Trojan.Siggen32.46159

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IDMan' = '%ProgramFiles(x86)%\Internet Download Manager\IDMan.exe /onboot'
[HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'

Sets the following service settings

[HKLM\SYSTEM\CurrentControlSet\Services\IDMWFP] 'Start' = '00000002'
[HKLM\SYSTEM\CurrentControlSet\Services\IDMWFP] 'ImagePath' = '<DRIVERS>\idmwfp.sys'

Creates the following services

'IDMWFP' <DRIVERS>\idmwfp.sys

Malicious functions

Executes the following

'%WINDIR%\syswow64\taskkill.exe' /f /t /im "idman.exe"

Modifies file system

Creates the following files

%TEMP%\rarsfx0\en.inf
%TEMP%\rarsfx0\crack.7z
%TEMP%\rarsfx0\idm.cab
%TEMP%\rarsfx0\cn.inf
%TEMP%\rarsfx0\cybermania.url
%ProgramFiles(x86)%\internet download manager\toolbar\set9607.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9636.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9657.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9667.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9678.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9689.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9699.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96aa.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96ba.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96bb.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96cc.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96dd.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96ed.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96ee.tmp
%ProgramFiles(x86)%\internet download manager\set96ff.tmp
%ProgramFiles(x86)%\internet download manager\set9700.tmp
%ProgramFiles(x86)%\internet download manager\set9711.tmp
%ProgramFiles(x86)%\internet download manager\set9712.tmp
%ProgramFiles(x86)%\internet download manager\set9732.tmp
%ProgramFiles(x86)%\internet download manager\set9742.tmp
%ProgramFiles(x86)%\internet download manager\set9753.tmp
%ProgramFiles(x86)%\internet download manager\set9783.tmp
%ProgramFiles(x86)%\internet download manager\set9784.tmp
%ProgramFiles(x86)%\internet download manager\set9785.tmp
%ProgramFiles(x86)%\internet download manager\set97a5.tmp
%ProgramFiles(x86)%\internet download manager\set97b6.tmp
%ProgramFiles(x86)%\internet download manager\set97d6.tmp
%ProgramFiles(x86)%\internet download manager\set98d1.tmp
%ProgramFiles(x86)%\internet download manager\set9901.tmp
%ProgramFiles(x86)%\internet download manager\set9912.tmp
%ProgramFiles(x86)%\internet download manager\set9913.tmp
%ProgramFiles(x86)%\internet download manager\set9923.tmp
%ProgramFiles(x86)%\internet download manager\set9934.tmp
%ProgramFiles(x86)%\internet download manager\set9944.tmp
%ProgramFiles(x86)%\internet download manager\set9955.tmp
%ProgramFiles(x86)%\internet download manager\set9966.tmp
%ProgramFiles(x86)%\internet download manager\set9986.tmp
%ProgramFiles(x86)%\internet download manager\set9987.tmp
%ProgramFiles(x86)%\internet download manager\set9998.tmp
%ProgramFiles(x86)%\internet download manager\set99a8.tmp
%ProgramFiles(x86)%\internet download manager\set99d8.tmp
%ProgramFiles(x86)%\internet download manager\set99e9.tmp
%ProgramFiles(x86)%\internet download manager\set99ea.tmp
%ProgramFiles(x86)%\internet download manager\set9a29.tmp
%ProgramFiles(x86)%\internet download manager\set9a3a.tmp
%ProgramFiles(x86)%\internet download manager\set9a4a.tmp
%ProgramFiles(x86)%\internet download manager\set9a5b.tmp
%ProgramFiles(x86)%\internet download manager\set9a6c.tmp
%ProgramFiles(x86)%\internet download manager\set9a9c.tmp
%ProgramFiles(x86)%\internet download manager\set9aac.tmp
%ProgramFiles(x86)%\internet download manager\set9aad.tmp
%ProgramFiles(x86)%\internet download manager\set9acd.tmp
%ProgramFiles(x86)%\internet download manager\set9ade.tmp
%ProgramFiles(x86)%\internet download manager\set9aef.tmp
%ProgramFiles(x86)%\internet download manager\set9af0.tmp
%ProgramFiles(x86)%\internet download manager\set9b20.tmp
%ProgramFiles(x86)%\internet download manager\set9b21.tmp
%ProgramFiles(x86)%\internet download manager\set9b41.tmp
%ProgramFiles(x86)%\internet download manager\set9b51.tmp
%ProgramFiles(x86)%\internet download manager\set9b72.tmp
%ProgramFiles(x86)%\internet download manager\set9b92.tmp
%ProgramFiles(x86)%\internet download manager\set9bb2.tmp
%ProgramFiles(x86)%\internet download manager\set9bc3.tmp
%ProgramFiles(x86)%\internet download manager\set9bf3.tmp
%ProgramFiles(x86)%\internet download manager\set9bf4.tmp
%ProgramFiles(x86)%\internet download manager\set9c04.tmp
%ProgramFiles(x86)%\internet download manager\set9c15.tmp
%ProgramFiles(x86)%\internet download manager\set9c26.tmp
%ProgramFiles(x86)%\internet download manager\set9c36.tmp
%ProgramFiles(x86)%\internet download manager\set9c47.tmp
%ProgramFiles(x86)%\internet download manager\set9c67.tmp
%ProgramFiles(x86)%\internet download manager\set9c68.tmp
%ProgramFiles(x86)%\internet download manager\set9c79.tmp
%ProgramFiles(x86)%\internet download manager\set9c7a.tmp
%ProgramFiles(x86)%\internet download manager\set9c8a.tmp
%ProgramFiles(x86)%\internet download manager\set9c9b.tmp
%ProgramFiles(x86)%\internet download manager\set9cbb.tmp
%ProgramFiles(x86)%\internet download manager\set9cbc.tmp
%ProgramFiles(x86)%\internet download manager\set9ccd.tmp
%ProgramFiles(x86)%\internet download manager\set9cdd.tmp
%ProgramFiles(x86)%\internet download manager\set9cde.tmp
%ProgramFiles(x86)%\internet download manager\set9cef.tmp
%ProgramFiles(x86)%\internet download manager\set9d00.tmp
%ProgramFiles(x86)%\internet download manager\set9d10.tmp
%ProgramFiles(x86)%\internet download manager\set9d11.tmp
%ProgramFiles(x86)%\internet download manager\set9d41.tmp
%ProgramFiles(x86)%\internet download manager\set9d52.tmp
%ProgramFiles(x86)%\internet download manager\set9d72.tmp
%ProgramFiles(x86)%\internet download manager\set9d83.tmp
%ProgramFiles(x86)%\internet download manager\set9d93.tmp
%ProgramFiles(x86)%\internet download manager\set9da4.tmp
%ProgramFiles(x86)%\internet download manager\set9da5.tmp
%ProgramFiles(x86)%\internet download manager\set9db6.tmp
%ProgramFiles(x86)%\internet download manager\set9dd6.tmp
%ProgramFiles(x86)%\internet download manager\set9dd7.tmp
%ProgramFiles(x86)%\internet download manager\set9de7.tmp
%ProgramFiles(x86)%\internet download manager\set9df8.tmp
%ProgramFiles(x86)%\internet download manager\set9df9.tmp
%ProgramFiles(x86)%\internet download manager\set9e0a.tmp
%ProgramFiles(x86)%\internet download manager\set9e0b.tmp
%ProgramFiles(x86)%\internet download manager\set9e1b.tmp
%ProgramFiles(x86)%\internet download manager\set9e2c.tmp
%ProgramFiles(x86)%\internet download manager\set9e3d.tmp
%ProgramFiles(x86)%\internet download manager\set9e4d.tmp
%ProgramFiles(x86)%\internet download manager\set9e4e.tmp
%ProgramFiles(x86)%\internet download manager\set9e7e.tmp
%ProgramFiles(x86)%\internet download manager\set9e8f.tmp
%ProgramFiles(x86)%\internet download manager\set9eaf.tmp
%ProgramFiles(x86)%\internet download manager\set9ec0.tmp
%ProgramFiles(x86)%\internet download manager\set9ed0.tmp
%ProgramFiles(x86)%\internet download manager\set9ee1.tmp
%ProgramFiles(x86)%\internet download manager\set9ee2.tmp
%ProgramFiles(x86)%\internet download manager\set9ef2.tmp
%ProgramFiles(x86)%\internet download manager\set9f13.tmp
%ProgramFiles(x86)%\internet download manager\set9f14.tmp
%ProgramFiles(x86)%\internet download manager\set9f15.tmp
%ProgramFiles(x86)%\internet download manager\set9f25.tmp
%ProgramFiles(x86)%\internet download manager\set9f36.tmp
%ProgramFiles(x86)%\internet download manager\set9f37.tmp
%ProgramFiles(x86)%\internet download manager\set9f57.tmp
%ProgramFiles(x86)%\internet download manager\set9f68.tmp
