Analysis

  • max time kernel
    143s
  • max time network
    61s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 14:33

General

  • Target

    df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe

  • Size

    4.9MB

  • MD5

    f8c3d6326ce40fe135b55b18a762684a

  • SHA1

    5403fa880bbf7d89cb5b9f1461f7ae79b84dd1cf

  • SHA256

    df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

  • SHA512

    c44016ba3503993be3facbf5d610405408b77b7b44d4a1bd5cde79d9fea3c45ae7b1abe1581f2e0a0bab7836317dfd8b180d8845881f4053b2f37e1f19d8dd8d

  • SSDEEP

    98304:XuWkRoYCr+MVwMm6lvlV5CQvUp3BviX5Nm7TFqmftYSo56Gg8WkDOWd1g+8oob:XUOVwMndrnEYXi7TFqmVYSLGHWhU1rob

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 22 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe
    "C:\Users\Admin\AppData\Local\Temp\df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe" /silent
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2632
      • C:\Users\Admin\AppData\Local\Temp\is-0B5GG.tmp\win11privacyfix_2024.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-0B5GG.tmp\win11privacyfix_2024.tmp" /SL5="$501CE,3938692,978944,C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe" /silent
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:2800
        • C:\Users\Admin\AppData\Local\Temp\is-O4NHJ.tmp\closeapp.exe
          "C:\Users\Admin\AppData\Local\Temp\is-O4NHJ.tmp\closeapp.exe" Win11PrivacyFix
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:2700
        • C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe
          "C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe" -install
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2532
          • C:\Windows\system32\WerFault.exe
            C:\Windows\system32\WerFault.exe -u -p 2532 -s 1604
            5⤵
              PID:1668

    Network

          MITRE ATT&CK Enterprise v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbBugReporter.dll

            Filesize

            93KB

            MD5

            982c6effabc75cd60f7590a9b008ef9a

            SHA1

            2b2f0b5de8ba4f50b481b0d45474c60db9925ac4

            SHA256

            dabd55fe9793a7afa24e7e063cb501fb0a5e35a5a0fd18cffed0fc43dd807713

            SHA512

            4e27f845f167e7f8730c42c497da7330e96de972e025f1a0a6760acf80acad15c0600746c5a13f7e37165cee5b8f0b427fc416bb5faf90a974ec3c0f0f1e6998

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbCommons.dll

            Filesize

            132KB

            MD5

            7edb225ffc197b61401ccd8f9a78f200

            SHA1

            e531fdaf78ebe20d452e57e9a1c5e8677b5b48b4

            SHA256

            8c772ea92398ef1bcbfb3a8426bb28c1d35db03b6f8e5678f9074773151b6bc3

            SHA512

            325a7ab7a0b3b2243c33707315acef1a4e871736aff946b0a9580d3dd2552d29e7a9289c11cdf9c016c60e24e60d2bc8082e888cfde76803c890bc74f6da4351

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbDefault.dll

            Filesize

            480KB

            MD5

            44d531bff98136d2f26eae570b4f6bae

            SHA1

            bd744b78468595c8c7cb14b0ec042f1193c5ab86

            SHA256

            3396563874b8b758482090f1a88c4c73c9c6af7e71ff56575905788740806bac

            SHA512

            1e0002dc2798b29a4ad6c3f1fc41a6eac7024fd495cc8732390f81c6f0c6678aba3fc3f23c7d6e42220f20ee1bafb3b83172b7489f532e9bc7da91bf6a718162

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbGui.dll

            Filesize

            297KB

            MD5

            0cf85abfea0c0dac567d6599816e2241

            SHA1

            caf58a05bda9e5460bfbd78b2540825d0bb769a0

            SHA256

            9eeb98450dd3ac34b10581aa55ebb2fdc6f59fea390c24efbc80bf529d373493

            SHA512

            b8be84f0c40a80a992e3ccf655efc1a8e02852ff2366f01d1b5dfc48d9638bacafe1f9637862a4954b5b9e1933ccefbf143886f7759608d219d9dd37314989b2

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLanguage.dll

            Filesize

            50KB

            MD5

            505486bc6f473ccdba7c626da847bfa3

            SHA1

            75e445900040b0508106090a9b7cad5b91eec10b

            SHA256

            de9b6833c309f5c8f3fcc1cd962172429667230bfa733ced3a1e0239c130e264

            SHA512

            1b0b6ea1185944ad43702caf21c6dfd5d1209b8558c874af5279e6e09f02c07d9f0b81a019feba7b44b023deca2acfd073f26c1bbca4e3d92c2f0b46d8ebe101

