649579c508c3f1c1a5574985b0997e9c59c90f9fc69f3a8093

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\gitdb-4.0.5.dist-info\INSTALLER

Filesize
4B

MD5
365c9bfeb7d89244f2ce01c1de44cb85

SHA1
d7a03141d5d6b1e88b6b59ef08b6681df212c599

SHA256
ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508

SHA512
d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Lib\site-packages\scipy-1.5.4.dist-info\WHEEL

Filesize
105B

MD5
f14e9f0a6e7e7acc5958f4c901c80a7e

SHA1
14fe03f2c8ba2790ac0fb146e8a871f33973de82

SHA256
f4c7542343b3c2361a1e5de35a52850c827930504f8f0a6936058db5ec67b6a8

SHA512
61c651efe85916aa46736b4d78d49fed82c7aebe29c9633c7db1262e42199fef1a6b71b4470dd99004d72525abdb2e8cb776c8ce0cd2d2da5b82a21458656bbe

Download Submit
C:\Program Files\FreeCAD 0.21\bin\MSVCP140.dll

Filesize
612KB

MD5
23327d13720545435a95aea62da12788

SHA1
fdfa353264395307033c5ddfc22253aa00b490f0

SHA256
d9fb383b33651cbbb9cf407f69dcaca6288e995555e02a9a7c9e81f8b9d5b1d3

SHA512
1d2b556c04d520b224c0968009f5f5a3a059993f176f978045f1a928934ccb9b8ead913db7113c332e1b8e530fcd22173636067586c7ee723cbc9f7ae60e9684

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Core.dll

Filesize
5.7MB

MD5
817520432a42efa345b2d97f5c24510e

SHA1
fea7b9c61569d7e76af5effd726b7ff6147961e5

SHA256
8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

SHA512
8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Gui.dll

Filesize
6.7MB

MD5
47307a1e2e9987ab422f09771d590ff1

SHA1
0dfc3a947e56c749a75f921f4a850a3dcbf04248

SHA256
5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

SHA512
21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Network.dll

Filesize
1.3MB

MD5
3569693d5bae82854de1d88f86c33184

SHA1
1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

SHA256
4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

SHA512
e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5PrintSupport.dll

Filesize
309KB

MD5
61ac08d0e73555352714ff9044130c52

SHA1
f5fee2811236640821a2c18c9e2eaadd509c6e62

SHA256
783d4f1feb8dc0bc00acb8c094d6c1ab39ac6b5858874e60dd3d45677af4307a

SHA512
6abdbfe5ffbd5c1c1204edbfcc47f6b1072aa6a5b229901fe9b22cd2e193e7c963c62b8ac3cabec6467d2440eaddd47214d8f98a06e885822314b98bbcfc2bde

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Qml.dll

Filesize
3.4MB

MD5
d055566b5168d7b1d4e307c41ce47c4b

SHA1
043c0056e9951da79ec94a66a784972532dc18ef

SHA256
30035484c81590976627f8face9507caa8581a7dc7630cccf6a8d6de65cab707

SHA512
4f12d17aa8a3008caa3ddd0e41d3ed713a24f9b5a465ee93b2e4beccf876d5bdf0259aa0d2dd77ad61bb59dc871f78937ffbe4d0f60638014e8ea8a27caf228d

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Svg.dll

Filesize
322KB

MD5
03761f923e52a7269a6e3a7452f6be93

SHA1
2ce53c424336bcc8047e10fa79ce9bce14059c50

SHA256
7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

SHA512
de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Widgets.dll

Filesize
5.2MB

MD5
4cd1f8fdcd617932db131c3688845ea8

SHA1
b090ed884b07d2d98747141aefd25590b8b254f9

SHA256
3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

SHA512
7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5WinExtras.dll

Filesize
231KB

MD5
c842e53c70d966569f1c15cee142a813

SHA1
33e88b286374dbe49e77988c1e30d78f8dccd88e

SHA256
9987b4bff62ef5c0c75dfcdbe50b1d02d0ae38a8123a816fbe4326ea8538069a

SHA512
062897dd47312dc6886db9c5a4c948c42608f9ede6d9863cf0445c5ab3c87c8c6f1ff8ca6168e73c1e29f3f512a42d31886a07abca7e2ddbb059072317e975bf

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Qt5Xml.dll

Filesize
208KB

MD5
5b795fa24584ed85bdb39b9d2287cd59

SHA1
067c3c7b4ca0ecabe48d02ae2f13058517d444c5

SHA256
ebdf91f0310ab67a79abd2385fa428205856f81e3a753e6e47c31d5946ddd590

SHA512
116f1c331758b663a27c20e1f3f686ba8727726fd8a8b71ac52f5ac67f95b61aae595c66292c42d8e50b5c4e33157c26fc494e5802890298c684924e54acba17

Download Submit
C:\Program Files\FreeCAD 0.21\bin\Scripts\pip3.exe

Filesize
103KB

MD5
e15ef0441e573e01f96fc6c7fd3acfb3

SHA1
d8f6a046f461ab77dd85a0b2fa6cbdaa7206714e

SHA256
efd7c9d101079335dd6d82b466f908a5cae32941a8b3fceeb06f6173d688298b

SHA512
a0b2d367e41024ce32d93981f4fe015222ea8b85ce9aacaf5ee0170a3aa417b1009bce425b9d13847c41dd241fbf381e030288a3570648ade8de52db752c2eaf

