Analysis

  • max time kernel
    162s
  • max time network
    34s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    31-03-2023 16:56

General

  • Target

    .............exe

  • Size

    5.8MB

  • MD5

    288d7d66024b6562feeb4d6baed41849

  • SHA1

    cb9efb823a462d1afc8057839fecd224d661102a

  • SHA256

    7dfffd124e41f73e266f806951457060dfff9950caca0fcd1c542ff5e9a21e34

  • SHA512

    1793b4c153f4277d65cf99b2758c586f4a59234760916280deab35ae69bd48b3584ba76474243ac67efb98c052b4e9a184c16b93b10ea92292eac46224cf334a

  • SSDEEP

    98304:LX44Xe8aIUM7LhfXMObVARKlsZjLusEBHYCzg1OnW/T+1zS2owMVMowF:7VXeNIUuWObuRKIu5Y0CozSnw7bF

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\.............exe
    "C:\Users\Admin\AppData\Local\Temp\.............exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1780
    • C:\Users\Admin\AppData\Local\Temp\is-AN8R3.tmp\.............tmp
      "C:\Users\Admin\AppData\Local\Temp\is-AN8R3.tmp\.............tmp" /SL5="$80022,5307485,798208,C:\Users\Admin\AppData\Local\Temp\.............exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1240
      • C:\Program Files\CrystalDiskMark7\DiskMark64.exe
        "C:\Program Files\CrystalDiskMark7\DiskMark64.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of SetWindowsHookEx
        PID:888
  • C:\Windows\system32\taskmgr.exe
    "C:\Windows\system32\taskmgr.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    PID:1296

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Arabic.lang
    Filesize

    3KB

    MD5

    cdde329716cae53ee7e0937b841d2ba3

    SHA1

    e568855b4a62b72eae8e72fa958377beb105e4a9

    SHA256

    ce22da8d9d2553ac1dabfe62a99dde0dbecc68a9b0109e828b5ae30f440a63f0

    SHA512

    725ba0bdf465c33b0c79ac431950b9a4e8eb3df93c86bf72e81f409314412657c70fb79eeec74fc8f34f420c3f074fc42334fd583379f5822aa263d988c105b9

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Armenian.lang
    Filesize

    3KB

    MD5

    ca5c37aa57d643b646110c17a53a18d7

    SHA1

    b6d3f264d7a45783f3b1dd2220815f1ae2e55b00

    SHA256

    2f885f0613f753c65ce978e34920ce84b85f427c6f0237dbf7aa1edd3f18cc2b

    SHA512

    4c87bd5dea6f598bc12d9418b34a372e059388efe10eb6572c42cb10aba5735c16af31a0f42730125fbbcb17b0e1f62439c0fe2316c265d9111801d555a403e3

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Azeri.lang
    Filesize

    3KB

    MD5

    4754a8dd787117f04f3e6c65e81880a4

    SHA1

    90a7b7711b299792e6129c1966491383c63ed74d

    SHA256

    1b70f40581ad0115d4ad3d318acd329efdc8a28950927d81a3bd779af0ec3d29

    SHA512

    453d9181f1d47baa54aa49014118dea4ac8a46bf0310e53a217ca4b0617bc28a588ef5a4151b80a4dded938be8b7e7cb3a3c919070149a8f3863af003790898a

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Belarussian.lang
    Filesize

    3KB

    MD5

    e55f32ba100245b54ef5c3cf99aa3310

    SHA1

    d5850025cd029234e70cdfc33afeffdbc800299b

    SHA256

    379cadc6a8c39dc54a498e1fd830c58ebd3a23f51b45c2ae8efae9ae7eb7b382

    SHA512

    2a89a062c27f8265dafbdf1c1adaac37659887283d11161d8b5a8922cb97f26189365761972c71a437dca3856c183e99e2a4ad4140000d80c26e3c351db4d822

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Bulgarian.lang
    Filesize

    3KB

    MD5

    d6c9a059e075e5c4b94abeb881272c13

    SHA1

    5f53f5a2409ccf6ef658904b6d523f7c3c580092

    SHA256

    599d9f4d282f0de9e3943f1a03ebbbddb3a337b769c217842ba4b7fbdebae9db

    SHA512

    9006ae5e73e1c93bad6238101a2abe415a3f34f07326826051b9fe9e11ca218ad0e28f4461a721676200c25c7560b178a85bfc6fd2aad2a92b45e5452e70fce7