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLauncher.UpdateRoutines.Plugin.Base.dll

            Filesize

            16KB

            MD5

            e63cca98c5ee1ba95b24f8da686928d8

            SHA1

            e95e39663ee1c99632460b71a6fdd2c871ab566e

            SHA256

            3036c4d3a979b8397a9093b04690567f860a8c2517b0ae2606aa123f72886beb

            SHA512

            d73e2df2820a86582946cd5476e7373339783e78f7dded939641d54d7638f50e54072ad814047392c7bb25f0ed37285d85d6db642c6a03324bde02b9cd1f49cb

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLog.Commons.dll

            Filesize

            16KB

            MD5

            4bdcf4ac37f06049b37cbce3f039fccf

            SHA1

            fb21f9403f2844a8615552ca9f3c00e0c2e042c5

            SHA256

            34a7174e1e0102e2e2d6a32415869be8c52caf1e9d5c44aa7f32be637e374232

            SHA512

            1500d713b96b6634d6a35110834b9b8c72c01423ea70f09475044eca0da0cd55fc9c249f78d62db8a468645c6cccc59b1ab21487f7ca019a251dcd30a9a391b3

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLog.dll

            Filesize

            32KB

            MD5

            f47edfcc1db23226b88026193c8c1d87

            SHA1

            574b2b14bf7b79431ececa1bb85ccdb2a89a0d86

            SHA256

            bc9d6b020826a7942737d44fdc090024cb7868f665a7feaa51027e1e662ff647

            SHA512

            3615849a87afd080a0871a274e8e5f2bdc00becc565745f9e44593ee98e943ed97f3708941d3e4f76d2435e320827c63acf20cd5abcd849d00b0949a4b7f5f7c

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbNotification.dll

            Filesize

            51KB

            MD5

            0ea9cfb5e2a0c2d5640dfa232ab7cdb8

            SHA1

            3c8ad06dbd61b3900e8e1eb19e65e83ccb36358b

            SHA256

            a641219798bd7a3d22694952a114d19e909a2046d08e178d99cd0c5e0e6a5160

            SHA512

            9523df43d51a975b742d7e073c3cda5ab7c6f6bf5a4a2cee69c578f416d954c2b6e46d9b28721c67042aefe6310d75da0b9c6394e44ec3822533e155b6e7ecba

          • C:\Program Files (x86)\Win11PrivacyFix\Program\AbRegistration.dll

            Filesize

            283KB

            MD5

            2ab53536c29b028952cb46b743c18410

            SHA1

            dfe03846e4ebe388f8716a902cab8ab7c77162a9

            SHA256

            b50d51aca8351b0416257549361a0ec3ce8c9a041b0a532684425fc1f47dc9b7

            SHA512

            f956ab29c6159c269c0d4a62bcca9479b0c016c3794a13a6ef739348cf7f0df092e0e2ea27be95f5dc415490516d943dc5f326cc4063936ef63dc70ca506ac47

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.cs.lang

            Filesize

            2KB

            MD5

            892cf81d8503c82688f5bc2fa6368aba

            SHA1

            cafe09c413fba14d6bd397caf648cfc2ad8cc70a

            SHA256

            2331a3e1a76d5eb5af54fcf9eec5ef6c62193f04946abfee4b6d8fe87377a724

            SHA512

            53d162d1ab10af452a70f2a2a09e13f32f1f5f1fcf2de5383ac9b3f86ed678be38ff0f4d0f555dd0355c802ffe14166bb86c464afef5b9dfeaf423c1a076dbbb

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.da.lang

            Filesize

            2KB

            MD5

            48282d5d0ae3804d8494787653d11cf5

            SHA1

            f275f428c492aa5ddf66d99ac067450ef216a572

            SHA256

            a45461e4bd5630f6c0d2c827307a34e6f84c08c033880f555673e084f1f12326

            SHA512

            967191fad0876973d3d7a027dfcf4f1cef7bea880a2ebc4e13b9314804b9b83797d183d6bbb5ea43ea036afa868a1c2b0b5f8f0ae54b61988722a71b30cef4b4

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.de.lang

            Filesize

            2KB

            MD5

            3e6136860bc341e8ccd3ad75c6785243

            SHA1

            bc57505f89d2562d4cb108dde1e6c8483aa3f1cd

            SHA256

            2947ae7a0a0b1f01794c24d888d4043f307b9dfe3d9d67ad60f94d4a8f23fe49

            SHA512

            1b25b6463b7f2cdb5bbf98bf6dc76fe1464aac0cec144c11bd5167262519524e04b916f1ae10bd5f8a22941f67fe7aad71dbe26feba0ad73398ba319b4efa4e9

