Analysis

  • user interaction
    yes
  • max time kernel
    22s
  • max time network
    28s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    14/10/2026, 13:53

General

  • Target
    CrystalDiskInfo9_9_3Ads.exe
  • Size 15.2MB
  • Sample261014-q66lcssy9p
  • SHA256 aa768e5b6e763394f860b78afe2448cbb1b5aef583eb912a25b62db97d4e1c69
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 2 IoCs
  • Direct Volume Access: Opens a physical disk for reading 1 TTPs 1 IoCs

    Opens a raw handle to a physical disk, which bypasses file system access controls and is used for disk inspection, anti-VM checks and privilege checks.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Script User-Agent 1 IoCs

    Uses user-agent string associated with script host/environment.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo9_9_3Ads.exe
    "C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo9_9_3Ads.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:3540
    • C:\Users\Admin\AppData\Local\Temp\is-CLKUL.tmp\CrystalDiskInfo9_9_3Ads.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-CLKUL.tmp\CrystalDiskInfo9_9_3Ads.tmp" /SL5="$400A4,14834665,857600,C:\Users\Admin\AppData\Local\Temp\CrystalDiskInfo9_9_3Ads.exe"
      2⤵
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      PID:4896
  • C:\Program Files\CrystalDiskInfo\DiskInfo64.exe
    "C:\Program Files\CrystalDiskInfo\DiskInfo64.exe"
    1⤵
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    • Executes dropped EXE
    • Direct Volume Access: Opens a physical disk for reading
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of SetWindowsHookEx
    PID:4148

