Resubmissions

06/08/2026, 19:23

260806-x3s97ahm216

06/08/2026, 19:17

260806-xzpgtssvbs6

Analysis

  • max time kernel
    119s
  • max time network
    117s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/08/2026, 19:23

General

  • Target
    fdm_x64_setup.exe
  • Size 46.7MB
  • Sample260806-x3s97ahm21
  • SHA256 9369644303b2200c902fe89e7613be831c7b5b3e34cb832639cdeeadef993ebb
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Modifies Windows Firewall 2 TTPs 2 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 64 IoCs
  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 6 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 8 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 27 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: AddClipboardFormatListener 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 6 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 50 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

Processes

  • C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3488
    • C:\Users\Admin\AppData\Local\Temp\is-E1NKO.tmp\fdm_x64_setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-E1NKO.tmp\fdm_x64_setup.tmp" /SL5="$7015C,47704159,882176,C:\Users\Admin\AppData\Local\Temp\fdm_x64_setup.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3172
      • C:\Windows\SYSTEM32\schtasks.exe
        "schtasks.exe" /end /tn FreeDownloadManagerHelperService
        3⤵
          PID:236
        • C:\Windows\system32\schtasks.exe
          "schtasks.exe" /create /RU SYSTEM /tn FreeDownloadManagerHelperService /f /xml "C:\Program Files\Softdeluxe\Free Download Manager\service.xml"
          3⤵
          • Scheduled Task/Job: Scheduled Task
          PID:3480
        • C:\Windows\system32\schtasks.exe
          "schtasks.exe" /change /tn FreeDownloadManagerHelperService /tr "\"C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"\"
          3⤵
            PID:2008
          • C:\Windows\system32\schtasks.exe
            "schtasks.exe" /run /tn FreeDownloadManagerHelperService
            3⤵
              PID:5644
            • C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
              "C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --install
              3⤵
              • Adds Run key to start application
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious behavior: AddClipboardFormatListener
              • Suspicious use of AdjustPrivilegeToken
              • Suspicious use of WriteProcessMemory
              PID:3356
              • C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
                "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4
                4⤵
                • Executes dropped EXE
                • Loads dropped DLL
                PID:1608
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.freedownloadmanager.org/afterinstall.html?uuid=d9c35b38-1ad1-4c85-a6df-e05f5984703b&locale=en_US&os=windows&osversion=10.0&osarchitecture=x86_64&architecture=x86_64&version=6.34.4.6974&ac=1&au=1
                4⤵
                • Drops file in Windows directory
                • Enumerates system info in registry
                • Modifies data under HKEY_USERS
                • Modifies registry class
                • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:4972
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2f0,0x2f4,0x2f8,0x2ec,0x318,0x7ff861c0c188,0x7ff861c0c194,0x7ff861c0c1a0
                  5⤵
                    PID:4572
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,11769160426385955727,6097996077972949998,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=2668 /prefetch:11
                    5⤵
                    • System Time Discovery
                    PID:3500
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1632,i,9341460646867790085,883274725928298146,262144 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:2
                    5⤵
                      PID:5400
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2308,i,5222364116336041011,422549400442377358,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=3148 /prefetch:13
                      5⤵
                        PID:1296
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3592,i,15384278912655892728,8659641703901911312,2097152 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
                        5⤵
                          PID:3148
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3604,i,17215923072395415118,6918075774492859157,2097152 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
                          5⤵
                            PID:3152
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,15294709225214793051,15199252832063809786,2097152 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
                            5⤵
                              PID:4316
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4296,i,10355479377448385431,16751785053469296367,2097152 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:9
                              5⤵
                                PID:2732
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5332,i,551283735519280576,11947874880343313875,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=5324 /prefetch:14
                                5⤵
                                  PID:2296
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5544,i,7752924303171885515,18003818050022980959,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:14
                                  5⤵
                                    PID:5272
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5540,i,5809042653832886341,13511712947789495484,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=3780 /prefetch:14
                                    5⤵
                                      PID:1392
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,13309522882738879117,10533441750811306625,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
                                      5⤵
                                        PID:3720
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5472,i,13309522882738879117,10533441750811306625,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=5972 /prefetch:14
                                        5⤵
                                          PID:2036
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6484,i,13079798884609490371,17293063207707711007,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=6492 /prefetch:14
                                          5⤵
                                            PID:2940
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6760,i,14115997014528198967,1475812537366353765,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:14
                                            5⤵
                                              PID:2044
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6732,i,9587553742752933495,16264271540077329481,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:14
                                              5⤵
                                                PID:2884
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,695287106577384205,18009702501366039930,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=6292 /prefetch:14
                                                5⤵
                                                  PID:4752
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,8949438344443145364,16507448931466271053,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:14
                                                  5⤵
                                                    PID:4388
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4988,i,750487973373287504,11585675746263302801,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:14
                                                    5⤵
                                                      PID:788
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,17245644744327965846,16358600901430249522,524288 --field-trial-handle=2608,i,9239605403314684396,6544886829027723066,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
                                                      5⤵
                                                        PID:2920
                                                  • C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe
                                                    "C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase1
                                                    3⤵
                                                    • Executes dropped EXE
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:3000
                                                  • C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe
                                                    "C:\Program Files\Softdeluxe\Free Download Manager\fdm5rhwin.exe" 21907CB0205CFF989F82C03684A01B86 phase2
                                                    3⤵
                                                    • Executes dropped EXE
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:3208
                                                    • C:\Windows\System32\Conhost.exe
                                                      \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
                                                      4⤵
                                                        PID:5644
                                                    • C:\Windows\system32\netsh.exe
                                                      "netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=ALL
                                                      3⤵
                                                      • Modifies Windows Firewall
                                                      • Event Triggered Execution: Netsh Helper DLL
                                                      PID:2136
                                                    • C:\Windows\system32\netsh.exe
                                                      "netsh.exe" firewall add allowedprogram program="C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" name="Free Download Manager" ENABLE scope=ALL profile=CURRENT
                                                      3⤵
                                                      • Modifies Windows Firewall
                                                      • Event Triggered Execution: Netsh Helper DLL
                                                      PID:1064
                                                    • C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
                                                      "C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --byinstaller
                                                      3⤵
                                                      • Executes dropped EXE
                                                      • Suspicious behavior: AddClipboardFormatListener
                                                      PID:1640
                                                • C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe
                                                  "C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe"
                                                  1⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:4940
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                  1⤵
                                                    PID:1940
                                                  • C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
                                                    "C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe" --hidden
                                                    1⤵
                                                    • Enumerates connected drives
                                                    • Executes dropped EXE
                                                    • Modifies registry class
                                                    • Suspicious behavior: AddClipboardFormatListener
                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                    • Suspicious use of FindShellTrayWindow
                                                    • Suspicious use of SendNotifyMessage
                                                    • Suspicious use of SetWindowsHookEx
                                                    • Suspicious use of WriteProcessMemory
                                                    PID:2504
                                                    • C:\Program Files\Softdeluxe\Free Download Manager\importwizard.exe
                                                      "C:\Program Files\Softdeluxe\Free Download Manager\importwizard" 3FE02402165644D986B63DE6638495E4 --printFdm5Setting=ExpectingUpdateToVersion
                                                      2⤵
                                                      • Executes dropped EXE
                                                      PID:3604
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                    1⤵
                                                      PID:2044