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.el.lang

            Filesize

            3KB

            MD5

            1f963282698ecab57139c3070f9859ab

            SHA1

            6a6f99c8ea1b69d3853a9c10f7fc20e2e51e5c5d

            SHA256

            220708d0854a328c4648aa553a6de97f3230e9e8e5d78071361300261723d1e7

            SHA512

            abb2d285d9dbf6cf5ee4535bf4db8dfdb33cf14f2b7b25bd7681d32bd243256487a5d387518ced04fe0a72aabc9975183b7f538203134f484e824257c981f6f0

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.en.lang

            Filesize

            2KB

            MD5

            42c705eb61c55afc8555969bbd5c5641

            SHA1

            4561490aa99739fc6e69b0d697a894192f854af7

            SHA256

            7ad8cf0b3cc7ec308b345b14f417396baed95418486e3e07e823e1de1eadd3a4

            SHA512

            fcd8d6d1d4ebe0aa93548314cf93a72f4ca886bfcc768d8c197424880978e05533b0f655c1e88d1e4c12ad3b3edd0106381331317493e4a87d98a37d4039f493

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es-ar.lang

            Filesize

            2KB

            MD5

            6d8005a391ac5a80dc362fc890eb1441

            SHA1

            5584cb4aa4afc51816149aed43b2699f54b2e950

            SHA256

            8929e6401538219fce4e4d6d94bdf2f759646a0e02c252aee171c1bfce547e71

            SHA512

            4ce0c227bd54fcdfd0790436390cd671f3346a558d9e757161d980daf140703f0fb1c7e148fb426c747857622be0913f4228f7184a845d9dc688cd68ef4287a5

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es-mx.lang

            Filesize

            1KB

            MD5

            04bf85db4c87e6c9538a39be5494c0cd

            SHA1

            3554bf01e347db6d2d6245262e362fa59b54baae

            SHA256

            921d5679509738f6f8eacfa525321b0ceb6d43f6d22b2bd0480dc72e2cade846

            SHA512

            1fea7f4b115610a5c91e1f78601069cf307a3d71c2fd38b8fd6d61a26292c965089087cb1a130a88e1f5d5fbbadfa489915f0081621a6a3ff2b1a0be95b8dd6b

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es.lang

            Filesize

            2KB

            MD5

            46a5aff0e8bed38c71d491701b22b268

            SHA1

            60f1e7fa1fd39a239e71a3739374e7e6cff97bd9

            SHA256

            fa9ed5b24030cb443314f3b651e1a4d15ab8132495b6319d0047186d24f6d39a

            SHA512

            eebfbb19e11d3bae66aa7a89d5b01ce6fd903f58897d7ec5efa70abfc41edf20f751392f3bfbe0a462a04104ccc47e41238719c1767906b617e617c2cdc932ed

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.fr.lang

            Filesize

            2KB

            MD5

            08d142f3d4c9ff7cbae29d40bf396c4e

            SHA1

            2b75f366698c831486004d4e363a27f94e41b0a0

            SHA256

            75ff5b09f1aadc9fa98c8de5b073374d6fbede1acc1a316c1a71fe4a0e97e9bb

            SHA512

            b4f690575685c7ddb73ed8deb2cbfd29fdd0fdaab0347327c8b774713c74fb82203aa2d77049d4802f2784fcc32f5ea835af1a89d64e67831dc0a7df3059a568

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.hu.lang

            Filesize

            2KB

            MD5

            444b482c5768de2da6b258317d80f716

            SHA1

            1ce1a17a84450655b2e62b23eaf2e1547965ff0f

            SHA256

            ab07e043102eaefb5d9f255743ce7062d2ec36af81e41ac5f75ee76a956fb6b0

            SHA512

            33725b16e0f533045324f6ae223f36fcd0e96384f8274ba92539d4b3d3d1aea4e76d0224f9780b9250acb2b5d08c909605096411d9c2799d554d412ebf6a802e

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.it.lang

            Filesize

            2KB

            MD5

            6a122251d9e419107b1c9f88195d2a95

            SHA1

            77f3052cc8d575ca56062b543953a0c627a59b33

            SHA256

            49733224c63c16ec5b1657786d5aad67a208d4dbcef07e9a8e384dcfdf1a14f9

            SHA512

            def05bc4d171ede129258858ad1780a040520a6f7a87745c62849a5fa2a7daa1144b391ce6bb010db2dd66b81616c43a90284816b73b76af82f6e75e564b95dc

