Analysis
- user interaction
yes - max time kernel
38s - max time network
38s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
15/04/2026, 21:44
Behavioral task
behavioral1
Sample
CrystalDiskMark9_0_2.exe
Resource
win10v2004-20260130-en
14 signatures
150 seconds
General
- Target CrystalDiskMark9_0_2.exe
- Size 4.3MB
- Sample260415-1ls5msax6k
- SHA256 ac7bb07c02bf26786ce194d0455b65c194f743ff1e887cdaf03af4de88aa2567
- MD5 95e1237f70de7f4ce793aa8c45207875
- SHA1 3cf5b182bb2c7a2bb95c6af63143375a6f8ab256
- SHA512 7b3d06b8eccf8b2ca4c51107824900e27965d63cc1f2e071712f7709ec3dc73099f5ccb474abad28b8322bdaf5051041e491d48e2705b396545c9cc3b67a2fde
- SSDEEP 49152:cBuZrEUmC1ikSL984txDXOllVFxvxMyOcvhczycjJ0CFACo1zG3m8RGkL2RZP8kA:ikLns9GSgVFRVW5J0IAb83zVL2Rpk
- TLSH T1D926023BB268753ED5AE0B3245739320997B7B61B81A8C1F47F0090DCF6A5602E3FA55
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 6 IoCs
pid Process 4332 CrystalDiskMark9_0_2.tmp 3192 DiskMark64.exe 2636 diskspd64.exe 668 diskspd64.exe 3824 diskspd64.exe 1540 diskspd64.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-V0PLF.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-VJ95E.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-UM6ON.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\unins000.msg CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-1FUR9.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Green\is-FKHKQ.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-6J6C9.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfOrange\is-0CS5C.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-RI58C.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfOrange\is-F2EFL.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-T1OC0.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Flower\is-Q233N.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-6Q8LJ.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-O63CU.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Flower\is-HU8T5.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Green\is-DR0DR.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\is-5MNI9.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\DiskMark64.tmp DiskMark64.exe File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-9GNJC.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-0UTG5.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-SS55I.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfOrange\is-2A2ME.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-9UHCV.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-KA39D.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Flower\is-V50R8.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-27GF6.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfOrange\is-BL732.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-AGNFE.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-GCPAV.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-ON7JB.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Dark\is-O7ST6.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfOrange\is-MB0F1.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-0FDT8.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-UA7T7.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-9KQTQ.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-RB3A5.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-4MC1A.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-GA9IL.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-L4F9N.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Dark\is-4AF4H.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-PBDO3.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-7UOH6.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-H65QP.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\DarkRed\is-4CD15.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\DarkRed\is-9NQ5U.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-L5VJ3.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-0U1C6.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-RT9EB.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfGreen\is-CB539.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-MJH4Q.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Dark\is-CFDUS.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Flower\is-GST5U.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-MTC5O.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\language\is-QRNR0.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-UI0PG.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-QJPA6.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Flower\is-2G0JL.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\License\is-LUQHO.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Digital8\is-B2IL6.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Dark\is-FCF5Q.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Green\is-JOOQH.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\LegendOfOrange\is-MND85.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Default\is-C3L22.tmp CrystalDiskMark9_0_2.tmp File created C:\Program Files\CrystalDiskMark9\CdmResource\Themes\Dark\is-ONDGE.tmp CrystalDiskMark9_0_2.tmp - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CrystalDiskMark9_0_2.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language CrystalDiskMark9_0_2.tmp - System Time Discovery 1 TTPs 1 IoCs
Adversary may gather the system time and/or time zone settings from a local or remote system.
pid Process 720 msedge.exe - Inno Setup is an open-source installation builder for Windows applications. 2 IoCs
Inno Setup installer
resource yara_rule behavioral1/memory/4320-1-0x0000000000400000-0x00000000004DF000-memory.dmp innosetup behavioral1/memory/4320-606-0x0000000000400000-0x00000000004DF000-memory.dmp innosetup - Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe - Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4332 CrystalDiskMark9_0_2.tmp 4332 CrystalDiskMark9_0_2.tmp - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs
pid Process 4032 msedge.exe 4032 msedge.exe 4032 msedge.exe 4032 msedge.exe - Suspicious use of FindShellTrayWindow 4 IoCs
pid Process 4332 CrystalDiskMark9_0_2.tmp 4032 msedge.exe 4032 msedge.exe 4032 msedge.exe - Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3192 DiskMark64.exe 3192 DiskMark64.exe 3192 DiskMark64.exe - Suspicious use of WriteProcessMemory 30 IoCs
description pid Process procid_target PID 4320 wrote to memory of 4332 4320 CrystalDiskMark9_0_2.exe 86 PID 4332 wrote to memory of 3192 4332 CrystalDiskMark9_0_2.tmp 88 PID 4332 wrote to memory of 4032 4332 CrystalDiskMark9_0_2.tmp 89 PID 4032 wrote to memory of 3464 4032 msedge.exe 90 PID 4032 wrote to memory of 720 4032 msedge.exe 92 PID 4032 wrote to memory of 4272 4032 msedge.exe 93 PID 4032 wrote to memory of 4272 4032 msedge.exe 93 PID 4032 wrote to memory of 4272 4032 msedge.exe 93 PID 4032 wrote to memory of 4212 4032 msedge.exe 94 PID 4032 wrote to memory of 4212 4032 msedge.exe 94 PID 4032 wrote to memory of 3764 4032 msedge.exe 95 PID 4032 wrote to memory of 2576 4032 msedge.exe 96 PID 4032 wrote to memory of 3764 4032 msedge.exe 95 PID 4032 wrote to memory of 3764 4032 msedge.exe 95 PID 4032 wrote to memory of 2576 4032 msedge.exe 96 PID 4032 wrote to memory of 2576 4032 msedge.exe 96 PID 4032 wrote to memory of 612 4032 msedge.exe 97 PID 4032 wrote to memory of 612 4032 msedge.exe 97 PID 4032 wrote to memory of 612 4032 msedge.exe 97 PID 4032 wrote to memory of 4820 4032 msedge.exe 98 PID 4032 wrote to memory of 4820 4032 msedge.exe 98 PID 4032 wrote to memory of 4820 4032 msedge.exe 98 PID 4032 wrote to memory of 2068 4032 msedge.exe 101 PID 4032 wrote to memory of 2068 4032 msedge.exe 101 PID 4032 wrote to memory of 3288 4032 msedge.exe 102 PID 4032 wrote to memory of 3288 4032 msedge.exe 102 PID 3192 wrote to memory of 2636 3192 DiskMark64.exe 104 PID 3192 wrote to memory of 668 3192 DiskMark64.exe 106 PID 3192 wrote to memory of 3824 3192 DiskMark64.exe 110 PID 3192 wrote to memory of 1540 3192 DiskMark64.exe 116
Processes
-
C:\Users\Admin\AppData\Local\Temp\CrystalDiskMark9_0_2.exe"C:\Users\Admin\AppData\Local\Temp\CrystalDiskMark9_0_2.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4320 -
C:\Users\Admin\AppData\Local\Temp\is-B9HQG.tmp\CrystalDiskMark9_0_2.tmp"C:\Users\Admin\AppData\Local\Temp\is-B9HQG.tmp\CrystalDiskMark9_0_2.tmp" /SL5="$A0092,3438376,857600,C:\Users\Admin\AppData\Local\Temp\CrystalDiskMark9_0_2.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4332 -
C:\Program Files\CrystalDiskMark9\DiskMark64.exe"C:\Program Files\CrystalDiskMark9\DiskMark64.exe"3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3192 -
C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe"C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe" -b1024K -o8 -t1 -W0 -S -w0 -ag -d5 -A3192 -L "C:\CrystalDiskMark0E585200\CrystalDiskMark0E585201.tmp"4⤵
- Executes dropped EXE
PID:2636
-
-
C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe"C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe" -b1024K -o8 -t1 -W0 -S -w0 -ag -d5 -A3192 -L "C:\CrystalDiskMark0E585200\CrystalDiskMark0E585201.tmp"4⤵
- Executes dropped EXE
PID:668
-
-
C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe"C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe" -b1024K -o8 -t1 -W0 -S -w0 -ag -d5 -A3192 -L "C:\CrystalDiskMark0E585200\CrystalDiskMark0E585201.tmp"4⤵
- Executes dropped EXE
PID:3824
-
-
C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe"C:\Program Files\CrystalDiskMark9\CdmResource\diskspd\diskspd64.exe" -b1024K -o8 -t1 -W0 -S -w0 -ag -d5 -A3192 -L "C:\CrystalDiskMark0E585200\CrystalDiskMark0E585201.tmp"4⤵
- Executes dropped EXE
PID:1540
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://crystalmark.info/3⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4032 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7fffef87c188,0x7fffef87c194,0x7fffef87c1a04⤵PID:3464
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1976,i,8122147413095493942,5155080609310766136,524288 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=2472 /prefetch:34⤵
- System Time Discovery
PID:720
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,2355310030669198326,8396040466009307786,262144 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:24⤵PID:4272
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2620,i,2479372925035942646,10297184350725339446,524288 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:84⤵PID:4212
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,857354944763443880,2709246087351813671,2097152 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:14⤵PID:3764
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3480,i,14796288289359523918,13031184866110073013,2097152 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:14⤵PID:2576
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,18290775864358686201,14768586139257164245,2097152 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=4272 /prefetch:14⤵PID:612
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4276,i,649887012572856933,7087960923524730126,2097152 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=4280 /prefetch:24⤵PID:4820
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4996,i,8776270467555530243,5687214162796996166,524288 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:84⤵PID:2068
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5220,i,9751718997828043521,11254501210132778953,524288 --field-trial-handle=2360,i,5576265476617790101,818042570927634342,262144 --variations-seed-version --mojo-platform-channel-handle=3664 /prefetch:84⤵PID:3288
-
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"1⤵PID:2792
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Arabic.lang
