Analysis

  • max time kernel
    206s
  • max time network
    214s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230915-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/10/2023, 10:02

General

  • Target

    toggltrack-windows64.exe

  • Size

    73.0MB

  • MD5

    62a315f09543e79f88f0cfceeffdc4f3

  • SHA1

    a837280c17a6e2ea177a762ac97203101c91abb0

  • SHA256

    30b3393fe8c9b8dca31f1b8c5323fbc8d6d67ee39187f4af2350487d034da8fd

  • SHA512

    50f0f379010580be818eb4629834472b16fbaf2e47d8f97c12a994fd67574ee1c8b2d19765425176725f478e5869607a1eaac20697e9a6771e35ae3b3acd01a4

  • SSDEEP

    1572864:RgM2JK9C9dfYoScl1ggKtGcs80ecc3HEsySQgW/uG9HPNGjiRf0Xa:R6JKSfYe1Hcs+3E7oWmGOiR8Xa

Score
5/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Control Panel 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\toggltrack-windows64.exe
    "C:\Users\Admin\AppData\Local\Temp\toggltrack-windows64.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4996
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5048
      • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\createdump.exe
        "C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\createdump.exe" --squirrel-firstrun
        3⤵
        • Executes dropped EXE
        PID:4164
      • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.exe
        "C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.exe" --squirrel-firstrun
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies Control Panel
        PID:5028

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

    Filesize

    80B

    MD5

    7189d5fa917926bf5c1e11db47cec8cd

    SHA1

    39b59d758ea1e720e934053f995462a23c00e4dd

    SHA256

    b047c669f4dbeba6c1c5709024b2ea651b6eaec1fca44f566e2d7e8c61a134a6

    SHA512

    f02e4245451288ce8054ab110a31a5ba46dd42f295d4e9fbbbdfb2973ecd00ec3513a725e39ef613e8b8ba5ffcb5ee7409416086fe44e96c894deceb456fd2b9

  • C:\Users\Admin\AppData\Local\SquirrelTemp\TogglTrack-9.0.1-full.nupkg

    Filesize

    72.5MB

    MD5

    de151196a2f054ce3dba0829fb727d69

    SHA1

    df8c533c01bee51c7525a6ef639cdfd32341a8d1

    SHA256

    75df42774354cb8a07078dba1373529fe5e4017643f58d845437020aca474f7a

    SHA512

    0dd31ec265cf3898e71ae4ec7730364fbc9434fe60de955738c8dde6a2949dfe79d7ba238923b95413de7b2ca9db41112743f2101f7f023af71f91460a325341

  • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

    Filesize

    1.8MB

    MD5

    ee8f91260ed608d2907481de34251269

    SHA1

    4b11883dea9c1e1d1ece7a6fba894e6c6e7690c4

    SHA256

    031189f39426f51e8bfceaf502e2204e088d722415f64c7ed0efa69421abdbed

    SHA512

    6648b2c0a9085eb125db77686052173e84acc7aa194ee9e61a9d53ebe788740cba1ad7060cbb137e599993689d3c195c01920af9fe16989f16392de8157facdb

  • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

    Filesize

    1.8MB

    MD5

    ee8f91260ed608d2907481de34251269

    SHA1

    4b11883dea9c1e1d1ece7a6fba894e6c6e7690c4

    SHA256

    031189f39426f51e8bfceaf502e2204e088d722415f64c7ed0efa69421abdbed

    SHA512

    6648b2c0a9085eb125db77686052173e84acc7aa194ee9e61a9d53ebe788740cba1ad7060cbb137e599993689d3c195c01920af9fe16989f16392de8157facdb

  • C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

    Filesize

    180KB

    MD5

    c46c719ec2af6a5c9b2ed59a93d4f101

    SHA1

    e5502c08146ee8a42f0acfccd8dadeff920db089

    SHA256

    ab2baee0ac659c54024da645950aed5964efe85d34d98b7b307274dd74d99353

    SHA512

    6980265ee32984b576abb6947bd3a0c0fb9eb8830973178d019497dae53ed0f685bfb3faa0519531d5fd850bc6684ddccdf2603bfd5592b13746c33f6f8c7071

  • C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico

    Filesize

    74KB

    MD5

    98d7c2021fb80d0799b450759f2fb2b3

    SHA1

    d2063c1cf9e574137f10543bd113faf252575266

    SHA256

    61a31113e5892a9971614b3fe9935fc258e525e35213e6bebe5c44fd2bc5fbb6

    SHA512

    0361420ca3ab415372058578ede9d34a02314cf5fc87d402c1d95c5a1aa5f5f86cb8b52f29387861d142c0c49894c34f1032c6f1b68f910ebdb9b9bb7119ffe0

  • C:\Users\Admin\AppData\Local\TogglTrack\TogglTrack.exe

    Filesize

    276KB

    MD5

    2a055cc9f0a5c6ea6ee68e6135dbd6cc

    SHA1

    29768a091bc20cfbf8b7db9ab3360cc2fd0566e1

    SHA256

    0222c5962095d9ccfd9f4585bf94a862e06058f79a99ef240e730c2f4acfece2

    SHA512

    18cc1e9d47d37685613dbe785662a2387cc5dae26073bf2b1c70be1922871bde77cc3c2a84dd124ce32b89873ef98e6aedfecfd9bcb7ec3b2649b39dd5751748