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ja.lang

            Filesize

            2KB

            MD5

            70fb3d95355af199812185032fa185d6

            SHA1

            84b55ec4deaab568c54b49090b77c610828e845a

            SHA256

            6115956a02f0fb171c45d92e989f0142f950fc1cc0922dd979f78a6676c277cc

            SHA512

            2694020a7ce8036b5e07ef6c06af4e7b21c5ace1efdb6637c3e22776cf5796203ce73706e7f6c7e5bc23a9866d5076e4d42ed87b69192d487b6f894040eb8223

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ko.lang

            Filesize

            2KB

            MD5

            4e9e64f74e7c247108edfb643e5b4f39

            SHA1

            e1ac8649067a84ce67c9e3bc2b6dab55982b83fa

            SHA256

            979f90f37f26998886b4e8a5103ad98f80ecc6fd1b93ad5c5fcf1e719471e84d

            SHA512

            7a0a8d09d9cc1eba26111aba86d0e4ec2857f6fc3aec159a67a18d747546bd52e7150538786cea617fbafa23a12665050beb0fbffe95b0609dd476451a043729

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nb.lang

            Filesize

            2KB

            MD5

            9be36a63c86be276f8ac7009568fe940

            SHA1

            bbb13149bd7168f0410d224dd9b034881b3f6f52

            SHA256

            a9bb04572681c6b0dea4a6aee4f2ee66a5da8d9c20b80bb9d50b0a3ce7dc97fb

            SHA512

            84affae84e755066c758a977ac0cb8cf15214c6bf4069f8f4c1c4c107b23d1517deb03b5b51addc8a69b89d8a685312a1e8f63cc7780b808ac3053ee4952f401

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nl-be.lang

            Filesize

            2KB

            MD5

            4e5d0171b80ad3ae4786e659e7e376c1

            SHA1

            aacb8b38cc95ccab38b04b33a49d2e12df983e64

            SHA256

            e42076c62c66ec16db8da4076adcfbcdaa05037d3d7af95b1b71595794f55ec1

            SHA512

            8a1af5a96be7e7a99046045baa31a8a9fdeb77b2c65988728ebbebaf558a0ec9b228e1cd9651a4c3d90b1b88ec5c4f3a57446d3f732c489e37e4625faf27cd14

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nl.lang

            Filesize

            2KB

            MD5

            c7130bb52b7a50d0280f05f25ed61749

            SHA1

            6d6e161a378aa16e56f60b306e3c048535ea9b58

            SHA256

            15ee1016ad7dfa4152e95b866fa8aa268306a630b25f0eb2246873492595ac8a

            SHA512

            f8fa81ca4bf331097574e44d16d2a9420c2e2028d597f5dc0579ea39a6d6cba4a58bac09b3665eed4dd847f751b8a298dbe704f40479c32de8bb1011b72c6961

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.pl.lang

            Filesize

            2KB

            MD5

            44f7a74ff4ae1d63902cc1eaf1cc7ce5

            SHA1

            58b3be17ab3708ff68324b2c4c1dc53ac522aa1f

            SHA256

            79f32c80ec8b5231ea667e7ad18f615bd70e64ae8a40fe0573b2c9e48c79854a

            SHA512

            14382c0fd206f6ad25103da48c7814373017849d8bb946bb9833388ce979ccd46745d6d7494f6dbc19b752805c5e60f7ed7415e38fea2c4fc9cabcfd25392143

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.pt-br.lang

            Filesize

            2KB

            MD5

            81310fbe70d8f8c50e25ffc436f9b600

            SHA1

            46354f01481eb979d2740b1e726ea607315295ad

            SHA256

            dce86b92b78f372f726847adddb82b5e13eb4cff46341a6dca38f35392424548

            SHA512

            fe4cf411b6cf982b46e452300ca885d75750eda3c56b42728feb0c4a3c84cbf634c08146ac59b6bba30d3df42d1ff5eecdf129b6d8399a7039d93419c3147d43

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ru.lang

            Filesize

            3KB

            MD5

            bdbf8a4e8730a875decd619dae4981a1

            SHA1

            d36b92eb9c762083fcb2361228c4076560479f75

            SHA256

            96e63627695ec559f201294bf365b9bdcd86334d9c45e579e19b594f11863de0

            SHA512

            ccb29032b432255b7540251e947690d3f27f132901a462fef89390405a88e3eed5fc9098c01c8da5460c233e88bab6742c19043007f9e51e8d02703cd89753c1