                                                    Network

                                                          MITRE ATT&CK Enterprise v16

                                                          Replay Monitor

                                                          Loading Replay Monitor...

                                                          Downloads

                                                          MSVCP140.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\MSVCP140.dll
                                                          • Size 562KB
                                                          • SHA256 9057d39b36b6c7d054865ee2bf9cde7a490fe3b01ec4e82514687e24f576269f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          MSVCP140_2.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\MSVCP140_2.dll
                                                          • Size 261KB
                                                          • SHA256 89e2e9a163165e20c540f9adea081e927ddfe4a556547b0f45f11586d4cce165
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Core.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Core.dll
                                                          • Size 9.8MB
                                                          • SHA256 b712b4754588e89f855dc0aa087d6304b2fd21b0e0639d1cdeb9cb969bd5fb72
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Gui.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Gui.dll
                                                          • Size 9.1MB
                                                          • SHA256 03ba47a2025036a04f5548bce242788ac21edf551e78d5b42e1b87beb799904f
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Multimedia.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Multimedia.dll
                                                          • Size 1.2MB
                                                          • SHA256 b9423a9affd573436c1ea779a7a5577c6461b843c5309edf4efaa0bfb8d65336
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Network.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Network.dll
                                                          • Size 1.7MB
                                                          • SHA256 203f8ddf83c015ce56752ebe7a1986472be7dbb95c20e13ac8e1d741d9ac93d1
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6OpenGL.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6OpenGL.dll
                                                          • Size 1.9MB
                                                          • SHA256 16ae977ef8d5dda36b47b52b2cba00fbbba6298995df450bc97f4bd538b853e4
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Qml.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Qml.dll
                                                          • Size 5.1MB
                                                          • SHA256 b7b0fc758567bc697b36115eddb225199b2f383d00ab7a962320eeb999d407c1
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6QmlMeta.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6QmlMeta.dll
                                                          • Size 156KB
                                                          • SHA256 ed588a035298d07704cf7937ff1353b5693a01b771d7616e0db6703ae72a6186
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6QmlModels.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6QmlModels.dll
                                                          • Size 963KB
                                                          • SHA256 3a076e09fc9766c18d072a3a774bee56e5222ea7d7a3a97185f6c33946c12ef5
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Quick.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Quick.dll
                                                          • Size 6.2MB
                                                          • SHA256 8f175eed41debac078dd7d5775ce22c6283da428d2659497d0292f48bbfad914
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6QuickControls2.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6QuickControls2.dll
                                                          • Size 100KB
                                                          • SHA256 19284c120cf28230a71eb635e8c9a0d67624293a3a693f676802ee430dc56372
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6QuickTemplates2.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6QuickTemplates2.dll
                                                          • Size 1.9MB
                                                          • SHA256 2721c021c87402a4239072b1f798b4ac6bc47ee13b8a18dc41adfea5b13357a6
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Sql.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Sql.dll
                                                          • Size 305KB
                                                          • SHA256 41f42429cf4f96afcb943d3de72d8df1326652b63d967eb5eac9168df798f9df
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Qt6Widgets.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\Qt6Widgets.dll
                                                          • Size 6.3MB
                                                          • SHA256 61ddd0316a731b8dbabaf2924cd0d47b756461e37329b4f535902cf450416127
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          downloadsjsp.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\downloadsjsp.dll
                                                          • Size 118KB
                                                          • SHA256 1f4a3528f66cf7fc1f2748914dd79f484ddbe7e45e85f987537fd1b3e3cb66bd
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          downloadsms.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\downloadsms.dll
                                                          • Size 571KB
                                                          • SHA256 31c3af9bb7c2de32024dbbd49e4e829cfbab7a1caa99f75295df6dbee2f225e5
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          fdm.exe

