df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
09-09-2024 14:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe
Size

4.9MB
MD5

f8c3d6326ce40fe135b55b18a762684a
SHA1

5403fa880bbf7d89cb5b9f1461f7ae79b84dd1cf
SHA256

df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43
SHA512

c44016ba3503993be3facbf5d610405408b77b7b44d4a1bd5cde79d9fea3c45ae7b1abe1581f2e0a0bab7836317dfd8b180d8845881f4053b2f37e1f19d8dd8d
SSDEEP

98304:XuWkRoYCr+MVwMm6lvlV5CQvUp3BviX5Nm7TFqmftYSo56Gg8WkDOWd1g+8oob:XUOVwMndrnEYXi7TFqmVYSLGHWhU1rob

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000\Control Panel\International\Geo\Nation	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe

Executes dropped EXE 5 IoCs

pid	Process
3324	win11privacyfix_2024.exe
1044	win11privacyfix_2024.tmp
3172	closeapp.exe
4904	Win11PrivacyFix.exe
1876	Replace.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Threading.Thread.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-KVLHV.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-DD4JC.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-LF9IO.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-96FV4.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.IO.Compression.ZipFile.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-C1ROU.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Xml.XPath.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Net.Sockets.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-RAGEN.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-I912M.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-4A0JM.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\AbLauncher.UpdateRoutines.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\AbAutostartManager.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-91FMQ.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-R0E9E.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-NOTOC.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-JQ61H.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\is-52G28.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-K3N9Q.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-ABHJQ.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-5NDTG.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-6UH0B.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.IO.FileSystem.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-0MN0V.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-Q36SU.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-VF4SA.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-TK1BL.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-PEHP3.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-ETSSU.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-BUM6Q.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-P0NPO.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Collections.Specialized.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-OMTFR.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-1JGUI.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-MTQO8.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-VOFGT.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\AbLauncher.UpdateRoutines.Plugin.Base.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\AbBugReporter.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Dynamic.Runtime.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-U8S7I.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-AU1G6.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-GPV7J.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-9NGKS.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-DVIND.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-99DDM.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Linq.Queryable.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Net.WebHeaderCollection.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\System.Resources.Reader.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-09SOB.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-3CBMG.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-9ATTK.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-GU1IE.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-D94UP.tmp	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\AbUpdate.dll	win11privacyfix_2024.tmp
File opened for modification	C:\Program Files (x86)\Win11PrivacyFix\Program\Microsoft.Win32.TaskScheduler.dll	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-NIVQB.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-15R9R.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-K4SU2.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-HE0PE.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-U5GHS.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\is-OOBLG.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-NC47K.tmp	win11privacyfix_2024.tmp
File created	C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\is-JE7RM.tmp	win11privacyfix_2024.tmp

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\Fonts\is-7ACFM.tmp	win11privacyfix_2024.tmp
File created	C:\Windows\Fonts\is-5IEGS.tmp	win11privacyfix_2024.tmp
File created	C:\Windows\Fonts\is-S7D94.tmp	win11privacyfix_2024.tmp
File created	C:\Windows\Fonts\is-EEODH.tmp	win11privacyfix_2024.tmp
File created	C:\Windows\Fonts\is-DGODB.tmp	win11privacyfix_2024.tmp
File created	C:\Windows\Fonts\is-2ODRM.tmp	win11privacyfix_2024.tmp

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 5 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	win11privacyfix_2024.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	win11privacyfix_2024.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	closeapp.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Replace.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies system certificate store 2 TTPs 8 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8	Win11PrivacyFix.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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	Win11PrivacyFix.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EFC31460C619ECAE59C1BCE2C008036D94C84B8\Blob = 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	Win11PrivacyFix.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 0400000001000000100000004fdd07e4d42264391e0c3742ead1c6ae0300000001000000140000008094640eb5a7a1ca119c1fddd59f810263a7fbd17e00000001000000080000000080c82b6886d7017a000000010000000c000000300a06082b060105050703091d0000000100000010000000521f5c98970d19a8e515ef6eeb6d48ef140000000100000014000000ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a07f0000000100000016000000301406082b0601050507030306082b060105050703096200000001000000200000002cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf690b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520036000000090000000100000056000000305406082b0601050507030206082b06010505070303060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030906082b0601050507030106082b0601050507030853000000010000007e000000307c301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301f06092b06010401a032010230123010060a2b0601040182373c0101030200c0301b060567810c010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000030000000ea09c51d4c3a334ce4acd2bc08c6a9be352e334f45c4fccfcab63edb9f82dc87d4bd2ed2fadae11163fb954809984ff1190000000100000010000000cb9dd0fceaaa492f75ce292c21bbfbdd200000000100000087050000308205833082036ba003020102020e45e6bb038333c3856548e6ff4551300d06092a864886f70d01010c0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3134313231303030303030305a170d3334313231303030303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523631133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820222300d06092a864886f70d01010105000382020f003082020a02820201009507e873ca66f9ec14ca7b3cf70d08f1b4450b2c82b448c6eb5b3cae83b841923314a46f7fe92accc6b0886bc5b689d1c6b2ff14ce511421ec4add1b5ac6d687ee4d3a1506ed64660b9280ca44de73944ef3a7897f4f786308c812506d42662f4db979284d521a8a1a80b719810e7ec48abc644c211c4368d73d3c8ac5b266d5909ab73106c5bee26d3206a61ef9b9ebaaa3b8bfbe826350d0f01889dfe40f79f5eaa21f2ad2702e7be7bc93bb6d53e2487c8c100738ff66b277617ee0ea8c3caab4a4f6f3954a12076dfd8cb289cfd0a06177c85874b0d4233af75d3acaa2db9d09de5d442d90f181cd5792fa7ebc50046334df6b9318be6b36b239e4ac2436b7f0efb61c135793b6deb2f8e285b773a2b835aa45f2e09d36a16f548af172566e2e88c55142441594eea3c538969b4e4e5a0b47f30636497730bc7137e5a6ec210875fce661163f77d5d99197840a6cd4024d74c014edfd39fb83f25e14a104b00be9feee8fe16e0bb208b36166096ab1063a659659c0f035fdc9da288d1a118770810aa89a751d9e3a8605009edb80d625f9dc059e27594c76395beaf9a5a1d8830fd1ffdf3011f985cf3348f5ca6d64142c7a584fd34b0849c595641a630e793df5b38cca58ad9c4245796e0e87195c54b165b6bf8c9bdc13e90d6fb82edc676ec98b11b584148a0019708379919791d41a27bf371e3207d814633c284caf0203010001a3633061300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0301f0603551d23041830168014ae6c05a39313e2a2e7e2d71cd6c7f07fc86753a0300d06092a864886f70d01010c050003820201008325ede8d1fd9552cd9ec004a09169e65cd084dedcada24fe84778d66598a95ba83c877c028ad16eb71673e65fc05498d574bec1cde21191ad23183ddde1724496b4955ec07b8e99781643135657b3a2b33bb577dc4072aca3eb9b353eb10821a1e7c443377932beb5e79c2c4cbc4329998e30d3ac21e0e31dfad80733765400222ab94d202e7068dae553fc835cd39df2ff440c4466f2d2e3bd46001a6d02ba255d8da13151dd54461c4ddb9996ef1a1c045ca615ef78e079fe5ddb3eaa4c55fd9a15a96fe1a6fbdf7030e9c3ee4246edc2930589fa7d637b3fd071817c00e898ae0e7834c325fbaf0a9f206bdd3b138f128ce2411a487a73a07769c7b65c7f82c81efe581b282ba86cad5e6dc005d27bb7eb80fe2537fe029b68ac425dc3eef5ccdcf05075d236699ce67b04df6e0669b6de0a09485987eb7b14607a64aa6943ef91c74cec18dd6cef532d8c99e15ef2723ecf54c8bd67eca40f4c45ffd3b93023074c8f10bf8696d9995ab499571ca4ccbb158953ba2c050fe4c49e19b11834d54c9dbaedf71faf24950478a803bbee81e5da5f7c8b4aa1907425a7b33e4bc82c56bdc7c8ef38e25c92f079f79c84ba742d6101207e7ed1f24f07595f8b2d4352eb460c94e1f566477977d5545b1fad2437cb455a4ea04448c8d8b099c5158409f6d64949c065b8e61a716ea0a8f182e8453e6cd602d70a6783055ac9a410	Win11PrivacyFix.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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	Win11PrivacyFix.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1	Win11PrivacyFix.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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	Win11PrivacyFix.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8094640EB5A7A1CA119C1FDDD59F810263A7FBD1\Blob = 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	Win11PrivacyFix.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
3172	closeapp.exe
3172	closeapp.exe
1044	win11privacyfix_2024.tmp
1044	win11privacyfix_2024.tmp
4904	Win11PrivacyFix.exe
4904	Win11PrivacyFix.exe
4164	msedge.exe
4164	msedge.exe
4412	msedge.exe
4412	msedge.exe
1888	identity_helper.exe
1888	identity_helper.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of AdjustPrivilegeToken 9 IoCs

description	pid	Process
Token: SeDebugPrivilege	4904	Win11PrivacyFix.exe
Token: SeShutdownPrivilege	4904	Win11PrivacyFix.exe
Token: SeBackupPrivilege	4904	Win11PrivacyFix.exe
Token: SeRestorePrivilege	4904	Win11PrivacyFix.exe
Token: SeDebugPrivilege	4904	Win11PrivacyFix.exe
Token: SeRestorePrivilege	4904	Win11PrivacyFix.exe
Token: SeBackupPrivilege	4904	Win11PrivacyFix.exe
Token: SeTcbPrivilege	4904	Win11PrivacyFix.exe
Token: SeTakeOwnershipPrivilege	4904	Win11PrivacyFix.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1044	win11privacyfix_2024.tmp
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4824 wrote to memory of 3324	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	85
PID 4824 wrote to memory of 3324	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	85
PID 4824 wrote to memory of 3324	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	85
PID 3324 wrote to memory of 1044	3324	win11privacyfix_2024.exe	88
PID 3324 wrote to memory of 1044	3324	win11privacyfix_2024.exe	88
PID 3324 wrote to memory of 1044	3324	win11privacyfix_2024.exe	88
PID 1044 wrote to memory of 3172	1044	win11privacyfix_2024.tmp	89
PID 1044 wrote to memory of 3172	1044	win11privacyfix_2024.tmp	89
PID 1044 wrote to memory of 3172	1044	win11privacyfix_2024.tmp	89
PID 1044 wrote to memory of 4904	1044	win11privacyfix_2024.tmp	90
PID 1044 wrote to memory of 4904	1044	win11privacyfix_2024.tmp	90
PID 4824 wrote to memory of 1876	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	93
PID 4824 wrote to memory of 1876	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	93
PID 4824 wrote to memory of 1876	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	93
PID 4824 wrote to memory of 4412	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	94
PID 4824 wrote to memory of 4412	4824	df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe	94
PID 4412 wrote to memory of 2752	4412	msedge.exe	95
PID 4412 wrote to memory of 2752	4412	msedge.exe	95
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 3048	4412	msedge.exe	96
PID 4412 wrote to memory of 4164	4412	msedge.exe	97
PID 4412 wrote to memory of 4164	4412	msedge.exe	97
PID 4412 wrote to memory of 1588	4412	msedge.exe	98
PID 4412 wrote to memory of 1588	4412	msedge.exe	98
PID 4412 wrote to memory of 1588	4412	msedge.exe	98
PID 4412 wrote to memory of 1588	4412	msedge.exe	98

C:\Users\Admin\AppData\Local\Temp\df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe
"C:\Users\Admin\AppData\Local\Temp\df78a114bf6c0974d7ef2d735d5f4dcb9e57a33198d37d71c0912d6af6f9eb43.exe"
1⤵
- Checks computer location settings
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4824
- C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe
  "C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe" /silent
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3324
- - C:\Users\Admin\AppData\Local\Temp\is-AQOB0.tmp\win11privacyfix_2024.tmp
    "C:\Users\Admin\AppData\Local\Temp\is-AQOB0.tmp\win11privacyfix_2024.tmp" /SL5="$701DE,3938692,978944,C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe" /silent
    3⤵
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Drops file in Windows directory
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of WriteProcessMemory
    PID:1044
  - - C:\Users\Admin\AppData\Local\Temp\is-D1N7P.tmp\closeapp.exe
      "C:\Users\Admin\AppData\Local\Temp\is-D1N7P.tmp\closeapp.exe" Win11PrivacyFix
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:3172
  - - C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe
      "C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe" -install
      4⤵
      Executes dropped EXE
      Modifies system certificate store
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:4904
- C:\Users\Admin\AppData\Local\Temp\RarSFX0\Replace.exe
  "C:\Users\Admin\AppData\Local\Temp\RarSFX0\Replace.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.cybermania.ws/
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffff78e46f8,0x7ffff78e4708,0x7ffff78e4718
    3⤵
    PID:2752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
    3⤵
    PID:3048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4164
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
    3⤵
    PID:1588
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
    3⤵
    PID:2504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
    3⤵
    PID:2612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
    3⤵
    PID:3968
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
    3⤵
    PID:4684
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
    3⤵
    PID:1172
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3916 /prefetch:1
    3⤵
    PID:3732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
    3⤵
    PID:2656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
    3⤵
    PID:3068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,16928101551391633706,15296760085604261189,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1292 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Win11PrivacyFix\AbLauncher.exe

Filesize
21KB

MD5
3d83d87346847630ff150167ac7018e5

SHA1
a1e28c0f3caad1ec3fba7ad0992ee8931a1fa3bd

SHA256
2437a1415abe4bcbb44123bb7077374e920967813d66738f8128432fe0429719

SHA512
1ee87647221254d05833ed2cf613e6b72cea00f2d6882cc27795fac901395e289c7b6ba0f9c5dc45cf5258032576027c68f0e3da3ddd71f987176a726ae4189b

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbBugReporter.dll

Filesize
93KB

MD5
982c6effabc75cd60f7590a9b008ef9a

SHA1
2b2f0b5de8ba4f50b481b0d45474c60db9925ac4

SHA256
dabd55fe9793a7afa24e7e063cb501fb0a5e35a5a0fd18cffed0fc43dd807713

SHA512
4e27f845f167e7f8730c42c497da7330e96de972e025f1a0a6760acf80acad15c0600746c5a13f7e37165cee5b8f0b427fc416bb5faf90a974ec3c0f0f1e6998

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbCommons.dll

Filesize
132KB

MD5
7edb225ffc197b61401ccd8f9a78f200

SHA1
e531fdaf78ebe20d452e57e9a1c5e8677b5b48b4

SHA256
8c772ea92398ef1bcbfb3a8426bb28c1d35db03b6f8e5678f9074773151b6bc3

SHA512
325a7ab7a0b3b2243c33707315acef1a4e871736aff946b0a9580d3dd2552d29e7a9289c11cdf9c016c60e24e60d2bc8082e888cfde76803c890bc74f6da4351

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbDefault.dll

Filesize
480KB

MD5
44d531bff98136d2f26eae570b4f6bae

SHA1
bd744b78468595c8c7cb14b0ec042f1193c5ab86

SHA256
3396563874b8b758482090f1a88c4c73c9c6af7e71ff56575905788740806bac

SHA512
1e0002dc2798b29a4ad6c3f1fc41a6eac7024fd495cc8732390f81c6f0c6678aba3fc3f23c7d6e42220f20ee1bafb3b83172b7489f532e9bc7da91bf6a718162

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbGui.dll

Filesize
297KB

MD5
0cf85abfea0c0dac567d6599816e2241

SHA1
caf58a05bda9e5460bfbd78b2540825d0bb769a0

SHA256
9eeb98450dd3ac34b10581aa55ebb2fdc6f59fea390c24efbc80bf529d373493

SHA512
b8be84f0c40a80a992e3ccf655efc1a8e02852ff2366f01d1b5dfc48d9638bacafe1f9637862a4954b5b9e1933ccefbf143886f7759608d219d9dd37314989b2

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbLanguage.dll

Filesize
50KB

MD5
505486bc6f473ccdba7c626da847bfa3

SHA1
75e445900040b0508106090a9b7cad5b91eec10b

SHA256
de9b6833c309f5c8f3fcc1cd962172429667230bfa733ced3a1e0239c130e264

SHA512
1b0b6ea1185944ad43702caf21c6dfd5d1209b8558c874af5279e6e09f02c07d9f0b81a019feba7b44b023deca2acfd073f26c1bbca4e3d92c2f0b46d8ebe101

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbLauncher.UpdateRoutines.Plugin.Base.dll

Filesize
16KB

MD5
e63cca98c5ee1ba95b24f8da686928d8

SHA1
e95e39663ee1c99632460b71a6fdd2c871ab566e

SHA256
3036c4d3a979b8397a9093b04690567f860a8c2517b0ae2606aa123f72886beb

SHA512
d73e2df2820a86582946cd5476e7373339783e78f7dded939641d54d7638f50e54072ad814047392c7bb25f0ed37285d85d6db642c6a03324bde02b9cd1f49cb

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbLog.Commons.dll

Filesize
16KB

MD5
4bdcf4ac37f06049b37cbce3f039fccf

SHA1
fb21f9403f2844a8615552ca9f3c00e0c2e042c5

SHA256
34a7174e1e0102e2e2d6a32415869be8c52caf1e9d5c44aa7f32be637e374232

SHA512
1500d713b96b6634d6a35110834b9b8c72c01423ea70f09475044eca0da0cd55fc9c249f78d62db8a468645c6cccc59b1ab21487f7ca019a251dcd30a9a391b3

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbLog.dll

Filesize
32KB

MD5
f47edfcc1db23226b88026193c8c1d87

SHA1
574b2b14bf7b79431ececa1bb85ccdb2a89a0d86

SHA256
bc9d6b020826a7942737d44fdc090024cb7868f665a7feaa51027e1e662ff647

SHA512
3615849a87afd080a0871a274e8e5f2bdc00becc565745f9e44593ee98e943ed97f3708941d3e4f76d2435e320827c63acf20cd5abcd849d00b0949a4b7f5f7c

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbNotification.dll

Filesize
51KB

MD5
0ea9cfb5e2a0c2d5640dfa232ab7cdb8

SHA1
3c8ad06dbd61b3900e8e1eb19e65e83ccb36358b

SHA256
a641219798bd7a3d22694952a114d19e909a2046d08e178d99cd0c5e0e6a5160

SHA512
9523df43d51a975b742d7e073c3cda5ab7c6f6bf5a4a2cee69c578f416d954c2b6e46d9b28721c67042aefe6310d75da0b9c6394e44ec3822533e155b6e7ecba

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\AbRegistration.dll

Filesize
283KB

MD5
2ab53536c29b028952cb46b743c18410

SHA1
dfe03846e4ebe388f8716a902cab8ab7c77162a9

SHA256
b50d51aca8351b0416257549361a0ec3ce8c9a041b0a532684425fc1f47dc9b7

SHA512
f956ab29c6159c269c0d4a62bcca9479b0c016c3794a13a6ef739348cf7f0df092e0e2ea27be95f5dc415490516d943dc5f326cc4063936ef63dc70ca506ac47

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.cs.lang

Filesize
2KB

MD5
892cf81d8503c82688f5bc2fa6368aba

SHA1
cafe09c413fba14d6bd397caf648cfc2ad8cc70a

SHA256
2331a3e1a76d5eb5af54fcf9eec5ef6c62193f04946abfee4b6d8fe87377a724

SHA512
53d162d1ab10af452a70f2a2a09e13f32f1f5f1fcf2de5383ac9b3f86ed678be38ff0f4d0f555dd0355c802ffe14166bb86c464afef5b9dfeaf423c1a076dbbb

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.da.lang

Filesize
2KB

MD5
48282d5d0ae3804d8494787653d11cf5

SHA1
f275f428c492aa5ddf66d99ac067450ef216a572

SHA256
a45461e4bd5630f6c0d2c827307a34e6f84c08c033880f555673e084f1f12326

SHA512
967191fad0876973d3d7a027dfcf4f1cef7bea880a2ebc4e13b9314804b9b83797d183d6bbb5ea43ea036afa868a1c2b0b5f8f0ae54b61988722a71b30cef4b4

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.de.lang

Filesize
2KB

MD5
3e6136860bc341e8ccd3ad75c6785243

SHA1
bc57505f89d2562d4cb108dde1e6c8483aa3f1cd

SHA256
2947ae7a0a0b1f01794c24d888d4043f307b9dfe3d9d67ad60f94d4a8f23fe49

SHA512
1b25b6463b7f2cdb5bbf98bf6dc76fe1464aac0cec144c11bd5167262519524e04b916f1ae10bd5f8a22941f67fe7aad71dbe26feba0ad73398ba319b4efa4e9

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.el.lang

Filesize
3KB

MD5
1f963282698ecab57139c3070f9859ab

SHA1
6a6f99c8ea1b69d3853a9c10f7fc20e2e51e5c5d

SHA256
220708d0854a328c4648aa553a6de97f3230e9e8e5d78071361300261723d1e7

SHA512
abb2d285d9dbf6cf5ee4535bf4db8dfdb33cf14f2b7b25bd7681d32bd243256487a5d387518ced04fe0a72aabc9975183b7f538203134f484e824257c981f6f0

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.en.lang

Filesize
2KB

MD5
42c705eb61c55afc8555969bbd5c5641

SHA1
4561490aa99739fc6e69b0d697a894192f854af7

SHA256
7ad8cf0b3cc7ec308b345b14f417396baed95418486e3e07e823e1de1eadd3a4

SHA512
fcd8d6d1d4ebe0aa93548314cf93a72f4ca886bfcc768d8c197424880978e05533b0f655c1e88d1e4c12ad3b3edd0106381331317493e4a87d98a37d4039f493

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es-ar.lang

Filesize
2KB

MD5
6d8005a391ac5a80dc362fc890eb1441

SHA1
5584cb4aa4afc51816149aed43b2699f54b2e950

SHA256
8929e6401538219fce4e4d6d94bdf2f759646a0e02c252aee171c1bfce547e71

SHA512
4ce0c227bd54fcdfd0790436390cd671f3346a558d9e757161d980daf140703f0fb1c7e148fb426c747857622be0913f4228f7184a845d9dc688cd68ef4287a5

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es-mx.lang

Filesize
1KB

MD5
04bf85db4c87e6c9538a39be5494c0cd

SHA1
3554bf01e347db6d2d6245262e362fa59b54baae

SHA256
921d5679509738f6f8eacfa525321b0ceb6d43f6d22b2bd0480dc72e2cade846

SHA512
1fea7f4b115610a5c91e1f78601069cf307a3d71c2fd38b8fd6d61a26292c965089087cb1a130a88e1f5d5fbbadfa489915f0081621a6a3ff2b1a0be95b8dd6b

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.es.lang

Filesize
2KB

MD5
46a5aff0e8bed38c71d491701b22b268

SHA1
60f1e7fa1fd39a239e71a3739374e7e6cff97bd9

SHA256
fa9ed5b24030cb443314f3b651e1a4d15ab8132495b6319d0047186d24f6d39a

SHA512
eebfbb19e11d3bae66aa7a89d5b01ce6fd903f58897d7ec5efa70abfc41edf20f751392f3bfbe0a462a04104ccc47e41238719c1767906b617e617c2cdc932ed

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.fr.lang

Filesize
2KB

MD5
08d142f3d4c9ff7cbae29d40bf396c4e

SHA1
2b75f366698c831486004d4e363a27f94e41b0a0

SHA256
75ff5b09f1aadc9fa98c8de5b073374d6fbede1acc1a316c1a71fe4a0e97e9bb

SHA512
b4f690575685c7ddb73ed8deb2cbfd29fdd0fdaab0347327c8b774713c74fb82203aa2d77049d4802f2784fcc32f5ea835af1a89d64e67831dc0a7df3059a568

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.hu.lang

Filesize
2KB

MD5
444b482c5768de2da6b258317d80f716

SHA1
1ce1a17a84450655b2e62b23eaf2e1547965ff0f

SHA256
ab07e043102eaefb5d9f255743ce7062d2ec36af81e41ac5f75ee76a956fb6b0

SHA512
33725b16e0f533045324f6ae223f36fcd0e96384f8274ba92539d4b3d3d1aea4e76d0224f9780b9250acb2b5d08c909605096411d9c2799d554d412ebf6a802e

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.it.lang

Filesize
2KB

MD5
6a122251d9e419107b1c9f88195d2a95

SHA1
77f3052cc8d575ca56062b543953a0c627a59b33

SHA256
49733224c63c16ec5b1657786d5aad67a208d4dbcef07e9a8e384dcfdf1a14f9

SHA512
def05bc4d171ede129258858ad1780a040520a6f7a87745c62849a5fa2a7daa1144b391ce6bb010db2dd66b81616c43a90284816b73b76af82f6e75e564b95dc

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ja.lang

Filesize
2KB

MD5
70fb3d95355af199812185032fa185d6

SHA1
84b55ec4deaab568c54b49090b77c610828e845a

SHA256
6115956a02f0fb171c45d92e989f0142f950fc1cc0922dd979f78a6676c277cc

SHA512
2694020a7ce8036b5e07ef6c06af4e7b21c5ace1efdb6637c3e22776cf5796203ce73706e7f6c7e5bc23a9866d5076e4d42ed87b69192d487b6f894040eb8223

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ko.lang

Filesize
2KB

MD5
4e9e64f74e7c247108edfb643e5b4f39

SHA1
e1ac8649067a84ce67c9e3bc2b6dab55982b83fa

SHA256
979f90f37f26998886b4e8a5103ad98f80ecc6fd1b93ad5c5fcf1e719471e84d

SHA512
7a0a8d09d9cc1eba26111aba86d0e4ec2857f6fc3aec159a67a18d747546bd52e7150538786cea617fbafa23a12665050beb0fbffe95b0609dd476451a043729

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nb.lang

Filesize
2KB

MD5
9be36a63c86be276f8ac7009568fe940

SHA1
bbb13149bd7168f0410d224dd9b034881b3f6f52

SHA256
a9bb04572681c6b0dea4a6aee4f2ee66a5da8d9c20b80bb9d50b0a3ce7dc97fb

SHA512
84affae84e755066c758a977ac0cb8cf15214c6bf4069f8f4c1c4c107b23d1517deb03b5b51addc8a69b89d8a685312a1e8f63cc7780b808ac3053ee4952f401

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nl-be.lang

Filesize
2KB

MD5
4e5d0171b80ad3ae4786e659e7e376c1

SHA1
aacb8b38cc95ccab38b04b33a49d2e12df983e64

SHA256
e42076c62c66ec16db8da4076adcfbcdaa05037d3d7af95b1b71595794f55ec1

SHA512
8a1af5a96be7e7a99046045baa31a8a9fdeb77b2c65988728ebbebaf558a0ec9b228e1cd9651a4c3d90b1b88ec5c4f3a57446d3f732c489e37e4625faf27cd14

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.nl.lang

Filesize
2KB

MD5
c7130bb52b7a50d0280f05f25ed61749

SHA1
6d6e161a378aa16e56f60b306e3c048535ea9b58

SHA256
15ee1016ad7dfa4152e95b866fa8aa268306a630b25f0eb2246873492595ac8a

SHA512
f8fa81ca4bf331097574e44d16d2a9420c2e2028d597f5dc0579ea39a6d6cba4a58bac09b3665eed4dd847f751b8a298dbe704f40479c32de8bb1011b72c6961

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.pl.lang

Filesize
2KB

MD5
44f7a74ff4ae1d63902cc1eaf1cc7ce5

SHA1
58b3be17ab3708ff68324b2c4c1dc53ac522aa1f

SHA256
79f32c80ec8b5231ea667e7ad18f615bd70e64ae8a40fe0573b2c9e48c79854a

SHA512
14382c0fd206f6ad25103da48c7814373017849d8bb946bb9833388ce979ccd46745d6d7494f6dbc19b752805c5e60f7ed7415e38fea2c4fc9cabcfd25392143

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.pt-br.lang

Filesize
2KB

MD5
81310fbe70d8f8c50e25ffc436f9b600

SHA1
46354f01481eb979d2740b1e726ea607315295ad

SHA256
dce86b92b78f372f726847adddb82b5e13eb4cff46341a6dca38f35392424548

SHA512
fe4cf411b6cf982b46e452300ca885d75750eda3c56b42728feb0c4a3c84cbf634c08146ac59b6bba30d3df42d1ff5eecdf129b6d8399a7039d93419c3147d43

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.ru.lang

Filesize
3KB

MD5
bdbf8a4e8730a875decd619dae4981a1

SHA1
d36b92eb9c762083fcb2361228c4076560479f75

SHA256
96e63627695ec559f201294bf365b9bdcd86334d9c45e579e19b594f11863de0

SHA512
ccb29032b432255b7540251e947690d3f27f132901a462fef89390405a88e3eed5fc9098c01c8da5460c233e88bab6742c19043007f9e51e8d02703cd89753c1

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sk.lang

Filesize
2KB

MD5
bc03942579c9acc20275fa8351911bb1

SHA1
0c151ad02475224065a4eb8e98df64e5d979db3e

SHA256
7aec25ea8221a0c70758230f6199d32477aa4a0b3de76f608c37d8503dd16532

SHA512
564847e0cebdd9feb0c7927093edf6e5c4f23f2642c480868f0d071f3ca646025efae4cff3568edfffc36cb2d596f74d4ed55462498188aa8a15ef783f36a569

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sl.lang

Filesize
2KB

MD5
1d02c7d66f3cc3c7a98a7d09e17861e5

SHA1
cdff14097315aedc72b7d7462ea816b77ec97755

SHA256
a2462ee3b336ef2f664827e7339d9ac4db6ea72af30aa13eddddaa6e80f14ec0

SHA512
20499b302a4e7348938e4e0f01b63548ea904b16d03f345b675219d5f98ec18615fb13692183cd1e87e6fb6bd08e303adcc6292f345232ac5c8639c155760529

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.sv.lang

Filesize
1KB

MD5
77bd9249919fcb14021d74008081c8f3

SHA1
7a33912ac574aadf79da4098bad02e9e617a95ec

SHA256
154b8752d59d015b8ae247d838e67f74d6de05bca2b57be53c4bd861ddb439f7

SHA512
f71f7f2087b13412b627cbd25714347e2617b195f0444bedef296eb8f9892d7a62e91f83b399a42bac56899d8ca8182c321b6c5ff307c87a9d605960d2751d16

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.tr-tr.lang

Filesize
2KB

MD5
2870193c262d90ebef4fe8e8dd41c0bd

SHA1
4ef0294358bb157ad8e65aff4813317aee45acf0

SHA256
aa9b6bff3bfad946e9b4c4bf6b661315ec982e9a49b5962d974ba25582d1616a

SHA512
72ab7cded3fdda36ebf33e601ea19a5275aaf0838e10caef95eaf0f72311c07205dd867a711a54087ccb8807dafcb691b5f48a8c0629fff278b7f708a4abacf5

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.tr.lang

Filesize
2KB

MD5
914b2860029ed27935cf93046ef2c19f

SHA1
2f183f43df02dfe948265fb06c341f4f8c70e879

SHA256
7dab0308d5f56b3d748ce878ae080f61726ec1e94f8ecd8043683e0970d77d26

SHA512
d7238576618763a192e3f0a2bc4de9f1f7268202a70e294fd762522f07ec531608e2bdd115ea3416c16213b95ffbe61f1eeadd930872b0ab117e8dadc2e7a01e

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.uk.lang

Filesize
3KB

MD5
ba269edd94d46bfc92bb6c1ca9c627f8

SHA1
7d67499c2ba7810df9eb8548e65f53a2f78c33b4

SHA256
f0ae4ddef41631d9a0f9e6b91701478864368881149491ab0b7f7e955119a289

SHA512
63ff12e0435f134c608111710413b202a4cf1795f4647063b44b7794d2ef24b79570b9f49c700946e531ead1f046f66aa1e97adf9fd4d6d22e3f4f31eb6e7b1b

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.zh-cn.lang

Filesize
2KB

MD5
2b502aeacbac8b9d7a9254f8dc3a58c3

SHA1
266f6dc70750ef81d29c921b9bc54b88240282cf

SHA256
86d15de44b1a7a20e9c8a5c0606a417f7ed5649967869bec73a68ed52621c6e9

SHA512
47f25df69bd0dd83bfe6821d371faaf8a2f3d894faade8d6dab8cbe12bea9451c49d9acb3fbe76dc0638adfd08e491f65229abcf6833df221606986c04338cdd

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbBugReporter.zh-hans.lang

Filesize
2KB

MD5
92a4750a9cf239ec2930ab4395dc5922

SHA1
53a0f608f834a14bcb05ee59934fb2dc18589eeb

SHA256
a0850825d5c99af884986e334e49baf8a630c4e20a6420c8bcd7b449a9dedf9d

SHA512
4578d3ede4aa93d674cc2691b7b12a6e93a34c3461da8496994b208a326a7dec95c5fa280dbd12be0749a4338d87ae0377edb821937a267fb3e3eab3328c3a8d

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.cs.lang

Filesize
14KB

MD5
745ddea1ffe5fc1d9ea7ff0be5d2791f

SHA1
950b2792bebf2664678c29f91f446b3d644f5711

SHA256
a5e2350103b88eab363da2cd2b29ecdd6f7402492b7da7eb9e38c4127d39dd5d

SHA512
1020d9d22482d42686bd3702f8c9c28725dda96dc5b24bdb9afb95391b43b84febc7b5f0b8e6988182724475abf1227d83ae1cb6539b15ce716757b816f754c9

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.da.lang

Filesize
15KB

MD5
c6bef2f8d08083266ab75119196a1460

SHA1
54f7da2b98587ce7a609f463e42c6d53b19e8ac1

SHA256
afc128b121d85dea563e39ee1bd7aaab8348063123799c52019ea3e034431cac

SHA512
978bc828e1cef0425dde9c27ec1e2199687b1e457d7831ede8358dbcb9fa6e67bcb9d0b07d161f703baef7304065af0a981ffadafd99dae200bef3e4c22adc8b

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.de.lang

Filesize
17KB

MD5
bd3bd9f90c02d7f2e2104082f3591432

SHA1
ba2ab415a39c0985f852acf8fbc1f5e5a9207ce4

SHA256
cba5fddd2af202f6942833a83ecbda25c9585355d956fafd12f0661c9a50637f

SHA512
5b95c6b6851f0fb573e0d1b77ed8839e9fe62845c10913646dd897b66a89555ab3f132f865b187fe4ed38eea8cf9cf31180f40bfaf5721b54fad1ac1950083f6

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.el.lang

Filesize
18KB

MD5
d9fdc1b74ab7278211a754f4e968535e

SHA1
30c40f9643ace9d155bfa5f2d0f93304ceb9e83e

SHA256
8dd92807541b773c1a06ea7d58101497e0029fe2e30764a26268bceea3738045

SHA512
6864b49bc49991c057a0d73307912e73d82afcc05910363666306bd711b9ce451c4effc1ffbf3601c98becb611d072b3e929bab7834e31441ec5760462fc8eab

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.en.lang

Filesize
16KB

MD5
f96bc8fec59de1568f9d962d673d7a33

SHA1
87444815b38323bcbd7763d2a03e5a1337ea0440

SHA256
8913e6719bc94d021985c9e71788332b11bb71c35d99aa82833af35106fea47f

SHA512
589a2374b9338c716d3adea628c902ec252b33ab59e7f80f36bae5af01951eb9afacbc580fd1862e74f585626fecf5b69e4c168034c8a0aab83ef19cadd8f3cd

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es-ar.lang

Filesize
15KB

MD5
e134c6a1428acc56511efcb7651f970b

SHA1
001857aba883c737b5eb47bb0eae7f12dc8e71ee

SHA256
85a0e42747f5ad67c38c082111552edc234fa7e254d323f6a51f34ff03a17b0f

SHA512
ee986e82eb16a2f2f971b1202988f51bfcb590942f105da1c60b716d4548ce4eee6d61dae91c239e09df02c7333e11c25a3d30fef1cd9e5f71e7b75cafa67b86

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es-mx.lang

Filesize
10KB

MD5
c1e661eca062a3b897ecc64349d5e607

SHA1
c42469bc732e129e0603c41a0881b8bb79a92807

SHA256
17ce19de912c938315f2f602ac612c537658098694cd11302c020111f14ed69d

SHA512
afac9d7f734f4ed53c0b150e7ae80dd967ddbb7b87cfc583b7cc74089af73904fe13b885f0d565873b08a92ee9b48465cf7652b1260087abd9429b3f88ea7f7b

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.es.lang

Filesize
15KB

MD5
8d5c8c71f89835e1685f3696f3e28af9

SHA1
4fc750827e27d898d022cf5c842e706149cace42

SHA256
32ac9896875fe4543c0c2d6ea436ae0a1cd2d480ce398de4f65029cc1087c974

SHA512
3de94d09daabef6b3c81bbd28820e4d6c85ec8b7ecac6ebe0d7b86a5896749bc254e34b6c4ed6d2ec0fe9f2c071b322a664d0a72a70a089451ab1ba9c3296487

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.fr.lang

Filesize
15KB

MD5
ac76d43ce30af081cad4555496752a83

SHA1
2b7b5268eb7f481140e6434b5adba40bb3f74e4b

SHA256
2563fa78950ebe222abb98a8e9ba6763f5f5e48f0707de262e51ae27fd41828e

SHA512
3ea87bae00f16ddced16306fd49f24b1d53978b999bd2e7942a226b771fd1c54514c4e15228e2dcda6d18c0d318af47bd957fca53e9dd78d76411f1e5713dffc

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.hu.lang

Filesize
15KB

MD5
1c157af5969e66e14593d1465a1b582e

SHA1
1be6e64c4820a450310de81cff8af0c692d2838d

SHA256
c6c652c7054f3087715139ce302386709bda62dd9ecc371ad8722698c16a1311

SHA512
35e0b22db32c36a96162d72b2efedeefc72a50ac7ac4540c94970233fe454bf3c70460d5ffc3acb29d62c84d3b046bf3fc14d6a92df27f6b200145dde2dbabec

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.it.lang

Filesize
14KB

MD5
3da4153fd524a28cef479c06e961ec32

SHA1
7f0970c29d0199444c819046e462269c5b2a3c9c

SHA256
c43b4c5d258508d22c329b6da9071dca6441ad8ef5ae4663db1a7bc0bca6d957

SHA512
e606959d3db8ff37e1e8c4cf4f15c49a95b8b90dc72d4c6a01662d1cea3e6440f81676475f5850b05257b7c4cbaf79c350dfeed25e274f0dd19bec1220ede63c

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.ja.lang

Filesize
15KB

MD5
93de4f11387f99257c11a24ced4409f4

SHA1
8aaea89391cc004605569df03dcaef8cad5883b8

SHA256
43e5b84b51db060108d054bca8d2d883195466bf3d8cd0568789c43bd31b865c

SHA512
4e2475a28c0fe8d0ae06acfc1a988d41736baf4a4275ba2a9dd7c3e1daf3de13dce38d8184e6b26c324a53e0e322aa5963d0f9c643b844997c03b19c7be1761f

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.ko.lang

Filesize
16KB

MD5
8cb75198d71040d503342bdb5ed2c175

SHA1
bdfecb3cc1a28f698d8ad01df10bcabc75668d1e

SHA256
d5474eac5cda8e6d4b01a0685623207b591959e452350b55d07ba62d26539a2f

SHA512
bb7cc0f438d370356d7b55170d8e1af6d01dea48c85a9bc45820fe5d037bcbca1496ce488ff6d56e8283e87f3112ec17a15d9512b52dac0d3a1683e00003f288

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.nb.lang

Filesize
12KB

MD5
7eefdd9c7ca5753dfc20f51806fa1eef

SHA1
ddba80688840d10b450ab92f95ae4265e4a65c52

SHA256
7e4f93a9ef072e315b5e328715ed52b9a50f4b9539a0029d6142da5517d3ab58

SHA512
3e156fd2e697486d3cec4f408f767128874103ad08d57a17366966b937987d8ba9bbe97c41226bd8487c55e8fbb6c4fe73a34a7598a62c5287a913ec7ae08877

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.nl-be.lang

Filesize
15KB

MD5
8ab0cda3c8c494f09b2c439b58974c22

SHA1
dd779dd49071776ad914b3feab5f96da2f07a9a9

SHA256
7bdb36df577033f8f537221cd9d44527c821f90a8b4e4a6655f873ff78eaf66f

SHA512
3e2f627230b865ca1bd4f90052bc23561733d78facbb5055e44391306c277cbbc02dcf5291f07a0bb1c2695a77ab0e953e7af462b833f5bdf7726e1d9edaa2d4

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Languages\AbDefault.nl.lang

Filesize
12KB

MD5
0ee78300b9ad31531fa5b9a41693974e

SHA1
ab2ad72dd61d75b7f05af24d88b83d24076d8c68

SHA256
85b61713fd30a30b1ddc9e28a595b8e06fbca6fcfcad35e15a1e3abc9a282b43

SHA512
8d1d918b1612d8c11b4817e5efea99d3420cb31b3bff4719fedf09649f37289057a1c57346dd4fc54aae8c1a5080c0574994271ea4048a4ea55220a813c733b9

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Assets\Licenses\is-Q36SU.tmp

Filesize
11KB

MD5
d229da563da18fe5d58cd95a6467d584

SHA1
b314c7ebb7d599944981908b7f3ed33a30e78f3a

SHA256
1eb85fc97224598dad1852b5d6483bbcf0aa8608790dcc657a5a2a761ae9c8c6

SHA512
e2f81cb44129e1bc58941e7b3db1ffba40357889bace4fd65fd254d0be1bb757625bdf36bf46d555eb3ca4b130dcd1c05225caec28d8472dccf52a63dbd6e185

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\LoadingIndicators.WPF.dll

Filesize
47KB

MD5
ac3e9de7e082cc05f7c7c19cdfcff280

SHA1
fa510c077355a5bc46d5e099b0b52c470b1faf05

SHA256
5f15b6081c88c4f0f645b992af716512ac0f7a7388f68c3ca492e2cb1e88a323

SHA512
244822d5ef74231ca07cbf6ad97fa4d29e6c559f61df969af087b8afa80e69b6d1716ecbfebb08d6278ed25680c1faf024f512fb0ea24c493e7eaecef10745b2

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe

Filesize
651KB

MD5
2bdfddb1dcdb72b2615b2cf5e893474f

SHA1
126502d2c4ff6fb795fa88508ece16cf5e7a41a8

SHA256
24fb7cbe5a21e976bb7f0ab0d3f5c2e69b729442a38c0d09048ac4591bcaf0cf

SHA512
d0bd58a776c4a918a929e420ac43f09b187690370506e86dfc1d03998720270b91f6254f3266a4a269bd12d1abb24488ffe8834d92f3f15877749deec44ba0a2

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\Win11PrivacyFix.exe.config

Filesize
2KB

MD5
89febff7f94c2fa37e1dd24941d31789

SHA1
4173a8ee86041ea96d502234e3c06e51ba3c9062

SHA256
c90273a7afed9e25898ac365f981deca9c902ee8b8811efc749ea642e9ab9a04

SHA512
8ead8928dce2f21e8f635357fdd07df27043c64804c9753d963501091113683244be62226872789e194ebf6dce98b351cf84a755a67545eb5a10a8296c759b5e

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\WinPrivacyFixLibrary.dll

Filesize
98KB

MD5
c01cb2fd5462ac3d3dff0ea95995720e

SHA1
c62d3628e915759f8ef418462fadef84cba329c7

SHA256
5d902a7d84f339f16c53bc991b5220382100e22cd3ab24d9fdc4af4f1f379a51

SHA512
86d190792c63246ff3e95150dce9cbb26521c7f4a5fd1a65ebf7e7e75fff81a385f8f5be31ec6ca831b1af0a47e343c5445ee07dab5aa49dd826064017d158a2

Download Submit
C:\Program Files (x86)\Win11PrivacyFix\Program\log4net.dll

Filesize
280KB

MD5
a1df52e212c077256190138d9a4e3aa1

SHA1
915f54a9df827acaf107f859bab00e0411dcedfb

SHA256
9cfc6ea4b125f514bbbe3fdbd3f519cae77a0595f283c9f5b298bd6f9684c2b4

SHA512
711e8beee52adda396a65cb39770ffc042e93a901d1832f15bd1dd6a4d5bdc3329ad2e20239cb37d09f090bfecc1e5f223c06700b7ce079dd73157459078f4e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
33a998b521f7b118c2c0d8f637bbfe85

SHA1
c0b0eefef8a835ddc8863c984608171b014ddffc

SHA256
74a6b5d5cd40031d971bad03bd64745890314691e2d0ca77cfc5e99df8526c26

SHA512
624619bb284582a42cb7207439995ff6e1426dc10f34afb263069489425797f32bf065905f513e3f733fb73c46b150f895f61575babe29bae24b59e2f1482ca3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
0ad45c489d2e0e030f9e5d5462d241dd

SHA1
e58ec72efea3ba192794671604850b921eac319f

SHA256
703d0c0308b5ad7176bd75845b4baffa34a91e4b88d689a296cbafbc3137de0e

SHA512
7b12dfe7268489f37efdc02afbf8c4deb0077809e09054e405ab51d0cb2f8c59c409c6d0f759cff0c662cf0cb1b66748bb33e4391e0983273272787f57dcf66e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
15ae38ce54d02420c8159c50a38fa9bb

SHA1
74eb9ee53b779bc0fa1cda65b76405328add2059

SHA256
247a6354eb76e9bea51aad4b5cbed34597c06f5fa982b0560557dffdeaab68eb

SHA512
67046d56235b0c758c87160ea6b3cd02518d931278c3487f152d836135f6f6a816cca8c6865b2614962dd917b3ff70341673be74cc45a1bb70857731a9a14880

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f27aedadfdde666ca08dd10051cbf575

SHA1
ae1e5967af50f2883b99ccf3c75d1fd7c34f6004

SHA256
f14eb3890919cecc327647c056dc7fe071eb7546a0302bf454a2a59e8ecb64ad

SHA512
e7fa50da536e372f53b60982bf67a77212630ec9f4c0116d232fc857c4de30b65798cd55a17c689ee37d66c8d5227858d238fee650e06f83756cfa5814da5f3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1cfa9da91692498d6791a4ab50d95a04

SHA1
7ea15bc839968e8bddf72a077981ba512dd1b5ab

SHA256
0a587c6d91cbf1f2f01c15fe7770b941cf11b5d07a32b33e4b2d9690976d2815

SHA512
3f3beeeb4c7be81e2cdbe8cd7281e8e7ca7ec76e5c3c112357c4b209aac94f7d807334cc3f6ba6975f42451a2d79e09ba6e0dd2db0e57e741e65e4d4522334cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\CyberMania.url

Filesize
4KB

MD5
f89e823b83f9edc863ae9e35ea0a5949

SHA1
12db7e3d70e47bd97df335c74cd7323dc48a778d

SHA256
7fba1e8849a88298272be247c2b22ef4a50ac1bc4c83a4c02848bc131e622088

SHA512
d3e297af4eeeb3b8201381fddc426c33ab543db80c0da2ef7ee000ad773cf6895d7221ec17b95806377ea74488f8db7354e23d13c43d87599f6b02631e379d35

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\Replace.exe

Filesize
521KB

MD5
66ada25b3df75d6eaab2f9f43359316e

SHA1
de4931a2c6563e10f299e3e4242a03ab416da705

SHA256
8d6ae1a3655b7a97345f806526f87504716538cfe1750923924b8614cfb9091e

SHA512
8502a218152d83564e5ea4962c4008e8c8544cc4a777ba54b61075fe6c314522426358129596ddea90f87b8f4b54d5ea1355f1f878c2c63ed13670063a91ee20

Download Submit
C:\Users\Admin\AppData\Local\Temp\RarSFX0\win11privacyfix_2024.exe

Filesize
4.7MB

MD5
72569a699d52441dab25acb2db85509c

SHA1
4c5146e9be43a18d4f4186b7fe6ed4b343c3df26

SHA256
4044427a4eb0e6e9a557bb0d909d15f7ceae9082d3dc1c06f77d037501a845fd

SHA512
4c3331e713f88e99930974af4d3ace0bd58068c9cc6748ab80f1637b8ef4ce553d3291ad48d711ad9da2487f6bae940a75a75ffa2de32f755b0e7babc26cee1f

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_wohzsmge.34p.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-AQOB0.tmp\win11privacyfix_2024.tmp

Filesize
3.2MB

MD5
ed87bbf7151f266779b1e380f55eb3b4

SHA1
51565044581d719218a0a090b212881904bd7402

SHA256
430ed64755c61c48f0612cec6350e3ad1eb8a1732e7ec9d6a59fe67f438e5ff6

SHA512
8a7ce36bb0f9b900a2eec87c89ba9c204138fbcc92352cea603f428d69fed6b855a5d940dd9e72e7860b87af2a3c42094dea1ccec7158cf3c8a646ca94e06b2d

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-D1N7P.tmp\closeapp.exe

Filesize
227KB

MD5
9a2bbf4de6279c9321969c6257f48939

SHA1
4fdf355fa10fbd61c1d4c47e21e66b09493a1621

SHA256
40e33b4ded6db4e96b7ba89770b248d62ffd5f9175e2e0b58692084ce3b91a10

SHA512
3afd50668327f518e0d5dfe8200f43ee29cdf8dea8667e31131005e1d0e67acb96f4c218b2ab1f7a3ee926bf600b57b046b5c21ba40de779acc03d130087a4cc

Download Submit
memory/1044-23-0x0000000000400000-0x0000000000737000-memory.dmp

Filesize
3.2MB

Download
memory/1044-874-0x0000000000400000-0x0000000000737000-memory.dmp

Filesize
3.2MB

Download
memory/1044-851-0x0000000000400000-0x0000000000737000-memory.dmp

Filesize
3.2MB

Download
memory/3172-28-0x0000000000400000-0x000000000043E000-memory.dmp

Filesize
248KB

Download
memory/3324-875-0x0000000000400000-0x00000000004FC000-memory.dmp

Filesize
1008KB

Download
memory/3324-18-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/3324-15-0x0000000000400000-0x00000000004FC000-memory.dmp

Filesize
1008KB

Download
memory/3324-850-0x0000000000400000-0x00000000004FC000-memory.dmp

Filesize
1008KB

Download
memory/4904-764-0x0000019E9C2A0000-0x0000019E9C2C4000-memory.dmp

Filesize
144KB

Download
memory/4904-849-0x0000019EB6E00000-0x0000019EB6E30000-memory.dmp

Filesize
192KB

Download
memory/4904-841-0x0000019EB6DD0000-0x0000019EB6DF2000-memory.dmp

Filesize
136KB

Download
memory/4904-840-0x0000019EB6E80000-0x0000019EB6F26000-memory.dmp

Filesize
664KB

Download
memory/4904-852-0x0000019EB70F0000-0x0000019EB7166000-memory.dmp

Filesize
472KB

Download
memory/4904-853-0x0000019EB6D70000-0x0000019EB6D8E000-memory.dmp

Filesize
120KB

Download
memory/4904-854-0x0000019EB6D50000-0x0000019EB6D5C000-memory.dmp

Filesize
48KB

Download
memory/4904-839-0x0000019EB6D90000-0x0000019EB6DC4000-memory.dmp

Filesize
208KB

Download
memory/4904-865-0x0000019EB6E50000-0x0000019EB6E66000-memory.dmp

Filesize
88KB

Download
memory/4904-866-0x0000019EB6E40000-0x0000019EB6E4A000-memory.dmp

Filesize
40KB

Download
memory/4904-867-0x0000019EB7570000-0x0000019EB7596000-memory.dmp

Filesize
152KB

Download
memory/4904-838-0x0000019EB6D30000-0x0000019EB6D44000-memory.dmp

Filesize
80KB

Download
memory/4904-760-0x0000019E9BE20000-0x0000019E9BEC6000-memory.dmp

Filesize
664KB

Download
memory/4904-762-0x0000019EB63C0000-0x0000019EB643C000-memory.dmp

Filesize
496KB

Download
memory/4904-794-0x0000019EB6C10000-0x0000019EB6C2A000-memory.dmp

Filesize
104KB

Download
memory/4904-766-0x0000019E9C340000-0x0000019E9C350000-memory.dmp

Filesize
64KB

Download
memory/4904-768-0x0000019EB6380000-0x0000019EB6390000-memory.dmp

Filesize
64KB

Download
memory/4904-770-0x0000019EB6680000-0x0000019EB66CA000-memory.dmp

Filesize
296KB

Download
memory/4904-772-0x0000019EB6630000-0x0000019EB664C000-memory.dmp

Filesize
112KB

Download
memory/4904-774-0x0000019EB6720000-0x0000019EB676E000-memory.dmp

Filesize
312KB

Download
memory/4904-776-0x0000019EB6390000-0x0000019EB63A0000-memory.dmp

Filesize
64KB

Download
memory/4904-778-0x0000019EB63A0000-0x0000019EB63A8000-memory.dmp

Filesize
32KB

Download
memory/4904-790-0x0000019EB6790000-0x0000019EB679C000-memory.dmp

Filesize
48KB

Download
memory/4904-792-0x0000019EB67F0000-0x0000019EB683A000-memory.dmp

Filesize
296KB

Download