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sk.lang

            Filesize

            2KB

            MD5

            bc03942579c9acc20275fa8351911bb1

            SHA1

            0c151ad02475224065a4eb8e98df64e5d979db3e

            SHA256

            7aec25ea8221a0c70758230f6199d32477aa4a0b3de76f608c37d8503dd16532

            SHA512

            564847e0cebdd9feb0c7927093edf6e5c4f23f2642c480868f0d071f3ca646025efae4cff3568edfffc36cb2d596f74d4ed55462498188aa8a15ef783f36a569

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sl.lang

            Filesize

            2KB

            MD5

            1d02c7d66f3cc3c7a98a7d09e17861e5

            SHA1

            cdff14097315aedc72b7d7462ea816b77ec97755

            SHA256

            a2462ee3b336ef2f664827e7339d9ac4db6ea72af30aa13eddddaa6e80f14ec0

            SHA512

            20499b302a4e7348938e4e0f01b63548ea904b16d03f345b675219d5f98ec18615fb13692183cd1e87e6fb6bd08e303adcc6292f345232ac5c8639c155760529

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sv.lang

            Filesize

            1KB

            MD5

            77bd9249919fcb14021d74008081c8f3

            SHA1

            7a33912ac574aadf79da4098bad02e9e617a95ec

            SHA256

            154b8752d59d015b8ae247d838e67f74d6de05bca2b57be53c4bd861ddb439f7

            SHA512

            f71f7f2087b13412b627cbd25714347e2617b195f0444bedef296eb8f9892d7a62e91f83b399a42bac56899d8ca8182c321b6c5ff307c87a9d605960d2751d16

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.tr-tr.lang

            Filesize

            2KB

            MD5

            2870193c262d90ebef4fe8e8dd41c0bd

            SHA1

            4ef0294358bb157ad8e65aff4813317aee45acf0

            SHA256

            aa9b6bff3bfad946e9b4c4bf6b661315ec982e9a49b5962d974ba25582d1616a

            SHA512

            72ab7cded3fdda36ebf33e601ea19a5275aaf0838e10caef95eaf0f72311c07205dd867a711a54087ccb8807dafcb691b5f48a8c0629fff278b7f708a4abacf5

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.tr.lang

            Filesize

            2KB

            MD5

            914b2860029ed27935cf93046ef2c19f

            SHA1

            2f183f43df02dfe948265fb06c341f4f8c70e879

            SHA256

            7dab0308d5f56b3d748ce878ae080f61726ec1e94f8ecd8043683e0970d77d26

            SHA512

            d7238576618763a192e3f0a2bc4de9f1f7268202a70e294fd762522f07ec531608e2bdd115ea3416c16213b95ffbe61f1eeadd930872b0ab117e8dadc2e7a01e

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.uk.lang

            Filesize

            3KB

            MD5

            ba269edd94d46bfc92bb6c1ca9c627f8

            SHA1

            7d67499c2ba7810df9eb8548e65f53a2f78c33b4

            SHA256

            f0ae4ddef41631d9a0f9e6b91701478864368881149491ab0b7f7e955119a289

            SHA512

            63ff12e0435f134c608111710413b202a4cf1795f4647063b44b7794d2ef24b79570b9f49c700946e531ead1f046f66aa1e97adf9fd4d6d22e3f4f31eb6e7b1b

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.zh-cn.lang

            Filesize

            2KB

            MD5

            2b502aeacbac8b9d7a9254f8dc3a58c3

            SHA1

            266f6dc70750ef81d29c921b9bc54b88240282cf

            SHA256

            86d15de44b1a7a20e9c8a5c0606a417f7ed5649967869bec73a68ed52621c6e9

            SHA512

            47f25df69bd0dd83bfe6821d371faaf8a2f3d894faade8d6dab8cbe12bea9451c49d9acb3fbe76dc0638adfd08e491f65229abcf6833df221606986c04338cdd

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.zh-hans.lang

            Filesize

            2KB

            MD5

            92a4750a9cf239ec2930ab4395dc5922

            SHA1

            53a0f608f834a14bcb05ee59934fb2dc18589eeb

            SHA256

            a0850825d5c99af884986e334e49baf8a630c4e20a6420c8bcd7b449a9dedf9d

            SHA512

            4578d3ede4aa93d674cc2691b7b12a6e93a34c3461da8496994b208a326a7dec95c5fa280dbd12be0749a4338d87ae0377edb821937a267fb3e3eab3328c3a8d

