Analysis

  • max time kernel
    28s
  • max time network
    24s
  • platform
    windows7_x64
  • resource
    win7-20230712-en
  • resource tags

    arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
  • submitted
    15-07-2023 11:10

General

  • Target

    CrystalDiskInfo9_1_1.exe

  • Size

    5.5MB

  • MD5

    e83262f10f8a81d81e09496cf20c1e6e

  • SHA1

    ed94394796ed32429c9d81e8684a16daa0619045

  • SHA256

    2d71df1167c44f87a518d77d1487d5b4960ba8e97b75aafcb6ec3a34fb77d418

  • SHA512

    7abf0227244fa39fa6ad0eeed22269f6bebdc7eab9e0bc669e1b6cae77a6f97d6b26e4617e990a5f7ba4fb4bb5d743188ef01716b90d9c17554266187ac79e67

  • SSDEEP

    98304:ckLH6I030IO8jndNP95Jdt3WnnmMXRlzqp5NA1rw4qzELBlokW6NaUqKjcW:bJ60IOiP93WmMXRIpTmrPqo86AG

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo9_1_1.exe
    "C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo9_1_1.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2684
    • C:\Users\Admin\AppData\Local\Temp\is-VF2LN.tmp\CrystalDiskInfo9_1_1.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-VF2LN.tmp\CrystalDiskInfo9_1_1.tmp" /SL5="$80120,4681573,857600,C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo9_1_1.exe"
      2⤵
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:2860
      • C:\Program Files\CrystalDiskInfo\DiskInfo64.exe
        "C:\Program Files\CrystalDiskInfo\DiskInfo64.exe"
        3⤵
        • Enumerates connected drives
        • Writes to the Master Boot Record (MBR)
        • Executes dropped EXE
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:2832

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files\CrystalDiskInfo\CdiResource\dialog\Graph.html

    Filesize

    8KB

    MD5

    8f1697ee6ec9064c8f34e987e1492b23

    SHA1

    1055e314e088f5a21d8b0e49b10ce4e8bdd3b2de

    SHA256

    93abe1dedcec0cc9cee33562d2e9b4990e67186a171e9eb7ad0354818c071f06

    SHA512

    f313b3a7bd973cdc724033802a901a4dc0f6646c35d8987048829ecafb865ab08364a816be9367b9a0ec3dc7e97ed4720cacf37303f70a14c99b7167ba65eb77

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Arabic.lang

    Filesize

    78KB

    MD5

    f52746f4428e8d64aa9b5117ac570483

    SHA1

    b563a4dc51f90a6b2f4aab41c7d53cccef9f6bfd

    SHA256

    baa91991d9aa4049cb6641f6afa02b472ddb2da30ec46307a626d45cd762fec8

    SHA512

    65c85114cde4e1d27a08f5199d60adaf20f8ac808c66cbcde4dde218005e38effa86175be746da6c0fb59dc16d53536b42f133c6446e5cd1859c7f1ee3b654f1

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Armenian.lang

    Filesize

    80KB

    MD5

    11d7d1a4612760e1f52129d85d2db5d5

    SHA1

    d8d2a2839de49c36a951d79155af5124268a8443

    SHA256

    a5c5f6792ee42c4e22de165db84f7c3d9f3a4fca0035420d7d9cffa5356b6038

    SHA512

    8935e204b7c01d443e7e68b0d02a43b3cf253a4148ac824779cf69640d8f02b8d9b0444005890f27687587f0b466be1884cfb500192f26e73145edb71d932534

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Azeri.lang

    Filesize

    78KB

    MD5

    74f1cf9221e69feb08a98d0a3c532f2f

    SHA1

    55871f41ce0e222e20644cbe6934f265ba2554de

    SHA256

    15fdde358c63f2c41998a224e80b04759cf8da9181ac25f30f9033fcaeaa9182

    SHA512

    5d38428ec89b73563b80a8e6725e07d7c9bd26bfaa64dcea9fd4bd2a2d4bbd5d2915cdf1d141e48c308c5ae472c66c57f1d442823cdef472f49b582cb0807748

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Bulgarian.lang

    Filesize

    82KB

    MD5

    b90c25dbd911b87f8a8f5c5a56c27e8a

    SHA1

    243e66172d9d359d58e1beeb07adc2a1c4221496

    SHA256

    2e30a92878448dfd159cb8556f801929842fc72c03531a5ba7481a5cd6fa6a6b

    SHA512

    c297dd4a12fa732705190a2b0906ce399881c86689a6d57fe8bd131586263dfd5845b11c3ee1d005bb95b86248b2180ed61d39da169a70908911ab16aaea6fe9

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Catalan.lang

    Filesize

    97KB

    MD5

    fa331877550c0eb62058333403ee225c

    SHA1

    7a587d63b96a2f032381922929b803f73bcecdec

    SHA256

    71f7f1eca8c43725a5f4c353ec1ca5e253b15161b8f90acfedfa5d43985e08da

    SHA512

    d3adac1b68988817a8e87d73cbc9eb0bf946c9893ba7d707a1c4d5f5f0f57d1246c0877512994ec74c11b6a0728f15ceb2f44bcaa5c3e19887ded5f7afbc3a99