%ProgramFiles(x86)%\internet download manager\set9f78.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9f89.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9f9a.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9faa.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fab.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fbc.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fcd.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fce.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fde.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fef.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fff.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta020.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta030.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta041.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta052.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta053.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta063.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta074.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta075.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta085.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta096.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta097.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0a8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0b8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0c9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0da.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0db.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0eb.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0fc.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta10c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta11d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta11e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta12f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta13f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta160.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta161.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta171.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta182.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta192.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1a3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1a4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1b5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1c5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1c6.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1d7.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1e8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1e9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1f9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta20a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta21a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta22b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta22c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta24c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta25d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta25e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta26f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta28f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta29f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2b0.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2b1.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2c2.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2c3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2d3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2e4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2e5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2f6.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta306.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta317.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta327.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta338.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta349.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta359.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta35a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta36b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta37c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta38c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta38d.tmp
%ProgramFiles(x86)%\internet download manager\seta3ad.tmp
%ProgramFiles(x86)%\internet download manager\seta3ae.tmp
%ProgramFiles(x86)%\internet download manager\seta3bf.tmp
%ProgramFiles(x86)%\internet download manager\seta3d0.tmp
%ProgramFiles(x86)%\internet download manager\seta3d1.tmp
%ProgramFiles(x86)%\internet download manager\seta3e1.tmp
%ProgramFiles(x86)%\internet download manager\seta3e2.tmp
%ProgramFiles(x86)%\internet download manager\seta403.tmp
%ProgramFiles(x86)%\internet download manager\seta404.tmp
%ProgramFiles(x86)%\internet download manager\seta424.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta444.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta445.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta456.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta466.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta467.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta468.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta479.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta47a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta48b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta49b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta49c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4ad.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4ae.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4be.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4bf.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4d0.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4d1.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4d2.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4e3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4e4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4f4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4f5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta506.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta517.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta518.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta528.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta529.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta549.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta54a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta55b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta55c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta56d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta56e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta57e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta57f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta590.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta591.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5a2.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5a3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5b3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5c4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5c5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5d5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5d6.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5e7.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5f8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5f9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta609.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta60a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta61b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta62c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta63c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta63d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta64e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta64f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta65f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta670.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta671.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta682.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta683.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta693.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta694.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta695.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6a6.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6a7.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6b8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6c8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6c9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6da.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6db.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6eb.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6ec.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6fd.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta70e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta70f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta71f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta720.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta731.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta732.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta733.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta744.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta745.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta755.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta756.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta767.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta768.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta778.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta779.tmp
%ProgramFiles(x86)%\internet download manager\seta77a.tmp
%ProgramFiles(x86)%\internet download manager\seta7ca.tmp
%ProgramFiles(x86)%\internet download manager\seta7da.tmp
%ProgramFiles(x86)%\internet download manager\seta7eb.tmp