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Catalan.lang
    Filesize

    3KB

    MD5

    910c37c369829196283b7c7113326579

    SHA1

    45489342223d4bf30ad1c4cbbd4f858da56443e4

    SHA256

    9f65727da5067f5db473a5821c3a3a61d555da2435e3b96e2d7116a974e4eb03

    SHA512

    e4a890b3b2976b2142170c56a41bdd50ad2f30fe12a6dced3679edf05532c0746736263a695215b69aa652e585bd57290c9a9b74931ffc98815758b8aa81863e

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Croatian.lang
    Filesize

    3KB

    MD5

    c04b16b33ec452954b5d1480176c9799

    SHA1

    66a0e197d69601a1b9d54e70087894d4e7a0720f

    SHA256

    2f50320f28cb6ed994e03045746dee149dc852af57b01bea5a73b10dd61da816

    SHA512

    f24399cf8fa079286cef4afa76fe68986cf43ffcbb7978a663c337db2cbc2bb87e9f3df4f72ed881c1945b42ef26e2b1dc6f1037fb68d9940996d18dcb869dd3

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Czech.lang
    Filesize

    3KB

    MD5

    37a4d32d731470f6486644dceb04fe60

    SHA1

    1eb8d6fd18c48df7d2ea2b3c683b9d8b57b774e2

    SHA256

    b2475f4c15eb890650b55286cdbc8fc01ccacb8182049b901bf15021597bfbde

    SHA512

    2b8512276abe0644dd4152a512eb198e8ccfda864ca3a5aeec3cc8f48d6a3adc463f0df0c3cc9228e43322465ed9c2cec65af89c0f42e3b4b8052ebf84964e19

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Danish.lang
    Filesize

    3KB

    MD5

    d53e0393ffa2df10010388b9b206da69

    SHA1

    dd39b78072458c9d8dd4e67fa5741843839b3b9e

    SHA256

    19dbb1aad8593239ab09deb6b4defb61c02ce060cfe9d9e7de9fb48ecd13eb84

    SHA512

    79289fd8cf9fb8d7830bca07350221ad27a6c8dc14e87df83d016572a88649e16c536f750070f78f2670d2b43d97b068078ff4b0a42973798c373bdfb57d42c7

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Dutch.lang
    Filesize

    3KB

    MD5

    5d496ef910d1759a592ca5d69ee9c284

    SHA1

    a1c3a13cc58dfa82f8fd7f1cb97571204136bf27

    SHA256

    29d86f2a3723f72dc2609a65c1f050f608f423c4261b268fdba6b4f04517a9b0

    SHA512

    2e5ea5eab681fb080c7022d9fd6b382124d11d47a8d1c94eba6a317d99cce89bf0835971ee4b1071a9c27a9155c3e82e007418d392376595c6021263ae96ed54

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\English.lang
    Filesize

    3KB

    MD5

    0b6675a8ebed947869e3068bf92652cd

    SHA1

    59ae477adea3f97b5179fd5edaabaed0f776e76f

    SHA256

    8709c82bd64c5ed9b181ae1997c1e6e3471b4115a1ac5dc159fa8b09b955c722

    SHA512

    a710192e8e848e24d05bd0f1abaa5a91334d532498a76331f17e2ddd0c8ea9f0a21545fe3022ca92ece853e58b17104b74fb0b04d7afef0ef1180864119a31db

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Finnish.lang
    Filesize

    3KB

    MD5

    8d72429810d8a8bae4bd7161c652812d

    SHA1

    2a1ca5e7b6a854d2e06941106bfb0788a19cb7d4

    SHA256

    02e5d21d30aae1b12ce299f25f662f7ffc73b86f9f21cbf4a067b832e3b4bb5f

    SHA512

    37bafc868719bb904d477f388bbc151227f79751184ae4b036c60622f18ae10eaf849990ff6f57f0e000296ed26ea8792f9481012063e4456545503d0af99fae

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\French.lang
    Filesize

    3KB

    MD5

    25e968b47ec3da2120c581ff1fa6f9e7

    SHA1

    98a4e0f9ea1d372941cbfe70aad521bf5eff41c4

    SHA256

    6a5554d4fb9d2861d48d3076967ab4b3e389aab9564e38230ec53a062df1554a

    SHA512

    3e8a63cb386d5bd89e84362e55400955ca2490c50b5930d0b2439c03c966526ce281cfd38e05f865da4b4f79ac1ea335a000a3470972583d0addd28f8a0562b9