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Czech.lang

    Filesize

    84KB

    MD5

    42189449193a6e5f2bf03af0b58d47ae

    SHA1

    64fa385639fdda79b4b4f2c3ab37f3251cb6bb78

    SHA256

    f1302cb740b81c303e18d3a8ab304654d81a792688bb2bf8d35746ee5ccb17fe

    SHA512

    e2165cef0eda72a2f819e4b0b1ba707a2908db685bfcff4a83c7cbfa8787446796bfd99f842cb2d1f2da57d1fa47c802bc235126da7c775b32edd9a13407c361

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Danish.lang

    Filesize

    81KB

    MD5

    311057bbb757c3ae621f2afa4560d131

    SHA1

    146a39b6be51227f61ffc614aff1e50be9888a95

    SHA256

    b473e5b145c1e6b92a69d1e8850163e5bc88ba2f9f02679602b03b6cc47dee99

    SHA512

    5dba4cf95bea38e75fc9f2ade60508b5dfe8a3eec2af465d20a6b94b0d5bab83c2e7ea2af700f2df499b418b68189ec0e2921bd373b2b8733141434005f685f8

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Dutch.lang

    Filesize

    79KB

    MD5

    9c11c4a10afab1454e69bc58e4dbb542

    SHA1

    53b445b074fa3951abd7c7f0d7d1fba22e83ae5f

    SHA256

    9711d6c18d56b7eeff155e68d36950c8152b4669f25c1478a5679dbf7a825d07

    SHA512

    223baa7a00065f3e800fe61122a69b091f980408264acb77c107779f0e0fe1cb6507b18d8d80bda719a4f9b3a81942c302e7be9adeaf1de92e30c88969b6fa05

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\English.lang

    Filesize

    81KB

    MD5

    dde617c1e6268fb95455e2ac2317a875

    SHA1

    2ba5bbc614464a700b459fb377cb75398a0446ad

    SHA256

    c3bb9d79852fe709633d06d9290f5820cb67b6efea2c348130240c98c3b75eb4

    SHA512

    e8c535d84d7bb89e2e42b3b6bd36f8a221a4c72de1f47be15078049cba0fd230ba2f6dd3645afc375ac155ddb2434a6ccf1238096856188f6e3b40ecfa168659

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Filipino.lang

    Filesize

    79KB

    MD5

    dff066a97ac308a4edfc84f9c7936e5e

    SHA1

    54d2774d8758dc9acbb94bfdcfc092a4e04a85d2

    SHA256

    abe2980abb4495677149378f66c2b1c10e34fcf6f7faf2e32f61ad9ac8672b9d

    SHA512

    88a99f0216e1b00c0bf0299df1387aff8406a450ca2f508732be1b8f2766caba091401c9dfd6e6a8f110d11a45b9b06e33fbfc9b4f355a40f8a4d6f27af73de6

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Finnish.lang

    Filesize

    84KB

    MD5

    295d59eafb69517113d0632ecc00ef50

    SHA1

    2034d31e5f99fbc49a5d6bca7903eab08a67e040

    SHA256

    1720692fb469109a7e0932b40ff234b99a4331122b4a99f30400ccb883e2b01f

    SHA512

    60bc5b1e8565b7ac33aa3ec8542e2fba639e0826ab1eb1a53cf8272f34f3d56f02e09d7b6f0b5075c37b4c0598704d2342c5452b36e03ba66b1c8b95139041d3

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\French.lang

    Filesize

    94KB

    MD5

    e1319f879397ce9b48e9348cd61361e2

    SHA1

    5a3e9e8fd73d12ddab8236bdb0b893620658206e

    SHA256

    052ac7280247908e99f064273c1bc7834e9b910210cd512424c74d2e42889a05

    SHA512

    fece6359e5f479f2907c92ca585eb76a6c5de67464b72c30422dc6b9f0aac41decf082232f1f1e3f7a02e247648ca96f8eb163e0a1f66f3c7510057ad009404f

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Galician.lang

    Filesize

    92KB

    MD5

    4110e3d0994f5b8e6cdab5c1d1de13ce

    SHA1

    01b9bfa6cf4272ea8f052f803492b917c5a8388d

    SHA256

    c25f83ba351402725ad2917856b4956fd3993fb521e20dab819ed493b293cd95

    SHA512

    f7a3dd4964de0bf276deb4fda3d5fce2805fa257ec3c11ad9620c9947d2f030e350bde491c4e589eab85899b3e356571f444dfc0cc5fa331b37f371ab77e3727