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.cs.lang

            Filesize

            14KB

            MD5

            745ddea1ffe5fc1d9ea7ff0be5d2791f

            SHA1

            950b2792bebf2664678c29f91f446b3d644f5711

            SHA256

            a5e2350103b88eab363da2cd2b29ecdd6f7402492b7da7eb9e38c4127d39dd5d

            SHA512

            1020d9d22482d42686bd3702f8c9c28725dda96dc5b24bdb9afb95391b43b84febc7b5f0b8e6988182724475abf1227d83ae1cb6539b15ce716757b816f754c9

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.da.lang

            Filesize

            15KB

            MD5

            c6bef2f8d08083266ab75119196a1460

            SHA1

            54f7da2b98587ce7a609f463e42c6d53b19e8ac1

            SHA256

            afc128b121d85dea563e39ee1bd7aaab8348063123799c52019ea3e034431cac

            SHA512

            978bc828e1cef0425dde9c27ec1e2199687b1e457d7831ede8358dbcb9fa6e67bcb9d0b07d161f703baef7304065af0a981ffadafd99dae200bef3e4c22adc8b

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.de.lang

            Filesize

            17KB

            MD5

            bd3bd9f90c02d7f2e2104082f3591432

            SHA1

            ba2ab415a39c0985f852acf8fbc1f5e5a9207ce4

            SHA256

            cba5fddd2af202f6942833a83ecbda25c9585355d956fafd12f0661c9a50637f

            SHA512

            5b95c6b6851f0fb573e0d1b77ed8839e9fe62845c10913646dd897b66a89555ab3f132f865b187fe4ed38eea8cf9cf31180f40bfaf5721b54fad1ac1950083f6

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.el.lang

            Filesize

            18KB

            MD5

            d9fdc1b74ab7278211a754f4e968535e

            SHA1

            30c40f9643ace9d155bfa5f2d0f93304ceb9e83e

            SHA256

            8dd92807541b773c1a06ea7d58101497e0029fe2e30764a26268bceea3738045

            SHA512

            6864b49bc49991c057a0d73307912e73d82afcc05910363666306bd711b9ce451c4effc1ffbf3601c98becb611d072b3e929bab7834e31441ec5760462fc8eab

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.en.lang

            Filesize

            16KB

            MD5

            f96bc8fec59de1568f9d962d673d7a33

            SHA1

            87444815b38323bcbd7763d2a03e5a1337ea0440

            SHA256

            8913e6719bc94d021985c9e71788332b11bb71c35d99aa82833af35106fea47f

            SHA512

            589a2374b9338c716d3adea628c902ec252b33ab59e7f80f36bae5af01951eb9afacbc580fd1862e74f585626fecf5b69e4c168034c8a0aab83ef19cadd8f3cd

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es-ar.lang

            Filesize

            15KB

            MD5

            e134c6a1428acc56511efcb7651f970b

            SHA1

            001857aba883c737b5eb47bb0eae7f12dc8e71ee

            SHA256

            85a0e42747f5ad67c38c082111552edc234fa7e254d323f6a51f34ff03a17b0f

            SHA512

            ee986e82eb16a2f2f971b1202988f51bfcb590942f105da1c60b716d4548ce4eee6d61dae91c239e09df02c7333e11c25a3d30fef1cd9e5f71e7b75cafa67b86

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es-mx.lang

            Filesize

            10KB

            MD5

            c1e661eca062a3b897ecc64349d5e607

            SHA1

            c42469bc732e129e0603c41a0881b8bb79a92807

            SHA256

            17ce19de912c938315f2f602ac612c537658098694cd11302c020111f14ed69d

            SHA512

            afac9d7f734f4ed53c0b150e7ae80dd967ddbb7b87cfc583b7cc74089af73904fe13b885f0d565873b08a92ee9b48465cf7652b1260087abd9429b3f88ea7f7b