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Graph.html

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\dialog\Graph.html
        • Size 8KB
        • SHA256 93abe1dedcec0cc9cee33562d2e9b4990e67186a171e9eb7ad0354818c071f06
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Abkhazian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Abkhazian.lang
        • Size 93KB
        • SHA256 aa6e1ae9d8052473f428af99ce366478a2ba5224c1d2a3460d068896c7312221
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Arabic.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Arabic.lang
        • Size 82KB
        • SHA256 67d6008bf63592266255b1a657a63888a56a5a3384c5666f455d313a69d21629
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Armenian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Armenian.lang
        • Size 85KB
        • SHA256 662f2a5e885f1d6234bd1a3b1744ddb300a3fda5012f86cb48b718d5b39f8d6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Azeri.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Azeri.lang
        • Size 81KB
        • SHA256 4242ff31eac48d363d4b112ef6c6f45eceb100118cae143bacb1b1c6f8c596f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Bulgarian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Bulgarian.lang
        • Size 85KB
        • SHA256 aa05df24f63f1ade6ffa1be0953540b56c882c4d19bcef392b20665409173ec8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Catalan.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Catalan.lang
        • Size 100KB
        • SHA256 943f51555c6a6a0b3f5c673a246af002e2e5965dc5aa2422791ed1750b752e7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Croatian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Croatian.lang
        • Size 7KB
        • SHA256 03424c65accb08097790cf5ad205f695a0c080006506549f28cc6de716e8eb16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Czech.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Czech.lang
        • Size 87KB
        • SHA256 8fc9cb9b95aad2595f46183bb90be3b31d482115872a327e71c163507ec482ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Danish.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Danish.lang
        • Size 84KB
        • SHA256 fc07a0141a93d89ff1889a4d0e21f4adc8113d6ad7dc63759303176e93babcb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Dutch.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Dutch.lang
        • Size 83KB
        • SHA256 6da5f989385b8d25659651edbb5522027c80afa93de5418579910d633b9afda8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        English.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\English.lang
        • Size 85KB
        • SHA256 e653fa4f0a2f96ab7da8334aaafbfc5e1d9f8138ed42b9f6fbade88cbeb7ff3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Filipino.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Filipino.lang
        • Size 83KB
        • SHA256 2b9ad421a1971059bf0cbf19e95e1383ee4a5cefe15d979be43364bad5193f07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Finnish.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Finnish.lang
        • Size 87KB
        • SHA256 ab9445fd6b9f01f4db066a9ec7a1ad733232948dd979cd5de1d3b717f55cfaad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        French.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\French.lang
        • Size 112KB
        • SHA256 35aaffbf8e68fd0b0daee949240bb1f103f079c8b1747394a0e195cccda4d8fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Galician.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Galician.lang
        • Size 96KB
        • SHA256 621de9fd5943b1328a2d8a339f6898c514fd27246c88ba5fc3e3f73c9ddb7a9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        German.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\German.lang
        • Size 84KB
        • SHA256 844b101244f157871e418bbd1b178c7063ce7e556d86081c2d9ef9cea83dc32a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Greek.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Greek.lang
        • Size 83KB
        • SHA256 568a67a45d93e6cd8fe5c1bbcd835281845723b15929af034e3154028c63cdb8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Hebrew.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Hebrew.lang
        • Size 82KB
        • SHA256 0ff445d4db5004fa5034078e2750d69944e998cdb3c6a7a7ddd3591312d16b29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Hungarian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Hungarian.lang
        • Size 88KB
        • SHA256 4fce68b9c789b58aa50ee3050f0a76eab69ce9c91abacfcccba21095e28165a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Italian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Italian.lang
        • Size 88KB
        • SHA256 f4e539500f274e361d38b02d1748f96e6f5d99e28946a56e33de9b7bd2a61329
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Japanese.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Japanese.lang
        • Size 53KB
        • SHA256 d72143948b10ccefe846662c38d57322ce786d490c4420cfb751a004c0f58b0c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Korean.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Korean.lang
        • Size 55KB
        • SHA256 9f342e70a57f4066ddd607b58d930558f2c472e5f73e2941528fbe17cdd42c99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Lithuanian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Lithuanian.lang
        • Size 82KB
        • SHA256 fa71c81cd5ca45edfbcb4b00204d249fb490ff568bb9b17a59b6de32f33e79a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Norwegian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Norwegian.lang
        • Size 81KB
        • SHA256 3d3319cf5f185cfeeb3d4257dc8db2e689bf3fce32de5e3f1b95a46e3680a4ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Persian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Persian.lang
        • Size 83KB
        • SHA256 240318f6eed9cfedef39cfe19683aacb7efbf2adfaee8f087d5d2e63fdff515f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Polish.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Polish.lang
        • Size 88KB
        • SHA256 9c9e9dd6cd815a28125d1cbc8d2946c124a5ee24964b1e4f775807575a7ba427
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Portuguese.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Portuguese.lang
        • Size 81KB
        • SHA256 73453c6efc9340a5412a3c60fe6e0b27cca7107ed18d85066023706115cdf475
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PortuguesePT.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\PortuguesePT.lang
        • Size 85KB
        • SHA256 e8ccbd7be3a94582b299e6756e467f5169a708b0d9e1730b5d47449afe7b82a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Romanian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Romanian.lang
        • Size 83KB
        • SHA256 e056fd16f7b0fa76283f185d1c60f75497c5b6f2b9351d887266a34ec2a431ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Russian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Russian.lang
        • Size 87KB
        • SHA256 5a6ce4caafeb4bf6ac2fa587197a5e0eecc233c3995112a779e5b1aba1a624e0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Serbian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Serbian.lang
        • Size 81KB
        • SHA256 c9bec1a471c02275991a127d9439273518b7eb4c96f821b22e948ec3eb4d04d7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Simplified Chinese.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Simplified Chinese.lang
        • Size 49KB
        • SHA256 31f969d2e378b50b50263816cfce2792fc390d24c5b09b941e0e2ed7ca381666
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Slovak.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Slovak.lang
        • Size 99KB
        • SHA256 24a5985cada71412d6c49ff8e1c38381257526d843d322af047d83ce78cd7679
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Slovenian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Slovenian.lang
        • Size 96KB
        • SHA256 3411610911b4c9b55e11b73ed7201af29ae40df48e9c0873bd5144e052f3ea16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Spanish.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Spanish.lang
        • Size 109KB
        • SHA256 ec00f9f7873b962d75f1133b9901ba4b2b3edf78e6118143d67dd31b1ada76ac
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Swedish.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Swedish.lang
        • Size 81KB
        • SHA256 8073c5db13db0fe77b36da478b167075b778720aaae6fa11fbbbd2d8795e67ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Thai.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Thai.lang
        • Size 84KB
        • SHA256 43d354806adf7afe020779e3ef7d343dd1069acbe61f8f5432e3ca11bac590e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Traditional Chinese.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Traditional Chinese.lang
        • Size 49KB
        • SHA256 e1bb84ffb60ebdf95ecd293193006fbe089f82d75d0791c28d15a2e6972d4186
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Turkish.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Turkish.lang
        • Size 92KB
        • SHA256 d9796a7c1d71b58f9d7d5566b916c8519be00b05b0c24504b081239bd6812255
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Ukrainian.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Ukrainian.lang
        • Size 87KB
        • SHA256 3508434a62ba32948242735dc1485afd077657cb13859fa88090e53df180a6af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Vietnamese.lang