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
                                                          • Size 10.2MB
                                                          • SHA256 a3eedc8d402264b9678190d19f1d67f2e1865409602f53da0f1787972b255d01
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          helperservice.exe

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe
                                                          • Size 136KB
                                                          • SHA256 c1e746544ccc1b5ef3f1737ca4eefff517ddfbe5b4be9a360fa8fa662ba71c57
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          icuuc.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\icuuc.dll
                                                          • Size 29KB
                                                          • SHA256 e76201d65fc58d1db0ec99bc8e875f47d692bcaa16bb6448b197bc86c08d1816
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          libcrypto-3-x64.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\libcrypto-3-x64.dll
                                                          • Size 4.6MB
                                                          • SHA256 82943e115a20577eeed1feabd92e55230e7fb8e18b0dc3d378d552fd0d35cec3
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          logger.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\logger.dll
                                                          • Size 43KB
                                                          • SHA256 b290d673d4f6c1624d531a1d314753877fe9d08d95d76b6ec3f7b6c402ede5ce
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          msvcp140_1.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\msvcp140_1.dll
                                                          • Size 35KB
                                                          • SHA256 a65249861238e1c18b84ae5d112617c438d83a76b67eddc170ad82dbc2338665
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          is-1F87E.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-1F87E.tmp
                                                          • Size 257B
                                                          • SHA256 507fd11cc0ef9c76294413ec13a078a70771235a6379a8e285a8b27b7a7776d7
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-2A87M.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-2A87M.tmp
                                                          • Size 493B
                                                          • SHA256 4d5d16a9ef3db072309d531e11057076bfa7b03f4f47f6bd8a7d89d1fe0bd39b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-2C79R.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-2C79R.tmp
                                                          • Size 101B
                                                          • SHA256 02530ad19a6a050f2813c5d801a9fe75c9b0fbf4508491c6abb1bbdb72b28734
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-2E189.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-2E189.tmp
                                                          • Size 118B
                                                          • SHA256 33f189b55282b1a6d904fd2424cdc051fbd3af17b942899942fc6daf46280146
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-3VA9R.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-3VA9R.tmp
                                                          • Size 1KB
                                                          • SHA256 04ef55069cbc71bcafcf10807da3e0fbf7db7c205bd6dd88156b30ee0c6f1af1
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-5642P.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-5642P.tmp
                                                          • Size 150B
                                                          • SHA256 50e45c5bc1f41a265ccdb7106571d751b4a875577d19c5409009fcdd0e82cfc1
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-5FRC1.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-5FRC1.tmp
                                                          • Size 83B
                                                          • SHA256 8285acc7fe450d3a72eed1432566f7aa90af7ee33a154aa7402dc707018979b7
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-753VO.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-753VO.tmp
                                                          • Size 977B
                                                          • SHA256 a547ed23a7f28777996b58b610ed9ac1c0500042e0d70682f893a8508709717d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-76EQJ.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-76EQJ.tmp
                                                          • Size 875B
                                                          • SHA256 6001207502a85ce95a405c9100e575994dab92e04fd28c1c66eefc69c52dc3ad
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-8A4T0.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-8A4T0.tmp
                                                          • Size 177B
                                                          • SHA256 340dfb8f5d90ee5d986eb4b3570a2b3481ca50048a1a5eb38144e13a598d9bc9
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-8J9RB.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-8J9RB.tmp
                                                          • Size 310B
                                                          • SHA256 4a094c584b7e0dc23291d778861ead37d087ef0e43574e8d43bae27239648298
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-8P7S2.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-8P7S2.tmp
                                                          • Size 233B
                                                          • SHA256 96248a359822f167a7195dd2e4c93099701c65c93d470157d1ebab9164b086f3
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-A7KJD.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-A7KJD.tmp
                                                          • Size 317B
                                                          • SHA256 237ff3516492b63b2ed41562ea6e3b983f277a2375f12d427a0a7769cec15043
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-A8KIN.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-A8KIN.tmp
                                                          • Size 120B
                                                          • SHA256 dda8d0d5444670f0a82f7b7aabf1f771d94d0c418f15be75b120137758932c7a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-BIRV4.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-BIRV4.tmp
                                                          • Size 166B
                                                          • SHA256 7b24c72a494b81a4e61be17014a8c5bfa2dfd457fbff4cbec0845793d3fca0b4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-BQG7U.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-BQG7U.tmp
                                                          • Size 130B
                                                          • SHA256 dc8861aaef091c7030bb95734be7ca69b41f64440368e823ee02df899cfb452d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-BUI35.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-BUI35.tmp
                                                          • Size 183B
                                                          • SHA256 b2e9b5268db1594656d584a35cc7083fcc5fb41b6768dbd7448054d1904d780d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-CKQN7.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-CKQN7.tmp
                                                          • Size 167B
                                                          • SHA256 6d584df93b6785277a090e3c2d46ebba057d262253dfcebbb81585a9f48658c1
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-CNQKJ.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-CNQKJ.tmp
                                                          • Size 745B