%ProgramFiles(x86)%\internet download manager\seta7fb.tmp
%ProgramFiles(x86)%\internet download manager\seta7fc.tmp
%ProgramFiles(x86)%\internet download manager\seta7fd.tmp
%ProgramFiles(x86)%\internet download manager\seta80e.tmp
%ProgramFiles(x86)%\internet download manager\seta81f.tmp
%ProgramFiles(x86)%\internet download manager\seta82f.tmp
%ProgramFiles(x86)%\internet download manager\seta830.tmp
%ProgramFiles(x86)%\internet download manager\seta841.tmp
%ProgramFiles(x86)%\internet download manager\seta852.tmp
%ProgramFiles(x86)%\internet download manager\seta853.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta863.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta874.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta875.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta885.tmp
%ProgramFiles(x86)%\internet download manager\seta886.tmp
%ProgramFiles(x86)%\internet download manager\seta897.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8a8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8a9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8b9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8ba.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8bb.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8cc.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8cd.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8de.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8df.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8ef.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8f0.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta901.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta902.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta912.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta923.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta924.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta935.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta945.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta946.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta947.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta958.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta959.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta96a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta97a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta98b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta98c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta99c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta99d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta99e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9af.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9b0.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9c1.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9c2.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9d2.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9e3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9e4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9f5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9f6.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa06.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa17.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa18.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa28.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa29.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa3a.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa3b.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa4c.tmp
%ProgramFiles(x86)%\internet download manager\setaa4d.tmp
%ProgramFiles(x86)%\internet download manager\setaa5d.tmp
%ProgramFiles(x86)%\internet download manager\setaa6e.tmp
%ProgramFiles(x86)%\internet download manager\setaa6f.tmp
C:\users\public\desktop\idm.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\grabber help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\idm help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\license.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\tutorials.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
%APPDATA%\idm\defextmap.dat
%APPDATA%\idm\urlexclist.dat
%APPDATA%\idm\idmfc.dat
%APPDATA%\idm\idmmzcc5\meta-inf\zigbert.rsa
%APPDATA%\idm\idmmzcc5\chrome.manifest
%APPDATA%\idm\idmmzcc5\icon.png
%APPDATA%\idm\idmmzcc5\install.js
%APPDATA%\idm\idmmzcc5\install.rdf
%APPDATA%\idm\idmmzcc5\chrome\idmmzcc.jar
%APPDATA%\idm\idmmzcc5\components\idmhelper5.js
%APPDATA%\idm\idmmzcc5\components\idmmzcc.dll
%APPDATA%\idm\idmmzcc5\components\iidmhelper5.xpt
%APPDATA%\idm\idmmzcc5\components\iidmmzcc.xpt
%APPDATA%\idm\idmmzcc5\components12\idmmzcc.dll
%APPDATA%\idm\idmmzcc5\components12\idmmzcc64.dll
%APPDATA%\idm\idmmzcc5\components2\idmhelper.js
%APPDATA%\idm\idmmzcc5\components2\idmmzcc.dll
%APPDATA%\idm\idmmzcc5\components2\idmmzcc64.dll
%APPDATA%\idm\idmmzcc5\components2\iidmhelper.xpt
%APPDATA%\idm\idmmzcc5\components2\iidmmzcc.xpt
%APPDATA%\idm\idmmzcc5\components2\idmcchandler2.dll
%ProgramFiles(x86)%\internet download manager\idmcchandler2.dll
%APPDATA%\idm\idmmzcc5\components2\idmcchandler2_64.dll
%ProgramFiles(x86)%\internet download manager\idmcchandler2_64.dll
%APPDATA%\idm\idmmzcc5\meta-inf\manifest.mf
%APPDATA%\idm\idmmzcc5\meta-inf\zigbert.sf
%TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\setc890.tmp
%TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\setc8c0.tmp
%TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\setc8d1.tmp
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
%WINDIR%\inf\oem3.pnf
%APPDATA%\idm\scheduler\s_1.dt
%APPDATA%\dmcache\settings.bak
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a1b7b41-17d4.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a1b7b46-c70.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\log
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
%TEMP%\bb4ff62d-b38e-4956-b4dd-ed8a40fb8b34.tmp
%TEMP%\scoped_dir3184_438672845\idmedgeext.crx
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
%TEMP%\scoped_dir3184_438672845\crx_install\manifest.json
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
%TEMP%\scoped_dir3184_438672845\crx_install\background.js
%TEMP%\scoped_dir3184_438672845\crx_install\captured.html
%TEMP%\scoped_dir3184_438672845\crx_install\content.js
%TEMP%\scoped_dir3184_438672845\crx_install\debug.js
%TEMP%\scoped_dir3184_438672845\crx_install\document.js
%TEMP%\scoped_dir3184_438672845\crx_install\welcome.html
%TEMP%\scoped_dir3184_438672845\crx_install\welcome.js
%TEMP%\scoped_dir3184_438672845\crx_install\images\headbkgd.gif
%TEMP%\scoped_dir3184_438672845\crx_install\images\headtitle.gif
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo128.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo16.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo16x.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo32.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo32x.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo48.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logotonec.gif
%TEMP%\scoped_dir3184_438672845\crx_install\_metadata\verified_contents.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\ar\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\de\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\en\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\es\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\fa\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\fr\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\he\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\it\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\nl\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\pl\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\pt\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\ru\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\th\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\tr\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\vn\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\zh_cn\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\zh_tw\messages.json
%LOCALAPPDATA%\microsoft\edge\user data\default\extension rules\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\extension rules\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\extension rules\log
%LOCALAPPDATA%\microsoft\edge\user data\default\extension rules\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\3351369d6616fd1e_0
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
%LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f6b2e04d03c656dc_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000008
%TEMP%\cv_debug.log
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
%LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
%LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
%LOCALAPPDATA%\microsoft\edge\user data\last browser
%LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
%TEMP%\ecf16201-e1ea-4250-ac92-c59c4141ae51.tmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log