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\language\Vietnamese.lang
        • Size 88KB
        • SHA256 be3441655273fa3a7e198422623955635e89d0bf7df3027be7f2466d9ffc7b37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Background-300.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\Background-300.png
        • Size 29KB
        • SHA256 8717fdc9d5f8a4c200d38dac5178b31e1157d7a1f4f389c839dae74198d35e10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        diskGood-100.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\diskGood-100.png
        • Size 1KB
        • SHA256 41e8e14948103b7ba676fceaccef1f6b4fb08b70ea6f207f4d6fb6aef3f1e71f
        • MD5 SHA1 SHA512 TLSH

        diskStatusGood-100.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\diskStatusGood-100.png
        • Size 918B
        • SHA256 e290f8d7031f82007b91cf3082825540f0a6585065dd0ae8f467fefe4d81e4fc
        • MD5 SHA1 SHA512 TLSH

        is-8AVP8.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\is-8AVP8.tmp
        • Size 1KB
        • SHA256 86057c11b3e056f46e45ec63a802622ae5ce688634761af1f40c94f60d226797
        • MD5 SHA1 SHA512 TLSH

        is-9M283.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\is-9M283.tmp
        • Size 2KB
        • SHA256 362437387eb72b5f8817667cd4deadff2ea20be866f287261f6d75bae6c14c87
        • MD5 SHA1 SHA512 TLSH

        is-AIBJ7.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\is-AIBJ7.tmp
        • Size 1KB
        • SHA256 51b01e57d1b6a8d29ebcd3d23bf8142dcd51e8851604e0f15d2a65cb43e9a7ba
        • MD5 SHA1 SHA512 TLSH

        is-BPTH8.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\is-BPTH8.tmp
        • Size 1KB
        • SHA256 2f9f607262966e9d2f9542b1075982e40342e2bc12206f19fff22e570ff37214
        • MD5 SHA1 SHA512 TLSH

        is-KM4DG.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\is-KM4DG.tmp
        • Size 1KB
        • SHA256 cb9099db8ccb5d69db902858ebdd0657667fdc4c2ac1b8211b0d2503be18639a
        • MD5 SHA1 SHA512 TLSH

        is-NHHKM.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\is-NHHKM.tmp
        • Size 2KB
        • SHA256 d463f40cdabf71e4365358223898c3bda1a21df452be2e62d2b52a8642f2bce2
        • MD5 SHA1 SHA512 TLSH

        noDisk-100.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\noDisk-100.png
        • Size 137B
        • SHA256 0229291a30857f8ce7499e7f9a6ac30be452419bd5327b98468deba097ae76ee
        • MD5 SHA1 SHA512 TLSH