                                                          • SHA256 46b24c8416c8b349a455d78475d8bb99ba260fa6ea3b722e15dc312bcd7db53d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-CSIIF.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-CSIIF.tmp
                                                          • Size 1KB
                                                          • SHA256 f38227a12d179e016f9b2696d3dc8ec4c6c96c275cfccbe839dd5ba0c51d9b26
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-E5M7J.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-E5M7J.tmp
                                                          • Size 184B
                                                          • SHA256 b74cf0894a7b42aae0630586e321e3cea282724a16e1ed40322cb39014c0041f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-F2N11.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-F2N11.tmp
                                                          • Size 129B
                                                          • SHA256 8fb94be57391e3b4247b3ea1fa38be1a36adb36b3ae4d056f84c441afd801968
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-FAVRC.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-FAVRC.tmp
                                                          • Size 356B
                                                          • SHA256 9b2993a8b96673393b17ec53d71cb5862eb2a44ba9fd3c5f465a0bf4638a4b9d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-FFOI3.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-FFOI3.tmp
                                                          • Size 171B
                                                          • SHA256 840b43337d232f04aed0b3209a43a0b25bb5f4bb53920620c7e0bcc155743daa
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-FQNA7.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-FQNA7.tmp
                                                          • Size 1KB
                                                          • SHA256 9bde42438a2f0178ba8c90156c738a4a5fb80578ca70ff6e82810d57d74e7a3e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-GAP13.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-GAP13.tmp
                                                          • Size 1KB
                                                          • SHA256 4c9186092eabc6788e704b074423e009cd3b80a8d5de0bb1ada6f7599f91bb9c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-GPTEP.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-GPTEP.tmp
                                                          • Size 210B
                                                          • SHA256 f85b2a74823a54b1d904d44b638204ae78301a91eabacfc1dc7f07508c384057
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-HT8NP.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-HT8NP.tmp
                                                          • Size 92B
                                                          • SHA256 4a812392a115a37694707507b84dc3c789fb3880c298cce2a7d31f1d837f601f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-I3U98.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-I3U98.tmp
                                                          • Size 935B
                                                          • SHA256 60f757e557455aef99ad54ae55c3e8d18347fdef0bdc5af176055e154e7b8f38
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-I66VL.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-I66VL.tmp
                                                          • Size 185B
                                                          • SHA256 30544b5f1ecbc6ff7dca896b1493ee57864d121cce3cf63e274ca0a1ae075c53
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-J065E.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-J065E.tmp
                                                          • Size 442B
                                                          • SHA256 e04fbcc696a2ea2a326a1b7bc57f25a0e1b33091e588889da5a9d7015c595022
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-J95BB.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-J95BB.tmp
                                                          • Size 177B
                                                          • SHA256 3c5fafbc237f9e5f72829cc66a37dc81bcb531b9f3aeaee91a55469fd7de5073
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-JBIRK.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-JBIRK.tmp
                                                          • Size 3KB
                                                          • SHA256 6c6b7c12d0a9080109e8cf1e5ba23a535cf195a85a01fe9bb4a1f66cdda9657c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-JPSVQ.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-JPSVQ.tmp
                                                          • Size 164B
                                                          • SHA256 e2ee0ed4ccf6d0e468b02b83598f0487cc3167d508c6e08e6490b925d8305474
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-K2JAS.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-K2JAS.tmp
                                                          • Size 1KB
                                                          • SHA256 fc52e4eea80062b28175e6df1cebb5abe679e26035efc515184074593309bed9
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-KRS9R.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-KRS9R.tmp
                                                          • Size 125B
                                                          • SHA256 0941ec5da06f1cafe91004c1b035997609ab1eef1f39a9ac5f0bb558dd8f93eb
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-LG2R9.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-LG2R9.tmp
                                                          • Size 14KB
                                                          • SHA256 1cab68c7c8cf21d2f7a721eaf3e254899685deecbc2b11c2198183c2f19f3602
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          is-LQ8N4.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-LQ8N4.tmp
                                                          • Size 337B
                                                          • SHA256 dbbd1cfbfd6b58d2f6e3b91d388844599b003198cb064d17c00f5ba321dffb75
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-M71DC.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-M71DC.tmp
                                                          • Size 7KB
                                                          • SHA256 26c58314abbab9420da568696af5ff36287b0e569eb15d2c35904a1c7d9a32d8
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          is-NRD3D.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-NRD3D.tmp
                                                          • Size 118B
                                                          • SHA256 7109a067ad00c3cdd31365c76ea8e24264910fe9b1350a292fc00dd7d2b97e5b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-OAM0S.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-OAM0S.tmp
                                                          • Size 698B
                                                          • SHA256 caf54e636473e19db45d86b01fb79142bf28e916030ec3b60272a14643313460
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-PF5IV.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-PF5IV.tmp
                                                          • Size 683B
                                                          • SHA256 349cb567bded99187024758d0cb9cda60b55227a4d7fe1763f7f41753f692d7c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-PKLF5.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-PKLF5.tmp
                                                          • Size 417B
                                                          • SHA256 239bf3f261e5ee675b27e546fc9dfba9ced5e2e521dc112df22389c1227b8c1a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-R8OU3.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-R8OU3.tmp
                                                          • Size 687B
