

Storage details, which include a hard drive's manufacturer, form factor, brand, number of heads/cylinders/tracks/sectors, serial number, LBA size, power on count/time, features (such as S.M.A.R.T., AAM, NCQ), maximum transfer speed, capacity, RAID type, and S.M.A.R.Adversaries may execute their own malicious payloads by hijacking the binaries used by services.Information on optical drives, such as the media type (e.g., DVD writer), device name, capabilities (supports writing/removable media etc.), drive letter, port number, if media is currently loaded, and read/write capabilities (CD-R, DVD-ROM, DVD+RW, etc.).Information on peripherals with the device's name, kind (portable device, mouse, etc.), vendor, and the driver's location, date, and version number.Operating system information, such as the Windows version, installation date, serial number, computer type (laptop or desktop), security center and antivirus software information, group policy security settings, Windows Update's auto-update status, Internet Explorer/JRE/.NET Framework/PowerShell version number, currently running services and processes, active Task Scheduler tasks, user and machine environment variables, last boot time, current uptime, and a list of system folders.Brief audio details like the name of playback devices, the sound card, and recording devices, as well as the type of speaker configuration (e.g., stereo).Also shows video card information, such as the manufacturer, model, device ID, shaders clock speed, revision number, die size, release date, live temperature, bus interface, memory, GPU, driver version and clock speed, noise level, BIOS version, and memory clock speed Graphics information like the monitor name, resolution, width, height, frequency, and color depth.

Motherboard's manufacturer, model, chipset & southbridge vender/model/revision number, BIOS brand and date, open PCI slots, PCI bus width and data lanes, and live voltage information for the CPU core/DDR/+12V/+5V/+3.3V/ CMOS battery.Network settings like DNS servers, the adapter that's being used, the public and private IP address, live network speed, computer name, subnet mask, remote desktop settings, gateway server, Wi-Fi information, DHCP information, sharing and discovery settings, network shares, and a list of all the currently active TCP connections.