        preDisk-100.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\preDisk-100.png
        • Size 1KB
        • SHA256 4358ec9b50bf01820f6037299941916c196616fa08d8150b57607957cecda485
        • MD5 SHA1 SHA512 TLSH

        temperatureGood-100.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\temperatureGood-100.png
        • Size 2KB
        • SHA256 26d0fdec518f2a16d535306d81459746811882da15c691113134d82442f5d58a
        • MD5 SHA1 SHA512 TLSH

        temperatureUnknown-100.png

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\temperatureUnknown-100.png
        • Size 1KB
        • SHA256 3b5c53c752b6155cfc66917b2cd8dabdb43cce1f98d623dd39342655e60d076c
        • MD5 SHA1 SHA512 TLSH

        theme.ini

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Default\theme.ini
        • Size 263B
        • SHA256 b9f6949d00fe5da3508e363b970435bc8d4c34761dca6e84b651459ad9cabfb9
        • MD5 SHA1 SHA512 TLSH

        is-02S4F.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-02S4F.tmp
        • Size 157B
        • SHA256 f50ab814798072a4ad3786906dc012305d9d9bdbf80fe896319db32f19fc702b
        • MD5 SHA1 SHA512 TLSH

        is-1K96K.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-1K96K.tmp
        • Size 219B
        • SHA256 611705f5bc71d2154d3673016e82d4ee248814f6dd2ee804185cb3b2b04a5e90
        • MD5 SHA1 SHA512 TLSH

        is-64RRR.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-64RRR.tmp
        • Size 143B
        • SHA256 e166fc5e77a0c8b89ed5402efc694c64e06e7897d4e168ab77c897b479ae2406
        • MD5 SHA1 SHA512 TLSH

        is-74BLK.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-74BLK.tmp
        • Size 101B
        • SHA256 6fbd83dbb9b30e9f08accf375aa0268da311e31b3a5c48724af6e8a96ebe3cf8
        • MD5 SHA1 SHA512 TLSH

        is-7CFCH.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-7CFCH.tmp
        • Size 88B
        • SHA256 253cf7c5e9d1be1d6249dfe67af9c0c5c77da0c9b2aec9046ed8b5304d2feb3a
        • MD5 SHA1 SHA512 TLSH

        is-7GE48.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-7GE48.tmp
        • Size 95B
        • SHA256 267641282d9d70fb3b7264addcc66944cad09d34c16a0870c5d74b19eebd4878
        • MD5 SHA1 SHA512 TLSH

        is-8RAA2.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-8RAA2.tmp
        • Size 145B
        • SHA256 2c8d802269152ba3b0bcd115c876e1e33784f9e32cdd036fea8f99fa67ab13f6
        • MD5 SHA1 SHA512 TLSH

        is-8SNIS.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-8SNIS.tmp
        • Size 244B
        • SHA256 e49fd91197e7bf6fd660d480ebc762a0a14b113f852e9d370b8ef2b640041270
        • MD5 SHA1 SHA512 TLSH

        is-CCU37.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-CCU37.tmp
        • Size 238B
        • SHA256 099144432385302389f859b099428ba837863f075ee71320fc3de4b514b3af98
        • MD5 SHA1 SHA512 TLSH

        is-ECTUV.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-ECTUV.tmp
        • Size 87B
        • SHA256 6b0dc0c7ef22bd5dc4c7f14108b0e5468fad34e7e70f29b4727e54add23476f3
        • MD5 SHA1 SHA512 TLSH

        is-GELGB.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-GELGB.tmp
        • Size 138B
        • SHA256 7fcb92b58ec458c85314d3fdc040d27c08fa05805af340430b783e1ec14c226d
        • MD5 SHA1 SHA512 TLSH