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\DirectWriteForwarder.dll

    Filesize

    508KB

    MD5

    dbda6789a7275a8b1f510974d6ef90d6

    SHA1

    85d269fa94f086720ea04a285bad4fc796f1db21

    SHA256

    e40d70d730b38098ea4b6b351e2279e3cc372e1f222541ff6e772eacf1c6a809

    SHA512

    d251ec89d1e809b0983e657c140360a48f54c334798ff33940a478178714a034d321b90c078ad71ab8e65d5e97a452d8c583274dd0181a72886c66a6967e7ebb

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\DirectWriteForwarder.dll

    Filesize

    508KB

    MD5

    dbda6789a7275a8b1f510974d6ef90d6

    SHA1

    85d269fa94f086720ea04a285bad4fc796f1db21

    SHA256

    e40d70d730b38098ea4b6b351e2279e3cc372e1f222541ff6e772eacf1c6a809

    SHA512

    d251ec89d1e809b0983e657c140360a48f54c334798ff33940a478178714a034d321b90c078ad71ab8e65d5e97a452d8c583274dd0181a72886c66a6967e7ebb

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\Microsoft.Win32.Primitives.dll

    Filesize

    25KB

    MD5

    47045f636e52e159fa183fa104ca814d

    SHA1

    ffb3a9591e72d2bbb24f873280ebcd9f703ac20e

    SHA256

    35568a41f9e4a0511712fa58288e4a42f5ab39e8bce14373696f5945e878ad3d

    SHA512

    b652cdabffa5f2a73f4973c4346ea7f5147af900a8ce98df5e06f8a2bca8ec0654199645013bfc55226252e6c91848091bbaf48bdd7df6d125c0a92980d521ed

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\Microsoft.Win32.Primitives.dll

    Filesize

    25KB

    MD5

    47045f636e52e159fa183fa104ca814d

    SHA1

    ffb3a9591e72d2bbb24f873280ebcd9f703ac20e

    SHA256

    35568a41f9e4a0511712fa58288e4a42f5ab39e8bce14373696f5945e878ad3d

    SHA512

    b652cdabffa5f2a73f4973c4346ea7f5147af900a8ce98df5e06f8a2bca8ec0654199645013bfc55226252e6c91848091bbaf48bdd7df6d125c0a92980d521ed

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\Microsoft.Win32.Registry.dll

    Filesize

    85KB

    MD5

    490685d7b6b7a1051eabcf5a70d1be67

    SHA1

    d3a9095dc033b35afb3e9ba20f18e321c2423f36

    SHA256

    e9641c735602d75997355ab5727e6b53a21b31b4f87eb0624ec278fd1716d934

    SHA512

    93393c7f37bcfc365cd943f8302357ffe8fb778bc4b0ead40d35b320eb94a2e1d8827ad5d3526c0906c26b9951d1bd5c645b06fbc3265497d17d7d3cd60daca6

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\Microsoft.Win32.Registry.dll

    Filesize

    85KB

    MD5

    490685d7b6b7a1051eabcf5a70d1be67

    SHA1

    d3a9095dc033b35afb3e9ba20f18e321c2423f36

    SHA256

    e9641c735602d75997355ab5727e6b53a21b31b4f87eb0624ec278fd1716d934

    SHA512

    93393c7f37bcfc365cd943f8302357ffe8fb778bc4b0ead40d35b320eb94a2e1d8827ad5d3526c0906c26b9951d1bd5c645b06fbc3265497d17d7d3cd60daca6

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\PresentationCore.dll

    Filesize

    8.3MB

    MD5

    4f8224d57cfe966c55e501ce87e2848d

    SHA1

    23f50fd0bd9faced96c0529f369321bc1cb422ba

    SHA256

    9359856504c2d5c7575918b56ec1806acdf9cb44254c5af51efc56638f1da52d

    SHA512

    52bbe2e86a8e3c5eb431803f269a82d608956d4f5c2801692f9da52185d415d3ed526a41c7ade17e459e899397fd5aac60297415f3f0b740e3d3d9c38df431b3

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\PresentationCore.dll

    Filesize

    8.3MB

    MD5

    4f8224d57cfe966c55e501ce87e2848d

    SHA1

    23f50fd0bd9faced96c0529f369321bc1cb422ba

    SHA256

    9359856504c2d5c7575918b56ec1806acdf9cb44254c5af51efc56638f1da52d

    SHA512

    52bbe2e86a8e3c5eb431803f269a82d608956d4f5c2801692f9da52185d415d3ed526a41c7ade17e459e899397fd5aac60297415f3f0b740e3d3d9c38df431b3

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\PresentationFramework.dll

    Filesize

    15.5MB

    MD5

    78346dc1f3989b884896c9ba13d1c0e3

    SHA1

    9a783bb0dbb61280b62986d07c5e71663d0abc49

    SHA256

    83c5b4d1dc174753cf3b0be4b414e50665433f3065c7cf1241535537d2d7de19

    SHA512

    7516c1209334bedcd3c07956f3ce2d25914a200d40cb6db036ccb3a08eae18bf8c0713d674e5d69b779fcd8d3fc59c71d43f11236349b7afb9de3f32b12abde5

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\PresentationFramework.dll

    Filesize

    15.5MB

    MD5

    78346dc1f3989b884896c9ba13d1c0e3

    SHA1

    9a783bb0dbb61280b62986d07c5e71663d0abc49

    SHA256

    83c5b4d1dc174753cf3b0be4b414e50665433f3065c7cf1241535537d2d7de19

    SHA512

    7516c1209334bedcd3c07956f3ce2d25914a200d40cb6db036ccb3a08eae18bf8c0713d674e5d69b779fcd8d3fc59c71d43f11236349b7afb9de3f32b12abde5

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\PresentationNative_cor3.dll

    Filesize

    1.2MB

    MD5

    c7bcc68b81e965fe74ef58d503c58deb

    SHA1

    99990f204f7318eeb8de6f9664ebcd0d42ea81b7

    SHA256

    06cb4da78f5cfddece86329241a2af9d6390ce1082b02f7db2e3bf320215a23e

    SHA512

    cab2bc27eca0ee097324a2471c8228f1723cfef5df9971359eec7710082c122b26a7aa1d1e6faab75389438a358bbff2973ad67e8dd9046455b4c4ac880d858c

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\PresentationNative_cor3.dll

    Filesize

    1.2MB

    MD5

    c7bcc68b81e965fe74ef58d503c58deb

    SHA1

    99990f204f7318eeb8de6f9664ebcd0d42ea81b7

    SHA256

    06cb4da78f5cfddece86329241a2af9d6390ce1082b02f7db2e3bf320215a23e

    SHA512

    cab2bc27eca0ee097324a2471c8228f1723cfef5df9971359eec7710082c122b26a7aa1d1e6faab75389438a358bbff2973ad67e8dd9046455b4c4ac880d858c

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Collections.NonGeneric.dll

    Filesize

    98KB

    MD5

    9a2b28045193dd48225e6238bfc5f171

    SHA1

    78df2495f0b93fec307cee2ddeeef7a51069fbbf

    SHA256

    b6c057a73822f60b527cf4bb72fc408de8a9630d7c6a5265c1715a1f29843d67

    SHA512

    b2fdf16a106010b9e87fb8dfac3387e062b1be89e580ae5a63c6a028107f569b1555c147568881852b55986fbc6572272983e2cde830a03a5b0fbd8c801f21ab

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Collections.NonGeneric.dll

    Filesize

    98KB

    MD5

    9a2b28045193dd48225e6238bfc5f171

    SHA1

    78df2495f0b93fec307cee2ddeeef7a51069fbbf

    SHA256

    b6c057a73822f60b527cf4bb72fc408de8a9630d7c6a5265c1715a1f29843d67

    SHA512

    b2fdf16a106010b9e87fb8dfac3387e062b1be89e580ae5a63c6a028107f569b1555c147568881852b55986fbc6572272983e2cde830a03a5b0fbd8c801f21ab

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Collections.Specialized.dll

    Filesize

    93KB

    MD5

    d4c6f060e72af1f0c557de3a9b12269d

    SHA1

    9c650ea44eaf6f7b1218c48791715aa670b1d257

    SHA256

    55c7c055e9a1ae81d56cc8cbb7bd64150a0bbc3e3f046bd117b4b538ed36ce58

    SHA512

    72518df5f43514715370f78c2bc3da3c62a81df9a54e17ca857c96953c48e48c7447f7f32e50e2f3825de9a3f3ab79eef50e97eaf08402a970629093a80ace3f

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Collections.Specialized.dll

    Filesize

    93KB

    MD5

    d4c6f060e72af1f0c557de3a9b12269d

    SHA1

    9c650ea44eaf6f7b1218c48791715aa670b1d257

    SHA256

    55c7c055e9a1ae81d56cc8cbb7bd64150a0bbc3e3f046bd117b4b538ed36ce58

    SHA512

    72518df5f43514715370f78c2bc3da3c62a81df9a54e17ca857c96953c48e48c7447f7f32e50e2f3825de9a3f3ab79eef50e97eaf08402a970629093a80ace3f

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Collections.dll

    Filesize

    258KB

    MD5

    063c9dc23e064aa79ce355e54bd549b8

    SHA1

    e83115460aabda58555a41d3d844ee3e7b133b1f

    SHA256

    103bc5abe5068bc9590a02b39ffeff1d73fe1bc13737f076aa2bb1906b58230b

    SHA512

    e47dd3d8c723e62b5bddeba8202937c7a2f4aa4eb7a5c7c673a859f2f709f86192067979dc957fc29b2157850114872144611447fe89e33fb9de96f2cb388ee9

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Collections.dll

    Filesize

    258KB

    MD5

    063c9dc23e064aa79ce355e54bd549b8

    SHA1

    e83115460aabda58555a41d3d844ee3e7b133b1f

    SHA256

    103bc5abe5068bc9590a02b39ffeff1d73fe1bc13737f076aa2bb1906b58230b

    SHA512

    e47dd3d8c723e62b5bddeba8202937c7a2f4aa4eb7a5c7c673a859f2f709f86192067979dc957fc29b2157850114872144611447fe89e33fb9de96f2cb388ee9

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.ComponentModel.Primitives.dll

    Filesize

    73KB

    MD5

    faf310b43c7bd626e0e5dbc9b95e9680

    SHA1

    fc86d68a14022ac4ce585cfc13272a4762367f28

    SHA256

    cc66c6ace0f945ceb1ff4d8962902e7b9fd9bd45c11b9d5a834d48fd8b7f41ac

    SHA512

    d1580f52a3a679c67b0988408c99064856988a1adf44ef2316446e60e5cdaf851cce32df0e7b2a656c2887ebb09a4a73f5d44fa711d88a98ce631145f2396405