Download Submit
C:\Program Files\FreeCAD 0.21\bin\VCRUNTIME140.dll

Filesize
79KB

MD5
354555bbe91f4f8540663cc958ca81dd

SHA1
896d0aed4e25c8277587f6831fcf8bbeb6b4b3d5

SHA256
3646d73ebc95ffb2883c61a10664be1bec052e9a0dbc730dfd5f7f84efe98007

SHA512
791c83caa166d6a4911f5a8e681f25e83b20d85f132ff2f265a29c4dac47bb38cf79c78121fe36271c11fe10f683958c007641cf6b5b0cad1eae636f21cf71df

Download Submit
C:\Program Files\FreeCAD 0.21\bin\VCRUNTIME140_1.dll

Filesize
35KB

MD5
9cff894542dc399e0a46dee017331edf

SHA1
d1e889d22a5311bd518517537ca98b3520fc99ff

SHA256
b1d3b6b3cdeb5b7b8187767cd86100b76233e7bbb9acf56c64f8288f34b269ca

SHA512
ca254231f12bdfc300712a37d31777ff9d3aa990ccc129129fa724b034f3b59c88ed5006a5f057348fa09a7de4a0c2e0fb479ce06556e2059f919ddd037f239e

Download Submit
C:\Program Files\FreeCAD 0.21\bin\boost_date_time-vc141-mt-x64-1_67.dll

Filesize
50KB

MD5
edd0a27c4c6b4d78015e342c5da8df19

SHA1
c6b80f69070dc101039b80dce78c01806742f9c9

SHA256
95234ff1ddc8a93d5b5c782b8330693007979580631be0e26a412d9eb528ee48

SHA512
ef5fa1a23c63e20d73832c219d3b6736d558d42d668b607b87a0df11f29e02f471ed9f42d19db1b38a591337451b54a1d0fe11d8808f5d69c2437c740490f774

Download Submit
C:\Program Files\FreeCAD 0.21\bin\boost_filesystem-vc141-mt-x64-1_67.dll

Filesize
123KB

MD5
87213c2aabcdaad708d76a959bae6f20

SHA1
6e6e4b7126ac2b807ca05471e7d53be84ec88793

SHA256
03e68452d1477e8e32fdcf4d067af611f123fc560175059d9a23215c04f12b77

SHA512
ba146b85db0cf8a86d92f3c5d4ee146ce75fdc1ea024cede841da3c01f0b3cc83c1a9f415931d906c9c25ebd4aa87484298f733988239839fd551c96949df235

Download Submit
C:\Program Files\FreeCAD 0.21\bin\boost_program_options-vc141-mt-x64-1_67.dll

Filesize
411KB

MD5
a4ef2dad18395861e249e55a94760d04

SHA1
22564339d11d84a83f1c313bf64d850336450f85

SHA256
9c95bab4b489332b053f799378024928436e96d2f15d27d8b58025f360d7a16d

SHA512
042ce376a3bdc8b33c1bd23753b7d68bdb7172bb0908fccc814b696cf7bce4dfaa21558720deee524115f8b8af940d5b2a9e5db7c3a6e839ed29d2a86f15b3f4

Download Submit
C:\Program Files\FreeCAD 0.21\bin\boost_regex-vc141-mt-x64-1_67.dll

Filesize
830KB

MD5
a8f36ba4b028156da95032a9e15f45d0

SHA1
1a2e11dfda051ede4a8fd8b2670bc3a88e86c4e5

SHA256
c44d57a20b42e054c93fbbcbf904a7d37ba8aa88d4fd45d9fbe1b27742774dfb

SHA512
b9ed0491df017db1713e787c174c18d0f48defa186b1b3362fdd0dee45e6c93db27c4d430423cc91b6e790e2eb92bd7405ba5dc8059422d17c9b80c8604380a9

Download Submit
C:\Program Files\FreeCAD 0.21\bin\boost_system-vc141-mt-x64-1_67.dll

Filesize
23KB

MD5
53021a0873371c29ac580678ce199f6a

SHA1
6482d5e60b43a134ddc5b464c9ee66eda0d70c02

SHA256
54f3cf0d1d38c20dfb27f0c73d676a8ec61e88d104b49ea39bd6b6c1f9b5b72a

SHA512
d444680ac6b2ae912b24ff32579760349764dac02c5fb7e992110f41c380ac85e923aa3355bd5f07455efe1936cfb2782df5626666d78fc28cd1ec0990ca65b0

Download Submit
C:\Program Files\FreeCAD 0.21\bin\lib\codecs.py

Filesize
36KB

MD5
a12184c5360aff98ef6527cef8f5dadb

SHA1
eef94692da28311fc555ec0f0537ae78d5deedc4

SHA256
182005d76cbdaee8670df64e4bb66395ac317bf27a47df0f8d4affe913263786

SHA512
64ea133ff1e5b6da36f0f481fb93df1d22c31ea6519904443cd7201fb238d07aa5ba9f7de27e226424882ec018b17029f2184cbf15026a6b97d537ede3081e46