        is-H5BM4.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-H5BM4.tmp
        • Size 97B
        • SHA256 277369d1c480b7c96a9a473ac48d466a24fbf022d774b3bedaf3b7a322e84016
        • MD5 SHA1 SHA512 TLSH

        is-IKRCM.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-IKRCM.tmp
        • Size 101B
        • SHA256 fdec5c41976d58976883ebb6dcc297ee89973b06b4ecdd055332e770cffb21f3
        • MD5 SHA1 SHA512 TLSH

        is-JA8AI.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-JA8AI.tmp
        • Size 89B
        • SHA256 8f88885ada89807cb4aa2ffd750ea3d011a2e1de1f703eeb49b87801390fc70e
        • MD5 SHA1 SHA512 TLSH

        is-JVDUS.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-JVDUS.tmp
        • Size 86B
        • SHA256 7bdae1b7267f677b9532ff8756476b6713e1847b49ba45d3cb0c431dd7a72317
        • MD5 SHA1 SHA512 TLSH

        is-LIPOP.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-LIPOP.tmp
        • Size 268B
        • SHA256 fc0d6d56caced619500d360484aec410342e726d52062ad7e998b54b92e91686
        • MD5 SHA1 SHA512 TLSH

        is-LJ2FA.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-LJ2FA.tmp
        • Size 184B
        • SHA256 09fb4a17a1a1639eefb91697aa07524a696f3b6bcb653e97585ff3cf004e7b47
        • MD5 SHA1 SHA512 TLSH

        is-N5924.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-N5924.tmp
        • Size 89B
        • SHA256 8b10130ef7c6db3eef5889760d09c468689025ffce5e1e9fa21dfc93cfab2b32
        • MD5 SHA1 SHA512 TLSH

        is-NGR5O.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-NGR5O.tmp
        • Size 204B
        • SHA256 f3f88e0afe596af5875e899099e88cc5b0342072012e2cad974baf0c3c0883e8
        • MD5 SHA1 SHA512 TLSH

        is-OB2BP.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-OB2BP.tmp
        • Size 93B
        • SHA256 0fc1b65dd5633281fd36aa1455c5816aa275c5f57b4f726883d93894958ee8bc
        • MD5 SHA1 SHA512 TLSH

        is-Q48BV.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-Q48BV.tmp
        • Size 99B
        • SHA256 149f9d849d806155ba10fdb9604bfe9194bbf86ae885fd7fe7249f80f771dd9d
        • MD5 SHA1 SHA512 TLSH

        is-R45V0.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-R45V0.tmp
        • Size 99B
        • SHA256 1a8f222facb51b202470e68d7cfc9b7d10b9002d28f88232c634d99375acd718
        • MD5 SHA1 SHA512 TLSH

        is-R8QSB.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-R8QSB.tmp
        • Size 128B
        • SHA256 8fddeabb5c54af0cd9a69c51c5044c2c1c564ba668b2e52ea3ec166e782796e0
        • MD5 SHA1 SHA512 TLSH

        is-SVGLM.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-SVGLM.tmp
        • Size 131B
        • SHA256 c3ce1402a2017457b65a6c5c2cca71a0be43884331a79b007a9a6c83aabf2173
        • MD5 SHA1 SHA512 TLSH

        is-TGCSG.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-TGCSG.tmp
        • Size 309B
        • SHA256 0b7711f6f4fd19599937ece10722d56dcd291fafff75cab9905ae9ddfd60f8cb
        • MD5 SHA1 SHA512 TLSH

        is-VI6U5.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\FlatSquare\is-VI6U5.tmp
        • Size 97B
        • SHA256 50a31b38a93070bb36d96422aa3579c341d87957c44037daf9d2514083113fd8
        • MD5 SHA1 SHA512 TLSH

        is-05P7V.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-05P7V.tmp
        • Size 784B
        • SHA256 9159ca95b93c555462ceb1b95d9f2cb4aff7a517f334256c8542036fe3439812
        • MD5 SHA1 SHA512 TLSH