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.ComponentModel.Primitives.dll

    Filesize

    73KB

    MD5

    faf310b43c7bd626e0e5dbc9b95e9680

    SHA1

    fc86d68a14022ac4ce585cfc13272a4762367f28

    SHA256

    cc66c6ace0f945ceb1ff4d8962902e7b9fd9bd45c11b9d5a834d48fd8b7f41ac

    SHA512

    d1580f52a3a679c67b0988408c99064856988a1adf44ef2316446e60e5cdaf851cce32df0e7b2a656c2887ebb09a4a73f5d44fa711d88a98ce631145f2396405

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Diagnostics.Debug.dll

    Filesize

    15KB

    MD5

    00a650e7fc3b6deaf5e02c8496e85048

    SHA1

    0f370b6cb4fdc5c4128d0c1d669bee32ef10406b

    SHA256

    9aa4be9e65435e4c34c5a18b982ee7f309001f148e7c86b18ce57c6ff6f60727

    SHA512

    c90b122cf1013e39365a822ad9a37932ae8d08cd68c2aa48ca0367a1f34f71f08184fd7a3be7e605a88c1b6382f303aee0cb75f51dbbd0962d9b6ce53f1ba8e5

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.IO.Packaging.dll

    Filesize

    273KB

    MD5

    fb3ad9819f1702bf7147b5fbfc8820c0

    SHA1

    39a89c3b736961574fb095f4ecced0023022c19a

    SHA256

    366b7009be4fcf000fea40fad63ab9152d0a28ba805d2b74dcc63fbf86e5881f

    SHA512

    72c8f6726b9449403ab43b50d64f993d7bc697d030a239a95dc821470707177a4d1e2adf2f19563fd25d7d2c64646cda5cd85d21184737f234cf91678c37a056

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.IO.Packaging.dll

    Filesize

    273KB

    MD5

    fb3ad9819f1702bf7147b5fbfc8820c0

    SHA1

    39a89c3b736961574fb095f4ecced0023022c19a

    SHA256

    366b7009be4fcf000fea40fad63ab9152d0a28ba805d2b74dcc63fbf86e5881f

    SHA512

    72c8f6726b9449403ab43b50d64f993d7bc697d030a239a95dc821470707177a4d1e2adf2f19563fd25d7d2c64646cda5cd85d21184737f234cf91678c37a056

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Private.CoreLib.dll

    Filesize

    10.1MB

    MD5

    60a073bb11ac4e86c8abf6e00e53ef57

    SHA1

    76b2447bf287be43a2997e3449ab9001c9562251

    SHA256

    edbc29ad170384d0e1203e38e029bfd0aebcecaa8a96c18ebeef77a888860847

    SHA512

    e9a3d96791a51b5a0489cadac70b722a87ca4b55f09b44c6b9caef4bd127098e424516bc3d9c6bca60004cb17ff302e1417811406c3036d33362feff763ba87b

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Private.CoreLib.dll

    Filesize

    10.1MB

    MD5

    60a073bb11ac4e86c8abf6e00e53ef57

    SHA1

    76b2447bf287be43a2997e3449ab9001c9562251

    SHA256

    edbc29ad170384d0e1203e38e029bfd0aebcecaa8a96c18ebeef77a888860847

    SHA512

    e9a3d96791a51b5a0489cadac70b722a87ca4b55f09b44c6b9caef4bd127098e424516bc3d9c6bca60004cb17ff302e1417811406c3036d33362feff763ba87b

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Private.Uri.dll

    Filesize

    246KB

    MD5

    0c3e54692b76bfffcef155fcdd36ab1b

    SHA1

    f8dcdf2e09fe3ee8124f40409d84e4e1be1d40a8

    SHA256

    ad37c23a12827982385ee5e0fc4a4d1ec978b9836a17de4ebb28161263561e13

    SHA512

    e4eba61bcc91d771438780b25e5bd7169cbbe1e5a27855a74569ab37ea33b5915644fe3b772902fd1c4aedd7ad395de7c72ff7aa2bce58c6e670e73c663b3b20

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Private.Uri.dll

    Filesize

    246KB

    MD5

    0c3e54692b76bfffcef155fcdd36ab1b

    SHA1

    f8dcdf2e09fe3ee8124f40409d84e4e1be1d40a8

    SHA256

    ad37c23a12827982385ee5e0fc4a4d1ec978b9836a17de4ebb28161263561e13

    SHA512

    e4eba61bcc91d771438780b25e5bd7169cbbe1e5a27855a74569ab37ea33b5915644fe3b772902fd1c4aedd7ad395de7c72ff7aa2bce58c6e670e73c663b3b20

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Runtime.CompilerServices.VisualC.dll

    Filesize

    19KB

    MD5

    7a78c5d1830a67c58cdf41c9a7ef618f

    SHA1

    02e3d4d0504dd56564ec9fad6a1cedbbb1a43a79

    SHA256

    4a7618c43339f546101aeb538cbab5fe4ef5a0c429018e729d0e70dcfecf0ce7

    SHA512

    a5731ab55997c15bad57c342326c4d3190a5c2591bb1df0cf215007ac460a8845992ddb0fd94f8ca77e16d87c969c5b0d442ca56873a893cb2894ce171ebeaba

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Runtime.CompilerServices.VisualC.dll

    Filesize

    19KB

    MD5

    7a78c5d1830a67c58cdf41c9a7ef618f

    SHA1

    02e3d4d0504dd56564ec9fad6a1cedbbb1a43a79

    SHA256

    4a7618c43339f546101aeb538cbab5fe4ef5a0c429018e729d0e70dcfecf0ce7

    SHA512

    a5731ab55997c15bad57c342326c4d3190a5c2591bb1df0cf215007ac460a8845992ddb0fd94f8ca77e16d87c969c5b0d442ca56873a893cb2894ce171ebeaba

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Runtime.Extensions.dll

    Filesize

    17KB

    MD5

    c239ec1bbdf5879d357ad0f4a3357e82

    SHA1

    f0c0b07b4c8fc57a4e3e8f141344f69403fa7ea1

    SHA256

    3a2b6775c52769884b2394c99cd4cb35aef0102f65eca4ff0018a2ca96aadd72

    SHA512

    dff1b895c151acb95cc2a8418cadb0869b9530fb83a7e2950b68fcc07f8b7e6e4f2442bf8fefca54ecbade1177cf5093914b0b917520c8b5d2a66cdcde65d342

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Runtime.InteropServices.dll

    Filesize

    50KB

    MD5

    7752033fe18c4487944f81e765d4ddd6

    SHA1

    959b2df5e9afc230d8438f621f33d110be4ec8bc

    SHA256

    27a9d2dd6386cb2a7e57361ef9cd63ebe4dbf187c2cfc2e5496816723d5f45e5

    SHA512

    ee28b69cdcaae0fde22d5ac4ade0550a0f928f16c6cbdb7a0f78d784b4c6d89ab90c60750ad3897d21f7dc3a7589e5e015e506e5fd592ff2fa30e84f4d09fd62

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Runtime.InteropServices.dll

    Filesize

    50KB

    MD5

    7752033fe18c4487944f81e765d4ddd6

    SHA1

    959b2df5e9afc230d8438f621f33d110be4ec8bc

    SHA256

    27a9d2dd6386cb2a7e57361ef9cd63ebe4dbf187c2cfc2e5496816723d5f45e5

    SHA512

    ee28b69cdcaae0fde22d5ac4ade0550a0f928f16c6cbdb7a0f78d784b4c6d89ab90c60750ad3897d21f7dc3a7589e5e015e506e5fd592ff2fa30e84f4d09fd62

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Runtime.dll

    Filesize

    41KB

    MD5

    362918f0726c461a4e3b2a19bff6a9f5

    SHA1

    a927ce656569c8e94b7c8cd83f0390a27791e598

    SHA256

    fd4f000ce39801d95e04d75b2187238115918ee69558278f86f8acf0e924bac1

    SHA512

    e5b2a510b554ab0306344f283e5d0b7c38f459327a38839e57b411547ea68504f9a0d88a5f63a65c783b9b66b2c62accebd619ed3c5e31b322f3006db3467473

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Threading.Thread.dll

    Filesize

    15KB

    MD5

    888bb1eb787f4ed6fb9f682fcca3fd2c

    SHA1

    307bde0be0862cc6e44a4358cc15ed2cdad11c24

    SHA256

    456bffaa3a97b354e8628538f1668a3521a4bc7bac4c18fab9b0cd4d17bbf657

    SHA512

    b60c7b166f7cc28493eb813900d29813a6914b2777eb4e9bf04fa400f493ed303272b166016ae76c08bbe2e9616a6e7b16cf960f37a2de4226f6a41e580df14e

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Threading.dll

    Filesize

    78KB

    MD5

    cfd4a5b4a546ce2eeac3ad8b205e70d9

    SHA1

    9fbd6b6f9e77c974b4e070cf375c92118b7a2498

    SHA256

    f4939fe9c3ac8e3562ad1887512494ba6d668b7ebd5c1bd163dcaf861bf5c4d3

    SHA512

    2e4c9f21dc3763374f0f39a6dd1942fd7f57b16c20ea4704fb4b9c8b80fab730ed32ce792493fe67ea885868d78b73f953f2f77f3fc987bc3f133365e8f1b6be

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Threading.dll

    Filesize

    78KB

    MD5

    cfd4a5b4a546ce2eeac3ad8b205e70d9

    SHA1

    9fbd6b6f9e77c974b4e070cf375c92118b7a2498

    SHA256

    f4939fe9c3ac8e3562ad1887512494ba6d668b7ebd5c1bd163dcaf861bf5c4d3

    SHA512

    2e4c9f21dc3763374f0f39a6dd1942fd7f57b16c20ea4704fb4b9c8b80fab730ed32ce792493fe67ea885868d78b73f953f2f77f3fc987bc3f133365e8f1b6be

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Xaml.dll

    Filesize

    1.4MB

    MD5

    cbc16e6eeb22e0da1ea1b703e60c6b81

    SHA1

    a208b8e53218067fc58770af70c7cd72a48e6ffd

    SHA256

    a38eabe67a87bcc3ee84339f7c970c105fcea9c60c7c2c3f25f702c7395823b4

    SHA512

    f1e75288d750c76b2aa596d6d55ab7656908b248ecc3a8bd7d43b6eeb6a37f82477cf1c477d73f3f6da7eef60f2af837e2c57c899cf2d64c8e42dbec4627b328

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\System.Xaml.dll

    Filesize

    1.4MB

    MD5

    cbc16e6eeb22e0da1ea1b703e60c6b81

    SHA1

    a208b8e53218067fc58770af70c7cd72a48e6ffd

    SHA256

    a38eabe67a87bcc3ee84339f7c970c105fcea9c60c7c2c3f25f702c7395823b4

    SHA512

    f1e75288d750c76b2aa596d6d55ab7656908b248ecc3a8bd7d43b6eeb6a37f82477cf1c477d73f3f6da7eef60f2af837e2c57c899cf2d64c8e42dbec4627b328

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.deps.json

    Filesize

    181KB

    MD5

    d657bc7e4d31f525d52bccc5085747f2

    SHA1

    d60baeaaffe3b29bbeaf0d140839d1a433b86085

    SHA256

    18fbddacbf25d6cf0215d5b4df1a2cbdd7c7b2071b491c2c00858ff7ffd0f07d

    SHA512

    f76b6a2d81f351aa1faf2c507438f09f02e00761f0310b637e86706c0766fd9d4a5008e89d377226138ae437951e3713dd4111e27ab56b6393a8b021daf649a3

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.dll

    Filesize

    1.2MB

    MD5

    2d219ce81ecb2dd04cd39b573d2da668

    SHA1

    f45fad059778fda4d4289a8ac340ef9af25049f7

    SHA256

    165bd8486f6b750f64f92389f09c296cecb76d74d7679ce5a0ffa201792a7614

    SHA512

    39545f02a68bca9058c9ec5b6f30b3b250477c1178925cdbf998b505f2dd9de1ccfa3c63d9ed846e9a5a2c4a9596080fc8e86e0c6a9038208eb0d5ac6fcbde73

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.dll

    Filesize

    1.2MB

    MD5

    2d219ce81ecb2dd04cd39b573d2da668

    SHA1

    f45fad059778fda4d4289a8ac340ef9af25049f7

    SHA256

    165bd8486f6b750f64f92389f09c296cecb76d74d7679ce5a0ffa201792a7614

    SHA512

    39545f02a68bca9058c9ec5b6f30b3b250477c1178925cdbf998b505f2dd9de1ccfa3c63d9ed846e9a5a2c4a9596080fc8e86e0c6a9038208eb0d5ac6fcbde73

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.dll

    Filesize

    1.2MB

    MD5

    2d219ce81ecb2dd04cd39b573d2da668

    SHA1

    f45fad059778fda4d4289a8ac340ef9af25049f7

    SHA256

    165bd8486f6b750f64f92389f09c296cecb76d74d7679ce5a0ffa201792a7614

    SHA512

    39545f02a68bca9058c9ec5b6f30b3b250477c1178925cdbf998b505f2dd9de1ccfa3c63d9ed846e9a5a2c4a9596080fc8e86e0c6a9038208eb0d5ac6fcbde73

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.exe

    Filesize

    230KB

    MD5

    5e8701e01eb9ff48c57e6006fd8bdc24

    SHA1

    438186fdb1ee8b5bcaca4947080027ea645e5ab6

    SHA256

    5db30dacc71215af94b5b8396e1d15b4bf7e13ba5882021e168b41dbdf7a55fa

    SHA512

    9a428c735387df3d55706ec2e0381c5cc26eb7f54c723f1778e6425d21a5b2c4e8797ba415bd12dc49178820ae9ff3c248e5eb0a9ec512642b4669340576a963

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.exe

    Filesize

    230KB

    MD5

    5e8701e01eb9ff48c57e6006fd8bdc24

    SHA1

    438186fdb1ee8b5bcaca4947080027ea645e5ab6

    SHA256

    5db30dacc71215af94b5b8396e1d15b4bf7e13ba5882021e168b41dbdf7a55fa

    SHA512

    9a428c735387df3d55706ec2e0381c5cc26eb7f54c723f1778e6425d21a5b2c4e8797ba415bd12dc49178820ae9ff3c248e5eb0a9ec512642b4669340576a963

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.exe

    Filesize

    230KB

    MD5

    5e8701e01eb9ff48c57e6006fd8bdc24

    SHA1

    438186fdb1ee8b5bcaca4947080027ea645e5ab6

    SHA256

    5db30dacc71215af94b5b8396e1d15b4bf7e13ba5882021e168b41dbdf7a55fa

    SHA512

    9a428c735387df3d55706ec2e0381c5cc26eb7f54c723f1778e6425d21a5b2c4e8797ba415bd12dc49178820ae9ff3c248e5eb0a9ec512642b4669340576a963

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\TogglTrack.runtimeconfig.json

    Filesize

    451B

    MD5

    f852088e6ce99e9d2e2778724e2c164c

    SHA1

    ab80a3a6807fb9c1cbe330a772e2f754f07619a7

    SHA256

    db5686f651efc65cf702af4b260c09f385562d92c82d8dcfc53374eb78e8d6de

    SHA512

    1b808b68d6304525a828ce1d020e8e9d5aaa410ee74bee9fb14a9600d37d06a852b0c5b049c0f35e4a829644ea55d27dde351f520ce5c4971fa5eff398638c3e