                                                          • SHA256 d1424af3aeb805bca2375f3c01c885525be4561065ff1118fd5e3fcde63d2757
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-RL7N0.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-RL7N0.tmp
                                                          • Size 305B
                                                          • SHA256 2a9ce212f759efaee2773d7f22e13dd91c5da7dd0fddba2882b10e7d03bd4a5c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-SBPE0.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SBPE0.tmp
                                                          • Size 231B
                                                          • SHA256 ef0d766bdcffd4ba13bbe77dd451ce94e79d38c6b11e6db761aaa352ceae7d36
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-SVJUG.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-SVJUG.tmp
                                                          • Size 232B
                                                          • SHA256 5485c7bd8be92e5a94e08bb94090fd6128e063114af8679482154398ea4b8c8c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-VAMNM.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\dark\images\is-VAMNM.tmp
                                                          • Size 211B
                                                          • SHA256 d712f165711bf5e0f265607705a4e83452c8fcbc59e106238663664f791f28e5
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-0K6FA.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-0K6FA.tmp
                                                          • Size 176B
                                                          • SHA256 ffa7ff4e1328851e3f65e0f07c5d07e6a0b6b3c564a22493a0e53e733a4339c9
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-0NUVC.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-0NUVC.tmp
                                                          • Size 222B
                                                          • SHA256 9ad904d8e8eb37344bcdde47be90a9271e908e4568c6dde2f7d396ca9e1a1a64
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-23OHG.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-23OHG.tmp
                                                          • Size 15KB
                                                          • SHA256 c0f2676c1b75d123bb19cc6fbfcd067d823a7693cf89fecf73c32a3cb934e9a0
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          is-2FVNA.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-2FVNA.tmp
                                                          • Size 164B
                                                          • SHA256 d5a68925a3626dabc5a773663cd0134ae03c908c0c8adb4381578078c3fc056e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-3DQ52.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-3DQ52.tmp
                                                          • Size 7KB
                                                          • SHA256 68bb0080f05b810c785098bddb9ce7b9949e322a374c65b4c7ad99ac107a10be
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          is-3RGLQ.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-3RGLQ.tmp
                                                          • Size 628B
                                                          • SHA256 7437b32e1edf24ab5701933db00909c7d7db4b6870290bbc7e4735a4fc7981b8
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-4M8DQ.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-4M8DQ.tmp
                                                          • Size 215B
                                                          • SHA256 bfdd4f412de35ced17a26b6090b41befbf11e97578a244798a475c35f1b81685
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-8048E.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-8048E.tmp
                                                          • Size 226B
                                                          • SHA256 5ce6134336919f7288d5f5312772890ac680e324d47e6552f523cc71c25a5336
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-88QQ7.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-88QQ7.tmp
                                                          • Size 244B
                                                          • SHA256 fe96c7fddd6a33588dc4bdd2881ac3e972d6c019be15d595f5668e059ded738f
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-97BG8.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-97BG8.tmp
                                                          • Size 343B
                                                          • SHA256 d0f2f23ce73f6559fa3a61f4e7c068875e321dc6aca3a0eb6a423ae94054b92a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-9UP0R.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-9UP0R.tmp
                                                          • Size 528B
                                                          • SHA256 2d54781387c4398487a62b8395d6dfbaf4b37df0b023d4346d1983b28175596d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-AB1HU.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-AB1HU.tmp
                                                          • Size 450B
                                                          • SHA256 ff909958af7cef5fa56e5b70f4fcfdc939646eb97df3ddb71dcecae692c75abf
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-B3IQT.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-B3IQT.tmp
                                                          • Size 1004B
                                                          • SHA256 9f94e7c42c285b0607e3e41c8a523f11e00a3b675bd2a9d93c7c12e476a91587
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-BJ89A.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-BJ89A.tmp
                                                          • Size 438B
                                                          • SHA256 b690ff71125077a35907ee9df97bb986fbebb2ee82b1f443d86e25fd15738204
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-CT3C5.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-CT3C5.tmp
                                                          • Size 178B
                                                          • SHA256 d7585c904a07b57038f7937cd19b518b2ca465eefc3aa176f0e23ff0679ea942
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-DM1IU.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-DM1IU.tmp
                                                          • Size 780B
                                                          • SHA256 7afea33b4b6109fccad617fc05ba2ffc422bc60b02e805303e129ca9954953a1
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-DP1L1.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-DP1L1.tmp
                                                          • Size 1KB
                                                          • SHA256 e2af8372551f3af475ab36589ee502bbd520425f5a8ac6a55762ab1a9f4650ee
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-EHJJ1.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-EHJJ1.tmp
                                                          • Size 166B
                                                          • SHA256 e75ed5a1b1f028cfa665127e88e1a7078fc91f91775bf890365a8500d9869db7
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-F4IA6.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-F4IA6.tmp
                                                          • Size 992B
                                                          • SHA256 9b1916e06dd0605a1cb61052de50cda49723e08f280dfce484b8b06d54cb1a17
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-FGH9L.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-FGH9L.tmp
                                                          • Size 590B
                                                          • SHA256 5d2c7b18155db2f3583896fde0addccc481a816a9b36531b201bc5e31bbb35ab
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-FPSMQ.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-FPSMQ.tmp