- Size 4KB
- SHA256 ccc67733403709efff376b8bd298d18de2eec9cd20942d136a86884cf6eb419e
- MD5 a7b033747a4bc4e180c6a2f8de9164a7
- SHA1 956f29173646f5232f9bbfca46810414a7d0d3d9
- SHA512 a7c160fe50380066969f6a7b4a5d4dfde2f837a75343a5be741426576104187511a9a4c4b20d878dc2b5bea605803d5b0fdf96200feaf87268d36294e53db36a
- SSDEEP 96:rQIVNAb4QPBiOUlvj0KabasMCqIsEUhDL5lm6mPDkdYUHD0sP7DwAD9lHfDm8sxG:cIVNA7mvjubKCq5EAC6wkdYKb7EAT/K8
- TLSH T1AF912803ABEA51387163BB95DFEDC06B8312799589EE926F10D0460B4AE0C508617FFB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Armenian.lang
- Size 4KB
- SHA256 52738bbe3026767e63e734d5eea79abfae1dcb617de4501a4b1033e8fecacc0d
- MD5 49c1a9511919ba9abbb80ba95d341961
- SHA1 7a7c46aa90cd09d41d52c94a014f33039fd2c698
- SHA512 ee8a89478748cc1281bf858b388e2ea9ff6027cca0457fc9428ea3a07f2dd0056dc8af59b4a1116e26a6187fdbd821ae77c387e60085352f9a16ed4adc15f926
- SSDEEP 96:rQItQJrQX5BOxpbtos46LPG209UlgchIcO3+B0yPXnez3UUDZsWvI4HKhJL3P4TS:cIGTtv7h8sacOuB00eTUuhvI4cJLf4u
- TLSH T18691423722E5D0292017B799AFC9C66DAF03E3D0C55EB66E40DC452F57E2810DA1BAF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Azeri.lang
- Size 3KB
- SHA256 dc88ac25c3ea853f3cc05823af0ce3982b186a23ead357f7134115665efb3ef7
- MD5 bd8eba632c5aa07ed021cbf3dc9f5cb0
- SHA1 e31ffc6b9106027be615112a4480776a00fdc0be
- SHA512 cbba7a274e62432ee19277b055000e31a04ad958272a63d48dc9870f301fceef87416f641118ca156a0802ba21f9ff06e95bfdf2982821cbf58532a7e751703e
- TLSH T10D81F01326EE6218B573BA9AEFF8D57A872379D5897ED16F00C0450E49E0C809517BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Belarussian.lang
- Size 4KB
- SHA256 af6d0672dcd319f8903534a3f5085ca0562b6a50533401d9abaf6e8d6ec3448d
- MD5 ee4a3fb4388826cf0e6d5c621ddb48a3
- SHA1 f3b58e997d394d3de27458ffe501eb9a3662e8d0
- SHA512 1705cf1c3049786c5f1e0f7bdaab5b496e32ab9bdbd3890c8dda998982fc6812ee4deaac6cda892420e73d7a5ba019262ecf8292fe344630254754e63376f22d
- SSDEEP 96:rQIQ96Qq9LNOGlG2ysVYhBUhDL5E3SAPgyRzsUHD0sP7DwAD9lHfDm8sxhOhB:cIQkYb2DGA23iyRoKb7EAT/K8
- TLSH T1A281390376FD6114B173FA99EFE8C1B687A279C49A7E855E00C1650F49E0C60A617BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Bulgarian.lang
- Size 3KB
- SHA256 7489cd9151f6788572350402f0dae0c04ef6b5d1e6745a3e936e4518db5f47b3
- MD5 af04b997d8664869cbe89190390aa4e6
- SHA1 2b7355e0f69fdddc4890b82284bb1bfd56263c76
- SHA512 5851cacffc64f0c122bb6d3a48e015469b651bd9230dcbd3db522dbbdf8e2f46ec9a2d7ce45f43c6c31958ee65ac43562a5d8eaaa215e335aa25e77923c8c3a1
- TLSH T17781690776FD6118B162F695EFE8C1FA83F27A90566E819F00C61A0B44E0CA097137F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Catalan.lang
- Size 3KB
- SHA256 26727d1c99ac220ab6c5646bc0c0c326bb616f18352a63e1f346f8e7f60ddfc2
- MD5 e460247728dba3d6dc103afc8c67a471
- SHA1 b0d2b7eacadb084ec1123761e3d39807979d79f4
- SHA512 396af4d0ed8cf359004ffbfe6724e5531f6946465bab5631327d296138b2e005cb9e19ca3baf9377609a9d83f12b626b621a39f248d4eac57c8536929eb94784
- TLSH T19581C01366EA2218B1B3BA95EFF8C17A8B227995997ED15F00D0460F49E0D40D927BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Croatian.lang
- Size 3KB
- SHA256 9323bf79553c6f687b8a5e356598624e483d13635efd30063efb0e7eedc02b77
- MD5 ef0b2ce3d0d022abbe518b018c6ba140
- SHA1 c305f1dd258ef448f6f702dbc4e9983ee4c4b151
- SHA512 e9db6e9c3ee4b9c4a8ff2b968c6a8dadb6bec51b1bb9933841c890e644bf5430cd02cf2906939b0d0818d6b791ad735ae68fb2b8efa351bb0c0991f552729d35
- TLSH T15181AE1366FE2214B5B3BA99EFF8C27A87227995996ED16E00C0450F49E0D809617BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Czech.lang
- Size 4KB
- SHA256 8c711d030d19f3d87e7887d45df008b77961baa781046c8504a7f3316b1bbea6
- MD5 4bfa90404e0f4014f5d523985ba049db
- SHA1 e31b5497a7ab7246fc270e490e2ca1a7c56fd361
- SHA512 37548d8d39ba10a5fdc57bfd2c655d4f24a31d91721ddbe141b3802e453861f77454893a9fb8644cd882397da407609a192786d880c061fe4b58f8a04043bab6
- SSDEEP 96:rQIcepfQa1rCXOYltsVA+/bWUnBU4dBPScjUUsunpweHsWJ6sxhz83OC:cIbDajL8iIrnpweMWRG
- TLSH T1B281361326F92154B073BA86EFE8C57A876379D05A7EC25F50C0060B49E0D80EA677F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Danish.lang
- Size 3KB
- SHA256 9cfdcb64f1fd56f7d6503b4db33aebfa2ebcc42c5a6aa28ae48d3b1cb20aa1c2
- MD5 15e1d636d1be8971a06cdbc5ad9748d7
- SHA1 b663a6a1a3faaf233a0dff6174640f85591fb8b9
- SHA512 b09b39d54402c2c11e86d55560ed0391c3603c9facb4e5eed8fca0c075628df2e8399196234d867fc5ee41cff6a96b63d0c6c323bf1cfcdbcbf02684649b2e6f
- TLSH T11981BF5323EE6118B2B3BA96EFF9C17A87227995897ED16E00D0450F49E0D40D627BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Dutch.lang
- Size 4KB
- SHA256 9c87ea9ec12dfce3e842f0603f0c85e6825cd077ba47b516b7b2595410898c10
- MD5 b502b241dc057a5741b113e4e015638b
- SHA1 4a8b6d7fe2a0e12cec556d6f4d441342cc2220d7
- SHA512 77f084f7cd98bc23a39a96eff36a0d8fd49a8e88bc31f0bbe0e8d84b5cd87f9d9474839350db53959a5adba89358a4fe6cf4d5f7ae489dc048c300c6544445fd
- SSDEEP 96:rQI4VYQcG5LOKK4wcsVYhBUhDL5xMPWPzsUHD0sP7DwAD9lHfDm8sxhOhB:cIrTdGA7oKb7EAT/K8
- TLSH T19791EF0323EA6118B5B3BB95EFF8C1798B627DD599BED16E00C0450E49E0D809627BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\English.lang
- Size 4KB
- SHA256 be2124a48cac5de5d70b3a993471f0f4c1b66d331c067d34ff4de7974d16ae23
- MD5 ba5a95190fac874de8fb407872577006
- SHA1 c76c6530bd732e20cd2a46664d7e1c47ecea2094
- SHA512 0e98a680992e71c78d10975d2227573c9139da36fc6a53754139a76cf961b2ecb82e49a15e7cfa982331a526be86505c6fbde97efdd0dd07e9b7da66db81c208
- SSDEEP 96:rQIRyoMj7ABHluPOKldrjsVYhBUhDF5pxPUzsUHD0sP7DwAD9lHfDm8sxhOhB:cIEoJriGGABKoKb7EAT/K8
- TLSH T18F9100136AFA2128B173BE99EFF8C17A87627995897EC25F00D0060F49E1E409517BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Estonia.lang
- Size 3KB
- SHA256 67cbb3a1d166bb6321175089e12ea273ca51184fb2d1fcf59c3fb149b9fe1a8d
- MD5 82bd5023aeb84404cce6d66bb8c6a07b
- SHA1 88ae4ca3d75224cfe5a3db68054597305dcadec6
- SHA512 5a7a3c077d382c495da4fd43e33e7d5453c0486f447dcb2d1e4af00ba27c9c1617b0eb3edd90b4acf739fc84bb7fb76cfc90b1a0c6d201ccc4627a0722a68596