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\WindowsBase.dll

    Filesize

    2.2MB

    MD5

    a3dddcd0178032ca6a533cc39b4571d8

    SHA1

    fc0cf5edee5d8d3c306db12eb6c4a62bd8c5f11d

    SHA256

    3e096e60158cfb43a512bb3ffa4f5585ce9da0be2278107b9c105649c21ae769

    SHA512

    43c12f114432642f9ff063ba147e74c9cc41b4642378bd3a17d55bd030ad5bb468533ecda236a73a407a97e5233eb75e6dc767c348f072f55aaa067243fe7804

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\WindowsBase.dll

    Filesize

    2.2MB

    MD5

    a3dddcd0178032ca6a533cc39b4571d8

    SHA1

    fc0cf5edee5d8d3c306db12eb6c4a62bd8c5f11d

    SHA256

    3e096e60158cfb43a512bb3ffa4f5585ce9da0be2278107b9c105649c21ae769

    SHA512

    43c12f114432642f9ff063ba147e74c9cc41b4642378bd3a17d55bd030ad5bb468533ecda236a73a407a97e5233eb75e6dc767c348f072f55aaa067243fe7804

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\clrjit.dll

    Filesize

    1.4MB

    MD5

    0c37a7141a6ac45d2d2517843e67642f

    SHA1

    3945fba3cf3fb9e7653518888944a2fc386c6cc2

    SHA256

    a296ed8b954cf14813c32db695fe2cdcec04d5b9624c3f50fb5803519f24c291

    SHA512

    d1969df7c4b47c58b7953f7139c3d5edef00f5038b470d5daf99f3d67094f4b1f7b13322b819a59ab1c94bb08f15b8582f9414e3982d430c5188bcd3f603626d

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\clrjit.dll

    Filesize

    1.4MB

    MD5

    0c37a7141a6ac45d2d2517843e67642f

    SHA1

    3945fba3cf3fb9e7653518888944a2fc386c6cc2

    SHA256

    a296ed8b954cf14813c32db695fe2cdcec04d5b9624c3f50fb5803519f24c291

    SHA512

    d1969df7c4b47c58b7953f7139c3d5edef00f5038b470d5daf99f3d67094f4b1f7b13322b819a59ab1c94bb08f15b8582f9414e3982d430c5188bcd3f603626d

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\coreclr.dll

    Filesize

    4.9MB

    MD5

    e7b637f7949d042ccd39f582f6367fe1

    SHA1

    20639962a55ad7b360af9d4a6c50c14b1ce6a0e8

    SHA256

    53b01f235e8b6909942f02f339d1765abd2a7e5d39422decb9ad5786ab8dc120

    SHA512

    28f31b1a175b847500c264bf97161390dd0f864767b857c2096d6eb99c2bd56b7e6062627c0dac0fdb3d20acc3f358f62f8aa7beff5e41b5a8eb8a2a194e1515

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\coreclr.dll

    Filesize

    4.9MB

    MD5

    e7b637f7949d042ccd39f582f6367fe1

    SHA1

    20639962a55ad7b360af9d4a6c50c14b1ce6a0e8

    SHA256

    53b01f235e8b6909942f02f339d1765abd2a7e5d39422decb9ad5786ab8dc120

    SHA512

    28f31b1a175b847500c264bf97161390dd0f864767b857c2096d6eb99c2bd56b7e6062627c0dac0fdb3d20acc3f358f62f8aa7beff5e41b5a8eb8a2a194e1515

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\createdump.exe

    Filesize

    56KB

    MD5

    1fefc857e346f7d1eebb1c66ef5b9230

    SHA1

    3eb453e06a1c80d72cb1f790d283c2d4411c5d98

    SHA256

    9cf6c0c706977d20bddda44108d17127347a8bcfb0969f7ef12afbd52bd6a4ef

    SHA512

    24589b504b831249a90c1268a6d7407d7496916809993106f27c2172900bd545748f92deec5a334766dc652cba0780b89e1e6f9334ed43769b376d8833dd7c59

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\createdump.exe

    Filesize

    56KB

    MD5

    1fefc857e346f7d1eebb1c66ef5b9230

    SHA1

    3eb453e06a1c80d72cb1f790d283c2d4411c5d98

    SHA256

    9cf6c0c706977d20bddda44108d17127347a8bcfb0969f7ef12afbd52bd6a4ef

    SHA512

    24589b504b831249a90c1268a6d7407d7496916809993106f27c2172900bd545748f92deec5a334766dc652cba0780b89e1e6f9334ed43769b376d8833dd7c59

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\createdump.exe

    Filesize

    56KB

    MD5

    1fefc857e346f7d1eebb1c66ef5b9230

    SHA1

    3eb453e06a1c80d72cb1f790d283c2d4411c5d98

    SHA256

    9cf6c0c706977d20bddda44108d17127347a8bcfb0969f7ef12afbd52bd6a4ef

    SHA512

    24589b504b831249a90c1268a6d7407d7496916809993106f27c2172900bd545748f92deec5a334766dc652cba0780b89e1e6f9334ed43769b376d8833dd7c59

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\hostfxr.dll

    Filesize

    366KB

    MD5

    02a007f073a27a9c1360affc0513ca16

    SHA1

    9aafb1316cca36cd5cdd2a6a3cdc7c1ab867ff68

    SHA256

    1330ca408495b1a206933c5b5e9bdd09b0311c9af4263dc96370380904b92fbc

    SHA512

    3ee7b255e428d451fc65ab3dda59b9ddd63b8787cbbdf0ccabb51794af6e3234ca5a2d2189e2de2ddbadd4a0312b7b0a65c4064e9468620f98918bf17f72ac04