                                                          • Size 1KB
                                                          • SHA256 31014ee2cc775bb62207d6057640cd89497435529c0b147736b8fa10059de132
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-G4HPV.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-G4HPV.tmp
                                                          • Size 1KB
                                                          • SHA256 d4a8c508e022525049f8a331e1b3f99ffabe486798781c9c2a06f18fc16cb395
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-G62Q6.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-G62Q6.tmp
                                                          • Size 131B
                                                          • SHA256 95bc4afbc55494f30ec3553ae051c73b535e9aad45426eb373cb788f25f88caa
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-GEBUN.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-GEBUN.tmp
                                                          • Size 327B
                                                          • SHA256 5f81a72696418ba2acca392d8aa5ddc94a2b873275d8ab17fb64ef3b6d6f981a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-GO4JC.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-GO4JC.tmp
                                                          • Size 513B
                                                          • SHA256 3bd1cba7b0517257de59ea097e188ebaa706b7bbfca338a29ddbec2d944c5567
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-H012S.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-H012S.tmp
                                                          • Size 180B
                                                          • SHA256 6fd283b8c8f1c96a7b0084a475dc0915cc7db16c938858b6c2fc42a2c286107a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-H4H14.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-H4H14.tmp
                                                          • Size 129B
                                                          • SHA256 233a82176ffcd3c6d906b605bd08e413347ee9df6b09ad746f84469116a54811
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-HHLL8.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-HHLL8.tmp
                                                          • Size 128B
                                                          • SHA256 3235f1b7e4fa0d316b1aa5c3b92ea6586daee896e43222f648670e8fa6d71368
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-HQJ5H.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-HQJ5H.tmp
                                                          • Size 234B
                                                          • SHA256 f823805fa4d01e7e4584cd2630a9099eb9720419fcead1be34888d32baf94bab
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-JCB39.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-JCB39.tmp
                                                          • Size 206B
                                                          • SHA256 9bef876bbd6193e05e5e0ad50706ee454d1ea71da782a6f9e9bf8e5e71bb920d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-K006M.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-K006M.tmp
                                                          • Size 932B
                                                          • SHA256 32297750f17ff2595f94c94ffe379f1d400c80c0bcb145bda6565e0165727a37
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-L8AQH.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-L8AQH.tmp
                                                          • Size 138B
                                                          • SHA256 6291f9c78c77f1fb89dd0b43c51daa98c2ab6c98ca737c2ef1f61f1f201b4514
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-LLG20.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-LLG20.tmp
                                                          • Size 180B
                                                          • SHA256 5ad959df793d952cc1b275096ee13eeb553dc0357caa2efcf2a4350363a6d363
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-LMFTS.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-LMFTS.tmp
                                                          • Size 1KB
                                                          • SHA256 caf1dc9e14b96d649fbc00a5210fbd0e209fee56c724ba746ea7a22edf73d5ac
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-N045S.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-N045S.tmp
                                                          • Size 1KB
                                                          • SHA256 ac3911723fbc5dbd7831c4049036f4f9d5b290a52164143d9e4846fc3fa5ceb0
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-OKJA4.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-OKJA4.tmp
                                                          • Size 1KB
                                                          • SHA256 8f31e9f6dbe509a60f161d49580499f27e953693b7a8705b02a0bbc9d256ac4e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-P91CR.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-P91CR.tmp
                                                          • Size 389B
                                                          • SHA256 2bc47bd96c56063f0708b773931de60869bcc74858e348188813262d6ffb1b02
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-PEA9K.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-PEA9K.tmp
                                                          • Size 417B
                                                          • SHA256 827bd8deb24f977506b8acf20c482e1f448e8504e8de29ab784a3f2933f0dc69
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-QCV90.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-QCV90.tmp
                                                          • Size 231B
                                                          • SHA256 9a91628cce9d93e0943532402060b64790218c391bbd3ea7367c29c0e266adb5
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-T2GEI.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-T2GEI.tmp
                                                          • Size 1KB
                                                          • SHA256 34a47dc79f253f27a7757d747f3402559294fe080d1409890ffaeaad1a3d7b1e
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-TVO6B.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-TVO6B.tmp
                                                          • Size 281B
                                                          • SHA256 0537d3ed85192a87eda61f3a3232200881d11b11d5b566420bf9efd924442b5d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-VHHAK.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\FluentWinUI3\light\images\is-VHHAK.tmp
                                                          • Size 3KB
                                                          • SHA256 9bbfc57d26160aa9fdf885358fc89aaae9258419be1fa0a60544d23e4c52a3d8
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-8R58O.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\impl\is-8R58O.tmp
                                                          • Size 215B
                                                          • SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-1RUNG.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-1RUNG.tmp
                                                          • Size 841B
                                                          • SHA256 bfb44b28be8636cf5fedd504b41ded92dde35350a9e437f61f327e413cb18f07
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-EG4VT.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Imagine\is-EG4VT.tmp
                                                          • Size 851B
                                                          • SHA256 529300dab184b8b597775933d749e973a37377c9e15fe295ea232204a0865e3b
                                                          • MD5 SHA1 SHA512 TLSH