Sets the 'hidden' attribute to the following files

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat

Deletes following files that it created itself

%ProgramFiles(x86)%\internet download manager\toolbar\set9607.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9657.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9678.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set9699.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96ba.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96cc.tmp
%ProgramFiles(x86)%\internet download manager\toolbar\set96ed.tmp
%ProgramFiles(x86)%\internet download manager\set96ff.tmp
%ProgramFiles(x86)%\internet download manager\set9711.tmp
%ProgramFiles(x86)%\internet download manager\set9732.tmp
%ProgramFiles(x86)%\internet download manager\set9753.tmp
%ProgramFiles(x86)%\internet download manager\set9784.tmp
%ProgramFiles(x86)%\internet download manager\set97a5.tmp
%ProgramFiles(x86)%\internet download manager\set97d6.tmp
%ProgramFiles(x86)%\internet download manager\set9901.tmp
%ProgramFiles(x86)%\internet download manager\set9913.tmp
%ProgramFiles(x86)%\internet download manager\set9934.tmp
%ProgramFiles(x86)%\internet download manager\set9955.tmp
%ProgramFiles(x86)%\internet download manager\set9986.tmp
%ProgramFiles(x86)%\internet download manager\set9998.tmp
%ProgramFiles(x86)%\internet download manager\set99d8.tmp
%ProgramFiles(x86)%\internet download manager\set99ea.tmp
%ProgramFiles(x86)%\internet download manager\set9a3a.tmp
%ProgramFiles(x86)%\internet download manager\set9a5b.tmp
%ProgramFiles(x86)%\internet download manager\set9a9c.tmp
%ProgramFiles(x86)%\internet download manager\set9aad.tmp
%ProgramFiles(x86)%\internet download manager\set9ade.tmp
%ProgramFiles(x86)%\internet download manager\set9af0.tmp
%ProgramFiles(x86)%\internet download manager\set9b21.tmp
%ProgramFiles(x86)%\internet download manager\set9b51.tmp
%ProgramFiles(x86)%\internet download manager\set9b92.tmp
%ProgramFiles(x86)%\internet download manager\set9bc3.tmp
%ProgramFiles(x86)%\internet download manager\set9bf4.tmp
%ProgramFiles(x86)%\internet download manager\set9c15.tmp
%ProgramFiles(x86)%\internet download manager\set9c36.tmp
%ProgramFiles(x86)%\internet download manager\set9c67.tmp
%ProgramFiles(x86)%\internet download manager\set9c79.tmp
%ProgramFiles(x86)%\internet download manager\set9c8a.tmp
%ProgramFiles(x86)%\internet download manager\set9cbb.tmp
%ProgramFiles(x86)%\internet download manager\set9ccd.tmp
%ProgramFiles(x86)%\internet download manager\set9cde.tmp
%ProgramFiles(x86)%\internet download manager\set9d00.tmp
%ProgramFiles(x86)%\internet download manager\set9d11.tmp
%ProgramFiles(x86)%\internet download manager\set9d52.tmp
%ProgramFiles(x86)%\internet download manager\set9d83.tmp
%ProgramFiles(x86)%\internet download manager\set9da4.tmp
%ProgramFiles(x86)%\internet download manager\set9db6.tmp
%ProgramFiles(x86)%\internet download manager\set9dd7.tmp
%ProgramFiles(x86)%\internet download manager\set9df8.tmp
%ProgramFiles(x86)%\internet download manager\set9e0a.tmp
%ProgramFiles(x86)%\internet download manager\set9e1b.tmp
%ProgramFiles(x86)%\internet download manager\set9e3d.tmp
%ProgramFiles(x86)%\internet download manager\set9e4e.tmp
%ProgramFiles(x86)%\internet download manager\set9e8f.tmp
%ProgramFiles(x86)%\internet download manager\set9ec0.tmp
%ProgramFiles(x86)%\internet download manager\set9ee1.tmp
%ProgramFiles(x86)%\internet download manager\set9ef2.tmp
%ProgramFiles(x86)%\internet download manager\set9f14.tmp
%ProgramFiles(x86)%\internet download manager\set9f25.tmp
%ProgramFiles(x86)%\internet download manager\set9f37.tmp
%ProgramFiles(x86)%\internet download manager\set9f68.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9f89.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9faa.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fbc.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fce.tmp
%ProgramFiles(x86)%\internet download manager\languages\set9fef.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta020.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta041.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta053.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta074.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta085.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta097.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0b8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0da.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta0eb.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta10c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta11e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta13f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta161.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta182.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1a3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1b5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1c6.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1e8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta1f9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta21a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta22c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta25d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta26f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta29f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2b1.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2c3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2e4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta2f6.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta317.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta338.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta359.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta36b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta38c.tmp
%ProgramFiles(x86)%\internet download manager\seta3ad.tmp
%ProgramFiles(x86)%\internet download manager\seta3bf.tmp
%ProgramFiles(x86)%\internet download manager\seta3d1.tmp
%ProgramFiles(x86)%\internet download manager\seta3e2.tmp
%ProgramFiles(x86)%\internet download manager\seta404.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta444.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta456.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta467.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta479.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta48b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta49c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4ae.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4bf.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4d1.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4e3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta4f4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta506.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta518.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta529.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta54a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta55c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta56e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta57f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta591.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5a3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5c4.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5d5.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5e7.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta5f9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta60a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta62c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta63d.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta64f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta670.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta682.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta693.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta695.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6a7.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6c8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6da.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6eb.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta6fd.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta70f.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta720.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta732.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta744.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta755.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta767.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta778.tmp
%ProgramFiles(x86)%\internet download manager\seta77a.tmp
%ProgramFiles(x86)%\internet download manager\seta7da.tmp
%ProgramFiles(x86)%\internet download manager\seta7fb.tmp
%ProgramFiles(x86)%\internet download manager\seta7fd.tmp
%ProgramFiles(x86)%\internet download manager\seta81f.tmp
%ProgramFiles(x86)%\internet download manager\seta830.tmp
%ProgramFiles(x86)%\internet download manager\seta852.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta863.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta875.tmp
%ProgramFiles(x86)%\internet download manager\seta886.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8a8.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8b9.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8bb.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8cd.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8df.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta8f0.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta902.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta923.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta935.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta946.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta958.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta96a.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta98b.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta99c.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta99e.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9b0.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9c2.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9e3.tmp
%ProgramFiles(x86)%\internet download manager\languages\seta9f5.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa06.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa18.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa29.tmp
%ProgramFiles(x86)%\internet download manager\languages\setaa3b.tmp
%ProgramFiles(x86)%\internet download manager\setaa4d.tmp
%ProgramFiles(x86)%\internet download manager\setaa6e.tmp
%TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\idmwfp.cat
%TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\idmwfp.inf
%TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\idmwfp64.sys
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%TEMP%\bb4ff62d-b38e-4956-b4dd-ed8a40fb8b34.tmp
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo128.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo16.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo32.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo48.png
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\ar\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\de\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\en\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\es\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\fa\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\fr\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\he\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\it\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\nl\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\pl\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\pt\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\ru\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\th\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\tr\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\zh_cn\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\zh_tw\messages.json
%TEMP%\scoped_dir3184_438672845\idmedgeext.crx
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a1b7b41-17d4.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a1b7b46-c70.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001