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\German.lang

    Filesize

    81KB

    MD5

    5afebb25515a451de041233544225f0b

    SHA1

    d519030f873f15853e018837e46db4e32b6b9cd7

    SHA256

    653c7c39e30b2a5f4500b32929a90636b6430cc0cc831772ea1bbd6bda41fe95

    SHA512

    51a1a372b6321a6550cdcee9614bd3f1652ecf5fcd366ebc1862142ffcc317c76798d35a7c6e8280992f880926e306e11dfef2081fccfb6c218b634740e6b3e8

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Greek.lang

    Filesize

    79KB

    MD5

    124716aa34f5fc30a8e68b2544651ffb

    SHA1

    76afc54e66d8c442d6dea6aceaf9be506b3cd886

    SHA256

    190b97131e67716371ab3a9cd7cf8a6a82997f6d88ab7ffc2b500031e6fee527

    SHA512

    bb865978593bea5d424148f2a2d790927024a7de13cf6e4283768ef532562da0adc67169c5eacbbc2d696a6cfed2c5fd4f72910fba39ea69cdf321d57cbbc006

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Hungarian.lang

    Filesize

    85KB

    MD5

    95b3f41c959c38c7c03a142999a345f8

    SHA1

    af99abbbd5c119dd5ae10fb8bfc9d1b3ada824ea

    SHA256

    b4a932a1413836d18fe729ef9836ab294fd00e18b5beec75e1d7335d3a1c9ccc

    SHA512

    4bb2e3ecd17b59765dd447d22ce318dc8c82dde089303ae0c197625a3e5ad8b49045743dc1d289e7903d7d67c0bfdb3a80f35160c383b182f101bf384b8f52f3

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Italian.lang

    Filesize

    84KB

    MD5

    dc1b79b11578954439ce4f0cbd208b17

    SHA1

    9e635b6ea36d7aa0c5a1d56cc9f6ba23084669ca

    SHA256

    ea170ba6f27ab41822144ab081742410fb5b71b7d01523cb0f011740962deb93

    SHA512

    38c6cef14314e95a1b90f15c1245d1ca804daa03d4fb73d4791b622cb3adcc89022194aca59de2f386d8cb627b6df300c2d22bc83ed4bd8dfbe5f0ef0ebd63ce

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Japanese.lang

    Filesize

    51KB

    MD5

    c974cb03fa4522bb1c59bc7aea27e29a

    SHA1

    e24bac9f2c28775232d9552c77341d373b09ce41

    SHA256

    287fc59e60ed2b5f2201a5571dab3fb0d53a2c921eb635431aadf635d462d87a

    SHA512

    e83f5652f3572ab9d67d6b2ae3b8d18bce4ddf42af4c481b0eaaa400e56c441021a591b01a0ab964f17a69c09625346103879fe81078d15d33e1155764c99b01

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Korean.lang

    Filesize

    53KB

    MD5

    280f4249713e426640581b6affc44744

    SHA1

    3b1692744997a30383ac12806d9949a5b0eae883

    SHA256

    2dc612f462409c30294663b487db154e567db976b7ef9bcd7dd01dceb1c66e53

    SHA512

    002a1b4445046ec07c0e8da2c4ca4e146fd152530cea5b9d87aff1177f1b2997c6f41d0fbe882010751599f0fe259ad5e384d72743e47af265e33e082a7f0c27

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Lithuanian.lang

    Filesize

    78KB

    MD5

    47ee7c94e5596612a797d61bdf514566

    SHA1

    08299f22589aeabe91f6b7517d4ce81ab2325b6c

    SHA256

    0ddb2d6465d358d41126cce886339164f647077d586dab32b9c14461e15842ae

    SHA512

    b2ca82ccd813fa50471088ec122d7d934d26e6be7be7cf3652d5a316c4d1671255311b31de1def9f7faa1e6f1347b08b62748f805aebd2d8ac136cb8f47c791b

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Norwegian.lang

    Filesize

    77KB

    MD5

    e25b2707e8752648a0b027a7e298baea

    SHA1

    0c7b22dfcb998df80b03e1b55c1b3d0a8e52862b

    SHA256

    19bb12e9d7ef640f9253c24fec0ef6b4fec397b3a4f2570ad0f7c037bbb63ebc

    SHA512

    112b522cc1afc3bf916287d24eab0f8b0edf5a965128e66e511bdb817222b2aec859eed42d126fc8ccc91898c3c6540de98d00e93ee764f193d2065e76d1fd21

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Polish.lang

    Filesize

    84KB

    MD5

    c7dd7050255ab722065d5642c5b9edc1

    SHA1

    9ecbc9713b4246b747c15fbe041823eee687f803

    SHA256

    8f520f5e4c63b924cae07121b34689405d2d6554ce5e11fecb17c6a80e8dc890

    SHA512

    09835e5b9d7450b264ae37f4c378495bf3079bd37ba33a09503a62ecc511300ec57ca72010fded3d66e3b828a3d9d370d36ca06c7bc06fc76663e3e8823dfe49

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Portuguese.lang

    Filesize

    78KB

    MD5

    13f3d848c6cac5e107bed3a6175415ff

    SHA1

    25fce5189a77edfa316f5bf34965b7e93ba13d54

    SHA256

    1effe5d21ecaf70e255fd5c1d621d50312d609ca59d24e1986036f14a5a2ef3f

    SHA512

    6b9284bb5bb8ceec6f804bbb20f1639590e8c2e10db4ca417b6db420264f6f73d60f44fd7ef2dd193968f34281fbeb6d184c20a661e0b9b718646a72dd07753f

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Romanian.lang

    Filesize

    80KB

    MD5

    a9933fd38938dbe757186af4975b0853

    SHA1

    e7a4e91bb494038c15cee8f368df5c12533c098b

    SHA256

    629d7752f11176f9770252727f33843984c4f17e4de4720ba543a968af502705

    SHA512

    8af1cca26e1d17793fbe5060b94d7efcd131d19a9cf36f0cd76e960f4cb8cb67124a7dbaf57032ec543c81e47037d53157127d7d8ac0fdc4d2716c88dde021b9

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Russian.lang

    Filesize

    83KB

    MD5

    141bd0c6184cdc6995600922eac9bb85

    SHA1

    07fd4346dab2149378e171abe0225cac072b1754

    SHA256

    9f531088e2fe9abda19d26af90ba3fb67cbaa18daddc6fa14e69356eacdfce33

    SHA512

    fbd2831727e0f8e4622bd54f0a2c5a070fa8d83c4720d438ae88ffbfd5c52f4255907d78cfde54567208c67bf5c1158baeb00b7d542966d0e68103086dd8e472

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Serbian.lang

    Filesize

    77KB

    MD5

    8a39465e14f58137e48902adadf04456

    SHA1

    9d7b826de46f6e6c2fb3180914f9483175b8173c

    SHA256

    2fd64c09df09a8b05d198ecb85facdea105589225119d17ee469b83b19c9ee3d

    SHA512

    179ad2d1b462f77a5623c26d9f19ec2a9d65b8a30b4543a1683b535f0f386f981c3031443cafcf81574fdb2ef135930842c055a51455dc9c446542eb5aead42a

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Simplified Chinese.lang

    Filesize

    47KB

    MD5

    df6a5450ce57b396ea44e3c7a47b38f3

    SHA1

    6165546e8d65f6714298c014834f50e5f9fd6ca8

    SHA256

    0bc4a76612c2a9d1629d57086af530f393d73c8c8f005d325bdd10f5d6a003b7

    SHA512

    c337a41ba4605ab9aa798c0348c0c43a8db9f916e2c6eeda9dc4113540bce1b55f1eb6641c82f167c9cf610c584f7e3b8731b8f339bdd2f037f6f3e7d61aabc8

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Slovak.lang

    Filesize

    96KB

    MD5

    810c82f8d2a336a69c2c02cc61e3f169

    SHA1

    b13c9275cf190062978fae9a926388d2f6c51fb8

    SHA256

    cc31c89fe5a0f161dbaf1f959f36aacc1f0c5f3d2dab6c688ebd042c81132e15

    SHA512

    8f335452d8816f36e4a45b51f62a0e2a8c1002684a80434779f602938b75a3a9059b94876819b8a7c03b58aa03b9abf444f322eb178b877404c85c38d4a00e86

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Slovenian.lang

    Filesize

    93KB

    MD5

    55304af565074081fc9c60c4bb77cffb

    SHA1

    eab016a13b817f94501f7b00b50fa9e9da9bacc3

    SHA256

    875b0dfc9b5dc5982030e2abd3b2f85c505ec95ad5f6dad2944843abf5c9e990

    SHA512

    874e394950bc86613c9f20d7a3863f39e8a84a53e265160ae1d3b7b4f60d2d7de87864f4299824acc08974600e30acd0f465767ee95a8fed67415d7a3b1fbbc0

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Spanish.lang

    Filesize

    104KB

    MD5

    3295415e4b06885867bcb8e9d3b3bedb

    SHA1

    5aee7dd28efafc3b7aeca3aa476a8cee01f138bf

    SHA256

    e2ed8af080270bd31a362b53f1ec6756324e111d0a6c0d5609e8c0c2ef703a5c

    SHA512

    24c407add94e91bccaa920bd5422a614dbc635e888ec1043de8beeb4145c21493bdda9ba269d81268e0b5b91bcd21a3dd1f5e9907389033cae048711d9670549

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Swedish.lang

    Filesize

    77KB

    MD5

    5784d1475b794da872c58faaf8547bdf

    SHA1

    7d26e49d864e0aa0302532249dd05f83d193809a

    SHA256

    58826832a9da889931c5b1554f5f962fec5b78d3c33a52b8b661b77394eb7990

    SHA512

    696a594bac49e6161dd371a4ab0b4791dc06f5fb08d1f9e014c252fbdce81c5de6660d23754006ad6c57df2a0cd55768a9d70278bec5dcb4b9e761d2073d8e59