                                                          is-AV53R.tmp

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\qml\QtQuick\Controls\Universal\is-AV53R.tmp
                                                          • Size 1KB
                                                          • SHA256 981ab6db297e985d37b6d83f26801075ec35abeaff38c28adb2e7255ceae1a31
                                                          • MD5 SHA1 SHA512 TLSH

                                                          quazip.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\quazip.dll
                                                          • Size 243KB
                                                          • SHA256 144dd257d44775f7d463e798f58894b93f8d823c6f87ab71168e3726206ecb1b
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          service.xml

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\service.xml
                                                          • Size 2KB
                                                          • SHA256 24f6062b8679b4140b5c15900deefa8ba187ed5e3c5cb8efc91b26b31769664d
                                                          • MD5 SHA1 SHA512 TLSH

                                                          vcruntime140.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140.dll
                                                          • Size 117KB
                                                          • SHA256 da72e6677bd1bcd01c453c1998aaa19aeaf6659f4774cf6848409da8232a95b2
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          vcruntime140_1.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\vcruntime140_1.dll
                                                          • Size 48KB
                                                          • SHA256 26e470b29bed3d873e0c328186e53f95e9edbfe0b0fd0cda44743a0b1a04a828
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          vmsclshared.dll

                                                          • Path C:\Program Files\Softdeluxe\Free Download Manager\vmsclshared.dll
                                                          • Size 946KB
                                                          • SHA256 448eb197ec4b52f2e9d4d941adba8a1a6b0835193a4454586004f7ed67f7809e
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 22c1d58ffa7df77a7e0440ce3b2c474b1e03f30b60355bbf5dd6392fefb641fd
                                                          • MD5 SHA1 SHA512 TLSH

                                                          settings.dat

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                          • Size 280B
                                                          • SHA256 ee3af991fa1719733ca1e3ac746d5b605f4205e269bf244bd9ae780ceadb9bd8
                                                          • MD5 SHA1 SHA512 TLSH

                                                          3b0b7d5d-6c51-4684-8fba-f14b33dbc41f.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3b0b7d5d-6c51-4684-8fba-f14b33dbc41f.tmp
                                                          • Size 12KB
                                                          • SHA256 a3920c4f1b8a3e08d2ab3031fddd9c4f1ed4a803a91aa30497182b7fe7ffb39c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          5b9af614-cb5a-4c29-a018-3661cb3d6b5a.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5b9af614-cb5a-4c29-a018-3661cb3d6b5a.tmp
                                                          • Size 70KB
                                                          • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          the-real-index

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                          • Size 3KB
                                                          • SHA256 397800fa200c29e28f6bde7d62662d4e92a831db22bf4a5248974274a2da786c
                                                          • MD5 SHA1 SHA512 TLSH

                                                          the-real-index~RFe5a91d1.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5a91d1.TMP
                                                          • Size 3KB
                                                          • SHA256 43625494a8139770701d3abb6c85228b3daecccdc1999466841d4b782410b5e6
                                                          • MD5 SHA1 SHA512 TLSH

                                                          SiteList-Enterprise.json

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                          • Size 2B
                                                          • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                          • MD5 SHA1 SHA512

                                                          SCT Auditing Pending Reports

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                          • Size 2B
                                                          • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                          • MD5 SHA1 SHA512

                                                          Sdch Dictionaries

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                          • Size 40B
                                                          • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                          • MD5 SHA1 SHA512

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                          • Size 12KB
                                                          • SHA256 1fb57025426daf15c14d267afaa0dad527b7352d6bdfca98246f74f970bce515
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                          • Size 12KB
                                                          • SHA256 ce6f863dbd268c8f78443e0e1eb2aa3bdbd552c1fe1e31e22cdcbd2ae95af17e
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Secure Preferences

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                          • Size 27KB
                                                          • SHA256 13cb80218c89101b0b28b1696cc26e1bab2f127076062b716aa17acf40c0944d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          sync_diagnostic.log

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                          • Size 4KB
                                                          • SHA256 ed4cbb2ff693f2d4454bf448c7168f7a1fd1f62bff30789403a393c82d04a654
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 35KB
                                                          • SHA256 a9c358747d42bd08c21499ca02a0be3d843d1a2d53d5cee91b175b280a01ce8e
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 35KB
                                                          • SHA256 dc50aaa0becb8b32756d0284e6d7818c115cc704912e76c7369a097c67089056
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 38KB
                                                          • SHA256 cda536d8946ad02676fa50ee7e4c64118599a4af57364cf9d2843bd00db0868c
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          Local State

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                          • Size 38KB
                                                          • SHA256 9609f0301fda5ad44f9d049bca68c412b0d19f0325381a652d16e5f3105c8d1d
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                          • Size 153KB
                                                          • SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          a3297251-fa9b-44e8-9f23-36f5c365042c.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\a3297251-fa9b-44e8-9f23-36f5c365042c.tmp
                                                          • Size 13B
                                                          • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                          • MD5 SHA1 SHA512

                                                          metadata.json~RFe5a5267.TMP

                                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json~RFe5a5267.TMP
                                                          • Size 132B
                                                          • SHA256 ea13d57b11af249f90704dbcafd354c5e80b10358db7edb9eaf8f6fd597eb1d4
                                                          • MD5 SHA1 SHA512 TLSH

                                                          52d3d415-6f0d-4a32-bfe2-5ec7b1428544.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Temp\52d3d415-6f0d-4a32-bfe2-5ec7b1428544.tmp
                                                          • Size 1B
                                                          • SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
                                                          • MD5 SHA1 SHA512

                                                          fdm_x64_setup.tmp

                                                          • Path C:\Users\Admin\AppData\Local\Temp\is-E1NKO.tmp\fdm_x64_setup.tmp
                                                          • Size 3.6MB
                                                          • SHA256 7313b25c75cf4c1e085dd1e6f3f203ab70389af36c9fcb6f2503e4616a967c07
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          content_new.js

                                                          • Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4972_441871821\CRX_INSTALL\content_new.js
                                                          • Size 10KB
                                                          • SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
                                                          • MD5 SHA1 SHA512 SSDEEP TLSH

                                                          memory/1608-3294-0x00007FF864220000-0x00007FF864867000-memory.dmp

                                                          memory/1640-3722-0x00007FF7726F0000-0x00007FF773133000-memory.dmp

                                                          memory/1640-3719-0x00007FF861F10000-0x00007FF862549000-memory.dmp

                                                          memory/1640-3720-0x00007FF861100000-0x00007FF861747000-memory.dmp

                                                          memory/2504-3782-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3764-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3715-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3714-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3712-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3713-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3366-0x00007FF861F10000-0x00007FF862549000-memory.dmp

                                                          memory/2504-3368-0x00007FF7726F0000-0x00007FF773133000-memory.dmp

                                                          memory/2504-3412-0x00000236235F0000-0x00000236237F2000-memory.dmp

                                                          memory/2504-3409-0x00000236231A0000-0x00000236235E2000-memory.dmp

                                                          memory/2504-3367-0x00007FF861100000-0x00007FF861747000-memory.dmp

                                                          memory/2504-3785-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3786-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3784-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3748-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3781-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3780-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3779-0x0000023625720000-0x0000023625721000-memory.dmp

                                                          memory/2504-3783-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3778-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3777-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3776-0x0000023625720000-0x0000023625721000-memory.dmp

                                                          memory/2504-3775-0x0000023625720000-0x0000023625721000-memory.dmp

                                                          memory/2504-3774-0x0000023625740000-0x0000023625741000-memory.dmp

                                                          memory/2504-3772-0x0000023625720000-0x0000023625721000-memory.dmp

                                                          memory/2504-3771-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3770-0x0000023625720000-0x0000023625721000-memory.dmp

                                                          memory/2504-3769-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3768-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3767-0x0000023625720000-0x0000023625721000-memory.dmp

                                                          memory/2504-3765-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3716-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3763-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3762-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3761-0x00000236256F0000-0x00000236256F1000-memory.dmp

                                                          memory/2504-3760-0x0000023625700000-0x0000023625701000-memory.dmp

                                                          memory/2504-3758-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3757-0x00000236256F0000-0x00000236256F1000-memory.dmp

                                                          memory/2504-3756-0x00000236256F0000-0x00000236256F1000-memory.dmp

                                                          memory/2504-3755-0x00000236256F0000-0x00000236256F1000-memory.dmp

                                                          memory/2504-3754-0x00000236256F0000-0x00000236256F1000-memory.dmp

                                                          memory/2504-3752-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3751-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3750-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/2504-3749-0x0000023625650000-0x0000023625651000-memory.dmp

                                                          memory/3172-8-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-9-0x00000000032C0000-0x00000000032C1000-memory.dmp

                                                          memory/3172-2217-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-3721-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-3292-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-25-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-6-0x00000000032C0000-0x00000000032C1000-memory.dmp

                                                          memory/3172-14-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-12-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3172-3392-0x0000000000C00000-0x0000000000FAE000-memory.dmp

                                                          memory/3356-3290-0x00007FF864870000-0x00007FF864EA9000-memory.dmp

                                                          memory/3356-3288-0x00007FF7726F0000-0x00007FF773133000-memory.dmp

                                                          memory/3356-3289-0x00007FF864220000-0x00007FF864867000-memory.dmp

                                                          memory/3488-0-0x0000000000FC0000-0x00000000010A7000-memory.dmp

                                                          memory/3488-7-0x0000000000FC0000-0x00000000010A7000-memory.dmp

                                                          memory/3488-3723-0x0000000000FC0000-0x00000000010A7000-memory.dmp

                                                          memory/3604-3405-0x00007FF861100000-0x00007FF861747000-memory.dmp