        is-0EGNI.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-0EGNI.tmp
        • Size 1KB
        • SHA256 3ff066b7b8d75fa423837c5880f45727b86e1f2366852c399d672c3dcf6a80ae
        • MD5 SHA1 SHA512 TLSH

        is-2T8JS.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-2T8JS.tmp
        • Size 1013B
        • SHA256 5b5f4879a8e5f0e6b254b202a90c73bad953759abc18a2ddc3a897fd32cb6d81
        • MD5 SHA1 SHA512 TLSH

        is-3CPOC.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-3CPOC.tmp
        • Size 871B
        • SHA256 7633e60f68a8946facd514d7644c1995fd0867f9c78057e883520abec2aa821c
        • MD5 SHA1 SHA512 TLSH

        is-3OAJN.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-3OAJN.tmp
        • Size 1KB
        • SHA256 16e367b75d0cb12efeb05cf23e696c06941e319509302bd99942b06d8daa4cb6
        • MD5 SHA1 SHA512 TLSH

        is-3PFII.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-3PFII.tmp
        • Size 1KB
        • SHA256 21eabc04c91f84da4c6d197d5137c3fcd63cd207acb8b0de6eaf41059869bcd3
        • MD5 SHA1 SHA512 TLSH

        is-6BE13.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-6BE13.tmp
        • Size 883B
        • SHA256 5ea8d4edd6fc883311661c9b98c48fd989948c9c85256cee6fedd74b9616e02a
        • MD5 SHA1 SHA512 TLSH

        is-8AIU5.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-8AIU5.tmp
        • Size 3KB
        • SHA256 c8c871bb460758b15ffcd111630500d161ce0eaae27a8f0386af12020acd8daa
        • MD5 SHA1 SHA512 TLSH

        is-8N247.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-8N247.tmp
        • Size 2KB
        • SHA256 1256dcfb9eb04b0168760bc31ddf723fcc66b38bbaf45df1c81976dcdfebde4e
        • MD5 SHA1 SHA512 TLSH

        is-8S9VD.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-8S9VD.tmp
        • Size 1KB
        • SHA256 41bbec86b0170d0bda08a8e8f6f405d0f744ef0090f5a5dd67d2a2a44bb70183
        • MD5 SHA1 SHA512 TLSH

        is-D3VUG.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-D3VUG.tmp
        • Size 1KB
        • SHA256 401e739a61db5bd873cb3de2388242bda7e6954b67a145c66784d0dae1514826
        • MD5 SHA1 SHA512 TLSH

        is-DBBAL.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-DBBAL.tmp
        • Size 4KB
        • SHA256 9f92ce0e79713b1cbac3e0aae4dc630c77a5ab2cbb73be99dabc58099eee4994
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-DE49D.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-DE49D.tmp
        • Size 1011B
        • SHA256 ee92e5ea8f4d28f94f226801baaf605affd475924f16acb3b0fec70f2b37d826
        • MD5 SHA1 SHA512 TLSH

        is-E0R37.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-E0R37.tmp
        • Size 923B
        • SHA256 0b0106761cac0e726c84c5883c989fae0e33c9ec90f3951e9a16e0e6128c183f
        • MD5 SHA1 SHA512 TLSH

        is-GCT99.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-GCT99.tmp
        • Size 806B
        • SHA256 3887d464f296c1b03ef5ddaf779af8a4f1790044d2f876a3ded7c3bd41ff4806
        • MD5 SHA1 SHA512 TLSH

        is-IT6SA.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-IT6SA.tmp
        • Size 1KB
        • SHA256 5d27a0ec94862479e7dd2c377ece9c724f903eca62652f58828b6e9a57d08ba9
        • MD5 SHA1 SHA512 TLSH