Moves the following files

from %ProgramFiles(x86)%\internet download manager\toolbar\set9636.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
from %ProgramFiles(x86)%\internet download manager\toolbar\set9667.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3_hdpi15.bmp
from %ProgramFiles(x86)%\internet download manager\toolbar\set9689.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
from %ProgramFiles(x86)%\internet download manager\toolbar\set96aa.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3_hdpi15.bmp
from %ProgramFiles(x86)%\internet download manager\toolbar\set96bb.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
from %ProgramFiles(x86)%\internet download manager\toolbar\set96dd.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
from %ProgramFiles(x86)%\internet download manager\toolbar\set96ee.tmp to %ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
from %ProgramFiles(x86)%\internet download manager\set9700.tmp to %ProgramFiles(x86)%\internet download manager\brotli-license.txt
from %ProgramFiles(x86)%\internet download manager\set9712.tmp to %ProgramFiles(x86)%\internet download manager\defexclist.txt
from %ProgramFiles(x86)%\internet download manager\set9742.tmp to %ProgramFiles(x86)%\internet download manager\downlwithidm.dll
from %ProgramFiles(x86)%\internet download manager\set9783.tmp to %ProgramFiles(x86)%\internet download manager\downlwithidm64.dll
from %ProgramFiles(x86)%\internet download manager\set9785.tmp to %ProgramFiles(x86)%\internet download manager\grabber.chm
from %ProgramFiles(x86)%\internet download manager\set97b6.tmp to %ProgramFiles(x86)%\internet download manager\idman.chm
from %ProgramFiles(x86)%\internet download manager\set98d1.tmp to %ProgramFiles(x86)%\internet download manager\idman.exe
from %ProgramFiles(x86)%\internet download manager\set9912.tmp to %ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
from %ProgramFiles(x86)%\internet download manager\set9923.tmp to %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
from %ProgramFiles(x86)%\internet download manager\set9944.tmp to %ProgramFiles(x86)%\internet download manager\idmbrbtn64.dll
from %ProgramFiles(x86)%\internet download manager\set9966.tmp to %ProgramFiles(x86)%\internet download manager\idmbroker.exe
from %ProgramFiles(x86)%\internet download manager\set9987.tmp to %ProgramFiles(x86)%\internet download manager\idmedgeext.crx
from %ProgramFiles(x86)%\internet download manager\set99a8.tmp to %ProgramFiles(x86)%\internet download manager\idmfc.dat
from %ProgramFiles(x86)%\internet download manager\set99e9.tmp to %ProgramFiles(x86)%\internet download manager\idmfsa.dll
from %ProgramFiles(x86)%\internet download manager\set9a29.tmp to %ProgramFiles(x86)%\internet download manager\idmftype.dat
from %ProgramFiles(x86)%\internet download manager\set9a4a.tmp to %ProgramFiles(x86)%\internet download manager\idmftype.dll
from %ProgramFiles(x86)%\internet download manager\set9a6c.tmp to %ProgramFiles(x86)%\internet download manager\idmftype64.dll
from %ProgramFiles(x86)%\internet download manager\set9aac.tmp to %ProgramFiles(x86)%\internet download manager\idmgcext.crx
from %ProgramFiles(x86)%\internet download manager\set9acd.tmp to %ProgramFiles(x86)%\internet download manager\idmgcext59.crx
from %ProgramFiles(x86)%\internet download manager\set9aef.tmp to %ProgramFiles(x86)%\internet download manager\idmgetall.dll
from %ProgramFiles(x86)%\internet download manager\set9b20.tmp to %ProgramFiles(x86)%\internet download manager\idmgetall64.dll
from %ProgramFiles(x86)%\internet download manager\set9b41.tmp to %ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
from %ProgramFiles(x86)%\internet download manager\set9b72.tmp to %ProgramFiles(x86)%\internet download manager\idmiecc.dll
from %ProgramFiles(x86)%\internet download manager\set9bb2.tmp to %ProgramFiles(x86)%\internet download manager\idmiecc64.dll
from %ProgramFiles(x86)%\internet download manager\set9bf3.tmp to %ProgramFiles(x86)%\internet download manager\idmindex.dll
from %ProgramFiles(x86)%\internet download manager\set9c04.tmp to %ProgramFiles(x86)%\internet download manager\idmintegrator64.exe
from %ProgramFiles(x86)%\internet download manager\set9c26.tmp to %ProgramFiles(x86)%\internet download manager\idmmkb.dll
from %ProgramFiles(x86)%\internet download manager\set9c47.tmp to %ProgramFiles(x86)%\internet download manager\idmmsghost.exe
from %ProgramFiles(x86)%\internet download manager\set9c68.tmp to %ProgramFiles(x86)%\internet download manager\idmmsghost.json
from %ProgramFiles(x86)%\internet download manager\set9c7a.tmp to %ProgramFiles(x86)%\internet download manager\idmmsghostmoz.json
from %ProgramFiles(x86)%\internet download manager\set9c9b.tmp to %ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
from %ProgramFiles(x86)%\internet download manager\set9cbc.tmp to %ProgramFiles(x86)%\internet download manager\idmmzcc2.xpi
from %ProgramFiles(x86)%\internet download manager\set9cdd.tmp to %ProgramFiles(x86)%\internet download manager\idmmzcc3.xpi
from %ProgramFiles(x86)%\internet download manager\set9cef.tmp to %ProgramFiles(x86)%\internet download manager\idmmzcc7.dll
from %ProgramFiles(x86)%\internet download manager\set9d10.tmp to %ProgramFiles(x86)%\internet download manager\idmmzcc7_64.dll
from %ProgramFiles(x86)%\internet download manager\set9d41.tmp to %ProgramFiles(x86)%\internet download manager\idmnetmon.dll
from %ProgramFiles(x86)%\internet download manager\set9d72.tmp to %ProgramFiles(x86)%\internet download manager\idmnetmon64.dll
from %ProgramFiles(x86)%\internet download manager\set9d93.tmp to %ProgramFiles(x86)%\internet download manager\idmnmcl.dll
from %ProgramFiles(x86)%\internet download manager\set9da5.tmp to %ProgramFiles(x86)%\internet download manager\idmopext.nex
from %ProgramFiles(x86)%\internet download manager\set9dd6.tmp to %ProgramFiles(x86)%\internet download manager\idmshellext.dll
from %ProgramFiles(x86)%\internet download manager\set9de7.tmp to %ProgramFiles(x86)%\internet download manager\idmshellext64.dll
from %ProgramFiles(x86)%\internet download manager\set9df9.tmp to %ProgramFiles(x86)%\internet download manager\idmtdi.cat
from %ProgramFiles(x86)%\internet download manager\set9e0b.tmp to %ProgramFiles(x86)%\internet download manager\idmtdi.inf
from %ProgramFiles(x86)%\internet download manager\set9e2c.tmp to %ProgramFiles(x86)%\internet download manager\idmtdi32.sys
from %ProgramFiles(x86)%\internet download manager\set9e4d.tmp to %ProgramFiles(x86)%\internet download manager\idmtdi64.sys
from %ProgramFiles(x86)%\internet download manager\set9e7e.tmp to %ProgramFiles(x86)%\internet download manager\idmvconv.dll
from %ProgramFiles(x86)%\internet download manager\set9eaf.tmp to %ProgramFiles(x86)%\internet download manager\idmvmprs.dll
from %ProgramFiles(x86)%\internet download manager\set9ed0.tmp to %ProgramFiles(x86)%\internet download manager\idmvmprs64.dll
from %ProgramFiles(x86)%\internet download manager\set9ee2.tmp to %ProgramFiles(x86)%\internet download manager\idmvs.dll
from %ProgramFiles(x86)%\internet download manager\set9f13.tmp to %ProgramFiles(x86)%\internet download manager\idmwfp.cat
from %ProgramFiles(x86)%\internet download manager\set9f15.tmp to %ProgramFiles(x86)%\internet download manager\idmwfp.inf
from %ProgramFiles(x86)%\internet download manager\set9f36.tmp to %ProgramFiles(x86)%\internet download manager\idmwfp32.sys
from %ProgramFiles(x86)%\internet download manager\set9f57.tmp to %ProgramFiles(x86)%\internet download manager\idmwfp64.sys
from %ProgramFiles(x86)%\internet download manager\set9f78.tmp to %ProgramFiles(x86)%\internet download manager\idmwfpaa.sys