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Georgian.lang
    Filesize

    3KB

    MD5

    84681754ded3b2f67c12a445c9a94395

    SHA1

    eb11f17d8eccc479905f5d5990ab4d99a2605b94

    SHA256

    bc2c6c0596059344bf2494a6a6cac58e1262d3c536920eb2b04d0e05d70bedb9

    SHA512

    b0326fc008a9eb46218968e28dbc2bf034886434dbb67d6c18f35dcd9b6431e87a7e68579c265981322c0c932a545019928c166c430224f4b9701555fcb78a69

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\German.lang
    Filesize

    3KB

    MD5

    02c1b3f1a7b9201fabacb19b3c97bf07

    SHA1

    f26572be1936a9992d40f491408a321cf77f6b98

    SHA256

    493d01e50b2ec34d42a2cc00a67f19c600fd69f6265171555d1fd8cde048b9f6

    SHA512

    d39c165d09b1d55dcdcf5306e3d58ad9f078a9a9a65f6d34aaa9cbfca452e38f80d973542a93ebbef3c6af9cda572da6130035b7c36b2e88121300fd3c0ab522

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Greek.lang
    Filesize

    3KB

    MD5

    8b8989a9932af698f3f5ad77f0bf4572

    SHA1

    18606fb66f0eae44098c3eea97cd4c9ddcac99ec

    SHA256

    668055717a14ece566ee66bdbc4800832cee7d638c5ac230710014c273ff205a

    SHA512

    84827ad4034b7be14d5f6dff257f76de289563b7688a82220489fe3461629338a3ae455d808ab2cc281b3120cae0a4c420f55af0dbfc4ae2ecfe8e717a688754

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Hebrew.lang
    Filesize

    3KB

    MD5

    f364d0ddf50b8aaab8dd8a46dbe148c6

    SHA1

    04da5308ed9d9f7bf58d26767c269351e6f1bbf5

    SHA256

    870be0d49b2ab6966950230136fbee7b2c69684042150cb587ae75887c47c40d

    SHA512

    ec37f959aa1414dda68c1cd550fa5f5d97ca1f01782b3ee012b6445f5a5e3348e4f7ba039c381f4be59af9bc50fc78bad2c62a38d4d3af51a7b36f3837540680

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Hindi.lang
    Filesize

    3KB

    MD5

    602816a8a8c5816a3ff4556216b4ea7c

    SHA1

    721df6cb8c0b8a38f5a7e9f9c6aadae6beecfda4

    SHA256

    80561c224ddba9fb7d03b9ec4584ea08edbe460c225f459c4e02cfdfa9cf2ddf

    SHA512

    3db54fe1beab4f860b24c620426e259e5cec2294bab79611cce47a61345cbc0443821a60bb292bbec85ff2faabfcc4df813c8963891cd0292721147d818ce200

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Hungarian.lang
    Filesize

    3KB

    MD5

    fb9d8df6e725fa82808dcf43e18067b8

    SHA1

    79a61e3982c252a953ce2b5ab2b26e0dda1b6e67

    SHA256

    bc0505841136266b9f2c8fafef94de565b467130901f96f8fa129f6dc1738b5a

    SHA512

    893ca7f9a6165466f689e593995925f002cd752960f4467229d8e12bc86d89fba9ed84f43c57ab27ed7c8b0bc4f0285a6a76b38413bbfc23884acd1eb4901ad4

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Indonesian.lang
    Filesize

    3KB

    MD5

    07b30b24a587ff595423ea2cf3e242aa

    SHA1

    9439f15e18f3487ba942593b4e15de11feeae2eb

    SHA256

    8b54a747063ce810afa6e3ae8c0c637553f46c166ddebce136f5ddabaaac968e

    SHA512

    987bd18a461381a4527ab670bb54e2490b30dea28d2080b3b76310a5d0d9ab237e124b85d6b3bb67e2e7030a179cbd5f3a367c78f670231e1c53c86b5c6913de

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Italian.lang
    Filesize

    3KB

    MD5

    96280ca0c4b0c379daf95ad2e209aa16

    SHA1

    1aef41d0106997e4c08a79db6ab7c77d9875bc2f

    SHA256

    770b486ad97c7464ff526cc2d68cf221cb5eb72353ddbc37d3ba4775c496aaec

    SHA512

    56ef30d57a75c84d9b3d0a65d20f112a9e393fdfc9fa89a13984ebdc840ac9e66115ce89d148cd8176b0624d50ca8c69d842d0111414974410314ea4391bed0e

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Japanese.lang
    Filesize

    2KB

    MD5

    b02be27b2545868cc3e0a89d70cf4a99

    SHA1

    d2098d3fe6bd5194b84d4ebc4a178ecae833555b

    SHA256

    7ab1fc948e196dcbecf3cddd84a859fbc211fe4b50cd7f105d7df906b287a880

    SHA512

    b9d6dc04743639a75e68eb2a0d0f588d768b021f631e4e11d0767dadbf7abed97de591278316ff40572a12d9d796c2a6d57406460f6dbd225c4a226f767f86ba

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Korean.lang
    Filesize

    2KB

    MD5

    e93e765895fd0d4dcc380f60f55787a0

    SHA1

    99bfe5804385480d252f8a4b2391147eb66de1cf

    SHA256

    137e5823efee8c60fa6564ac6dc54ae8ff308f9da1517f96bf8ba1edfb68e122

    SHA512

    a420db3415950d613e04033fb6d0dcbfd494bb0da7093a5d75966ea0bb50c259bcd096ff131ba6e11c016cb661ac7a21ae9a47fedd78586ed538609566a0ded5

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Latvian.lang
    Filesize

    3KB

    MD5

    7ca10b9490754e7bb6106d5b75afb249

    SHA1

    4a675f06baf5a869a0312663ac37809695c38a7e

    SHA256

    d50af67e2073a999d24f77c13ebc53eae5efbdb16737aadea63f535ddf042e15

    SHA512

    2451b400d17c54987820f23e5340705607b34e262c9b2406c315907746499a46384d3d2bd75cf78d16562bd458ff639567b06e318cd9bfa407be4d6a8a9d6c0b

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Lithuanian.lang
    Filesize

    3KB

    MD5

    bef76b552aa090e8bfe344431043342f

    SHA1

    c771c18abf9818ce34b8e9b5271e977372ddd704

    SHA256

    f121ce0e17dfdfae461224a3e6a9c66c64104c2c6239b36d7116bd60cf1d666e

    SHA512

    65b91c73ea546bc6c31a84f88961b8efb031a84363b6992865ef3bc7626a39ef26385f1f422e33e645a3cfa472dc27e75cf9b78cbd2bd3da87dbd2d5a1e8495a

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Macedonian.lang
    Filesize

    3KB

    MD5

    831ad6b0df102250b3c9f93ce0b5f5a4

    SHA1

    81ea3d009a66edf67c4af4a6b845bd976f2daedc

    SHA256

    4cf32d407f0faf6d436157e0e447917379d221f1c5ca0ccaaa430ebd623c37f5

    SHA512

    1ad2596fe60c85c4947dad4b42ff3583b22069a23987c863292ef2e38709dd7c62bb8ff556ea3020258ef60f524dd8813af40f6e6b179d063bba9d0b948844cc

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Norwegian.lang
    Filesize

    3KB

    MD5

    3902862dd8ee15221a84d63b4e218620

    SHA1

    796c53aa001804fbae1f07fdf13cfb8ebe1ac9ed

    SHA256

    9c901636127399ba0dd98bdf9f5843eaaed6a94bc2c5914ab624cc115b61cb55

    SHA512

    28c40e923de6db4d0b8da2051f39fc61416a1db20d82b4d5c3f1d5e0695d92f58f28d8bed2d398652ccd3193dece738646bc05742b7fd93b8d6dc3d0eb86398d

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Persian.lang
    Filesize

    3KB

    MD5

    90c69db95a5ae41daf22596546c570b9

    SHA1

    cbf6d49d40932262d744daec76d801a7c2e32963

    SHA256

    e175bc13a668b8bacdb46dcaefe7cb957881d832109fc5ddcdf9003ee9fd9790

    SHA512

    04c134a2f796a94e0a20339578f5e17b1ed9bd9f17824c74d68c9016a0982ad6ad68995ad772e0a9a289ae7157084780060b79098df9d6663bbe53c2251e5e7d

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Polish.lang
    Filesize

    3KB

    MD5

    67a51b19cd51df02988b9424ed90ede4

    SHA1

    05805a69ce4ec3fb866dad78d280367411ec8510

    SHA256

    1782f82fa084cbcfe77d02358a514f242f75618731e6b5a253481c76f8072583

    SHA512

    16d9500d627d5ab508c0c66f83c29938ba863c521108e6463b2d9759bd78ad1ce75b3bcb8b8cc5e1953cd2ec0ebf336b00de8b6ff06335d203e3dd2a810766d8

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Portuguese.lang
    Filesize

    3KB

    MD5

    c2e3fd5ef5575e8c93dea9d95709ede1

    SHA1

    d43b7d6d874f23c48e6314d3e822351e1b087101

    SHA256

    097889512c846ed91c38c887744f8ed8362b1a55ac5168da20d2de80df06ed72

    SHA512

    493bad404e7a0ef1e761975f509a5bd41f3cc53e4cca60da93b37755970d2afd6ac11b6cae4785b92173293b385cd9bc0089aff2dcc04daa33268898d6146395

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Romanian.lang
    Filesize

    3KB

    MD5

    d4fa5ef445051a71941ffbd8fee03cca

    SHA1

    cba75e92eb75fa36697e095b4aaeb19ab8346802

    SHA256

    9e39ae0838679c424312bef4d78fcff2e1ca6f67504d4babca722ebf84cd3eab

    SHA512

    ea44dea4db766b8fdff1d7c550096ee61466af8c607c7f97a27424eb7c00d42008e67ad82132999f6c54145002e70a8bceb7d71445a5d35254ec6d06f6964211

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Russian.lang
    Filesize

    3KB

    MD5

    1cc80552f09e9fe9a47e74929618b1d8

    SHA1

    e706347f7355e4e510009622c41e3dcd85de35a7

    SHA256

    f81dd990e5e2110cae98f6485fac15d714c8846833f498eca6bfd8c78f2e7a73

    SHA512

    84bdc2de3d4cdd1f3931a05c377e4562323dd287051a65fcf6367684ab9fc3610ca56f1c33769b9fd4d5ff1510a1505e5e7f679ae3ebbe4f9ccd1bb95466449b

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Serbian.lang
    Filesize

    3KB

    MD5

    e3c2090dcdadc80fccea76f5d96ec92d

    SHA1

    55a4b566a6b37c34e87e1cc5fc6f7f5da6e72966

    SHA256

    de0e5823ea007faf5282b2d62515d49b5b250c6fef287f72b43326d5b2fc1b03

    SHA512

    265d05c21756d5ec2b15b43eeef482a41b898abc8e87fae673c4c4218c8f53b53208eeb7ea5b5f5956c00caca781752f1e9857d19019239b8d932d6a9daae17b

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\SimplifiedChinese.lang
    Filesize

    3KB

    MD5

    fd984f2e69fe22bc4c9d8cb8eaba3f40

    SHA1

    6c61664c1a64a0709f9705844db81cd45f2d37b7

    SHA256

    d6290a4db640b48620e1ca63aa1247457c48c98a684e1d065fc2d2d5753b7121

    SHA512

    f82cb54b171872fd2f392180904d971fcc9998c7a07b01eaf3546a0a512be3d8df5f0f30c7b838102380a89322d7436808eebb506c8c14eb764ca97f513bab80

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Slovak.lang
    Filesize

    3KB

    MD5

    cb77b5faaa5b27c1eba511676fc1febd

    SHA1

    5f397d3cf21cbd9117f1eab4cfb2e8532aff28db

    SHA256

    07a95e695aa2abdf1c59fc5da30559b0743f2a124c157d22e79032dff3b25631

    SHA512

    94ef4174326f43c6b918a18217513ffe8ade4051e3bee29a30acb6369f37fe4aaa251bfb1e69e62bf42fc44c549196af34188c76c7f908cab25b744506acaf7c

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Slovenian.lang
    Filesize

    3KB

    MD5

    cd8ea5d0b56c585e58a0e5da6ad23283

    SHA1

    c8df6495b62645ddb8dd7d564abe5c890141d8b9

    SHA256

    229a51486380c0ac5fab20187377b03688a696cf591db1d609244ad6cd8e1305

    SHA512

    56afb3810107d43672e7f005ed449b0fec1c51b47dfa9c3a7232ecca0d51528ead2593d6abab2beaa9bbc330ba70b7d9858f30f47e19a3a966d48377a462c37a

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Spanish.lang
    Filesize

    3KB

    MD5

    de11a03f7e2520475228a60d9af9112d

    SHA1

    6c3b007335c22a1fb864e8c80f44c743ed780cd4

    SHA256

    d1ce1ea26ebe0563e0e0b40dfa1fb0c9cc5d84950ba3ae2cdda03ee51ff244c8

    SHA512

    c742f104182c31bf381ae764c527011ed384276f5c5d81b4db8a7d4a293a0568270b1c0415cb3f3dc7e264778ed7bb6d6b0bf27612404782db6e1971e14ce321

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Swedish.lang
    Filesize

    3KB

    MD5

    b197f9c3af55a5b9a2483e9781454e0a

    SHA1

    e0b2a2e1deba1a7986a80ea20e8e081753621e2b

    SHA256

    cd6e306cecb5898eb9526bdc140259be543aa74ac8dd88d10e7fea7a9a6bc74b

    SHA512

    0432cdf1ff1029d864651779d535f2cf59ea1eb353d988c8945b30a681984e868f213b37fd68498c8a1cc08c5fa66cf2a6e3e02c3ec3144fe31e58c00c9bc10c

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Thai.lang
    Filesize

    3KB

    MD5

    6dcc4a226e0cba8740ded9e777d11dc2

    SHA1

    c47c34e9dc8f681ab8edd6f642e3860cb97ccd4e

    SHA256

    39784fc2c0b5692e480ac6732ac3a39acef816129d28190e3822eeb91843e1d0

    SHA512

    379b700c8b886f7be04333e2227c0f4ab44666df692bf1e4f011e7660e6cb82a9fc69db9a9c86e502b79cceb624717fd7c0994847e44cbb7568da727a35fffec

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\TraditionalChinese.lang
    Filesize

    2KB

    MD5

    bf60d6337e85dfe89bcaccad21ad3174

    SHA1

    71671c569bc2305736ca5f232cfce21639c203d5

    SHA256

    92892c6a732d44a729e8c03ce3e792333c34dfdbc6579bd1eb2ca8cd659bac4e

    SHA512

    55d39231b3fbd04d8d5da332628e14ad9d413a141dfc281f7239c2e592c28e41192673597578872a4705f3153c04120019c5d491d27ae272a2e38d5d252f36f7

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Turkish.lang
    Filesize

    3KB

    MD5

    cf5e65feaca4b89ee56bf6479de0d08f

    SHA1

    f07af8f32763b0ac69be1283a54a4440841fe5f5

    SHA256

    6ec47649eb0f66329511478a1c003c4162960f7247ea26ff650997ba83b4dcf4

    SHA512

    45bbee5e68d5f9f32e39f44a61e062d86592488e2344ef16e1087d0dff628ddfc37abc3d112f2b2d758044de630285b03f2cf0c315c9a722a4be054e64af5cef

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Ukrainian.lang
    Filesize

    3KB

    MD5

    2691adacc2e5e3328a41acc48a28bd23

    SHA1

    94b43b5723024794bf669944dbaf3236b7301407

    SHA256

    d44923ec203002ebf33d29f404aad7cc866251a84ecb327ea5179f182ec1382c

    SHA512

    c05da5f75f1c1e70323d46ddaf43d0d8e0d4e70adb9ab7a262e6702e611d03d9a67f2b86eb289effc902d11c8a3b7af169a387d94641b0e4dfaf76ff6223595a

  • C:\Program Files\CrystalDiskMark7\CdmResource\language\Vietnamese.lang
    Filesize

    3KB

    MD5

    016cc6f0fc6bd99993d7f2bcfd20715f

    SHA1

    b04ea4fc14bb684014d7f6b744b7f1ed81507a0f

    SHA256

    cee2c6a1001cfaded540158fdaf4ca9e8e5ecd684633d3a9c1fdbf1b65a03621

    SHA512

    45f2f4d16e183ba4c185188837242c67a9183d99d6b792674e0f36ef1579192929300c01c12b4b16d4c1ae181371f7e9c4efaadf54751c4b353a5bd94b69585e

  • C:\Program Files\CrystalDiskMark7\CdmResource\themes\Default\Background-300.png
    Filesize