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-N50BT.tmp

            Filesize

            11KB

            MD5

            d229da563da18fe5d58cd95a6467d584

            SHA1

            b314c7ebb7d599944981908b7f3ed33a30e78f3a

            SHA256

            1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6

            SHA512

            e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

          • C:\Program Files (x86)\Win11PrivacyFix\Program\LoadingIndicators.WPF.dll

            Filesize

            47KB

            MD5

            ac3e9de7e082cc05f7c7c19cdfcff280

            SHA1

            fa510c077355a5bc46d5e099b0b52c470b1faf05

            SHA256

            5f15b6081c88c4f0f645b992af716512ac0f7a7388f68c3ca492e2cb1e88a323

            SHA512

            244822d5ef74231ca07cbf6ad97fa4d29e6c559f61df969af087b8afa80e69b6d1716ecbfebb08d6278ed25680c1faf024f512fb0ea24c493e7eaecef10745b2

          • C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe.config

            Filesize

            2KB

            MD5

            89febff7f94c2fa37e1dd24941d31789

            SHA1

            4173a8ee86041ea96d502234e3c06e51ba3c9062

            SHA256

            c90273a7afed9e25898ac365f981deca9c902ee8b8811efc749ea642e9ab9a04

            SHA512

            8ead8928dce2f21e8f635357fdd07df27043c64804c9753d963501091113683244be62226872789e194ebf6dce98b351cf84a755a67545eb5a10a8296c759b5e

          • C:\Program Files (x86)\Win11PrivacyFix\Program\WinPrivacyFixLibrary.dll

            Filesize

            98KB

            MD5

            c01cb2fd5462ac3d3dff0ea95995720e

            SHA1

            c62d3628e915759f8ef418462fadef84cba329c7

            SHA256

            5d902a7d84f339f16c53bc991b5220382100e22cd3ab24d9fdc4af4f1f379a51

            SHA512

            86d190792c63246ff3e95150dce9cbb26521c7f4a5fd1a65ebf7e7e75fff81a385f8f5be31ec6ca831b1af0a47e343c5445ee07dab5aa49dd826064017d158a2

          • C:\Program Files (x86)\Win11PrivacyFix\Program\log4net.dll

            Filesize

            280KB

            MD5

            a1df52e212c077256190138d9a4e3aa1

            SHA1

            915f54a9df827acaf107f859bab00e0411dcedfb

            SHA256

            9cfc6ea4b125f514bbbe3fdbd3f519cae77a0595f283c9f5b298bd6f9684c2b4

            SHA512

            711e8beee52adda396a65cb39770ffc042e93a901d1832f15bd1dd6a4d5bdc3329ad2e20239cb37d09f090bfecc1e5f223c06700b7ce079dd73157459078f4e8

          • C:\Users\Admin\AppData\Local\Temp\Cab4DA5.tmp

            Filesize

            70KB

            MD5

            49aebf8cbd62d92ac215b2923fb1b9f5

            SHA1

            1723be06719828dda65ad804298d0431f6aff976

            SHA256

            b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

            SHA512

            bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

          • C:\Users\Admin\AppData\Local\Temp\Tar4DD7.tmp

            Filesize

            181KB

            MD5

            4ea6026cf93ec6338144661bf1202cd1

            SHA1

            a1dec9044f750ad887935a01430bf49322fbdcb7

            SHA256

            8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

            SHA512

            6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

          • C:\Users\Admin\AppData\Local\Temp\is-O4NHJ.tmp\closeapp.exe

            Filesize

            227KB

            MD5

            9a2bbf4de6279c9321969c6257f48939

            SHA1

            4fdf355fa10fbd61c1d4c47e21e66b09493a1621

            SHA256

            40e33b4ded6db4e96b7ba89770b248d62ffd5f9175e2e0b58692084ce3b91a10

            SHA512

            3afd50668327f518e0d5dfe8200f43ee29cdf8dea8667e31131005e1d0e67acb96f4c218b2ab1f7a3ee926bf600b57b046b5c21ba40de779acc03d130087a4cc

          • \Program Files (x86)\Win11PrivacyFix\AbLauncher.exe

            Filesize

            21KB

            MD5

            3d83d87346847630ff150167ac7018e5

            SHA1

            a1e28c0f3caad1ec3fba7ad0992ee8931a1fa3bd

            SHA256

            2437a1415abe4bcbb44123bb7077374e920967813d66738f8128432fe0429719

            SHA512

            1ee87647221254d05833ed2cf613e6b72cea00f2d6882cc27795fac901395e289c7b6ba0f9c5dc45cf5258032576027c68f0e3da3ddd71f987176a726ae4189b