from %ProgramFiles(x86)%\internet download manager\languages\set9f9a.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_ar.lng
from %ProgramFiles(x86)%\internet download manager\languages\set9fab.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_ba.lng
from %ProgramFiles(x86)%\internet download manager\languages\set9fcd.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_be.lng
from %ProgramFiles(x86)%\internet download manager\languages\set9fde.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_bg.lng
from %ProgramFiles(x86)%\internet download manager\languages\set9fff.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_chn2.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta030.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_cht.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta052.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_cz.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta063.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_de.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta075.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_dk.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta096.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_es.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta0a8.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_et.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta0c9.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_fa.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta0db.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_fi.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta0fc.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_fr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta11d.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_ge.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta12f.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_gr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta160.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_hi.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta171.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_hu.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta192.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_id.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta1a4.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_it.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta1c5.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_iw.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta1d7.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_jp.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta1e9.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_kr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta20a.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_mn.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta22b.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_my.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta24c.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_nl.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta25e.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_no.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta28f.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_pl.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta2b0.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_pt.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta2c2.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_ptbr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta2d3.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_ro.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta2e5.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_ru.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta306.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_sk.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta327.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_sr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta349.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_sw.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta35a.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_th.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta37c.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta38d.tmp to %ProgramFiles(x86)%\internet download manager\languages\idm_vn.lng
from %ProgramFiles(x86)%\internet download manager\seta3ae.tmp to %ProgramFiles(x86)%\internet download manager\ieext.htm
from %ProgramFiles(x86)%\internet download manager\seta3d0.tmp to %ProgramFiles(x86)%\internet download manager\iegetall.htm
from %ProgramFiles(x86)%\internet download manager\seta3e1.tmp to %ProgramFiles(x86)%\internet download manager\iegetvl.htm
from %ProgramFiles(x86)%\internet download manager\seta403.tmp to %ProgramFiles(x86)%\internet download manager\iegetvl2.htm
from %ProgramFiles(x86)%\internet download manager\seta424.tmp to %ProgramFiles(x86)%\internet download manager\iemonitor.exe
from %ProgramFiles(x86)%\internet download manager\languages\seta445.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_al.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta466.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_am.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta468.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_ar.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta47a.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_az.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta49b.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_bg.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta4ad.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_bn.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta4be.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_chn.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta4d0.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_cht.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta4d2.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_cz.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta4e4.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_de.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta4f5.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_dk.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta517.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_es.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta528.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_et.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta549.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_fa.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta55b.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_fi.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta56d.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_fr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta57e.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_ge.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta590.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_gr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta5a2.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_gu.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta5b3.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_hi.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta5c5.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_hu.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta5d6.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_id.