    317B

    MD5

    f561a163c8b8611aace3e34724a3fa5e

    SHA1

    0dbc7c62eb9d49124bb88c3f5c5a7c7b29ad5c13

    SHA256

    66ca57706e6dc57bc89f82ffe8f675f6be003cce667bdb0dc6cfe34a49dbc120

    SHA512

    07e61f68f424ba2ec033270a1ed0c03bbb34ddce3f84425ed656495f58c054212970524e5e2d501e7050979d24ca3f006580786e280e08cf8ff949b1df287bb6

  • C:\Program Files\CrystalDiskMark7\CdmResource\themes\Default\Button-100.png
    Filesize

    1KB

    MD5

    bf007817ee42128ba89969e6385817ba

    SHA1

    dc19cffbf764bf16c66c83d0b2f47595e66bea8f

    SHA256

    d34134c2f432f00306082c4d3a7b56fb7966d96640fec5b7aefc4093de5c650a

    SHA512

    f8ac3ed3b76764b3665af8cf497dedd7d299f7df2690edf8aadb569fa64da06397a585cc5542c8d58f1b657e13e8efa0a1b1dd4d7de8d75b32c4a7997abf3ef7

  • C:\Program Files\CrystalDiskMark7\CdmResource\themes\Default\Comment-100.png
    Filesize

    245B

    MD5

    805a392656a247e8fa2b1d6c8974973e

    SHA1

    ce7988ff2fea6a0d64cb14c1312716a5b2fffdea

    SHA256

    d2fcf83812cc049aacc20e12d0dc117c3cc0ab2b3dca6d8c913616de464963d6

    SHA512

    b31949a3e0773c33b03190f6826dee838f90eb8b8f9e4f1ec849d67e9f4239cb2cf1b1609c11f504321415f2f40bf562d094263700233030b853db49aff3fac9

  • C:\Program Files\CrystalDiskMark7\CdmResource\themes\Default\Meter-100.png
    Filesize

    897B

    MD5

    d743b70dfea1e31a71b9d4866cda1829

    SHA1

    480f727b3f4e88461400ec438888bc8a87d830d2

    SHA256

    723b42b64177c199514998418d8acea815d0e9cea507ec270a21f87c65cf0d5b

    SHA512

    ebdbe7b03911dbf03a633e53a8b417b80a0a6aa0f989095b70621db9d57f614165abc31a6f719064d7528eec7bffad165457d32ec159be653f7f650431832b2e

  • C:\Program Files\CrystalDiskMark7\CdmResource\themes\Default\theme.ini
    Filesize

    277B

    MD5

    4744a6189b30e04fa38eec70bfc773e2

    SHA1

    617163e9e96aff9086304dc1ba2da9ba88c80423

    SHA256

    995a297712ba4c3da463e12ba89ebd0c7f9426cc510b59b41b05efdf8ca17ff2

    SHA512

    0108c35aefa4e41f3306b7ef26490b6e0c4a6ce14b96829526e400c051a78bc8b720125c36c8bd33501f4b6c884542398a852977980736d5ba5c8dc9b6d1e360

  • C:\Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • C:\Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • C:\Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • C:\Program Files\CrystalDiskMark7\DiskMark64.ini
    Filesize

    53B

    MD5

    c0056b9e4340483b2828ddbda62d77d1

    SHA1

    e011b493dcc3d6d62003bde3e55ae6d1cf5b3828

    SHA256

    bef85782afa993bc1454ac1f7a51d1de761feb704aaae172be426e95cc45baf6

    SHA512

    880a91f513bec0a09405dc73f40e5247b4ecffac8a06c79278e38368982e02550e8668f7d9041ed4da551a0f5ed62c10f29b6bbbf419f81396836c85704da31c

  • C:\Program Files\CrystalDiskMark7\DiskMark64.ini
    Filesize

    94B

    MD5

    a9e109fa92267b62ef2baeb287901e63

    SHA1

    f166c91097bff77bc4700e9a075ad261a240edd4

    SHA256

    a42c853959359fb92011db3972d6ee7df989188340bf7e52f34143cec98c9753

    SHA512

    e978b4a5ffcb6a963cc4a4bbc69ee05f3cc20ac8229512860f59afbf9b6d80ff7bd66d79b4b85ff25ae1a0927467bb1190475c04dbc9b6f9a40c09d624497df7

  • C:\Users\Admin\AppData\Local\Temp\is-AN8R3.tmp\.............tmp
    Filesize

    2.5MB

    MD5

    dc270b2fae059b51845179bb688518d2

    SHA1

    c4cb4f277b13ef18af9f805c2c907e76bfbf4090

    SHA256

    193eeaaea6e82956e8e09fbde518b5b008edcda24da40b13bc4a751a21bfeb7f

    SHA512

    efdc817a697a7f0e5c512e94ff0a900ca2f65b91f54e256e15d0b2e4797368b2c685d12abd6e74ca2e09ea6dd3c1603783c205d7b9a9d865ec9ed7dbd27283c2

  • C:\Users\Admin\AppData\Local\Temp\is-AN8R3.tmp\.............tmp
    Filesize

    2.5MB

    MD5

    dc270b2fae059b51845179bb688518d2

    SHA1

    c4cb4f277b13ef18af9f805c2c907e76bfbf4090

    SHA256

    193eeaaea6e82956e8e09fbde518b5b008edcda24da40b13bc4a751a21bfeb7f

    SHA512

    efdc817a697a7f0e5c512e94ff0a900ca2f65b91f54e256e15d0b2e4797368b2c685d12abd6e74ca2e09ea6dd3c1603783c205d7b9a9d865ec9ed7dbd27283c2

  • \Program Files\CrystalDiskMark7\DiskMark32.exe
    Filesize

    2.1MB

    MD5

    c6fcf8a1e1333d12c7b41dbd5f80241a

    SHA1

    ffa4dce92dbb2e0e82f860eba4279e15bd80b890

    SHA256

    6439bcef6c4014a20c755f10c2c20d538e6d98ee524782ed53b322c93d54e742

    SHA512

    97e8699ed898c1a53ae1987209dba6aa953b771644ec60c2bfa77350d68686827e924a5c616349a886e78d475cbdd85f0b87e7867db2c89b8808b68706196599

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Program Files\CrystalDiskMark7\DiskMark64.exe
    Filesize

    2.8MB

    MD5

    8650e58f8f8f0892754abe8d7595d17a

    SHA1

    c985ccd19c47fcffa00f91a666b9e828d18dfcec

    SHA256

    cc479da9ccfe55ea507fb35c1c82179361872f8802c85506853e99f76e99fa96

    SHA512

    3d39e50be8dcf4769cf646ec555d13c319b84f2cc099dc5a9b552cb83ad908b287d40d79aebe59f54a421efd8ee17c4728c3903df2d64a609ebae32015517efe

  • \Users\Admin\AppData\Local\Temp\is-AN8R3.tmp\.............tmp
    Filesize

    2.5MB

    MD5

    dc270b2fae059b51845179bb688518d2

    SHA1

    c4cb4f277b13ef18af9f805c2c907e76bfbf4090

    SHA256

    193eeaaea6e82956e8e09fbde518b5b008edcda24da40b13bc4a751a21bfeb7f

    SHA512

    efdc817a697a7f0e5c512e94ff0a900ca2f65b91f54e256e15d0b2e4797368b2c685d12abd6e74ca2e09ea6dd3c1603783c205d7b9a9d865ec9ed7dbd27283c2

  • memory/1240-70-0x0000000000400000-0x000000000068B000-memory.dmp
    Filesize

    2.5MB

  • memory/1240-62-0x0000000000240000-0x0000000000241000-memory.dmp
    Filesize

    4KB

  • memory/1240-72-0x0000000000400000-0x000000000068B000-memory.dmp
    Filesize

    2.5MB

  • memory/1240-68-0x0000000000240000-0x0000000000241000-memory.dmp
    Filesize

    4KB

  • memory/1240-471-0x0000000000400000-0x000000000068B000-memory.dmp
    Filesize

    2.5MB

  • memory/1240-559-0x0000000000400000-0x000000000068B000-memory.dmp
    Filesize

    2.5MB

  • memory/1240-67-0x0000000000400000-0x000000000068B000-memory.dmp
    Filesize

    2.5MB

  • memory/1296-65-0x0000000140000000-0x00000001405E8000-memory.dmp
    Filesize

    5.9MB

  • memory/1296-64-0x0000000140000000-0x00000001405E8000-memory.dmp
    Filesize

    5.9MB

  • memory/1780-560-0x0000000000400000-0x00000000004D1000-memory.dmp
    Filesize

    836KB

  • memory/1780-66-0x0000000000400000-0x00000000004D1000-memory.dmp
    Filesize

    836KB

  • memory/1780-54-0x0000000000400000-0x00000000004D1000-memory.dmp
    Filesize

    836KB