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\hostfxr.dll

    Filesize

    366KB

    MD5

    02a007f073a27a9c1360affc0513ca16

    SHA1

    9aafb1316cca36cd5cdd2a6a3cdc7c1ab867ff68

    SHA256

    1330ca408495b1a206933c5b5e9bdd09b0311c9af4263dc96370380904b92fbc

    SHA512

    3ee7b255e428d451fc65ab3dda59b9ddd63b8787cbbdf0ccabb51794af6e3234ca5a2d2189e2de2ddbadd4a0312b7b0a65c4064e9468620f98918bf17f72ac04

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\hostpolicy.dll

    Filesize

    383KB

    MD5

    99932ee2d65887962dbd38b1ae9dc51e

    SHA1

    07dc6e46548ab90af27273d0c5ef92f36804fbb5

    SHA256

    05c4a3e5af8483bb2196bb6052c6589a4fffeab738a0b2caaf3954b8da732890

    SHA512

    aa8cfcd7017a62b4bb97197e436d80f54ce771e8a48a66b3c968fa7fdceacb90015d7c665f2f1ec7c4ddf7d05f560da2aec53627d0b350286838cd96fef1ca78

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\hostpolicy.dll

    Filesize

    383KB

    MD5

    99932ee2d65887962dbd38b1ae9dc51e

    SHA1

    07dc6e46548ab90af27273d0c5ef92f36804fbb5

    SHA256

    05c4a3e5af8483bb2196bb6052c6589a4fffeab738a0b2caaf3954b8da732890

    SHA512

    aa8cfcd7017a62b4bb97197e436d80f54ce771e8a48a66b3c968fa7fdceacb90015d7c665f2f1ec7c4ddf7d05f560da2aec53627d0b350286838cd96fef1ca78

  • C:\Users\Admin\AppData\Local\TogglTrack\app-9.0.1\mscorrc.dll

    Filesize

    143KB

    MD5

    dc037aea9924d74d9c42a99176008ada

    SHA1

    d65a0d1352bfb47c9be1584dcbdfd40b7a3ae080

    SHA256

    89843876c3337167c471b1387dcfc3cdb3643005525cf63871d031e91a66fc29

    SHA512

    5ab367060fc4b3796d8436eed2960deb125846068000ef83881fa98aec30ddea3caf1296f7bd6d55c81ecf5ab48db79da7ff1e3f9b51de066efa726b1d5ddd5e

  • C:\Users\Admin\AppData\Local\TogglTrack\packages\RELEASES

    Filesize

    80B

    MD5

    7189d5fa917926bf5c1e11db47cec8cd

    SHA1

    39b59d758ea1e720e934053f995462a23c00e4dd

    SHA256

    b047c669f4dbeba6c1c5709024b2ea651b6eaec1fca44f566e2d7e8c61a134a6

    SHA512

    f02e4245451288ce8054ab110a31a5ba46dd42f295d4e9fbbbdfb2973ecd00ec3513a725e39ef613e8b8ba5ffcb5ee7409416086fe44e96c894deceb456fd2b9

  • C:\Users\Admin\AppData\Local\TogglTrack\packages\TogglTrack-9.0.1-full.nupkg

    Filesize

    72.5MB

    MD5

    de151196a2f054ce3dba0829fb727d69

    SHA1

    df8c533c01bee51c7525a6ef639cdfd32341a8d1

    SHA256

    75df42774354cb8a07078dba1373529fe5e4017643f58d845437020aca474f7a

    SHA512

    0dd31ec265cf3898e71ae4ec7730364fbc9434fe60de955738c8dde6a2949dfe79d7ba238923b95413de7b2ca9db41112743f2101f7f023af71f91460a325341

  • memory/5028-497-0x00007FF9426E0000-0x00007FF942BDE000-memory.dmp

    Filesize

    5.0MB

  • memory/5028-461-0x00007FF9426E0000-0x00007FF942BDE000-memory.dmp

    Filesize

    5.0MB

  • memory/5048-194-0x00007FF94DC00000-0x00007FF94E6C1000-memory.dmp

    Filesize

    10.8MB

  • memory/5048-10-0x0000000001670000-0x0000000001680000-memory.dmp

    Filesize

    64KB

  • memory/5048-195-0x0000000001670000-0x0000000001680000-memory.dmp

    Filesize

    64KB

  • memory/5048-9-0x00007FF94DC00000-0x00007FF94E6C1000-memory.dmp

    Filesize

    10.8MB

  • memory/5048-8-0x0000000000CC0000-0x0000000000E96000-memory.dmp

    Filesize

    1.8MB

  • memory/5048-346-0x000000001D690000-0x000000001D6C8000-memory.dmp

    Filesize

    224KB

  • memory/5048-347-0x000000001D650000-0x000000001D65E000-memory.dmp

    Filesize

    56KB

  • memory/5048-401-0x000000001D8D0000-0x000000001D8F0000-memory.dmp

    Filesize

    128KB

  • memory/5048-509-0x00007FF94DC00000-0x00007FF94E6C1000-memory.dmp

    Filesize

    10.8MB