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta5f8.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_it.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta609.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_iw.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta61b.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_jp.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta63c.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_kr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta64e.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_lao.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta65f.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_mm.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta671.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_mn.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta683.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_my.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta694.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_nl.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta6a6.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_pl.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta6b8.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_pt.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta6c9.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_ptbr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta6db.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_ru.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta6ec.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_sk.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta70e.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_sr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta71f.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_src.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta731.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_th.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta733.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_tr.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta745.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_ua.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta756.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_ug.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta768.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_uz.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta779.tmp to %ProgramFiles(x86)%\internet download manager\languages\inst_vn.lng
from %ProgramFiles(x86)%\internet download manager\seta7ca.tmp to %ProgramFiles(x86)%\internet download manager\libcrypto.dll
from %ProgramFiles(x86)%\internet download manager\seta7eb.tmp to %ProgramFiles(x86)%\internet download manager\libssl.dll
from %ProgramFiles(x86)%\internet download manager\seta7fc.tmp to %ProgramFiles(x86)%\internet download manager\license.txt
from %ProgramFiles(x86)%\internet download manager\seta80e.tmp to %ProgramFiles(x86)%\internet download manager\mediumilstart.exe
from %ProgramFiles(x86)%\internet download manager\seta82f.tmp to %ProgramFiles(x86)%\internet download manager\oldjsproxy.dll
from %ProgramFiles(x86)%\internet download manager\seta841.tmp to %ProgramFiles(x86)%\internet download manager\openssl-license.txt
from %ProgramFiles(x86)%\internet download manager\seta853.tmp to %ProgramFiles(x86)%\internet download manager\scheduler.chm
from %ProgramFiles(x86)%\internet download manager\languages\seta874.tmp to %ProgramFiles(x86)%\internet download manager\languages\template.lng
from %ProgramFiles(x86)%\internet download manager\languages\seta885.tmp to %ProgramFiles(x86)%\internet download manager\languages\template_inst.lng
from %ProgramFiles(x86)%\internet download manager\seta897.tmp to %ProgramFiles(x86)%\internet download manager\tips.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta8a9.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_ar.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta8ba.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_chn.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta8cc.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_cht.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta8de.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_cz.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta8ef.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_de.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta901.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_es.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta912.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_fa.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta924.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_fr.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta945.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_gr.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta947.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_hu.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta959.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_id.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta97a.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_it.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta98c.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_iw.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta99d.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_jp.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta9af.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_kr.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta9c1.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_nl.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta9d2.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_pl.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta9e4.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_ptbr.txt
from %ProgramFiles(x86)%\internet download manager\languages\seta9f6.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_ru.txt
from %ProgramFiles(x86)%\internet download manager\languages\setaa17.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_sk.txt
from %ProgramFiles(x86)%\internet download manager\languages\setaa28.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_th.txt
from %ProgramFiles(x86)%\internet download manager\languages\setaa3a.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
from %ProgramFiles(x86)%\internet download manager\languages\setaa4c.tmp to %ProgramFiles(x86)%\internet download manager\languages\tips_vn.txt
from %ProgramFiles(x86)%\internet download manager\setaa5d.tmp to %ProgramFiles(x86)%\internet download manager\tutor.chm
from %ProgramFiles(x86)%\internet download manager\setaa6f.tmp to %ProgramFiles(x86)%\internet download manager\uninstall.exe
from %TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\setc890.tmp to %TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\idmwfp64.sys
from %TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\setc8c0.tmp to %TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\idmwfp.cat
from %TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\setc8d1.tmp to %TEMP%\{70f7ca0a-2fe0-f448-a48d-c60f63bc3306}\idmwfp.inf
from <SYSTEM32>\catroot2\edbtmp.log to <SYSTEM32>\catroot2\edb.log
from %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\extension rules\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\extension rules\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
from %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current