Download Submit
C:\Program Files\FreeCAD 0.21\bin\lib\encodings\__init__.py

Filesize
5KB

MD5
dfca2bf597f8830c9647dfd4e9904918

SHA1
f830914a2b81f49bd1e111bca3fa7722f6d99f6c

SHA256
73bf331b7d7cf6881551e1e49976f635a7bc473e297bc280beb56151b5ef6388

SHA512
ddca1accc8b911a29b095ffbf3b36da164519e6df5ae51617e44be5baa6b1d7a38ff03ae5e995643826622133f0e2f8eaec2da55e6f74216b138d5cd17853673

Download Submit
C:\Program Files\FreeCAD 0.21\bin\pyside2.cp38-win_amd64.dll

Filesize
145KB

MD5
e31dbc1b9e8d07852fd44c8322dcc050

SHA1
f6636d383a8e8031d4ba6992e70c2d6fdb054c95

SHA256
587d09e5d383e743e2f64123f5f5664a2e0e5b7edf196110952bcb9e6041c6bf

SHA512
8fad1f9953dfb4c2a601f07318580a3dcb22d8d41220e3f250ea4675be7e635d5a4e5830296c13d5f90db5600f2a5d6af827302eabc750825e707eb5b899b962

Download Submit
C:\Program Files\FreeCAD 0.21\bin\python38.dll

Filesize
4.5MB

MD5
b85c0b81480afd3b7b794b2c2a6a9f57

SHA1
05639ecb9553192cba1a5210331b37ccc05b8c88

SHA256
d04b7d3399ad7da9f399f118a508bc62c4865d8a1b6a217835fd898bf1234c17

SHA512
cdb447607dc06234c7ea1af54cefc280769f2f9b0d8477b7abca1dbacc89acd4dfe1f2edae6c6a28bd03d999b85580a78aba1bb01f62f00919b40aa85244318c

Download Submit
C:\Program Files\FreeCAD 0.21\bin\shiboken2.cp38-win_amd64.dll

Filesize
467KB

MD5
41bdc5e305e68174af032204b0db05d3

SHA1
36d08a3dd708163cbc6a4fdde5120d3033a69897

SHA256
6176b3bd9f18d370fd67dd39ce610e772ff5d7b1199a70a46da2107488417149

SHA512
314fb210b838c64114e1ab716a2af9b37027d09d0dbb55c880f06d52b8beb9817eb3d3b8b00417e696f7883d16b24bf9f8baeb6e9899393d80b4f0b87a308754

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\java\std_deque.i

Filesize
28B

MD5
34b7e1aa03e7cc9660b90fe104c21aa1

SHA1
097eb79780ab1c2ab654144ea6d9262c0c599c44

SHA256
d236e7f00b0a7f1a844ba4f9e0a3ee0018e9cf6e84eb74ca4e60bbe7a0912c63

SHA512
486748785a25e3423ca8da214c3a92db7f51e95be98b705d86227549b8a3af7bb8e37ff40e7b7f58a15012c76a1a862590b8b778ce76f324faa0bc2041b34de5

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\java\stl.i

Filesize
291B

MD5
3046f68380a9f693d22d510de46bb4b5

SHA1
9418d8fe87d13b22cecf378274e51c1d0e2c6bb1

SHA256
29a331e6da86aad9be4b03fad157437a8606280227612b60ab3181e4e2c8b868

SHA512
e537e4855587f1923dad1b875cc55c74829f78e74686cdde2528140ef5255c7734cbbd48218eeab2df6399eac58c69b7973ef96eece475f5f87b094f7e364cca

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\javascript\v8\std_common.i

Filesize
102B

MD5
200cc28308339417a948aaadae56b221

SHA1
322c984a3978440b09be5e7f77aaf54bc77193d3

SHA256
ae8a7740423e62fff6cdd3898d7a428f54af5be4ef190c227bb3c56f6f0e897d

SHA512
46eb4d19b579bb25da5e0f59ea5b1363366087c44982d19063a50461fa324020079af582326f2dea21846353e357c058b8410b4b38d4764c6fdb43f51fe3a742

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\ocaml\std_pair.i

Filesize
773B

MD5
99c721e2c21f350d3ccc0aa5501dd719

SHA1
c6191f2e136a0a92bf951bb22d530a502d2041ee

SHA256
1d5611906d8cc60dfc784546925e6ab34c0cf0393f544d05c5dec25be55036cb

SHA512
e5105ce69a1e6bd8367dd5c5033bde9b311ed1dde099e4b49e44bb4dd859d76927230a40d441a9c65a8bf907424eed33b6f631926c8438686211c6ddc8ec9deb

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\octave\octfragments.swg

Filesize
1B

MD5
68b329da9893e34099c7d8ad5cb9c940

SHA1
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

SHA256
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

SHA512
be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\python\cdata.i

Filesize
30B

MD5
47473e6fbe1ab16ea4ac1f1a5c624072

SHA1
90fa5c7c75b773b6a9ca08088c3929385862fc76

SHA256
e6d86cd02d0164b66f7247951c97394553f058be23b49133c55fb001b264310e

SHA512
43bb80de6fc38f4ce0935b1902d9ca15f3c59e00c1179ecb845bb7f2829f07de62ceedda95ba95c141c9731612d8041e4640071b59260aaba2bfcd84a394604d

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\python\std_except.i

Filesize
35B

MD5
58cca740599a9584f5b9b80a1dd12071

SHA1
09d391ba3ac27f7ccfa74c15bd7fd2ff501a9def

SHA256
0b9a451e851e7edecd0caddf45109b10af5339bc0348f0604a268d05cfacf30c

SHA512
eda6f8c41961d2435263a62e1490bfdea57582ab5b3e1ee8a5c6c82b05af01bf8a6473be3bd535c51a470f4b76d0ed4e6ba544d35306d100405e2681627849f8

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\python\std_shared_ptr.i

Filesize
68B

MD5
68cab10ebcf4ab82d2ea76c2e3bce03b

SHA1
00cd670a94b647236ac3ce8ab50231200ecbe7d6

SHA256
8b4af5774e061feaf6ab56ccab9cb3247d988c3c80df21f18a4ea3a24a678152

SHA512
c10697eec6d52ceb1b6db6560ee93edee6d79d87f6ff4eb5737b2a64bc51f60246880f34b200d13e5226873806e120a961872c84398f65e0001e4b3bc9509913

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\python\std_string.i

Filesize
35B

MD5
e9c99f26da833d391f431f059b26bc00

SHA1
4b0e81b349b594f8594a471447ce9d7aba0295f9

SHA256
60686436db2a0e2e1e203ede037a0a23b3f9c4d4bb8ead9fd7c3b40da31e14e4

SHA512
0f577839005cd82c53363aadb2a8c1d7789bdafd0a1f51fbd57e9a94d06d0ecbf68eb90f407f52527620915504ca9d4c33a4f24f73607af1ae7d73662b83a06a

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\scilab\cmalloc.i

Filesize
32B

MD5
24278599da39a90c8e67f1f25331ce59

SHA1
3f6e09ecebcb917007178cfcc74b14693ee4f1d6

SHA256
989d9bafa440d2b79e738ee9aac3f49c00a0a608ea0827ac3e130a11ad7569d7

SHA512
d706e50fabc124edda6a296ffe7ccff553f7469b1bb30e0914bbfde77df756c09d44d606cb906b4c89c0f7016d30bfae37561b993ef93922160f151cb7d1c0d5

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\tcl\attribute.i

Filesize
34B

MD5
844e993b2e08a93f069abf05e0139cbc

SHA1
b261f74ab43694a847bae76d2a4366cb1324619b

SHA256
68df9f3a7e9c72424418502093dde7433253db93212123a75250a5d44d38b0db

SHA512
4e34e8909331e4c13672046a0275c0467eb41950b3d84d19415b28dd83dc31bf21aac2b6e461d887ca22d0542dc39872a8b01b517d59fc5c7205d5fca0c9868d

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\tcl\cpointer.i

Filesize
33B

MD5
fa66174f61ff8c9aac27fb1d4ffdcc8d

SHA1
a51c21dad6042430f02262a99caf07a9132b31cf

SHA256
3a9f89faef6779fa83efc72407f2e524eec2910b02477333b1c512bd6b9586a3

SHA512
c112026f3ac2393daa1ffe7f3fe73e9b1a67a1e4fa945bf13a5ce834686a08401093e6e472d15a49685461dee1d8570650ffb4d0e6585e1703fb349d08eb3ced

Download Submit
C:\Program Files\FreeCAD 0.21\bin\swig\Lib\tcl\factory.i

Filesize
32B

MD5
3f75fb0175f173a3460ea994742dd78f

SHA1
ca6c845ef93a26015181e5d4d99d006eebd1ca84

SHA256
35643c685f11f5d9e3daa5f168671141be4bc1d305666630c0d0f10bc7414f04

SHA512
8509cd01c8b2910f59998a04d993aafd8868468366adb681eabcd1728b8fadb19b3c3989d66a50a3ea9453e284d84771fe980c59d280b60d63fc6c710543e574

Download Submit
C:\Program Files\FreeCAD 0.21\bin\xerces-c_3_2.dll

Filesize
2.7MB

MD5
e1d7150f31e538c9a2155e738e38262d

SHA1
8c9de3cea535f5d7f0bba516ad791047be4429fb

SHA256
74ea5917b970e020284c44d9b4ef270681ca91a5152d301ccf10ed6d4cea0a78

SHA512
a8b23da595731945a27bc0e46d5c9affa04086bcc042c6ad7d6ae0b50b48799183fa232e946dcf95b4daeb8f39d5485bb2f7e894a9461c53bf79efb64da12dc4

Download Submit
C:\Program Files\FreeCAD 0.21\bin\zlib.dll

Filesize
84KB

MD5
8a7908546dacec19c1ed5f1b8734bfce

SHA1
663d2b17c39fb715e387afeafd3c5dddedfeb3d6

SHA256
519940326dabd0c3250a39964fdf0374ed2396b9b4478c826242aa69ffd90de5

SHA512
30b4d0ab1581ac4944a27cb8c8cc3f1fcbf587f80354126afe196d438607a6051a2aa1a4bf0f20100789e20aea06e190d73d443c53fb8c352abec828513a6318

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\modern-wizard.bmp

Filesize
150KB

MD5
dabc2fd49d0394cecee3646760cf3dd9

SHA1
129046863917065bb6070187d7d80e5730193cef

SHA256
880ba9a631291f7da588d9165f4bf21ac9487b23f264bbaeda6a561680a14844

SHA512
d262ee0259935cbe4e35d7ed4aab00f82b789b1c3320b933cdaa6fa4d49e9de6658946903276c9cb067164c47b884f39ccb431cf08c8d3d38713be12ee7538f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Windows\system32\FCStdThumbnail.dll

Filesize
172KB

MD5
0d40073eb3262a895d3374172f5b0baa

SHA1
89073c13b65cb4d970fd10dbf1712f3c25fbf39a

SHA256
cf9985aca43c116fe3565436a9da267de8b7f17ceed8c0cae000cfb40e69a1b0

SHA512
dffca2073fab42d62cc7d4443ba7b4885e25552741228662cc0796f5a51eb1a246c3102410ca06281688542241fa3395f88ef9738c834ccebf337c5d6181a63c

Download Submit
\Program Files\FreeCAD 0.21\bin\Coin4.dll

Filesize
6.0MB

MD5
8059c358aa703d0305e059d8a7b6f933

SHA1
9150a8cc483f6e910ff1cd2dfc33b6378e88cfe6

SHA256
c02cd76730599773df7752b6550217547967971686909dcac83e50d1aaabe34f

SHA512
58513a1015c611aabc3d3b3ece97e7786505cdeb386c2bdbeaadc6329a5d412f19962b7573902ff0d8205aad24ebc988b961cddaba8ba15e3c852a2e88aefad6

Download Submit
\Program Files\FreeCAD 0.21\bin\FreeCADApp.dll

Filesize
7.3MB

MD5
34e86a6b2cf470c12dc8da92b51fea2f

SHA1
06121aec952ab5917d775e765ff70162ce494dc7

SHA256
583fccac9e5ea367c2e5910118cfa30f6859e74480742809f837e4e94d60054e

SHA512
5edd03a1acc876f06e32ff0a5b76d585d72b48b2193fa8c86b889f1fcbf282564e86a49836f0de828d4de064314a9f2e703d48e888e512097fbcfd8c908b71a9

Download Submit
\Program Files\FreeCAD 0.21\bin\FreeCADBase.dll

Filesize
2.7MB

MD5
c61320811eca530e1c83ac708f91e687

SHA1
4ba92b9fbc57e2fef2f807a5be07e4026aaac86f

SHA256
c11dc5c61eaa5a96f9bfa6be9369d5b01e246055eaf05cddb8b37a922e8b3ec6

SHA512
e7841c92a64780ad687c7ed3c3b8574ffcf5324010e21f9856c058277dd30488f8005a978623286bc2ba658a993846c578f67309cc724a332bde1d97be8853f0

Download Submit
\Program Files\FreeCAD 0.21\bin\FreeCADGui.dll

Filesize
21.9MB

MD5
d7433a7c07395fabdd1d6f1b1aa89f26

SHA1
972f663221bd979c0ff6fc5795430c1a7c79f16b

SHA256
a47a4ef7de2786b19635698cf8b6d1377d358bdd2959053cb8db3543e1333579

SHA512
58778ac9cb8cdd096c8f48c128a3d3a723505eace94f10853f25bc2504305f13ca3d02c6463db4649579c508c3f1c1a5574985b0997e9c59c90f9fc69f3a8093

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Core.dll

Filesize
5.7MB

MD5
817520432a42efa345b2d97f5c24510e

SHA1
fea7b9c61569d7e76af5effd726b7ff6147961e5

SHA256
8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

SHA512
8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Gui.dll

Filesize
6.7MB

MD5
47307a1e2e9987ab422f09771d590ff1

SHA1
0dfc3a947e56c749a75f921f4a850a3dcbf04248

SHA256
5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

SHA512
21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Network.dll

Filesize
1.3MB

MD5
3569693d5bae82854de1d88f86c33184

SHA1
1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

SHA256
4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

SHA512
e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5PrintSupport.dll

Filesize
309KB

MD5
61ac08d0e73555352714ff9044130c52

SHA1
f5fee2811236640821a2c18c9e2eaadd509c6e62

SHA256
783d4f1feb8dc0bc00acb8c094d6c1ab39ac6b5858874e60dd3d45677af4307a

SHA512
6abdbfe5ffbd5c1c1204edbfcc47f6b1072aa6a5b229901fe9b22cd2e193e7c963c62b8ac3cabec6467d2440eaddd47214d8f98a06e885822314b98bbcfc2bde

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Qml.dll

Filesize
3.4MB

MD5
d055566b5168d7b1d4e307c41ce47c4b

SHA1
043c0056e9951da79ec94a66a784972532dc18ef

SHA256
30035484c81590976627f8face9507caa8581a7dc7630cccf6a8d6de65cab707

SHA512
4f12d17aa8a3008caa3ddd0e41d3ed713a24f9b5a465ee93b2e4beccf876d5bdf0259aa0d2dd77ad61bb59dc871f78937ffbe4d0f60638014e8ea8a27caf228d

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Svg.dll

Filesize
322KB

MD5
03761f923e52a7269a6e3a7452f6be93

SHA1
2ce53c424336bcc8047e10fa79ce9bce14059c50

SHA256
7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

SHA512
de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Widgets.dll

Filesize
5.2MB

MD5
4cd1f8fdcd617932db131c3688845ea8

SHA1
b090ed884b07d2d98747141aefd25590b8b254f9

SHA256
3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

SHA512
7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5WinExtras.dll

Filesize
231KB

MD5
c842e53c70d966569f1c15cee142a813

SHA1
33e88b286374dbe49e77988c1e30d78f8dccd88e

SHA256
9987b4bff62ef5c0c75dfcdbe50b1d02d0ae38a8123a816fbe4326ea8538069a

SHA512
062897dd47312dc6886db9c5a4c948c42608f9ede6d9863cf0445c5ab3c87c8c6f1ff8ca6168e73c1e29f3f512a42d31886a07abca7e2ddbb059072317e975bf

Download Submit
\Program Files\FreeCAD 0.21\bin\Qt5Xml.dll

Filesize
208KB

MD5
5b795fa24584ed85bdb39b9d2287cd59

SHA1
067c3c7b4ca0ecabe48d02ae2f13058517d444c5

SHA256
ebdf91f0310ab67a79abd2385fa428205856f81e3a753e6e47c31d5946ddd590

SHA512
116f1c331758b663a27c20e1f3f686ba8727726fd8a8b71ac52f5ac67f95b61aae595c66292c42d8e50b5c4e33157c26fc494e5802890298c684924e54acba17

Download Submit
\Program Files\FreeCAD 0.21\bin\boost_date_time-vc141-mt-x64-1_67.dll

Filesize
50KB

MD5
edd0a27c4c6b4d78015e342c5da8df19

SHA1
c6b80f69070dc101039b80dce78c01806742f9c9

SHA256
95234ff1ddc8a93d5b5c782b8330693007979580631be0e26a412d9eb528ee48

SHA512
ef5fa1a23c63e20d73832c219d3b6736d558d42d668b607b87a0df11f29e02f471ed9f42d19db1b38a591337451b54a1d0fe11d8808f5d69c2437c740490f774

Download Submit
\Program Files\FreeCAD 0.21\bin\boost_filesystem-vc141-mt-x64-1_67.dll

Filesize
123KB

MD5
87213c2aabcdaad708d76a959bae6f20

SHA1
6e6e4b7126ac2b807ca05471e7d53be84ec88793

SHA256
03e68452d1477e8e32fdcf4d067af611f123fc560175059d9a23215c04f12b77

SHA512
ba146b85db0cf8a86d92f3c5d4ee146ce75fdc1ea024cede841da3c01f0b3cc83c1a9f415931d906c9c25ebd4aa87484298f733988239839fd551c96949df235

Download Submit
\Program Files\FreeCAD 0.21\bin\boost_program_options-vc141-mt-x64-1_67.dll

Filesize
411KB

MD5
a4ef2dad18395861e249e55a94760d04

SHA1
22564339d11d84a83f1c313bf64d850336450f85

SHA256
9c95bab4b489332b053f799378024928436e96d2f15d27d8b58025f360d7a16d

SHA512
042ce376a3bdc8b33c1bd23753b7d68bdb7172bb0908fccc814b696cf7bce4dfaa21558720deee524115f8b8af940d5b2a9e5db7c3a6e839ed29d2a86f15b3f4

Download Submit
\Program Files\FreeCAD 0.21\bin\boost_regex-vc141-mt-x64-1_67.dll

Filesize
830KB

MD5
a8f36ba4b028156da95032a9e15f45d0

SHA1
1a2e11dfda051ede4a8fd8b2670bc3a88e86c4e5

SHA256
c44d57a20b42e054c93fbbcbf904a7d37ba8aa88d4fd45d9fbe1b27742774dfb

SHA512
b9ed0491df017db1713e787c174c18d0f48defa186b1b3362fdd0dee45e6c93db27c4d430423cc91b6e790e2eb92bd7405ba5dc8059422d17c9b80c8604380a9

Download Submit
\Program Files\FreeCAD 0.21\bin\boost_system-vc141-mt-x64-1_67.dll

Filesize
23KB

MD5
53021a0873371c29ac580678ce199f6a

SHA1
6482d5e60b43a134ddc5b464c9ee66eda0d70c02

SHA256
54f3cf0d1d38c20dfb27f0c73d676a8ec61e88d104b49ea39bd6b6c1f9b5b72a

SHA512
d444680ac6b2ae912b24ff32579760349764dac02c5fb7e992110f41c380ac85e923aa3355bd5f07455efe1936cfb2782df5626666d78fc28cd1ec0990ca65b0

Download Submit
\Program Files\FreeCAD 0.21\bin\msvcp140.dll

Filesize
612KB

MD5
23327d13720545435a95aea62da12788

SHA1
fdfa353264395307033c5ddfc22253aa00b490f0

SHA256
d9fb383b33651cbbb9cf407f69dcaca6288e995555e02a9a7c9e81f8b9d5b1d3

SHA512
1d2b556c04d520b224c0968009f5f5a3a059993f176f978045f1a928934ccb9b8ead913db7113c332e1b8e530fcd22173636067586c7ee723cbc9f7ae60e9684