- TLSH T13581061732E96114F2B3BE96EFF8C57A872375D69A7E815E05C0060A49E0D80D6237F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Finnish.lang
- Size 4KB
- SHA256 a01f47cc9c35af057d5f8afec6f7aa565c1a49e710f442b3f927bc7b174122a0
- MD5 47b009542f079545b3e9097791216594
- SHA1 595ba7c46f952876fd1966354c751d3ab6e2c04c
- SHA512 4ad883597175505710013c28ac253926d5f4cd7de95a1a9823b2b3ca608777181dc3ac3df547e8ab821254be1472afe29deafd513b6091efeb4997b1e0c3a935
- SSDEEP 96:rQIoBQBQpr/uOOK2HwnsQiHuEt1UhDL57rRCPg6UHD0sP7DwAD9lHfDm8sxhOhB:cIIpzOjciHV1A96Kb7EAT/K8
- TLSH T13D81D21326F92114F2B3BA96EFF8C17A87237995997ED16E14D0450E49E0C80D527BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\French.lang
- Size 4KB
- SHA256 de8ad447496c75b93fdf8010cfc8f5fb8e7dcdea2fb8523a599654126fd95012
- MD5 598d645101db56f977700e8f6e47adc9
- SHA1 379b4459c7f5fc26a64aceca0f30ad1705907027
- SHA512 7656ce90fb76217c4863f7d5aa64df3bfc04c388be7ee08779a9f89477095c5207e1f538dae5ed167c0b1e43e0d0aafa3a5597c4a73f5479e627eeb46129c6a8
- SSDEEP 96:rQItMqpLQUsiO6n0rgsO3Hg4Uo/2P65ooUQsEqHHH5rucht:cItMqOpGXt715ooJqH57
- TLSH T11E91C31323EA1218B5B37A96EFF8C17A8B227995997EC16E00C0464E4DF1D409A277F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Galician.lang
- Size 4KB
- SHA256 ced16eb348d8b8c8427dcf31ba00cbd09bff4341e68eb3a08c2acafa772b4f98
- MD5 5ddfcdf08cd6bbc927c7aeebf6cf535c
- SHA1 957c76af287a1eb6a9c951148d878969df56acfd
- SHA512 05d7f923279b152e44fa5bd505bfe48d081baee13ee6a7bebfdb51d288bdb85d25b3ac8a4fbb85bc7c3a49d798b9f35d7b20889a5a68ebe2045b7586320fba28
- SSDEEP 96:rQICTQ4ovDOay7Ss50qUpnpNPjv9QaeUvSOsvHqCeHSJs6SeD:cI2v7/f/aetqCeyt
- TLSH T1A891B21337FA5214B5B3BA99EFB8C1798B367990997E815E00D0064B4DF0E508A1BBF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Georgian.lang
- Size 4KB
- SHA256 ad8fe01ca5bbe3c4207b4708447b26e29a7dcb3c3df4bcd3de10f889393f0b4e
- MD5 49d81a21159ad7958b73c1504ca06515
- SHA1 57f4de2325752234bc9894286b73fb9ec3e0f7aa
- SHA512 f7e0c8e51333ba8e4b2d45108397e39027f0292d4d680d3babf0a19819da4d9216382f456c6f9447b58c4b2109814b7935c26249c5dd64ebf53b13285164156f
- SSDEEP 96:rg5u/9BuOgZ3o0sVYhBUhDL5dbPudFzsUHD0sP7DwAD9lHfDm8sxhOhM:8U+YGAOnoKb7EAT/Kx
- TLSH T12A81E31323EA2024B5677AA5EFFCC5BED722BAC4596E815F50C05A4A89E0C8186177F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\German.lang
- Size 4KB
- SHA256 0a38ac1056acaa5dbcf3a65ef99cd28140a65346f600e332daed76241b12ee37
- MD5 4e4bd8f3d5e6be449f28b418ce0b367a
- SHA1 f7ef2fcc6c3ba74aaf543ea6b2c2d60bff6ea285
- SHA512 dacbc248861b480dc7d537fcc5ad4abc8c7962c86eaf890ccee541ae3c6a8f31812057aee5a29c66cf190fad5e657ebd8cd9174a20ad2792e20d932a62b5fc16
- SSDEEP 96:rQIBVMQ846GXLOF/rPspeMU/jjUykezTaeMWPKAsUAkevAsveCMX1Hle+Vv29PC:cITalDNsujtoss1k1lb
- TLSH T1E691F10327EA6128B5B2BA95FFF8C1759712BDD49A6ED65E05C0064E48E0D40D923BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Greek.lang
- Size 4KB
- SHA256 b3f66c1ac7fec1258966b78586b8ed2e47d3d4e940fc0dc86a58f3eb3f0ed619
- MD5 ec2f5f3391d8706b8d108a1ba7cf2b92
- SHA1 8acd238865a63c1df79fa8953aeba994596683be
- SHA512 0eb7e18fed031f77a30adc2fe9f1af7734d1d92f0462547e5ce89c05e359cea17b60bbd1d7ba3dda2745f0c514c32b0fb99418dfdf65c29d9eee8841789ba260
- SSDEEP 96:rQIbyQrMOOOgivdrVsVYhBUhDL5qadqbPEfUXEzsUHD0sP7DwAD9lHfDm8sxhOhB:cIwRIAGArdXoKb7EAT/K8
- TLSH T1BD81100326FF2114B673BAA6EFF9C17A872279D0897ED16F10C0550A89E0C408A57BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Hebrew.lang
- Size 3KB
- SHA256 1bab9e0bc42f9006ea34bb37eb02828922052e1f1a945057bec730fbcc576015
- MD5 84a865c190b031c5a3a88fb3caf9256a
- SHA1 a34de47956ef7323c8a265190c68b4a7224678a7
- SHA512 e714f3339830419dc4a3a00be50c2c2dcffe95d5f6d79861ac74130c0888fbae0cb28562ae07829c8e423a7cc4b7c5ead3e2777bf5dca709bfb8a4609407c578
- TLSH T1D9812D1226D5E1ACB561FA8BEF8EC86EC351E694415D765F54CC064305DEC80870FBFA
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Hindi.lang
- Size 3KB
- SHA256 af7c63f92abc0d26d8d2013e7bc50f1c42d9fef2cf3321573a5c9a99289855b2
- MD5 635667b994ff625b8149ff86fffaf296
- SHA1 827604758ad30e6ecd2b6ee45d56ab885a17a257
- SHA512 8f4622b0ddc45cfa485e8ad72b6aa60331ff08cedf6f4d6b70a8bf25d6c7a6f7d0dc9ed93edeec20d0299614297be5ac7e73639798b18792c97950c0685e3618
- TLSH T1FA81580332EA1128B176BAEAEFE9C17B8B937D8499AE815F41C0150F89E0C6495177F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Hungarian.lang
- Size 3KB
- SHA256 b3e355c9b3573a8c278b6b753cf048124f1df25facb62cf2b51fa818eeb1f524
- MD5 0bc7c4f79465357e5132a00ad7f6f287
- SHA1 528b75508b1be6f5e9b7f880ca88a3567cdcd4e3
- SHA512 61ee2340482da2d13fee4f9eb8581fcad1f7161ebdc46928745be96e0d424b1ebf3e69abc6c5bdc1bd83773d3f6b1f9f37145238e034d68b78f9cf7ada0df9c6
- TLSH T13981C05322EA6118B1B3BA96EFF9C27A87237995997ED15E04C0460E49E0C40D627BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Indonesian.lang
- Size 3KB
- SHA256 c3df2e0897ee37048d4967a19eddf8889d5c00326088cae5fd48cfb6c0e44e86
- MD5 7ef01399d24ddfefb51eaa909ae900ef
- SHA1 5843a120d3b7f926a675a7e356c0b8e400b5c134
- SHA512 d5ac5013e389a2d23c8cdd78a54d15ff265d7916a807e356cfdcc3fb445059150c401bc7590f0af33b6eec76e0b241b0050a3c640561476e02420216c86aa9d3
- TLSH T1D281DF1322EA6118B573BA96EFF8C27987637D95997ED16E00C0460E49E0D40DA27BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Italian.lang
- Size 4KB
- SHA256 f9718155144e4ef0204a6ffdd942800813f0b29ff6d11c0a32cdb31227f4b310
- MD5 d3f558dc1fbfc9c256e2afc4c5cf3ce4
- SHA1 e1075d0815889930b8c790a4f1e9d33241ccd486
- SHA512 ef533a27081506658fb6882b847bee19a35e4479c62f3411ffb7b297025667957761cdda9b035854a1e9680c5d65851c3ab8255109fa6aa2e1c99117c74a7695
- SSDEEP 96:rQIblj7ABHt91DON8VSscFwCwU6urfS57wMPosY0skS92U6uNs6dXjwnH3GGwbop:cIOmUaFwXZ7wWhFu2ZkdzAWGt
- TLSH T1E891E11376F92214F5F3BA99EFA8C1798B7279949A6EC16E00C0050F49E0D50D9277F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Japanese.lang
- Size 3KB
- SHA256 abb620bb1fb8427f1aaa0f9b8d3595645d965c9d0d0a87f5fd680176ac598d9b
- MD5 f0916704e271f9fdfb6d19dd1aae2231
- SHA1 4bb0a692b73abf4328400e3a11bedaed1ea0d85b