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Thai.lang

    Filesize

    81KB

    MD5

    b6df169bdb57567d08c6d500e4d94a42

    SHA1

    3e77ae2874cc34e6cd473dc8cebb1a8b246d730c

    SHA256

    2603c4419c54cb35481f3424e9832886175cc21726656c23b08f9c89a23eb60b

    SHA512

    ad20a3c4045df81aab750d441091377cb19bdeef960675bdc0f31b0d92d9115b5ab0b35fad97fafae12e449c971e59d33c9737549916acf613ffa81b4de55bf6

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Traditional Chinese.lang

    Filesize

    47KB

    MD5

    9e871765a6f188c6421e82ba32728f43

    SHA1

    a5d2c4dbaef95b9fd58b3ae437704a38cfcd805f

    SHA256

    87fab5eb452825be006536394a4bcd7451f9f9aa50cc442254cf4b93291a3f8f

    SHA512

    cdb6a6f51cc95778c884a9d34e70f982ca4a2c033e4e15b9ec55578f6e86c5840e986eab097665865c92ecfd89f1a8e06ca2683376b956dbda64b8b6ad265380

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Turkish.lang

    Filesize

    89KB

    MD5

    f74c1c23017cf4d39a056eaa19aefbcb

    SHA1

    88ea160ea4b9b6cda0a6c352d971c6187e407abd

    SHA256

    53c62a434926721e9762a384d816d6db1f9a6c82bb258ea462f927e3cd814244

    SHA512

    21c5cccecb1ba9bc1cbfc6b2f3a4f5630f79be6f7f03a9b6ab277373d00241dff280c06394b4552d6f8c458a6bc5e6bbe4d592e0bf36a55e5b4facd5ad596076

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Ukrainian.lang

    Filesize

    78KB

    MD5

    3ab9d1f073c61534bb88b69184a689d5

    SHA1

    bb177ed7f5b13b124827bb588b6a3c18767aa6c5

    SHA256

    d6e962a1be306844877dda7e5f391845bd938d09fab47c2cbd059ea3accea4f3

    SHA512

    ad228ee842146a5a2cb029f9bc280f009450cebff663f20f8ed44ae8b3b4ee6981bc6dcc9d9d85279e87c03e030a7a81894c064199f169bdb32b9e5bdd0bb8a8

  • C:\Program Files\CrystalDiskInfo\CdiResource\language\Vietnamese.lang

    Filesize

    78KB

    MD5

    19a4c63a6940578c3b28e9c75605dc94

    SHA1

    867ffd108a890562bcb78afb6fb8198c765b1f7a

    SHA256

    2ffe07f2986afc99bdceece00e604e4540802dfc0f9d1ce388e67fd686a889d7

    SHA512

    690f11234333c5fb26745832b9ef5e2a57df1ec04a801f2c08f192acb66aad07a037c01055471cb31f5fc30fa0e34910c224657fc14ae7a908122768b17f152d

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\Background-300.png

    Filesize

    29KB

    MD5

    77767641110eb0eb62cd38ac3494fd24

    SHA1

    2d6c0cedf6b9a96292695ebd3e829e6f47dbfc45

    SHA256

    8717fdc9d5f8a4c200d38dac5178b31e1157d7a1f4f389c839dae74198d35e10

    SHA512

    0e0bf2ecf9c765ae0265706f19218ede958c65cab79743fcc2785bccef824200f06ce0543a8b1a765681ee9846a5c911548f8e1f5f25310aaa1122d22601b3ae

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\diskGood-100.png

    Filesize

    1KB

    MD5

    c0e81a6dd776dcedbe2107bcad87bdcd

    SHA1

    1d1bbc27de9329d287179b36cdcaad1083359ea3

    SHA256

    41e8e14948103b7ba676fceaccef1f6b4fb08b70ea6f207f4d6fb6aef3f1e71f

    SHA512

    38b57f9cee97ac10b61a2fe9222c0085b0e6ffe18ac6457963a5a5e21ff5b602350204675f1ff9606c384d5b8484e4588ad9bac9208aeaf0008215c6fae678b6

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\diskStatusGood-100.png

    Filesize

    918B

    MD5

    ad2e97a4c59814858876abad24002ffd

    SHA1

    7636bf632981a0d6ccbf3adcdc78d2715f9f359e

    SHA256

    e290f8d7031f82007b91cf3082825540f0a6585065dd0ae8f467fefe4d81e4fc

    SHA512

    09a1485cb7c4580e5094c4d6f08c5b10c567b6ffa6a6b7f7b80d8fcc5ee0ba88091432530f1b01ee09b0cd15a6e387e5557d843d91b0273bd0a6bb1a550f2efc

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\diskStatusUnknown-100.png

    Filesize

    721B

    MD5

    c1ce67fb776dac5793910f863c5ea96f

    SHA1

    cd007917fc199a30001a8d0caf1ac1b0d3461df7

    SHA256

    5ec1b8f09bc590ee7b93c88eba131579b5acd921db4efd44a1003e160f9c055b

    SHA512

    1556ebe02ef6f63ce2b0377547eb3e919298fda10375da4d2dfd3b5c772b79c1f7c71d322373c366e534680c07de9affc22844f8ad7bfccc6e0b3c3a09694478

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\nextDisk-100.png

    Filesize

    1KB

    MD5

    dc3be62f884c9b96af9a3d5b2a937cb6

    SHA1

    7a06d204ea1bb9130845305face66d7f74efa2e5

    SHA256

    cb9099db8ccb5d69db902858ebdd0657667fdc4c2ac1b8211b0d2503be18639a

    SHA512

    2b8163d191793ddda76ce36c08d87b343dd528ca042cfb795a816b96c8d7be90d584a34e4734d217a24ed54db1ce11332108540bd34baa64778f785c0bcd4a19

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\noDisk-100.png

    Filesize

    137B

    MD5

    aca9c4d69b8c4779167452f77f415a9a

    SHA1

    d40806f8ef1a7cb989dfbe9cfb4b3be717a47292

    SHA256

    0229291a30857f8ce7499e7f9a6ac30be452419bd5327b98468deba097ae76ee

    SHA512

    91652e2bdb710a11c25e78a8192c0da52538690e2743ba2f228e29279e0175d02e30ee01e4213b866552c4cf4e8c18ce687da13bd64d4ee554054f2efbc2df8a

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\preDisk-100.png

    Filesize

    1KB

    MD5

    b49a97118724c54530d4c4eaefd729c8

    SHA1

    102187b9534a2c6359d37b68f9509e0fd227b473

    SHA256

    4358ec9b50bf01820f6037299941916c196616fa08d8150b57607957cecda485

    SHA512

    5a5ab0d9cec7aa61b99cb1b3742df2acdadff43cb12dcdc48cfea95eb9479ae4c5673870f2b85560ed3285961837fe0c4eed3e31f1ada33fdcdcd23336dc236c

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\temperatureGood-100.png

    Filesize

    2KB

    MD5

    f8f84f5782ae011b707822d8ac8ee4d6

    SHA1

    fa9fceedd5066b2e97ef2774a4315c9ecb71f897

    SHA256

    26d0fdec518f2a16d535306d81459746811882da15c691113134d82442f5d58a

    SHA512

    ace2ceb3289ce68a8bcf2f18a040afee31138683656d8adb24a305f6b9f0bc32a34db4b2c681a538a634a3e6a36b2481cea282b61edbd5f2c5bf62066b5e402d

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\temperatureUnknown-100.png

    Filesize

    1KB

    MD5

    88b4976e1a7618d1bad04673d382fb62

    SHA1

    37717ab939bda51d66b14eaa46f0cde97226f6c1

    SHA256

    3b5c53c752b6155cfc66917b2cd8dabdb43cce1f98d623dd39342655e60d076c

    SHA512

    f159ec4b2518b5022a66ba896c38d92c69f7a23fb847dbbdca3026e1f22dc5ddee04432c20a30f684b7de5ea4f4bc8233c8bb1d5e47b5ae7cad107dafa471a17

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\theme.ini

    Filesize

    263B

    MD5

    13ad481754e04748b701e99dba1590d6

    SHA1

    e3acda213a1e905177a700f2c051b3f646da9237

    SHA256

    b9f6949d00fe5da3508e363b970435bc8d4c34761dca6e84b651459ad9cabfb9

    SHA512

    b734653b9ce95f9752f749c2cf686c4e82459cb3b8b47a8f46aadcf87042dc70f5c3ded20a884be04033aec39fd00f9c1fa27039f64335b3e19d89f2198b371a

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-3R7VF.tmp

    Filesize

    1KB

    MD5

    e8799e2989a9ec24ea55195adf9d2e89

    SHA1

    3ba12b043c5d27b56b9691271d53d037dbe0f410

    SHA256

    3ff066b7b8d75fa423837c5880f45727b86e1f2366852c399d672c3dcf6a80ae

    SHA512

    05b854ac0c5faef1f255e2d24c1923c40019f1eef8d4a77215469ecba004720e6f781f84a872e790a9163799be6cd7cec088e04200e15aed5b7ada174b2436b7

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-8PQP2.tmp

    Filesize

    1KB

    MD5

    f8b559a259cfe0f8eb39d1596f371767

    SHA1

    fdb89b6a1f08f7d8e83fd862403da71e110f737f

    SHA256

    c964d3efbe51d9c9ceb113d6eee196e1fd19938cadd733011c24b91d093f16de

    SHA512

    d8ab05bfac764187049cc0ca3c7a5e7112e5bd685b083d01fee6ea1939b8ff53c1a316e549f3a4c2a1e011fea101155fe36109c875593884972dbb0fbbef171a

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-CPDFA.tmp

    Filesize

    923B

    MD5

    dce02b9a45fba2a70042c8c1e03d9b94

    SHA1

    978e46984c3122ca2ecc5392b6b6f877dbe178b3

    SHA256

    0b0106761cac0e726c84c5883c989fae0e33c9ec90f3951e9a16e0e6128c183f

    SHA512

    476d6d814e6d5402d33748469d4cc86acb41aa79b9e4ce851c1531fb6706b9adcf1386b44cb293c8abb0b11768fb004ba89814a0caaab4579538d35edfa3060f

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-JBT4V.tmp

    Filesize

    1KB

    MD5

    8d1ad40d84930c904a3c46a2e876110e

    SHA1

    b49b07507ded62c5be9db303de3c0ac129eeb89c

    SHA256

    d7ad392146e0be9b808bf4568cf9e10d8f6c20c2055aee1f26763118fd6d422a

    SHA512

    d8f63bacd180132d4d63a9ef40fea46c0b2a712ccfca9b05814ebecd300e31e2f55a72dec9a7fe18c150866a0abf0eb88aceed5ff6c856895dfc2ed0cd052137

  • C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-T46RG.tmp

    Filesize

    1KB

    MD5

    cd53ebbeedfcdbe04ac94f0323440d83

    SHA1

    2249087471df17ab704b9e24c620a7d7f9e406d9

    SHA256

    16e367b75d0cb12efeb05cf23e696c06941e319509302bd99942b06d8daa4cb6

    SHA512

    07bbf2cfff944579a68dc337ecf7ededebd408ba7849f58e4de6215656f94f04d6af3b197c00b147092cb018dfaf196b1fbdd384360319fb1367fc55c77e2ee6

  • C:\Program Files\CrystalDiskInfo\DiskInfo.ini

    Filesize

    171B

    MD5

    238f8a029d60d866a56a340a4fbf9c60

    SHA1

    437169c97cf23754c06136c51e2cdc395a1fdfd4

    SHA256

    1eb78521e4f6f03a1fd5908a7ec5d02a724b978fab197d243a8c5d210b9f5189

    SHA512

    9710e5a5e59b6a363c7df08968d1774602b3e648e224b53fa93f1482b72c09c11e2d222e00fd60da8ed3f933ee696f07cd27b0d2248e393634e6d6b5bd98262b

  • C:\Program Files\CrystalDiskInfo\DiskInfo.ini

    Filesize

    443B

    MD5

    1e0a78bf7bd6749476c79b8e3e20b592

    SHA1

    79cecf5444f76706eef325ccae84c98c84df58ff

    SHA256

    a16785218725fd0f41fcb8baab7c2374688eab2cd42e593973b6f5abbd79d8cc

    SHA512

    d0f29111756d8e98d7e947dd2d602ec6e46d6e038cd9e366cf34419462434e8bcbf0797145e0c495d223147a2e0d48db8d1f4b641ade61e437ac92bd66d5ff9c

  • C:\Program Files\CrystalDiskInfo\DiskInfo.ini

    Filesize

    461B

    MD5

    23a389c0c6e087f1fc9879bfa91e0e78

    SHA1

    060f6ee6dfb657eb0533791b07b905fade4e4e5b

    SHA256

    12cc9df29c6f75624956bafef7d8564ec4f7dcf7e5996597053af283e45a9d21

    SHA512

    e52c674d6cece410fd8d350b6323559a41bd9aad816a1e69d171fbbda20940002b8a378e0efb900ee2d628b20186211a201fe3b2ecad8a8553147d06dfcc27b1

  • C:\Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • C:\Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • C:\Program Files\CrystalDiskInfo\Smart\DADY HARDDISKQM00013\09.csv

    Filesize

    25B

    MD5

    94aeaa5fc73fce70e70f8f5cfd104d59

    SHA1

    69b4690f0af8964c2acdba8a022c2723ab99f23a

    SHA256

    bcd30b917cc79da4b7e4fd3c2581d55f3244ff4edca5d3a7b24250906918ee4a

    SHA512

    315b0fd4728bfe8cce13375a21ba1ba16757f52902f6956208097bf5a62974d3fe26acd6e60263fbcdc37d1cd01d36ec0fcf65e9b24b6765a5a8938486b11337

  • C:\Program Files\CrystalDiskInfo\Smart\DADY HARDDISKQM00013\Smart.ini

    Filesize

    248B

    MD5

    d52394441fe836a98f355eb05c9ad443

    SHA1

    7dab0a9a5574bcc6a7bc830b906bbdd237ad7290

    SHA256

    908cdf3ce3f28eaaaee19415a8a907f8bc109f9b4f6875777f7777217ee959f6

    SHA512

    e008992b0d679b0114f7609990cbc61b5e95fb263b6dbd0a900c893d400a490456903aee9137cf53a22cc627ec771e0e13902992ee75faf270bb1ce226b09bc7

  • C:\Program Files\CrystalDiskInfo\Smart\DADY HARDDISKQM00013\Smart.ini

    Filesize

    453B

    MD5

    aba7292fa66e03d66dd0773113fa5ff2

    SHA1

    be9af7b179cdf48ed81459d88fda7b2aa21ca687

    SHA256

    21edde8bc08cdb7e9f368dc962a8f64f2d31f1a0f8d6cf32a769bec8390c2498

    SHA512

    b2b0d4fa6e64ae80e09017a822027d5eb77a7162e9165c0d4c4ffeab7e4b33f0e314daf1d8e1baa932cda04438c8bd89a17e8be641d14ab0a3f77fdb53239b61

  • C:\Program Files\CrystalDiskInfo\unins000.exe

    Filesize

    3.1MB

    MD5

    dcc25a5111e81a4a5ac22ba565aaa5ef

    SHA1

    1003885f60a86e9502705da7f1d183baea1a555c

    SHA256

    46f2feb0f3417fc4bac94c5e7daf71745cdf0bcfd3245fd095548e57653d087e

    SHA512

    0d1961b5e462f79439a263969f11735af5b82139279f4a79af8b6fa09d2df1fb4eeb92fc73f9b619d99de5eb6246d6f546c9fdd3c1e23dac99aad3f7f39e8979

  • C:\Users\Admin\AppData\Local\Temp\is-VF2LN.tmp\CrystalDiskInfo9_1_1.tmp

    Filesize

    3.1MB

    MD5

    dcc25a5111e81a4a5ac22ba565aaa5ef

    SHA1

    1003885f60a86e9502705da7f1d183baea1a555c

    SHA256

    46f2feb0f3417fc4bac94c5e7daf71745cdf0bcfd3245fd095548e57653d087e

    SHA512

    0d1961b5e462f79439a263969f11735af5b82139279f4a79af8b6fa09d2df1fb4eeb92fc73f9b619d99de5eb6246d6f546c9fdd3c1e23dac99aad3f7f39e8979

  • C:\Users\Admin\AppData\Local\Temp\is-VF2LN.tmp\CrystalDiskInfo9_1_1.tmp

    Filesize

    3.1MB

    MD5

    dcc25a5111e81a4a5ac22ba565aaa5ef

    SHA1

    1003885f60a86e9502705da7f1d183baea1a555c

    SHA256

    46f2feb0f3417fc4bac94c5e7daf71745cdf0bcfd3245fd095548e57653d087e

    SHA512

    0d1961b5e462f79439a263969f11735af5b82139279f4a79af8b6fa09d2df1fb4eeb92fc73f9b619d99de5eb6246d6f546c9fdd3c1e23dac99aad3f7f39e8979

  • \Program Files\CrystalDiskInfo\DiskInfo32.exe

    Filesize

    2.5MB

    MD5

    925ffec1b973dc3ec2101dc87a662bc4

    SHA1

    91ba2bfa81ede46a3ce44bab2fd57c2fd8337e70

    SHA256

    afdc7703c11d7f0ebc80613552b3dd6e29af248d480ccb6fbeae64dd07ae9b80

    SHA512

    33038986725c984224d52ac8188e3a346176cbc424b0daf3e737a3722aa8a2bba64f2dc4bf7f9cfb294401795f9fee21b6ee60bfd254f685438be6b7ec544ae3

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Program Files\CrystalDiskInfo\DiskInfo64.exe

    Filesize

    2.7MB

    MD5

    031db3e4ecb470c1c88347b0ec428f83

    SHA1

    8ac9407930cd4155bb27f271f0650d94a2c9c6ff

    SHA256

    f90f48e787c76a1e641c53490fee0875dbc3b8f25c39de30dedf07b4c175fff8

    SHA512

    9e97a7d686dde0847f3ce0cb83d59a01fbab73f5ba63d4c2632fdd6be8acb71ea7a217ae4f40e70c867da96bd502b89a449eb510b82f0ab3a6d1d45922ae360b

  • \Users\Admin\AppData\Local\Temp\is-VF2LN.tmp\CrystalDiskInfo9_1_1.tmp

    Filesize

    3.1MB

    MD5

    dcc25a5111e81a4a5ac22ba565aaa5ef

    SHA1

    1003885f60a86e9502705da7f1d183baea1a555c

    SHA256

    46f2feb0f3417fc4bac94c5e7daf71745cdf0bcfd3245fd095548e57653d087e

    SHA512

    0d1961b5e462f79439a263969f11735af5b82139279f4a79af8b6fa09d2df1fb4eeb92fc73f9b619d99de5eb6246d6f546c9fdd3c1e23dac99aad3f7f39e8979

  • memory/2684-1367-0x0000000000400000-0x00000000004DF000-memory.dmp

    Filesize

    892KB

  • memory/2684-62-0x0000000000400000-0x00000000004DF000-memory.dmp

    Filesize

    892KB

  • memory/2684-53-0x0000000000400000-0x00000000004DF000-memory.dmp

    Filesize

    892KB

  • memory/2860-1366-0x0000000000400000-0x0000000000719000-memory.dmp

    Filesize

    3.1MB

  • memory/2860-60-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB

  • memory/2860-63-0x0000000000400000-0x0000000000719000-memory.dmp

    Filesize

    3.1MB

  • memory/2860-64-0x0000000000240000-0x0000000000241000-memory.dmp

    Filesize

    4KB