        is-K9ISH.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-K9ISH.tmp
        • Size 4KB
        • SHA256 38199ba518cdbc51117171699185da7fde67e8d095b6d28d139d213e02a8c9a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-KEP9S.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-KEP9S.tmp
        • Size 2KB
        • SHA256 0d6d0cebe4180decfd615f7ed63dd7723a9d57b2f21c5d75a14f5cfbc1f0f416
        • MD5 SHA1 SHA512 TLSH

        is-LS0I2.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-LS0I2.tmp
        • Size 5KB
        • SHA256 f4b7f01e4f7f2cce339fe8c43b5d37e481b8615e75134445e18e7eb1fb267674
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-LU5VJ.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-LU5VJ.tmp
        • Size 1KB
        • SHA256 d7ad392146e0be9b808bf4568cf9e10d8f6c20c2055aee1f26763118fd6d422a
        • MD5 SHA1 SHA512 TLSH

        is-N49V3.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-N49V3.tmp
        • Size 721B
        • SHA256 5ec1b8f09bc590ee7b93c88eba131579b5acd921db4efd44a1003e160f9c055b
        • MD5 SHA1 SHA512 TLSH

        is-NNE71.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-NNE71.tmp
        • Size 1KB
        • SHA256 5beb96de0abb31b7d94ba7fc19925fc12695a8285bfb263bbc3ea28698ef02cd
        • MD5 SHA1 SHA512 TLSH

        is-P15LI.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-P15LI.tmp
        • Size 1KB
        • SHA256 121c2c5373db23ceb224d50ab7f37b6e0fb8c492db9896475450118b84e54904
        • MD5 SHA1 SHA512 TLSH

        is-PML2A.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-PML2A.tmp
        • Size 1KB
        • SHA256 06d40e272909262e5e9f3f989798e20693b108a8794c07ed49a830e21f25bcf0
        • MD5 SHA1 SHA512 TLSH

        is-PQU5U.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-PQU5U.tmp
        • Size 7KB
        • SHA256 8e4d6b0ca069b614e2fb55ad981b8d5e4b0f9daa5350f7e42bb150fbdd397a77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-Q4GGD.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-Q4GGD.tmp
        • Size 1KB
        • SHA256 7c25b42be683a89df8e702b7dbef06e487fbd78401148aac55c8c908b931fac0
        • MD5 SHA1 SHA512 TLSH

        is-QPK7Q.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-QPK7Q.tmp
        • Size 1KB
        • SHA256 fd04450c95c5bfd47baf47f75a6f467bb8f2fe6663770f62bcda7b34304a3d78
        • MD5 SHA1 SHA512 TLSH

        is-RB019.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-RB019.tmp
        • Size 1KB
        • SHA256 c964d3efbe51d9c9ceb113d6eee196e1fd19938cadd733011c24b91d093f16de
        • MD5 SHA1 SHA512 TLSH

        is-S8FSE.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-S8FSE.tmp
        • Size 1KB
        • SHA256 41dc51a11ec26ac34dccff31a98f41f8c29d861b44e5f429e43acb73e1ef67bc
        • MD5 SHA1 SHA512 TLSH

        is-SANEH.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-SANEH.tmp
        • Size 868B
        • SHA256 529e0d6208135683b2b487d6a56cb918d34094fec6b16061f3573d5d8ccfac66
        • MD5 SHA1 SHA512 TLSH

        is-SL2RG.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-SL2RG.tmp
        • Size 1KB
        • SHA256 ab2bb80f5d60603ec2c6056a46370ba0d7f8c677c9266a932665f80434146ac1
        • MD5 SHA1 SHA512 TLSH

        is-SM36V.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-SM36V.tmp
        • Size 746B
        • SHA256 c40c99741219af484326eaa443167940cb6dde550a2732a1e9c5ce36a8d7865e
        • MD5 SHA1 SHA512 TLSH

        is-SM37N.tmp

        • Path C:\Program Files\CrystalDiskInfo\CdiResource\themes\Simplicity\is-SM37N.tmp
        • Size 897B
        • SHA256 8ab59a06eb74b8463ae0f4ef25ec278bc191512c7fca450e5140180f11387006
        • MD5 SHA1 SHA512 TLSH