- SHA512 34ffde3e54cdb86f59bce44eee3d2e7632da7c32e4acd3bb4959b72c7a9ff3d7987a394e7075a679e98ed0d3205429a621355927ea6077193f1d1ab1ff79acdf
- TLSH T196719B1736EA6128B562F5DADFCCE27E8311B6D8829F85AF55C84A0B05E0C409313BF7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Kannada.lang
- Size 4KB
- SHA256 df519b1d31611e4c701e5a8f211431d99e5809bbe9d4db739b471ad5bd45d2a0
- MD5 52282aa44eb418c4f1d14650c5c0f950
- SHA1 d84cb2cdc249c3bb5dcb3e705ac4b682a49bcc0a
- SHA512 72bfe17f5f86c81a7a4e83256b3a657c427b1245d005536f5a734ad00fc6a15ae8582df46f8a67cfa04f09c669f5eef623735f9366201e3dd9c4c7473835571e
- SSDEEP 96:rQI/RQFt4L0Oz0ge/KsH+1GUeVFPeXkKNZUDCIU3kB/sDi6HzR0q1:cIvgge/RrzEkKN+DCIikBei6T7
- TLSH T1D091465362FBE12428D1B5DFEF9AC4BEC3026A9745EE45AA30C5064E46C0DB48753BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Korean.lang
- Size 3KB
- SHA256 93d17b6f27d8cabae89ec3f1d4d3ed081c358a81a680e5e12455825394d79534
- MD5 635f75fab5f08683116de6c59e0edad0
- SHA1 d4c0d7b4a55ac104bc840adf52f3111cee8c0713
- SHA512 93b05f06a01962d60c7977d0aa5d14840454870eb6c94902fc0ab06392c4e5f0191ed0681b8480258778c9918d9e806fb03b96d3b53736ef1840b0ce0a3c11bf
- TLSH T11161671337EAA124B5A2B6DAEFCDC6BEC35176D8468F415F55C40E0B49E1C8096036F7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Latvian.lang
- Size 4KB
- SHA256 eb122edc980f610b8b8a01e079ffdbdbaa96ac9cc52950662dac2df9c72ab47d
- MD5 6d8a97b2c1f3c32ff2667a913a04fbac
- SHA1 72346a611e394a02d6d1d3f9367513d89d64a55f
- SHA512 417d377f59c106d1aaf7dfb1cc961e28a8f47b44084a88234bd38b371cdd53f9c5037b35d02d6c31c1a0f0b72d2cb488ea72005a75ced5d27d38c22b0a196a6b
- SSDEEP 96:rQItqCQXPXkeOKnSwKyPsVYhBUhDL5F6BPR7zsUHD0sP7DwAD9lHfDm8sxhOhB:cIthf9GAwoKb7EAT/K8
- TLSH T1AE81DF5322ED2118B5B3BA96EFF9C17A87237995997ED16F00C0460E49E0D80D627BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Lithuanian.lang
- Size 3KB
- SHA256 651d296720a025c1bc525cabc7b318bfe2d31b3057828e7e579a61336f87daa4
- MD5 4e4160fa68e778accf6eb587d629c990
- SHA1 bafd0e70347848e863161c0dec443fbcfbd7aa85
- SHA512 5b2d5f6cbb2f3e011ca37d34347ebc70088dcdf28648c895d195ce8cc33be064e14b839f7c619855319a03f71bf3c62a93bf511f4ab87b773afa1368d3151275
- TLSH T13A81901326FA2118B2B3BA9AEFF9C17987237995997ED16F10C0460E49E0D40D6277F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Macedonian.lang
- Size 3KB
- SHA256 67e86c7637054cba0a7305120ed5fef59f0a94d015269655c46592df42b55434
- MD5 67ee8f25bcaa9e84dc263e7bccc77a54
- SHA1 e385111491fc3df1fbfd4d525e42b4b7dcca6789
- SHA512 55566e8226e96840b0953087b21904bf00f1b5deb6074709e5dbb87871392d59836ecf0e553a88d5e8ca3da64615d3b382b4a8b7e5ffa9f361b81281147feee5
- TLSH T13481250376FE2118B173BA99EFEDC1B987A37A848A6E915E00C55A0F48E0C5096177F3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Nepali.lang
- Size 4KB
- SHA256 f0cc624aa41a4aa4c86682861088407a935a2f9ace33058be615f6c75f198b46
- MD5 3743fbfed7f2fdac7678c9295f69c676
- SHA1 4304edeab7b649e2087a4d6c539473ee3e22163e
- SHA512 b7cf10ae2cf36222775231583475e3eaba3d856b2c1604fb72d1739a5bdfd079309105bc66c5ee21b7aa7ea8ea90304b7af6f9206b32826d9bdaac7a56088422
- SSDEEP 96:rQI9pQvTjkxOJMHYTsi04dQUDPCjzfPsGOnetsoUDsPnUJcHO3XvctQz+:cIs7EYl0XObisoznUSu3XvcF
- TLSH T15F91490621D663386068B6EBFF89C67B8F892D9425CF415ACEC25A5B85C883C92035F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Norwegian.lang
- Size 4KB
- SHA256 01399d4b424acc486ac3bb39f39558df4d99e3643158ee809f93c07ba8273b9d
- MD5 7516706eedd7d5c6ed8f71a1f8d84ae7
- SHA1 6d8c8d4081f6192495dd9d057bfe5b5111c7e449
- SHA512 66e83a681cdb3f62dfb6f01b99a318bbd375d4db594ae7bb7ff1c0b3cee63329c143245ebd285081559b8a4930790d2e38e0d82a69feb69aec89c448cd3c0c65
- SSDEEP 96:rQIe3QB9SiDOISdrAPsYLFGeHUhDL5HoYHqPObGqUHD0sP7DwAD9lHfDm8sxhOhB:cIQ/aLFJAxo6LbTKb7EAT/K8
- TLSH T15181F05327EA6118B1B3BA96EFF9C179872279D4897ED16F00C0460E48E0D80D6277F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Persian.lang
- Size 4KB
- SHA256 a2069554f942f64158945dd29296ee9f8b06123e3655e9e398fa11da767d55a8
- MD5 2195784b3110fc80f80e63340cf8f187
- SHA1 cea3009bc1592bc6100db6ccfdf05b28b18d5979
- SHA512 8c277de173c07e32d7fcbfc3ab30f6dc0e0dd6bd541863bff4b00098f74d771a2a8be725dd6beca9b00c2d2e212a2df31d56aed009f9de1cec1f7ef0d2fe9969
- SSDEEP 96:rQIYXEQH/UOmpmUdrrsVYhBUhDL5tPnUzsUHD0sP7DwAD9lHfDm8sxhOhB:cIcpOOGAjUoKb7EAT/K8
- TLSH T1F591480366FA91387173BA99EFE9C17B8722799659BEC56F00C0064F4AE0C409517BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Polish.lang
- Size 4KB
- SHA256 b503a29f5db48b49f0d93b7f1ccdbfdbfcc4164c254fc6697047f868190a552b
- MD5 8183490d1e7b245a58ab22a8faa3b4b1
- SHA1 05c3f4ac184fea474a9bd2c6af3a997f20768cef
- SHA512 0916ec9e5fbcb8282116f25ff049161a5c4d0611b2eb20aa848a377f360a70a436d4df581fb9ca9f6fd22d7d6657084934228d960fe7d05c6eead74093284415
- SSDEEP 96:rCNCMQvD5O9SH5s8eWm6QqUFDEnPjuv7CUIisCutHI/QYqDJr:Xyc5zIqs7Ciuto/aD5
- TLSH T16981290322FD2114F1B7BA99DFE9D679CB7279A55A6E819F15C0010B4AE0C91CA137F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Portuguese.lang
- Size 4KB
- SHA256 6102c21fdf3045e2707eac0b9871a7b853a2b56004e5de4eee0223a5b2a9704d
- MD5 930bfae2bbf739dc447a7e1ea85b6b2f
- SHA1 bf813258e763d67104d612b857098b3d1a10e785
- SHA512 b17bccaee43bc15e047af70250caf27c3b81d226081f9679b37eb57acfa7e0025cd652e7232cbbf60e3bc568b196b9400a3e9794241ffdfc386b780fe0978da1
- SSDEEP 96:rQINVQUUvDOgUujrzMsLJZsUfDO5xPwTSlbUpDvsQc6iYDwHdzsk+PhB:cIXyjPNuyIbotc63k9i
- TLSH T10391E31327F91218B5B3BA96EFB8C1798B337994997E816E00D0460E49F0D40D62B7F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\PortuguesePT.lang
- Size 4KB
- SHA256 b9ef35cbee85285b270aeb0f543bb357d3007f8edcac43271fc7953ca66fa80b
- MD5 bfead152fc416c776e698e318df48bb1
- SHA1 f0aa37a68fed2fa3a5032e1736ca9698de045066
- SHA512 d349eeb9bc205278ddcf7fed325a311d339d629dc166bef6b2c5edf37c5d8616585454992dcf05ac7b28b0a80cb05a7fe3151a27ebf303bdb81e7c458a3eb7d8
- SSDEEP 96:rQIn6QKLCvDOgnjrzMsSvLsU0NQrPGxTlShU0fqAsjQKoc6teH2xJsk+s07:cI6gjPioJShvEOc6teWxQ
- TLSH T1C591D01323FE1214B5B3BA9AEFBCC1798B327994997E816E40D0454A49F0E40D62B7F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Romanian.lang
- Size 4KB
- SHA256 ba37cb8508307d2e7962a8e4ae8ee27de8767f16d28a6f8b874aba9509c6f5e1
- MD5 6cf4cc72df686be7a9df885b432a5c7a
- SHA1 fed96fe674ac97d25124a1cbc54273a04c82ddcd
- SHA512 76492b34dbe6f8d983a31f9f8a0c6599610302d67955390491beff2d1fee30f6a5c04b68f67b17acdd0827b50d7d19d003c90e478562c791807721cd0a320029
- SSDEEP 96:rQIS2OQ6jCKOE3JZs+8X6UhDL5fJYPMS7UHD0sP7DwAD9lHfDm8sxhOhB:cI9k1/AXmKb7EAT/K8
- TLSH T11A81E31327FD1218B1B3BA95EFB8C17A8B227A95896ED15F00C0454F49E1D809617BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Russian.lang
- Size 4KB
- SHA256 378037af5cb3fb9336402da7c3736c10e5c83381250fc78ca0f85213e0a5ca91
- MD5 a84188f00b4762c3a2223f6488d72db1
- SHA1 2756b2db9551e91c33fcb5ffbed7d9cf73daa9fb
- SHA512 dcc1aa4c5f382355eb4c94b28ddd22f2d96a7aab1753f6c9269a3714d113f345a069096685eed8c64cbd4c52eb4ad37c38350e2542af42332cf0dd0da080c465
- SSDEEP 96:rQI9OQasW8OheMsjBoFwU0NV3ySPDNUUsKA/H/neI3x:cI2gL+un3jNPA/f3
- TLSH T13391360BF6FDA1107065F1999F89C9EA83D2B694575E81DE50CE2D1B80E88B063237F7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Serbian.lang
- Size 4KB
- SHA256 cafabc59e9a3bfd867259812d9f8b63f0968390f28edac45ac3c6a6739fcb5a9
- MD5 a5e1ac603902447e322c332074645e40
- SHA1 6c7a21e79a394e2cfcf7914bd62250378af569f3
- SHA512 4311118962d611fe8f8f5c5ef124a1feb189aaf499dba55a49515383ebc6c0ad5235ed22bbf9aaa74bffb228d14fd13548c0f6d637fff59680e85609d04f450b
- SSDEEP 96:rQIQOnQykAVOHAdrVsVYhBUhDL5w3tTZ8+Pi0zsUHD0sP7DwAD9lHfDm8sxhOhB:cII6AGAC3JZVoKb7EAT/K8
- TLSH T18581F40376FE2118B173BA95EFE8C1B687A279948A6ED15F00C0560F49E0C40A617BF7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\SimplifiedChinese.lang
- Size 3KB
- SHA256 325ced8308a299bc9f69d69e27a3e8776adf15f9b32013be019b713a055d4a42
- MD5 67287c7653707e98f4b01b39c319930c
- SHA1 680b81b78ac4ec2fc52790b3e0f59a1d2f82c476
- SHA512 870b48d3ececcdd4417d3d4af68d5cd5016a53be329a1c1e77a0c47f4acc130656ae529ba8ee2f111b649401c8b2f072fa16efd7afdc54cfe46b4eaaf259aeff
- TLSH T11F617B1337EA2028B466B5D9EFCDC27EC35276D8469F966F59C40E0749E0C409613AF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Slovak.lang
- Size 4KB
- SHA256 afe4238ddf08a381d45b1b187a1f611fa7a038b6f9657cc572f29ed48f32c384
- MD5 239bf625f60853f38bcdfda1e8753c27
- SHA1 6e07a5e5fe8dc5bb815aa87b11fda11bebfd5e1a
- SHA512 8ab4183496e1099189925e8b0db55f3fe453116e4aecbfd5322d733db686bcf3c24de65a28ee931dfd972c12d64ed3250872280d638a4a1c19c342ac0b98d388
- SSDEEP 96:rQIJ5QAKMPOdOdrFnsAW+eMkUhDL51zPXUcqUHD0sP7DwAD9lHfDm8sxhOhB:cIKOxCFAjUFKb7EAT/K8
- TLSH T1D291CD1326FE2118B1B3BA99EFF8C579876279949A7EC15F01D0460E49E0C80D667BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Slovenian.lang
- Size 4KB
- SHA256 bd5db4767da33a7b26d0498c7be446012a594325c8256c76becedd7c2a887b0a
- MD5 5748f2418fc781ce7c55853c99eebdef
- SHA1 69e4e589ce309279f927aca8ec0091c9920eaf5d
- SHA512 3464d33ada08a48fc0e13a3d7fdb1ffb9fce2a1fc3d6082fa3e42f1a57283137365657cd88e0050631a02645a6fd38ae489037f7febaf5531d0791b81f6777f0
- SSDEEP 96:rQImBEfQxTDOU03B0sVtTmCUPOdU3JcP1fUlAs6ImHsAvG8+effXPxAI:cImBcX3NyCBKJOfJImzvG3q
- TLSH T1EF91F41376E96218F5F3BA99EFF8C27987627DD49A2E816F10C0050B49E0890D6677F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Spanish.lang
- Size 4KB
- SHA256 0f99c1a1b75354783a606fd1867e91adc3f87c8cc65dfbe4c0ec2060f23d5f52
- MD5 895904b8d2d6a10f15e2f363dff5c1cc
- SHA1 c002e1bf6cdd33a54fe0f1ea9075b2448d88c2ac
- SHA512 a9a2415be2617d44466c9935cb1c6c73432c5fbe36fdd2bde50d2b126ae5b9ffac02c6b3852b001944214439012f1ef22cafb791d6bbeedfd44f0472c6575fbb
- SSDEEP 96:rQIoxfVzQgvDOT97/s8ZBCUKI2tWPj7Un6ScU3OsDCqCHGZPs6S/6:cI/p7vfC76dxqCu9
- TLSH T177A1E71367FA2219B1B3BB99EFF8C1768B367990997E815E40D0035B49F1E408917BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Swedish.lang
- Size 3KB
- SHA256 57388348dbeec37743358aa76d323eaa2dbbe4882dffd2226df1b570234530b3
- MD5 0e96a82be997751a4e29e21173bd93f6
- SHA1 eaddf2572889e01239561224d4e09ce4da73c1f6
- SHA512 28eb58da84b113daf5e4eae39d17927e5e0dd615d33180ccc9848a69f2fb6b042db88b9d586d13b7b806b66ca84b35be573d1bc88e229adc221f797b99cf3ed6
- TLSH T16B81BF1337E96128B5B3BA9AFFE8C07983617DD499AED15E01D0050A49F0D80DA63BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Telugu.lang
- Size 4KB
- SHA256 4da7de722a79c040a53af31b90c251ef3adaa634ec4fcb3d3487652428038731
- MD5 37b113c70ee346a3ecc7120a3de56d86
- SHA1 36d568c71599aa71b8501d882f6bfa300c7ddf92
- SHA512 2aa28f9c2afb11c91abacf6fe4e1936a1a04de23dd2b8f4b8a2c88557a30e1e2518c7b0645ae73ecae74b77409873d594ccdb33d5b6193af16254618e3929a07
- SSDEEP 96:rQIm5rQuOL0Ot4ZsuN0UgLJC1aPy/UDbscmZeH2/jsFx:cIm867KY/kmMW/ju
- TLSH T18891490A39E5E01422DD79F6DFCCC86D9F9261C46ACE816B90C96583CAE583167437F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Thai.lang
- Size 3KB
- SHA256 677a0154b0821e1039c2ba918632575455bbd388fd40f185b4863f271d4b0d89
- MD5 3dd4ed4e86419d882ed6dea06dcddc9e
- SHA1 599fb1f9f96ea5d1f2350d15add7e43c0996879f
- SHA512 a0b4c24e805fe8ae740ce24dddd0ee704646749ef978a2b4b0ea5ef34c57db0142393b4616b5e0fa50280909f09adcd4ca960b2f65df086eb0a07362b6deef70
- TLSH T10581E41322FE2214B277BAD9EFE9C17A9B237995896ED15F40C0460F49E0D409627BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\TraditionalChinese.lang
- Size 3KB
- SHA256 45c52ab725efdbe5a9631f469c20917b1d5733ea0038a008a8ca633c7a9c49d1
- MD5 c81c0812f488d8340c0fef864acac0e5
- SHA1 7196c7cdbc0915403c4ba1811403883af7d3d9bc
- SHA512 0223c1d75f3e4758c715629f29dcfcac802f8eed3125b1c59b4f96d0029d772a112ad6cd5ea10170f3f4c6988431d55b2190d4e08d5198b5b921dbe78cea167a
- TLSH T17D61A80337EA2018B462B9D9EFCCC56E835276DC829F8AAF55C40E0745E0C809603AF7
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Turkish.lang
- Size 4KB
- SHA256 0e46cd274f695ba6a1cd960b0cef86274a0a029de12554e312348c86c90688b8
- MD5 03e27e623f9acefd6f9e4fb27cef5795
- SHA1 d8914c32fe7f26a73eabd620b5f72f335996ec95
- SHA512 f7c93aa1edef94889c76464905651e7d19bd58663fbf0755eb9b8866632702d86c0fa4cdad008d4f2ab1d1fc6c6c2f3a78239221a22f1211a0a33fe4f18cc75d
- SSDEEP 96:rQIaY4j7ABHks3DOmp7V/s0o2oQhUsn/TCBPbOyUOs9lIVHlNLhLNwf2FCkg:cIPlAkVXoHQh/n+OywlIVFNLhLGf2FCp
- TLSH T1A591121327ED2114B5B3BB9AEFE8D079836239E5993E916F21D4054A09E0C908517BF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Ukrainian.lang
- Size 4KB
- SHA256 b2f534718ec446338faafc84874b6adbece1b7fb25f8b31ebb807de894829a83
- MD5 18122f1a107da6a98f6182393a1df82e
- SHA1 cb6c0c13a8447efb7091fd82b2624c5eea007fe9
- SHA512 38d5d11d41230868e23bdf1ca0a9c38e58808a703be08cac0b371dc4b3009cd29829ff1158bcaa18b4bc4c8b073b1bdce908afd36a19766c290081490ef7901f
- SSDEEP 96:rQIcymQj4LOfzkssdiauVUhDL5b3XPizi+UHD0sP7DwAD9lHfDm8sxhOhB:cIt78diDVA93gi+Kb7EAT/K8
- TLSH T1AC815B0376FD2114B163FA99EFE9C1FA87E279D4466E915F10C5190B48E0CA0A2177F3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\language\Vietnamese.lang
- Size 3KB
- SHA256 205f9a2aa22900207ecdb5d65f80db4ba4648adacd1fb39c94113c859ce95f17
- MD5 fe0fc75f479615bf927fe16ab3b36745
- SHA1 987bcf17f111e9c556c2c7dc1fe08b3c015c2ce4
- SHA512 e69974daaf257991e3a08d06eedb3bfff69283ce2675ff601bbc3c667306563a358bc1a7bfe13f3fa1804e422bf7dece8879b485bcc0f46b1b13642eccdd36fe
- TLSH T18481E41362EF2118B1B3BA95EFE8C2798762B9D5997ED16F14C0450F49E0C409A17BF3
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\themes\Default\Background-300.png
- Size 317B
- SHA256 66ca57706e6dc57bc89f82ffe8f675f6be003cce667bdb0dc6cfe34a49dbc120
- MD5 f561a163c8b8611aace3e34724a3fa5e
- SHA1 0dbc7c62eb9d49124bb88c3f5c5a7c7b29ad5c13
- SHA512 07e61f68f424ba2ec033270a1ed0c03bbb34ddce3f84425ed656495f58c054212970524e5e2d501e7050979d24ca3f006580786e280e08cf8ff949b1df287bb6
- TLSH T13EE012F2C0914C3CD2160433805D4105CA34052016919A8704A3653F58F2747C85921A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\themes\Default\Button-100.png
- Size 1KB
- SHA256 d34134c2f432f00306082c4d3a7b56fb7966d96640fec5b7aefc4093de5c650a
- MD5 bf007817ee42128ba89969e6385817ba
- SHA1 dc19cffbf764bf16c66c83d0b2f47595e66bea8f
- SHA512 f8ac3ed3b76764b3665af8cf497dedd7d299f7df2690edf8aadb569fa64da06397a585cc5542c8d58f1b657e13e8efa0a1b1dd4d7de8d75b32c4a7997abf3ef7
- TLSH T13C31E7C0951A95BE18974E17622709AD80B60AEE7CE064A59A8EC304D40EB4BE2C757A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\themes\Default\Comment-100.png
- Size 245B
- SHA256 1e7908295e89cadba211f69bad196d297a73c3d72b82b54b093a892c1e7e8c98
- MD5 4c94bd3a92af505a21919627217577cf
- SHA1 db54891cb2c61349a4bf5890830cd88d52954164
- SHA512 e6d0e051e6fa67d82461a3a027f6225b23ce349d1a905a3477ad3588d8aa66aee6638270552bce2f049eb6640869dfa6a78b265cc2e5aba79606e0aeb80f8373
- TLSH T1E0D0A7D3945084FAAB8AC726F1374ADC7A2186990193B03554335F9C0A97C64FF12302
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\themes\Default\Meter-100.png
- Size 883B
- SHA256 d73ef7f87bf706c2dbfc9a72fa993fd5186d9f2f0d860840cbfa7b44a6331e50
- MD5 559e79618286447b5618f46495919dc6
- SHA1 48eed6e17ef63fe54fbab644be5a7e43d48dea2a
- SHA512 c85c1a8f406b2bba364c09f6a3e487511b32273c5638b9daab5cb4b9c1cbb448b139439bd858a667142b4211f85db230cf96ec0e2eaa4c0fa556994619653bfa
- TLSH T1341175EB15510EEBDA764C575ED27311AA031B6C3EE2042B3F021911453F9244510D1A
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\CdmResource\themes\Default\theme.ini
- Size 359B
- SHA256 89d5db85fd9d65fa71ca43924bef20f433845e9e160420c4ab50a40194288a9f
- MD5 6744133939331b7a0866b6f880247b5b
- SHA1 1fad49de9d8a629c22c3a6140f0f34e1c5d41df5
- SHA512 3be39fc171614d52b851217423fefb67bcb204d6ee05449229e4026c7e62d7d57453c871094bc7ed49190e16c18eee36ec1ed9b6b8ccb76d563245cbe1ee4553
- TLSH T190E0860E41434563DEF92BA93450708513FBF24B34FAD5BB14DD7644D595D4018C3075
- MD5 SHA1 SHA512 TLSH
- Path C:\Program Files\CrystalDiskMark9\DiskMark64.exe
- Size 846KB
- SHA256 58ff40838f2d23f619ca2220dd0806774de1ba6da795eb28c5bc476bb564d824
- MD5 a5081d2bdfb98650e0798867695c5cd7
- SHA1 b827c2195b97c1954e0f7f8fd76de98fac9ffa50
- SHA512 4fd2890494dc1b52760374ebb4898afa959978794d056b99a25273b25b17392f1a20fa0cd30c3836475ba886e2afe597093693195f5007e7a8c2edefd82fe6e4
- SSDEEP 24576:TNvgRojKXJaZ87NMSyyJkX4n7sHitY1pr:TNvgR5XWSkIn7miG1
- TLSH T1F0057C06A7F801E8E477D03D8663462BF6717C421734CBDF4260D66A2F3B6919D3AB62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Program Files\CrystalDiskMark9\DiskMark64.ini
- Size 65B
- SHA256 20495311dd3fe12dd93872d5cb566655dbd7cda18fc50b839110f31c257974bc
- MD5 21f1095279e170b820c35afb428e3716
- SHA1 c0b8061d12fc03131ccd163b3a8efda525f56275
- SHA512 77dc2eb089411dca3031497ae486a871216e9e04f40aaa108409ff3e84452020f6c0d40ed35625a04c8adfc8b163dac1a70eeb65a851c7018c10919176b0bc72
- TLSH T1CFA022020030C00288808280F0B0CEB083C883E828820C000E8208CBACA320320C0802
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 2d812d63b94e52acac0ff3d23d196b3c185f5ddb1e01deeb75aec3c1bafd468e
- MD5 6152b0c1f75d5d080bcd3802185a9245
- SHA1 4f64d728e6f0df535705d56e0e7a69fc1e71917c
- SHA512 28c794bb2d2495521df039966b1a9e94a2843c311371b43db2ea79c54226693c48e9527fea13c5656d1ef3768cdbacfe060b82385bc27c6d4a2715b8b656c7da
- TLSH T1C3D0C00C73722C30C4C9CC300858730F2D19C8F28E42436254371A385DC20C045C71D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 e8b794ddae1c182cd5bdf3280502fc20e0d1bbb83fa98695dd9554e580b515db
- MD5 e2acf35f85cc51742b6dbfd089a22de7
- SHA1 d2f831a4d2d2a72bc82294e0db4496d425f3c241
- SHA512 dc7c313b6984de31fba866906b65c34a375452af96f5f8d900080a50233e15566612618b446d95b3283af79511b9492a004b9a8f220a70ac98cbe8ba536fdac4
- TLSH T1A8D0C00CB3322C30C0C9CC300859730F2D19C8F28E42036154371A386DC108045C71D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 280B
- SHA256 58677a577dcf11ba96e255ad6dc59ffde2fcfea96db6fe3102a0182a37ee927c
- MD5 07afe91f36cc3f11da4ab87b3252c00e
- SHA1 82e1c53661b93dee1d6b51d3518616559fc4ffda
- SHA512 7eb2f18c0ad2dc7f8effd52be924305a96d39d96c2c754195d72fd591402a34e557eb9f2b7f44de0cbadcce1477619db21431ab8c69dedb07a2d9346d5339fa1
- TLSH T106D09730B3A6B811C00540300820522A2E1AC8D16C970191E028422CEEA808487C21D3
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
- Size 6B
- SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
- MD5 377d072e137022223a370760763420bb
- SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
- SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
- Size 3KB
- SHA256 d829ce7e9bda26c48f1a0826aa95457102db23b115891367891b8a8990e5a78d
- MD5 2b1d9c2716a3122e2148b2d60eb2e610
- SHA1 c8f1ee6140983ed8757bed8b9a7028148612c9af
- SHA512 59f2815e73be95a2bc96a0b018fcc3b1deea1be282b47681921773ecb40fb195879b84772e9047a11654b3f04257fb858aedd16c058e245adfa2c1c15e42860b
- TLSH T19A61A28784A1802BE3F2727C42D626C2B27C9B5841C71F2732F1C43D8A17BAED345E60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58466a.TMP
- Size 3KB
- SHA256 1905425069a2329f96570dfc671e175d14bc3156e16d4a5b0340680a9595d5f1
- MD5 f14c61b98aef49b28296faad46b10c8b
- SHA1 1a01e014e4cd461e22c093ae2b9e0e6ae0470fbb
- SHA512 792be16d7bdaf98601fe015f572ce64b68ece66b28abb3a47793e1d61c14299637537208e65f51b829b0fad1beffa5cc189b807eebc3a5590f053c4389a9b8c3
- TLSH T1AB61A28798A1802BE3F272BC42D626C6B27C9B5841C71F2731F1C43D8A17BAED355E60
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
- Size 2B
- SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
- MD5 99914b932bd37a50b983c5e7c90ae93b
- SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
- SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
- Size 70KB
- SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
- MD5 efe54a870e0f5ff28d7e00036b861065
- SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
- SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
- SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
- TLSH T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
- Size 1KB
- SHA256 ad968531d488d1421433a568ba60fc0ea51077bfe192cb09eaf437a4b705ba32
- MD5 a8587271613b8181c717ba914cbab7b7
- SHA1 be325d5889d3893c9aa1b7bb0e62ecda1cdc7135
- SHA512 bc17b1df58d566a7cb72f2b83a0d2243aaa94360e2f860fba9bd04e7f3c3ad132552254a3f88336ee9bb6df1adfa5caf614b55cb7e196d3bfcc0d06bd0dc5ba9
- TLSH T13C2179F7C3E4896E8A1146F4BB14AE1BCF2D0915431C3C1A85E4AF2B97E3471E04095F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
- Size 2B
- SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
- MD5 d751713988987e9331980363e24189ce
- SHA1 97d170e1550eee4afc0af065b78cda302a97674c
- SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 13KB
- SHA256 7e3ae4ff037162cf4984e3f431cae3c4922408d8c85642e5b903bb5e613ad976
- MD5 f2c8586e82794c64f494b4e90d2e88c0
- SHA1 b77cbebaeb521832d9e4bb94c88dee959a4f9a54
- SHA512 f16a7d84e7febb36ca283d6dba2005646611066cafaf73b9f55ff8a722b9fea406c02b2f0771e6cf024ef1c6d7683f21e91f7d4adea0f69f3f6f56d23ce73194
- SSDEEP 192:sxZMKR/PyM//K1Ml84jm/flsIWpVNqLkDlEdp7lHHW6+WNM7SNI/YgFKAIgEJ:sxZRj9m/flsIWvoLmOVHb2/bI
- TLSH T19852E7066A38597BCCDBD20DFA557F53D6F91963A2900E449AFC8A1C00E6AED2217C1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
- Size 30KB
- SHA256 8fd6546dbdeed804eaaebbd1addf2996b9f356a63dd713827bcb796373ef50cc
- MD5 ff6eca265e659344a078959cfcf82aa3
- SHA1 73c7f6602cf56792397ba75527169042a86367e7
- SHA512 8ebc6d2840ebcf07f8a1f17581c54682dbcc91534c818e6ef47381f51f1957d69013a832ba1bf0aa578d637fa15e44fbba109b4de78ba1bc645aa9c4f95a7aa0
- SSDEEP 768:Xosal4VWvNT6D8F1+UoAYDCx9Tuqh0VfUC9xbog/OVNoLl6QF53rofOK4A:Xosal4VWvNT6Du1jaGoLIs5kfL4A
- TLSH T112E21B3F680CCB7E4F840E5CDC2A6F9B6DD801CBA6944D9447EA884C03CA6EB551B5DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 82b4c864c57a17cea3f8c280c1827e003c682739fb243be035c4706fc2b77afa
- MD5 8368ae527643005b112ac3225ae1ee03
- SHA1 44e32b3add655b2802e66181e06ffcf665cb17f0
- SHA512 4f2fd9e10819a6f49d4ac80249ef07b1bd0fb8a0d6620f6d8a2d96bd974f02a97f68069134ec307f6022150376beb1eac0d8f4bf9217fb0e3ce0a58f7d60358f
- SSDEEP 192:gONW6QaQmiUyQLwZ/ZOQx5RUERxMwH5U6:gONW6vJwZ/ZOcLoQ5U6
- TLSH T13402D835787C2C7B8AF2AE49B4473717AFE4106BE9952F84DAD81F1C00D769C1346836
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 17KB
- SHA256 d094b4304fa7d81a736ec09cebce4b6880c60f7593ff97c8092a7c979f441952
- MD5 934b95935ddbe4d490e3c9b19ac366be
- SHA1 c6b92a5f72977bccb2eae03d78ce20e409697123
- SHA512 48bf50303f535e74eb1c129e1b043b848dca5306913a3add012a35407b7459c9365927ad4ddb89e87036868dc779abfbf64befaf2bbca6f8fe20fea5bf278b6e
- SSDEEP 384:zJsNfldywUmE/ZOcMJSY9eA8tik1oYd9FLnyKywng:FioRROFJSYf82Yd9ZnyKtg
- TLSH T1698219B0E8A81DE740E1D9C9AA4BF5132EB8013BC5855E5CE6F57E3D319F8F95312822
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
- Size 8KB
- SHA256 124f75e95032359494fb2cad449d8620f592c8534249b1890f911ec08d1a0592
- MD5 4f30ebf50ce9b57c3ae65ed6f8936435
- SHA1 4d864393f390209b4c72b911e3936a4c4cefd486
- SHA512 b0cd1e4eb7c0e7efc47d7cace102f648e0481a71321038ae8998618468a6fba43d64d92d82ada1c1fb5ec36831b4e0507648c3338486ae6d79a63cdf5ff80da3
- SSDEEP 192:AONq6QZQmiUy9L5Z/ZOQx5RUDI8Rtn/q81U6:AONq66Q5Z/ZOcM9XlU6
- TLSH T1AB120875B86C9C371DE6B504F8873613AEA810BBDD866F84E6D85F0C00D7B9C274E826
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\c4aebfa6-d978-4f88-be05-8567bf338355.tmp
- Size 13B
- SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
- MD5 2aa9e263ee3796d9ce358460a2451b4c
- SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
- SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\is-B9HQG.tmp\CrystalDiskMark9_0_2.tmp
- Size 3.1MB
- SHA256 ede1b76aecf70a9eb1c2c8cc353724fee963edb21e728d8d8921ce55582b25ec
- MD5 8c6940279cc543ce2c9df0d0ca91a692
- SHA1 3fd7ee993a371ab07959ec8d1699de1a37b08d8b
- SHA512 46b4a2da9b0cb1463a7c6eff92dbe128c3ef4aaab2880c2937a893a54fc9c76c259942f7377d02e2a4a0e2826fa76ea97e6a1a80c6545ee870c7b28d4270ead1
- SSDEEP 49152:WWGtLBcXqFpBR6SVb8kq4pgquLMMji4NYxtJpkxhGjIHTbP333bVb:atLutqgwh4NYxtJpkxhGw333N
- TLSH T166E54A27F28C713ED06B3A364A3386909837F66179168C2797FC794C8F365942A3E647
- MD5 SHA1 SHA512 SSDEEP TLSH