Modifies the following files

%LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog_runonce.etl
%LOCALAPPDATA%\microsoft\edge\user data\last version
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
%LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\web data
%LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
%LOCALAPPDATA%\microsoft\edge\user data\default\visited links
%LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\history

Substitutes the following files

%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo128.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo16.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo32.png
%TEMP%\scoped_dir3184_438672845\crx_install\images\logo48.png
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\ar\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\de\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\en\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\es\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\fa\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\fr\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\he\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\it\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\nl\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\pl\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\pt\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\ru\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\th\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\tr\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\zh_cn\messages.json
%TEMP%\scoped_dir3184_438672845\crx_install\_locales\zh_tw\messages.json

Network activity

Connects to

'cy###mania.ws':80
'co####.edge.skype.com':443
'cy###mania.ws':443
'chrome.google.com':443
'go#####agmanager.com':443
'dr#######bidk.cloudfront.net':443
'cr#.####g2.amazontrust.com':80
'x.##2.us':80
'st####e.ko-fi.com':443
'st####.##oudflareinsights.com':443
'gd.###checarib.com':443
'x1.#.lencr.org':80

TCP

HTTP GET requests

http://cy###mania.ws/
http://cr#.####g2.amazontrust.com/rootg2.cer
http://x.##2.us/x.cer
http://x1.#.lencr.org/

Other

'co####.edge.skype.com':443
'cy###mania.ws':443
'chrome.google.com':443
'go#####agmanager.com':443
'dr#######bidk.cloudfront.net':443
'st####e.ko-fi.com':443
'st####.##oudflareinsights.com':443
'gd.###checarib.com':443

UDP

DNS ASK te##.#####netdownloadmanager.com
DNS ASK cy###mania.ws
DNS ASK co####.edge.skype.com
DNS ASK chrome.google.com
DNS ASK go#####agmanager.com
DNS ASK fo###.#oogleapis.com
DNS ASK dr#######bidk.cloudfront.net
DNS ASK cr#.####g2.amazontrust.com
DNS ASK x.##2.us
DNS ASK gd.###checarib.com
DNS ASK st####e.ko-fi.com
DNS ASK st####.##oudflareinsights.com
DNS ASK x1.#.lencr.org

Miscellaneous

Searches for the following windows

ClassName: 'Edit' WindowName: ''
ClassName: '' WindowName: ''
ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
ClassName: 'IDM_Download_Panel_controller2_class' WindowName: '5492'
ClassName: 'IDM_Download_Panel_controller2_class' WindowName: '3184'
ClassName: 'IDM_Download_Panel_controller2_class' WindowName: '3284'

Creates and executes the following

'%ProgramFiles(x86)%\internet download manager\idman.exe' /onsilentsetup /s /q
'%ProgramFiles(x86)%\internet download manager\idmintegrator64.exe' -runcm
'%ProgramFiles(x86)%\internet download manager\uninstall.exe' -instdriv

Executes the following

'%WINDIR%\syswow64\infdefaultinstall.exe' "%TEMP%\RarSFX0\en.inf"
'%WINDIR%\syswow64\rundll32.exe' advpack.dll,LaunchINFSection %TEMP%\RarSFX0\EN.inf,Install
'%WINDIR%\syswow64\cmd.exe' /Q /C taskkill /f /t /im "idman.exe"
'<SYSTEM32>\rundll32.exe' SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 %ProgramFiles(x86)%\Internet Download Manager\idmwfp.inf
'<SYSTEM32>\svchost.exe' -k DcomLaunch -p -s DeviceInstall
'%WINDIR%\syswow64\net.exe' start IDMWFP
'<SYSTEM32>\runonce.exe' -r
'%WINDIR%\syswow64\net1.exe' start IDMWFP
'<SYSTEM32>\grpconv.exe' -o
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMShellExt64.dll"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMShellExt64.dll"
'%WINDIR%\syswow64\runonce.exe' -r
'%WINDIR%\syswow64\grpconv.exe' -o
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument http://cybermania.ws/
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://cybermania.ws/
'%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1848,655402355742244471,14595965267453212000,131072 --lang=en-US --service-sandbox-type=none --mojo-p...
'%WINDIR%\syswow64\infdefaultinstall.exe' "%TEMP%\RarSFX0\en.inf"' (with hidden window)
'%WINDIR%\syswow64\rundll32.exe' advpack.dll,LaunchINFSection %TEMP%\RarSFX0\EN.inf,Install' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /Q /C taskkill /f /t /im "idman.exe"' (with hidden window)
'%ProgramFiles(x86)%\internet download manager\idmintegrator64.exe' -runcm' (with hidden window)
'<SYSTEM32>\rundll32.exe' SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 %ProgramFiles(x86)%\Internet Download Manager\idmwfp.inf' (with hidden window)
'%WINDIR%\syswow64\net.exe' start IDMWFP' (with hidden window)
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://cybermania.ws/' (with hidden window)

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial