Analysis

  • max time kernel
    143s
  • max time network
    61s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09-09-2024 14:33

General

  • Target

    df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe

  • Size

    4.9MB

  • MD5

    f8c3d6326ce40fe135b55b18a762684a

  • SHA1

    5403fa880bbf7d89cb5b9f1461f7ae79b84dd1cf

  • SHA256

    df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

  • SHA512

    c44016ba3503993be3facbf5d610405408b77b7b44d4a1bd5cde79d9fea3c45ae7b1abe1581f2e0a0bab7836317dfd8b180d8845881f4053b2f37e1f19d8dd8d

  • SSDEEP

    98304:XuWkRoYCr+MVwMm6lvlV5CQvUp3BviX5Nm7TFqmftYSo56Gg8WkDOWd1g+8oob:XUOVwMndrnEYXi7TFqmVYSLGHWhU1rob

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 9 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 22 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe
    "C:\Users\Admin\AppData\Local\Temp\df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe
      "C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe" /silent
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2632
      • C:\Users\Admin\AppData\Local\Temp\is-0B5GG.tmp\win11privacyfix_2024.tmp
        "C:\Users\Admin\AppData\Local\Temp\is-0B5GG.tmp\win11privacyfix_2024.tmp" /SL5="$501CE,3938692,978944,C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe" /silent
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • Drops file in Windows directory
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:2800
        • C:\Users\Admin\AppData\Local\Temp\is-O4NHJ.tmp\closeapp.exe
          "C:\Users\Admin\AppData\Local\Temp\is-O4NHJ.tmp\closeapp.exe" Win11PrivacyFix
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          PID:2700
        • C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe
          "C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe" -install
          4⤵
          • Executes dropped EXE
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          • Suspicious use of WriteProcessMemory
          PID:2532
          • C:\Windows\system32\WerFault.exe
            C:\Windows\system32\WerFault.exe -u -p 2532 -s 1604
            5⤵
              PID:1668

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbBugReporter.dll

      Filesize

      93KB

      MD5

      982c6effabc75cd60f7590a9b008ef9a

      SHA1

      2b2f0b5de8ba4f50b481b0d45474c60db9925ac4

      SHA256

      dabd55fe9793a7afa24e7e063cb501fb0a5e35a5a0fd18cffed0fc43dd807713

      SHA512

      4e27f845f167e7f8730c42c497da7330e96de972e025f1a0a6760acf80acad15c0600746c5a13f7e37165cee5b8f0b427fc416bb5faf90a974ec3c0f0f1e6998

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbCommons.dll

      Filesize

      132KB

      MD5

      7edb225ffc197b61401ccd8f9a78f200

      SHA1

      e531fdaf78ebe20d452e57e9a1c5e8677b5b48b4

      SHA256

      8c772ea92398ef1bcbfb3a8426bb28c1d35db03b6f8e5678f9074773151b6bc3

      SHA512

      325a7ab7a0b3b2243c33707315acef1a4e871736aff946b0a9580d3dd2552d29e7a9289c11cdf9c016c60e24e60d2bc8082e888cfde76803c890bc74f6da4351

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbDefault.dll

      Filesize

      480KB

      MD5

      44d531bff98136d2f26eae570b4f6bae

      SHA1

      bd744b78468595c8c7cb14b0ec042f1193c5ab86

      SHA256

      3396563874b8b758482090f1a88c4c73c9c6af7e71ff56575905788740806bac

      SHA512

      1e0002dc2798b29a4ad6c3f1fc41a6eac7024fd495cc8732390f81c6f0c6678aba3fc3f23c7d6e42220f20ee1bafb3b83172b7489f532e9bc7da91bf6a718162

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbGui.dll

      Filesize

      297KB

      MD5

      0cf85abfea0c0dac567d6599816e2241

      SHA1

      caf58a05bda9e5460bfbd78b2540825d0bb769a0

      SHA256

      9eeb98450dd3ac34b10581aa55ebb2fdc6f59fea390c24efbc80bf529d373493

      SHA512

      b8be84f0c40a80a992e3ccf655efc1a8e02852ff2366f01d1b5dfc48d9638bacafe1f9637862a4954b5b9e1933ccefbf143886f7759608d219d9dd37314989b2

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLanguage.dll

      Filesize

      50KB

      MD5

      505486bc6f473ccdba7c626da847bfa3

      SHA1

      75e445900040b0508106090a9b7cad5b91eec10b

      SHA256

      de9b6833c309f5c8f3fcc1cd962172429667230bfa733ced3a1e0239c130e264

      SHA512

      1b0b6ea1185944ad43702caf21c6dfd5d1209b8558c874af5279e6e09f02c07d9f0b81a019feba7b44b023deca2acfd073f26c1bbca4e3d92c2f0b46d8ebe101

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLauncher.UpdateRoutines.Plugin.Base.dll

      Filesize

      16KB

      MD5

      e63cca98c5ee1ba95b24f8da686928d8

      SHA1

      e95e39663ee1c99632460b71a6fdd2c871ab566e

      SHA256

      3036c4d3a979b8397a9093b04690567f860a8c2517b0ae2606aa123f72886beb

      SHA512

      d73e2df2820a86582946cd5476e7373339783e78f7dded939641d54d7638f50e54072ad814047392c7bb25f0ed37285d85d6db642c6a03324bde02b9cd1f49cb

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLog.Commons.dll

      Filesize

      16KB

      MD5

      4bdcf4ac37f06049b37cbce3f039fccf

      SHA1

      fb21f9403f2844a8615552ca9f3c00e0c2e042c5

      SHA256

      34a7174e1e0102e2e2d6a32415869be8c52caf1e9d5c44aa7f32be637e374232

      SHA512

      1500d713b96b6634d6a35110834b9b8c72c01423ea70f09475044eca0da0cd55fc9c249f78d62db8a468645c6cccc59b1ab21487f7ca019a251dcd30a9a391b3

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbLog.dll

      Filesize

      32KB

      MD5

      f47edfcc1db23226b88026193c8c1d87

      SHA1

      574b2b14bf7b79431ececa1bb85ccdb2a89a0d86

      SHA256

      bc9d6b020826a7942737d44fdc090024cb7868f665a7feaa51027e1e662ff647

      SHA512

      3615849a87afd080a0871a274e8e5f2bdc00becc565745f9e44593ee98e943ed97f3708941d3e4f76d2435e320827c63acf20cd5abcd849d00b0949a4b7f5f7c

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbNotification.dll

      Filesize

      51KB

      MD5

      0ea9cfb5e2a0c2d5640dfa232ab7cdb8

      SHA1

      3c8ad06dbd61b3900e8e1eb19e65e83ccb36358b

      SHA256

      a641219798bd7a3d22694952a114d19e909a2046d08e178d99cd0c5e0e6a5160

      SHA512

      9523df43d51a975b742d7e073c3cda5ab7c6f6bf5a4a2cee69c578f416d954c2b6e46d9b28721c67042aefe6310d75da0b9c6394e44ec3822533e155b6e7ecba

    • C:\Program Files (x86)\Win11PrivacyFix\Program\AbRegistration.dll

      Filesize

      283KB

      MD5

      2ab53536c29b028952cb46b743c18410

      SHA1

      dfe03846e4ebe388f8716a902cab8ab7c77162a9

      SHA256

      b50d51aca8351b0416257549361a0ec3ce8c9a041b0a532684425fc1f47dc9b7

      SHA512

      f956ab29c6159c269c0d4a62bcca9479b0c016c3794a13a6ef739348cf7f0df092e0e2ea27be95f5dc415490516d943dc5f326cc4063936ef63dc70ca506ac47

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.cs.lang

      Filesize

      2KB

      MD5

      892cf81d8503c82688f5bc2fa6368aba

      SHA1

      cafe09c413fba14d6bd397caf648cfc2ad8cc70a

      SHA256

      2331a3e1a76d5eb5af54fcf9eec5ef6c62193f04946abfee4b6d8fe87377a724

      SHA512

      53d162d1ab10af452a70f2a2a09e13f32f1f5f1fcf2de5383ac9b3f86ed678be38ff0f4d0f555dd0355c802ffe14166bb86c464afef5b9dfeaf423c1a076dbbb

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.da.lang

      Filesize

      2KB

      MD5

      48282d5d0ae3804d8494787653d11cf5

      SHA1

      f275f428c492aa5ddf66d99ac067450ef216a572

      SHA256

      a45461e4bd5630f6c0d2c827307a34e6f84c08c033880f555673e084f1f12326

      SHA512

      967191fad0876973d3d7a027dfcf4f1cef7bea880a2ebc4e13b9314804b9b83797d183d6bbb5ea43ea036afa868a1c2b0b5f8f0ae54b61988722a71b30cef4b4

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.de.lang

      Filesize

      2KB

      MD5

      3e6136860bc341e8ccd3ad75c6785243

      SHA1

      bc57505f89d2562d4cb108dde1e6c8483aa3f1cd

      SHA256

      2947ae7a0a0b1f01794c24d888d4043f307b9dfe3d9d67ad60f94d4a8f23fe49

      SHA512

      1b25b6463b7f2cdb5bbf98bf6dc76fe1464aac0cec144c11bd5167262519524e04b916f1ae10bd5f8a22941f67fe7aad71dbe26feba0ad73398ba319b4efa4e9

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.el.lang

      Filesize

      3KB

      MD5

      1f963282698ecab57139c3070f9859ab

      SHA1

      6a6f99c8ea1b69d3853a9c10f7fc20e2e51e5c5d

      SHA256

      220708d0854a328c4648aa553a6de97f3230e9e8e5d78071361300261723d1e7

      SHA512

      abb2d285d9dbf6cf5ee4535bf4db8dfdb33cf14f2b7b25bd7681d32bd243256487a5d387518ced04fe0a72aabc9975183b7f538203134f484e824257c981f6f0

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.en.lang

      Filesize

      2KB

      MD5

      42c705eb61c55afc8555969bbd5c5641

      SHA1

      4561490aa99739fc6e69b0d697a894192f854af7

      SHA256

      7ad8cf0b3cc7ec308b345b14f417396baed95418486e3e07e823e1de1eadd3a4

      SHA512

      fcd8d6d1d4ebe0aa93548314cf93a72f4ca886bfcc768d8c197424880978e05533b0f655c1e88d1e4c12ad3b3edd0106381331317493e4a87d98a37d4039f493

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es-ar.lang

      Filesize

      2KB

      MD5

      6d8005a391ac5a80dc362fc890eb1441

      SHA1

      5584cb4aa4afc51816149aed43b2699f54b2e950

      SHA256

      8929e6401538219fce4e4d6d94bdf2f759646a0e02c252aee171c1bfce547e71

      SHA512

      4ce0c227bd54fcdfd0790436390cd671f3346a558d9e757161d980daf140703f0fb1c7e148fb426c747857622be0913f4228f7184a845d9dc688cd68ef4287a5

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es-mx.lang

      Filesize

      1KB

      MD5

      04bf85db4c87e6c9538a39be5494c0cd

      SHA1

      3554bf01e347db6d2d6245262e362fa59b54baae

      SHA256

      921d5679509738f6f8eacfa525321b0ceb6d43f6d22b2bd0480dc72e2cade846

      SHA512

      1fea7f4b115610a5c91e1f78601069cf307a3d71c2fd38b8fd6d61a26292c965089087cb1a130a88e1f5d5fbbadfa489915f0081621a6a3ff2b1a0be95b8dd6b

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es.lang

      Filesize

      2KB

      MD5

      46a5aff0e8bed38c71d491701b22b268

      SHA1

      60f1e7fa1fd39a239e71a3739374e7e6cff97bd9

      SHA256

      fa9ed5b24030cb443314f3b651e1a4d15ab8132495b6319d0047186d24f6d39a

      SHA512

      eebfbb19e11d3bae66aa7a89d5b01ce6fd903f58897d7ec5efa70abfc41edf20f751392f3bfbe0a462a04104ccc47e41238719c1767906b617e617c2cdc932ed

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.fr.lang

      Filesize

      2KB

      MD5

      08d142f3d4c9ff7cbae29d40bf396c4e

      SHA1

      2b75f366698c831486004d4e363a27f94e41b0a0

      SHA256

      75ff5b09f1aadc9fa98c8de5b073374d6fbede1acc1a316c1a71fe4a0e97e9bb

      SHA512

      b4f690575685c7ddb73ed8deb2cbfd29fdd0fdaab0347327c8b774713c74fb82203aa2d77049d4802f2784fcc32f5ea835af1a89d64e67831dc0a7df3059a568

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.hu.lang

      Filesize

      2KB

      MD5

      444b482c5768de2da6b258317d80f716

      SHA1

      1ce1a17a84450655b2e62b23eaf2e1547965ff0f

      SHA256

      ab07e043102eaefb5d9f255743ce7062d2ec36af81e41ac5f75ee76a956fb6b0

      SHA512

      33725b16e0f533045324f6ae223f36fcd0e96384f8274ba92539d4b3d3d1aea4e76d0224f9780b9250acb2b5d08c909605096411d9c2799d554d412ebf6a802e

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.it.lang

      Filesize

      2KB

      MD5

      6a122251d9e419107b1c9f88195d2a95

      SHA1

      77f3052cc8d575ca56062b543953a0c627a59b33

      SHA256

      49733224c63c16ec5b1657786d5aad67a208d4dbcef07e9a8e384dcfdf1a14f9

      SHA512

      def05bc4d171ede129258858ad1780a040520a6f7a87745c62849a5fa2a7daa1144b391ce6bb010db2dd66b81616c43a90284816b73b76af82f6e75e564b95dc

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ja.lang

      Filesize

      2KB

      MD5

      70fb3d95355af199812185032fa185d6

      SHA1

      84b55ec4deaab568c54b49090b77c610828e845a

      SHA256

      6115956a02f0fb171c45d92e989f0142f950fc1cc0922dd979f78a6676c277cc

      SHA512

      2694020a7ce8036b5e07ef6c06af4e7b21c5ace1efdb6637c3e22776cf5796203ce73706e7f6c7e5bc23a9866d5076e4d42ed87b69192d487b6f894040eb8223

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ko.lang

      Filesize

      2KB

      MD5

      4e9e64f74e7c247108edfb643e5b4f39

      SHA1

      e1ac8649067a84ce67c9e3bc2b6dab55982b83fa

      SHA256

      979f90f37f26998886b4e8a5103ad98f80ecc6fd1b93ad5c5fcf1e719471e84d

      SHA512

      7a0a8d09d9cc1eba26111aba86d0e4ec2857f6fc3aec159a67a18d747546bd52e7150538786cea617fbafa23a12665050beb0fbffe95b0609dd476451a043729

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nb.lang

      Filesize

      2KB

      MD5

      9be36a63c86be276f8ac7009568fe940

      SHA1

      bbb13149bd7168f0410d224dd9b034881b3f6f52

      SHA256

      a9bb04572681c6b0dea4a6aee4f2ee66a5da8d9c20b80bb9d50b0a3ce7dc97fb

      SHA512

      84affae84e755066c758a977ac0cb8cf15214c6bf4069f8f4c1c4c107b23d1517deb03b5b51addc8a69b89d8a685312a1e8f63cc7780b808ac3053ee4952f401

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nl-be.lang

      Filesize

      2KB

      MD5

      4e5d0171b80ad3ae4786e659e7e376c1

      SHA1

      aacb8b38cc95ccab38b04b33a49d2e12df983e64

      SHA256

      e42076c62c66ec16db8da4076adcfbcdaa05037d3d7af95b1b71595794f55ec1

      SHA512

      8a1af5a96be7e7a99046045baa31a8a9fdeb77b2c65988728ebbebaf558a0ec9b228e1cd9651a4c3d90b1b88ec5c4f3a57446d3f732c489e37e4625faf27cd14

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nl.lang

      Filesize

      2KB

      MD5

      c7130bb52b7a50d0280f05f25ed61749

      SHA1

      6d6e161a378aa16e56f60b306e3c048535ea9b58

      SHA256

      15ee1016ad7dfa4152e95b866fa8aa268306a630b25f0eb2246873492595ac8a

      SHA512

      f8fa81ca4bf331097574e44d16d2a9420c2e2028d597f5dc0579ea39a6d6cba4a58bac09b3665eed4dd847f751b8a298dbe704f40479c32de8bb1011b72c6961

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.pl.lang

      Filesize

      2KB

      MD5

      44f7a74ff4ae1d63902cc1eaf1cc7ce5

      SHA1

      58b3be17ab3708ff68324b2c4c1dc53ac522aa1f

      SHA256

      79f32c80ec8b5231ea667e7ad18f615bd70e64ae8a40fe0573b2c9e48c79854a

      SHA512

      14382c0fd206f6ad25103da48c7814373017849d8bb946bb9833388ce979ccd46745d6d7494f6dbc19b752805c5e60f7ed7415e38fea2c4fc9cabcfd25392143

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.pt-br.lang

      Filesize

      2KB

      MD5

      81310fbe70d8f8c50e25ffc436f9b600

      SHA1

      46354f01481eb979d2740b1e726ea607315295ad

      SHA256

      dce86b92b78f372f726847adddb82b5e13eb4cff46341a6dca38f35392424548

      SHA512

      fe4cf411b6cf982b46e452300ca885d75750eda3c56b42728feb0c4a3c84cbf634c08146ac59b6bba30d3df42d1ff5eecdf129b6d8399a7039d93419c3147d43

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ru.lang

      Filesize

      3KB

      MD5

      bdbf8a4e8730a875decd619dae4981a1

      SHA1

      d36b92eb9c762083fcb2361228c4076560479f75

      SHA256

      96e63627695ec559f201294bf365b9bdcd86334d9c45e579e19b594f11863de0

      SHA512

      ccb29032b432255b7540251e947690d3f27f132901a462fef89390405a88e3eed5fc9098c01c8da5460c233e88bab6742c19043007f9e51e8d02703cd89753c1

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sk.lang

      Filesize

      2KB

      MD5

      bc03942579c9acc20275fa8351911bb1

      SHA1

      0c151ad02475224065a4eb8e98df64e5d979db3e

      SHA256

      7aec25ea8221a0c70758230f6199d32477aa4a0b3de76f608c37d8503dd16532

      SHA512

      564847e0cebdd9feb0c7927093edf6e5c4f23f2642c480868f0d071f3ca646025efae4cff3568edfffc36cb2d596f74d4ed55462498188aa8a15ef783f36a569

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sl.lang

      Filesize

      2KB

      MD5

      1d02c7d66f3cc3c7a98a7d09e17861e5

      SHA1

      cdff14097315aedc72b7d7462ea816b77ec97755

      SHA256

      a2462ee3b336ef2f664827e7339d9ac4db6ea72af30aa13eddddaa6e80f14ec0

      SHA512

      20499b302a4e7348938e4e0f01b63548ea904b16d03f345b675219d5f98ec18615fb13692183cd1e87e6fb6bd08e303adcc6292f345232ac5c8639c155760529

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sv.lang

      Filesize

      1KB

      MD5

      77bd9249919fcb14021d74008081c8f3

      SHA1

      7a33912ac574aadf79da4098bad02e9e617a95ec

      SHA256

      154b8752d59d015b8ae247d838e67f74d6de05bca2b57be53c4bd861ddb439f7

      SHA512

      f71f7f2087b13412b627cbd25714347e2617b195f0444bedef296eb8f9892d7a62e91f83b399a42bac56899d8ca8182c321b6c5ff307c87a9d605960d2751d16

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.tr-tr.lang

      Filesize

      2KB

      MD5

      2870193c262d90ebef4fe8e8dd41c0bd

      SHA1

      4ef0294358bb157ad8e65aff4813317aee45acf0

      SHA256

      aa9b6bff3bfad946e9b4c4bf6b661315ec982e9a49b5962d974ba25582d1616a

      SHA512

      72ab7cded3fdda36ebf33e601ea19a5275aaf0838e10caef95eaf0f72311c07205dd867a711a54087ccb8807dafcb691b5f48a8c0629fff278b7f708a4abacf5

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.tr.lang

      Filesize

      2KB

      MD5

      914b2860029ed27935cf93046ef2c19f

      SHA1

      2f183f43df02dfe948265fb06c341f4f8c70e879

      SHA256

      7dab0308d5f56b3d748ce878ae080f61726ec1e94f8ecd8043683e0970d77d26

      SHA512

      d7238576618763a192e3f0a2bc4de9f1f7268202a70e294fd762522f07ec531608e2bdd115ea3416c16213b95ffbe61f1eeadd930872b0ab117e8dadc2e7a01e

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.uk.lang

      Filesize

      3KB

      MD5

      ba269edd94d46bfc92bb6c1ca9c627f8

      SHA1

      7d67499c2ba7810df9eb8548e65f53a2f78c33b4

      SHA256

      f0ae4ddef41631d9a0f9e6b91701478864368881149491ab0b7f7e955119a289

      SHA512

      63ff12e0435f134c608111710413b202a4cf1795f4647063b44b7794d2ef24b79570b9f49c700946e531ead1f046f66aa1e97adf9fd4d6d22e3f4f31eb6e7b1b

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.zh-cn.lang

      Filesize

      2KB

      MD5

      2b502aeacbac8b9d7a9254f8dc3a58c3

      SHA1

      266f6dc70750ef81d29c921b9bc54b88240282cf

      SHA256

      86d15de44b1a7a20e9c8a5c0606a417f7ed5649967869bec73a68ed52621c6e9

      SHA512

      47f25df69bd0dd83bfe6821d371faaf8a2f3d894faade8d6dab8cbe12bea9451c49d9acb3fbe76dc0638adfd08e491f65229abcf6833df221606986c04338cdd

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.zh-hans.lang

      Filesize

      2KB

      MD5

      92a4750a9cf239ec2930ab4395dc5922

      SHA1

      53a0f608f834a14bcb05ee59934fb2dc18589eeb

      SHA256

      a0850825d5c99af884986e334e49baf8a630c4e20a6420c8bcd7b449a9dedf9d

      SHA512

      4578d3ede4aa93d674cc2691b7b12a6e93a34c3461da8496994b208a326a7dec95c5fa280dbd12be0749a4338d87ae0377edb821937a267fb3e3eab3328c3a8d

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.cs.lang

      Filesize

      14KB

      MD5

      745ddea1ffe5fc1d9ea7ff0be5d2791f

      SHA1

      950b2792bebf2664678c29f91f446b3d644f5711

      SHA256

      a5e2350103b88eab363da2cd2b29ecdd6f7402492b7da7eb9e38c4127d39dd5d

      SHA512

      1020d9d22482d42686bd3702f8c9c28725dda96dc5b24bdb9afb95391b43b84febc7b5f0b8e6988182724475abf1227d83ae1cb6539b15ce716757b816f754c9

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.da.lang

      Filesize

      15KB

      MD5

      c6bef2f8d08083266ab75119196a1460

      SHA1

      54f7da2b98587ce7a609f463e42c6d53b19e8ac1

      SHA256

      afc128b121d85dea563e39ee1bd7aaab8348063123799c52019ea3e034431cac

      SHA512

      978bc828e1cef0425dde9c27ec1e2199687b1e457d7831ede8358dbcb9fa6e67bcb9d0b07d161f703baef7304065af0a981ffadafd99dae200bef3e4c22adc8b

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.de.lang

      Filesize

      17KB

      MD5

      bd3bd9f90c02d7f2e2104082f3591432

      SHA1

      ba2ab415a39c0985f852acf8fbc1f5e5a9207ce4

      SHA256

      cba5fddd2af202f6942833a83ecbda25c9585355d956fafd12f0661c9a50637f

      SHA512

      5b95c6b6851f0fb573e0d1b77ed8839e9fe62845c10913646dd897b66a89555ab3f132f865b187fe4ed38eea8cf9cf31180f40bfaf5721b54fad1ac1950083f6

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.el.lang

      Filesize

      18KB

      MD5

      d9fdc1b74ab7278211a754f4e968535e

      SHA1

      30c40f9643ace9d155bfa5f2d0f93304ceb9e83e

      SHA256

      8dd92807541b773c1a06ea7d58101497e0029fe2e30764a26268bceea3738045

      SHA512

      6864b49bc49991c057a0d73307912e73d82afcc05910363666306bd711b9ce451c4effc1ffbf3601c98becb611d072b3e929bab7834e31441ec5760462fc8eab

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.en.lang

      Filesize

      16KB

      MD5

      f96bc8fec59de1568f9d962d673d7a33

      SHA1

      87444815b38323bcbd7763d2a03e5a1337ea0440

      SHA256

      8913e6719bc94d021985c9e71788332b11bb71c35d99aa82833af35106fea47f

      SHA512

      589a2374b9338c716d3adea628c902ec252b33ab59e7f80f36bae5af01951eb9afacbc580fd1862e74f585626fecf5b69e4c168034c8a0aab83ef19cadd8f3cd

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es-ar.lang

      Filesize

      15KB

      MD5

      e134c6a1428acc56511efcb7651f970b

      SHA1

      001857aba883c737b5eb47bb0eae7f12dc8e71ee

      SHA256

      85a0e42747f5ad67c38c082111552edc234fa7e254d323f6a51f34ff03a17b0f

      SHA512

      ee986e82eb16a2f2f971b1202988f51bfcb590942f105da1c60b716d4548ce4eee6d61dae91c239e09df02c7333e11c25a3d30fef1cd9e5f71e7b75cafa67b86

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es-mx.lang

      Filesize

      10KB

      MD5

      c1e661eca062a3b897ecc64349d5e607

      SHA1

      c42469bc732e129e0603c41a0881b8bb79a92807

      SHA256

      17ce19de912c938315f2f602ac612c537658098694cd11302c020111f14ed69d

      SHA512

      afac9d7f734f4ed53c0b150e7ae80dd967ddbb7b87cfc583b7cc74089af73904fe13b885f0d565873b08a92ee9b48465cf7652b1260087abd9429b3f88ea7f7b

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-N50BT.tmp

      Filesize

      11KB

      MD5

      d229da563da18fe5d58cd95a6467d584

      SHA1

      b314c7ebb7d599944981908b7f3ed33a30e78f3a

      SHA256

      1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6

      SHA512

      e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

    • C:\Program Files (x86)\Win11PrivacyFix\Program\LoadingIndicators.WPF.dll

      Filesize

      47KB

      MD5

      ac3e9de7e082cc05f7c7c19cdfcff280

      SHA1

      fa510c077355a5bc46d5e099b0b52c470b1faf05

      SHA256

      5f15b6081c88c4f0f645b992af716512ac0f7a7388f68c3ca492e2cb1e88a323

      SHA512

      244822d5ef74231ca07cbf6ad97fa4d29e6c559f61df969af087b8afa80e69b6d1716ecbfebb08d6278ed25680c1faf024f512fb0ea24c493e7eaecef10745b2

    • C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe.config

      Filesize

      2KB

      MD5

      89febff7f94c2fa37e1dd24941d31789

      SHA1

      4173a8ee86041ea96d502234e3c06e51ba3c9062

      SHA256

      c90273a7afed9e25898ac365f981deca9c902ee8b8811efc749ea642e9ab9a04

      SHA512

      8ead8928dce2f21e8f635357fdd07df27043c64804c9753d963501091113683244be62226872789e194ebf6dce98b351cf84a755a67545eb5a10a8296c759b5e

    • C:\Program Files (x86)\Win11PrivacyFix\Program\WinPrivacyFixLibrary.dll

      Filesize

      98KB

      MD5

      c01cb2fd5462ac3d3dff0ea95995720e

      SHA1

      c62d3628e915759f8ef418462fadef84cba329c7

      SHA256

      5d902a7d84f339f16c53bc991b5220382100e22cd3ab24d9fdc4af4f1f379a51

      SHA512

      86d190792c63246ff3e95150dce9cbb26521c7f4a5fd1a65ebf7e7e75fff81a385f8f5be31ec6ca831b1af0a47e343c5445ee07dab5aa49dd826064017d158a2

    • C:\Program Files (x86)\Win11PrivacyFix\Program\log4net.dll

      Filesize

      280KB

      MD5

      a1df52e212c077256190138d9a4e3aa1

      SHA1

      915f54a9df827acaf107f859bab00e0411dcedfb

      SHA256

      9cfc6ea4b125f514bbbe3fdbd3f519cae77a0595f283c9f5b298bd6f9684c2b4

      SHA512

      711e8beee52adda396a65cb39770ffc042e93a901d1832f15bd1dd6a4d5bdc3329ad2e20239cb37d09f090bfecc1e5f223c06700b7ce079dd73157459078f4e8

    • C:\Users\Admin\AppData\Local\Temp\Cab4DA5.tmp

      Filesize

      70KB

      MD5

      49aebf8cbd62d92ac215b2923fb1b9f5

      SHA1

      1723be06719828dda65ad804298d0431f6aff976

      SHA256

      b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

      SHA512

      bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    • C:\Users\Admin\AppData\Local\Temp\Tar4DD7.tmp

      Filesize

      181KB

      MD5

      4ea6026cf93ec6338144661bf1202cd1

      SHA1

      a1dec9044f750ad887935a01430bf49322fbdcb7

      SHA256

      8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

      SHA512

      6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    • C:\Users\Admin\AppData\Local\Temp\is-O4NHJ.tmp\closeapp.exe

      Filesize

      227KB

      MD5

      9a2bbf4de6279c9321969c6257f48939

      SHA1

      4fdf355fa10fbd61c1d4c47e21e66b09493a1621

      SHA256

      40e33b4ded6db4e96b7ba89770b248d62ffd5f9175e2e0b58692084ce3b91a10

      SHA512

      3afd50668327f518e0d5dfe8200f43ee29cdf8dea8667e31131005e1d0e67acb96f4c218b2ab1f7a3ee926bf600b57b046b5c21ba40de779acc03d130087a4cc

    • \Program Files (x86)\Win11PrivacyFix\AbLauncher.exe

      Filesize

      21KB

      MD5

      3d83d87346847630ff150167ac7018e5

      SHA1

      a1e28c0f3caad1ec3fba7ad0992ee8931a1fa3bd

      SHA256

      2437a1415abe4bcbb44123bb7077374e920967813d66738f8128432fe0429719

      SHA512

      1ee87647221254d05833ed2cf613e6b72cea00f2d6882cc27795fac901395e289c7b6ba0f9c5dc45cf5258032576027c68f0e3da3ddd71f987176a726ae4189b

    • \Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe

      Filesize

      651KB

      MD5

      2bdfddb1dcdb72b2615b2cf5e893474f

      SHA1

      126502d2c4ff6fb795fa88508ece16cf5e7a41a8

      SHA256

      24fb7cbe5a21e976bb7f0ab0d3f5c2e69b729442a38c0d09048ac4591bcaf0cf

      SHA512

      d0bd58a776c4a918a929e420ac43f09b187690370506e86dfc1d03998720270b91f6254f3266a4a269bd12d1abb24488ffe8834d92f3f15877749deec44ba0a2

    • \Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe

      Filesize

      4.7MB

      MD5

      72569a699d52441dab25acb2db85509c

      SHA1

      4c5146e9be43a18d4f4186b7fe6ed4b343c3df26

      SHA256

      4044427a4eb0e6e9a557bb0d909d15f7ceae9082d3dc1c06f77d037501a845fd

      SHA512

      4c3331e713f88e99930974af4d3ace0bd58068c9cc6748ab80f1637b8ef4ce553d3291ad48d711ad9da2487f6bae940a75a75ffa2de32f755b0e7babc26cee1f

    • \Users\Admin\AppData\Local\Temp\is-0B5GG.tmp\win11privacyfix_2024.tmp

      Filesize

      3.2MB

      MD5

      ed87bbf7151f266779b1e380f55eb3b4

      SHA1

      51565044581d719218a0a090b212881904bd7402

      SHA256

      430ed64755c61c48f0612cec6350e3ad1eb8a1732e7ec9d6a59fe67f438e5ff6

      SHA512

      8a7ce36bb0f9b900a2eec87c89ba9c204138fbcc92352cea603f428d69fed6b855a5d940dd9e72e7860b87af2a3c42094dea1ccec7158cf3c8a646ca94e06b2d

    • memory/2532-784-0x0000000000B30000-0x0000000000B4C000-memory.dmp

      Filesize

      112KB

    • memory/2532-782-0x0000000000BD0000-0x0000000000C1A000-memory.dmp

      Filesize

      296KB

    • memory/2532-774-0x0000000000ED0000-0x0000000000F4C000-memory.dmp

      Filesize

      496KB

    • memory/2532-776-0x00000000003C0000-0x00000000003E4000-memory.dmp

      Filesize

      144KB

    • memory/2532-789-0x0000000000DB0000-0x0000000000DC0000-memory.dmp

      Filesize

      64KB

    • memory/2532-976-0x000000001D370000-0x000000001D4FC000-memory.dmp

      Filesize

      1.5MB

    • memory/2532-772-0x00000000010D0000-0x0000000001176000-memory.dmp

      Filesize

      664KB

    • memory/2532-778-0x0000000000410000-0x0000000000420000-memory.dmp

      Filesize

      64KB

    • memory/2532-780-0x0000000000420000-0x0000000000430000-memory.dmp

      Filesize

      64KB

    • memory/2532-963-0x000000001B2A0000-0x000000001B2D4000-memory.dmp

      Filesize

      208KB

    • memory/2532-975-0x000000001B190000-0x000000001B19C000-memory.dmp

      Filesize

      48KB

    • memory/2532-786-0x0000000000F50000-0x0000000000F9E000-memory.dmp

      Filesize

      312KB

    • memory/2532-972-0x000000001B2E0000-0x000000001B310000-memory.dmp

      Filesize

      192KB

    • memory/2532-927-0x000000001A900000-0x000000001A91A000-memory.dmp

      Filesize

      104KB

    • memory/2532-925-0x000000001B130000-0x000000001B17A000-memory.dmp

      Filesize

      296KB

    • memory/2532-923-0x0000000001080000-0x000000000108C000-memory.dmp

      Filesize

      48KB

    • memory/2532-964-0x000000001CAC0000-0x000000001CB66000-memory.dmp

      Filesize

      664KB

    • memory/2532-791-0x0000000000DC0000-0x0000000000DC8000-memory.dmp

      Filesize

      32KB

    • memory/2532-962-0x000000001AA20000-0x000000001AA34000-memory.dmp

      Filesize

      80KB

    • memory/2632-22-0x0000000000401000-0x00000000004B7000-memory.dmp

      Filesize

      728KB

    • memory/2632-787-0x0000000000400000-0x00000000004FC000-memory.dmp

      Filesize

      1008KB

    • memory/2632-19-0x0000000000400000-0x00000000004FC000-memory.dmp

      Filesize

      1008KB

    • memory/2700-37-0x0000000000400000-0x000000000043E000-memory.dmp

      Filesize

      248KB

    • memory/2800-813-0x0000000000400000-0x0000000000737000-memory.dmp

      Filesize

      3.2MB