        DiskInfo.ini

        • Path C:\Program Files\CrystalDiskInfo\DiskInfo.ini
        • Size 56B
        • SHA256 14d1c79e51df74708de3a6868d6fdd3dd30a33867051a7c60f0746ffc977003a
        • MD5 SHA1 SHA512 TLSH

        DiskInfo.ini

        • Path C:\Program Files\CrystalDiskInfo\DiskInfo.ini
        • Size 171B
        • SHA256 1eb78521e4f6f03a1fd5908a7ec5d02a724b978fab197d243a8c5d210b9f5189
        • MD5 SHA1 SHA512 TLSH

        DiskInfo.ini

        • Path C:\Program Files\CrystalDiskInfo\DiskInfo.ini
        • Size 468B
        • SHA256 b88e89628b062d7a49e6e919157e599de9d2123629607c436322e1d8f06d4729
        • MD5 SHA1 SHA512 TLSH

        DiskInfo.ini

        • Path C:\Program Files\CrystalDiskInfo\DiskInfo.ini
        • Size 486B
        • SHA256 7d8d7047ff70680fb577172cd14956f39871410434b6df18546e9a9abbcbf159
        • MD5 SHA1 SHA512 TLSH

        DiskInfo64.exe

        • Path C:\Program Files\CrystalDiskInfo\DiskInfo64.exe
        • Size 2.8MB
        • SHA256 68b4415df84c7173b686303030b184b87cc135c0ad46e246e2bae24e4f652e5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        is-AN3OQ.tmp

        • Path C:\Program Files\CrystalDiskInfo\License\is-AN3OQ.tmp
        • Size 1KB
        • SHA256 88fb1daede10dcddd0d51ef4f5c14c6cd603106005498a6515822461bf068562
        • MD5 SHA1 SHA512 TLSH

        is-BTSA8.tmp

        • Path C:\Program Files\CrystalDiskInfo\License\is-BTSA8.tmp
        • Size 1KB
        • SHA256 a303160488e9590307a4639f9d43d35721ba6dc386b062ad6f8bc08d2ed23a04
        • MD5 SHA1 SHA512 TLSH

        05.csv

        • Path C:\Program Files\CrystalDiskInfo\Smart\WDC WDS100T2B0A232138804165\05.csv
        • Size 25B
        • SHA256 4fceea1c064d340e59ef14ddd8afd90d3c9348eac124a480b44d72311bfb5467
        • MD5 SHA1 SHA512

        Smart.ini

        • Path C:\Program Files\CrystalDiskInfo\Smart\WDC WDS100T2B0A232138804165\Smart.ini
        • Size 557B
        • SHA256 90bea79b203b485959999633e412bf54d35aa2e53e9d66c5035294d368eb864f
        • MD5 SHA1 SHA512 TLSH

        CrystalDiskInfo9_9_3Ads.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\is-CLKUL.tmp\CrystalDiskInfo9_9_3Ads.tmp
        • Size 3.1MB
        • SHA256 1de3ff2d33593dc5240c57591a110d2195a293a70c1d0067f56f470f6f5a4399
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3540-1569-0x0000000000400000-0x00000000004DF000-memory.dmp

        memory/3540-1815-0x0000000000400000-0x00000000004DF000-memory.dmp

        memory/3540-1-0x0000000000400000-0x00000000004DF000-memory.dmp

        memory/4896-1573-0x0000000000400000-0x000000000071A000-memory.dmp

        memory/4896-1584-0x00000000028A0000-0x00000000028A1000-memory.dmp

        memory/4896-1814-0x0000000000400000-0x000000000071A000-memory.dmp

        memory/4896-6-0x00000000028A0000-0x00000000028A1000-memory.dmp