Download Submit
\Program Files\FreeCAD 0.21\bin\pyside2.cp38-win_amd64.dll

Filesize
145KB

MD5
e31dbc1b9e8d07852fd44c8322dcc050

SHA1
f6636d383a8e8031d4ba6992e70c2d6fdb054c95

SHA256
587d09e5d383e743e2f64123f5f5664a2e0e5b7edf196110952bcb9e6041c6bf

SHA512
8fad1f9953dfb4c2a601f07318580a3dcb22d8d41220e3f250ea4675be7e635d5a4e5830296c13d5f90db5600f2a5d6af827302eabc750825e707eb5b899b962

Download Submit
\Program Files\FreeCAD 0.21\bin\python38.dll

Filesize
4.5MB

MD5
b85c0b81480afd3b7b794b2c2a6a9f57

SHA1
05639ecb9553192cba1a5210331b37ccc05b8c88

SHA256
d04b7d3399ad7da9f399f118a508bc62c4865d8a1b6a217835fd898bf1234c17

SHA512
cdb447607dc06234c7ea1af54cefc280769f2f9b0d8477b7abca1dbacc89acd4dfe1f2edae6c6a28bd03d999b85580a78aba1bb01f62f00919b40aa85244318c

Download Submit
\Program Files\FreeCAD 0.21\bin\shiboken2.cp38-win_amd64.dll

Filesize
467KB

MD5
41bdc5e305e68174af032204b0db05d3

SHA1
36d08a3dd708163cbc6a4fdde5120d3033a69897

SHA256
6176b3bd9f18d370fd67dd39ce610e772ff5d7b1199a70a46da2107488417149

SHA512
314fb210b838c64114e1ab716a2af9b37027d09d0dbb55c880f06d52b8beb9817eb3d3b8b00417e696f7883d16b24bf9f8baeb6e9899393d80b4f0b87a308754

Download Submit
\Program Files\FreeCAD 0.21\bin\vcruntime140.dll

Filesize
79KB

MD5
354555bbe91f4f8540663cc958ca81dd

SHA1
896d0aed4e25c8277587f6831fcf8bbeb6b4b3d5

SHA256
3646d73ebc95ffb2883c61a10664be1bec052e9a0dbc730dfd5f7f84efe98007

SHA512
791c83caa166d6a4911f5a8e681f25e83b20d85f132ff2f265a29c4dac47bb38cf79c78121fe36271c11fe10f683958c007641cf6b5b0cad1eae636f21cf71df

Download Submit
\Program Files\FreeCAD 0.21\bin\vcruntime140_1.dll

Filesize
35KB

MD5
9cff894542dc399e0a46dee017331edf

SHA1
d1e889d22a5311bd518517537ca98b3520fc99ff

SHA256
b1d3b6b3cdeb5b7b8187767cd86100b76233e7bbb9acf56c64f8288f34b269ca

SHA512
ca254231f12bdfc300712a37d31777ff9d3aa990ccc129129fa724b034f3b59c88ed5006a5f057348fa09a7de4a0c2e0fb479ce06556e2059f919ddd037f239e

Download Submit
\Program Files\FreeCAD 0.21\bin\xerces-c_3_2.dll

Filesize
2.7MB

MD5
e1d7150f31e538c9a2155e738e38262d

SHA1
8c9de3cea535f5d7f0bba516ad791047be4429fb

SHA256
74ea5917b970e020284c44d9b4ef270681ca91a5152d301ccf10ed6d4cea0a78

SHA512
a8b23da595731945a27bc0e46d5c9affa04086bcc042c6ad7d6ae0b50b48799183fa232e946dcf95b4daeb8f39d5485bb2f7e894a9461c53bf79efb64da12dc4

Download Submit
\Program Files\FreeCAD 0.21\bin\zlib.dll

Filesize
84KB

MD5
8a7908546dacec19c1ed5f1b8734bfce

SHA1
663d2b17c39fb715e387afeafd3c5dddedfeb3d6

SHA256
519940326dabd0c3250a39964fdf0374ed2396b9b4478c826242aa69ffd90de5

SHA512
30b4d0ab1581ac4944a27cb8c8cc3f1fcbf587f80354126afe196d438607a6051a2aa1a4bf0f20100789e20aea06e190d73d443c53fb8c352abec828513a6318

Download Submit
\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\Banner.dll

Filesize
4KB

MD5
4e50e372bed7882789360c37b1369e0d

SHA1
24aa9ddf67ebae447313082d12b358029cc0070c

SHA256
189a30bd5802d2f43256c9f8958a7ec7fdf794a6a681731c85af01796d13582a

SHA512
c05db65d19621132cc91ab09ce8ae7edc0906c1b9eff80b20921147de451138921b384345f98e88ee9fec8328a130a9d2bcb0e68cef794e81da3d26325a87500

Download Submit
\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\StartMenu.dll

Filesize
7KB

MD5
a8c86996c4230c2209f5927f21321377

SHA1
45ce0ab93cb6a3a594e54878cce05df724024393

SHA256
110545415a59402635e1c9439acba15b44bab268ed02ad2a262ce12604a47855

SHA512
69ee73496b916777936b0dddd2cc4a4f916e393f7d0b167cba77a4a239ee1e3f645d9b90dee1627c42a23eb6c3403e4d086546b9f78b3a2e4999c8f92f6a3bc3