          • \Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe

            Filesize

            651KB

            MD5

            2bdfddb1dcdb72b2615b2cf5e893474f

            SHA1

            126502d2c4ff6fb795fa88508ece16cf5e7a41a8

            SHA256

            24fb7cbe5a21e976bb7f0ab0d3f5c2e69b729442a38c0d09048ac4591bcaf0cf

            SHA512

            d0bd58a776c4a918a929e420ac43f09b187690370506e86dfc1d03998720270b91f6254f3266a4a269bd12d1abb24488ffe8834d92f3f15877749deec44ba0a2

          • \Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe

            Filesize

            4.7MB

            MD5

            72569a699d52441dab25acb2db85509c

            SHA1

            4c5146e9be43a18d4f4186b7fe6ed4b343c3df26

            SHA256

            4044427a4eb0e6e9a557bb0d909d15f7ceae9082d3dc1c06f77d037501a845fd

            SHA512

            4c3331e713f88e99930974af4d3ace0bd58068c9cc6748ab80f1637b8ef4ce553d3291ad48d711ad9da2487f6bae940a75a75ffa2de32f755b0e7babc26cee1f

          • \Users\Admin\AppData\Local\Temp\is-0B5GG.tmp\win11privacyfix_2024.tmp

            Filesize

            3.2MB

            MD5

            ed87bbf7151f266779b1e380f55eb3b4

            SHA1

            51565044581d719218a0a090b212881904bd7402

            SHA256

            430ed64755c61c48f0612cec6350e3ad1eb8a1732e7ec9d6a59fe67f438e5ff6

            SHA512

            8a7ce36bb0f9b900a2eec87c89ba9c204138fbcc92352cea603f428d69fed6b855a5d940dd9e72e7860b87af2a3c42094dea1ccec7158cf3c8a646ca94e06b2d

          • memory/2532-784-0x0000000000B30000-0x0000000000B4C000-memory.dmp

            Filesize

            112KB

          • memory/2532-782-0x0000000000BD0000-0x0000000000C1A000-memory.dmp

            Filesize

            296KB

          • memory/2532-774-0x0000000000ED0000-0x0000000000F4C000-memory.dmp

            Filesize

            496KB

          • memory/2532-776-0x00000000003C0000-0x00000000003E4000-memory.dmp

            Filesize

            144KB

          • memory/2532-789-0x0000000000DB0000-0x0000000000DC0000-memory.dmp

            Filesize

            64KB

          • memory/2532-976-0x000000001D370000-0x000000001D4FC000-memory.dmp

            Filesize

            1.5MB

          • memory/2532-772-0x00000000010D0000-0x0000000001176000-memory.dmp

            Filesize

            664KB

          • memory/2532-778-0x0000000000410000-0x0000000000420000-memory.dmp

            Filesize

            64KB

          • memory/2532-780-0x0000000000420000-0x0000000000430000-memory.dmp

            Filesize

            64KB

          • memory/2532-963-0x000000001B2A0000-0x000000001B2D4000-memory.dmp

            Filesize

            208KB

          • memory/2532-975-0x000000001B190000-0x000000001B19C000-memory.dmp

            Filesize

            48KB

          • memory/2532-786-0x0000000000F50000-0x0000000000F9E000-memory.dmp

            Filesize

            312KB

          • memory/2532-972-0x000000001B2E0000-0x000000001B310000-memory.dmp

            Filesize

            192KB

          • memory/2532-927-0x000000001A900000-0x000000001A91A000-memory.dmp

            Filesize

            104KB

          • memory/2532-925-0x000000001B130000-0x000000001B17A000-memory.dmp

            Filesize

            296KB

          • memory/2532-923-0x0000000001080000-0x000000000108C000-memory.dmp

            Filesize

            48KB

          • memory/2532-964-0x000000001CAC0000-0x000000001CB66000-memory.dmp

            Filesize

            664KB

          • memory/2532-791-0x0000000000DC0000-0x0000000000DC8000-memory.dmp

            Filesize

            32KB

          • memory/2532-962-0x000000001AA20000-0x000000001AA34000-memory.dmp

            Filesize

            80KB

          • memory/2632-22-0x0000000000401000-0x00000000004B7000-memory.dmp

            Filesize

            728KB

          • memory/2632-787-0x0000000000400000-0x00000000004FC000-memory.dmp

            Filesize

            1008KB

          • memory/2632-19-0x0000000000400000-0x00000000004FC000-memory.dmp

            Filesize

            1008KB

          • memory/2700-37-0x0000000000400000-0x000000000043E000-memory.dmp

            Filesize

            248KB

          • memory/2800-813-0x0000000000400000-0x0000000000737000-memory.dmp

            Filesize

            3.2MB