Download Submit
\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\System.dll

Filesize
12KB

MD5
4add245d4ba34b04f213409bfe504c07

SHA1
ef756d6581d70e87d58cc4982e3f4d18e0ea5b09

SHA256
9111099efe9d5c9b391dc132b2faf0a3851a760d4106d5368e30ac744eb42706

SHA512
1bd260cabe5ea3cefbbc675162f30092ab157893510f45a1b571489e03ebb2903c55f64f89812754d3fe03c8f10012b8078d1261a7e73ac1f87c82f714bce03d

Download Submit
\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\UserInfo.dll

Filesize
4KB

MD5
d458b8251443536e4a334147e0170e95

SHA1
ba8d4d580f1bc0bb2eaa8b9b02ee9e91b8b50fc3

SHA256
4913d4cccf84cd0534069107cff3e8e2f427160cad841547db9019310ac86cc7

SHA512
6ff523a74c3670b8b5cd92f62dcc6ea50b65a5d0d6e67ee1079bdb8a623b27dd10b9036a41aa8ec928200c85323c1a1f3b5c0948b59c0671de183617b65a96b1

Download Submit
\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\nsDialogs.dll

Filesize
9KB

MD5
1d8f01a83ddd259bc339902c1d33c8f1

SHA1
9f7806af462c94c39e2ec6cc9c7ad05c44eba04e

SHA256
4b7d17da290f41ebe244827cc295ce7e580da2f7e9f7cc3efc1abc6898e3c9ed

SHA512
28bf647374b4b500a0f3dbced70c2b256f93940e2b39160512e6e486ac31d1d90945acecef578f61b0a501f27c7106b6ffc3deab2ec3bfb3d9af24c9449a1567

Download Submit
\Users\Admin\AppData\Local\Temp\nsn19AE.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
\Windows\System32\FCStdThumbnail.dll

Filesize
172KB

MD5
0d40073eb3262a895d3374172f5b0baa

SHA1
89073c13b65cb4d970fd10dbf1712f3c25fbf39a

SHA256
cf9985aca43c116fe3565436a9da267de8b7f17ceed8c0cae000cfb40e69a1b0

SHA512
dffca2073fab42d62cc7d4443ba7b4885e25552741228662cc0796f5a51eb1a246c3102410ca06281688542241fa3395f88ef9738c834ccebf337c5d6181a63c

Download Submit
memory/3360-10296-0x00007FFE20C50000-0x00007FFE21048000-memory.dmp

Filesize
4.0MB

Download
memory/3360-9888-0x00000235FDAA0000-0x00000235FDAB0000-memory.dmp

Filesize
64KB

Download
memory/3360-9780-0x00007FFE24F20000-0x00007FFE26511000-memory.dmp

Filesize
21.9MB

Download
memory/3360-9901-0x00007FFE221B0000-0x00007FFE22FD6000-memory.dmp

Filesize
14.1MB

Download
memory/3360-9976-0x00007FFE21AA0000-0x00007FFE21E47000-memory.dmp

Filesize
3.7MB

Download
memory/3360-9977-0x00007FFE21750000-0x00007FFE21AA0000-memory.dmp

Filesize
3.3MB

Download
memory/3360-9978-0x00007FFE21140000-0x00007FFE2174A000-memory.dmp

Filesize
6.0MB

Download
memory/3360-9782-0x00007FFE359E0000-0x00007FFE35F21000-memory.dmp

Filesize
5.3MB

Download
memory/3360-10333-0x00000235FDAA0000-0x00000235FDAB0000-memory.dmp

Filesize
64KB

Download
memory/3360-10390-0x00000235FDAA0000-0x00000235FDAB0000-memory.dmp

Filesize
64KB

Download
memory/4612-10376-0x00007FFE20C50000-0x00007FFE21048000-memory.dmp

Filesize
4.0MB

Download
memory/4612-10374-0x00007FFE40D00000-0x00007FFE40D01000-memory.dmp

Filesize
4KB

Download
memory/4612-10373-0x00007FFE3FEB0000-0x00007FFE3FEB1000-memory.dmp

Filesize
4KB

Download
memory/4612-10375-0x00007FFE40F10000-0x00007FFE40F11000-memory.dmp

Filesize
4KB

Download
memory/4612-10377-0x0000015EAEB50000-0x0000015EAEB60000-memory.dmp

Filesize
64KB

Download
memory/4612-10379-0x0000015EABFB0000-0x0000015EAD3E7000-memory.dmp

Filesize
20.2MB

Download
memory/4612-10380-0x0000015EAD3F0000-0x0000015EAD49A000-memory.dmp

Filesize
680KB

Download
memory/4612-10381-0x0000015EAD4A0000-0x0000015EAD4A8000-memory.dmp

Filesize
32KB

Download
memory/4612-10382-0x0000015EAEB50000-0x0000015EAEB60000-memory.dmp

Filesize
64KB

Download
memory/4728-10372-0x00007FFE20C50000-0x00007FFE21048000-memory.dmp

Filesize
4.0MB

Download