home

crystaldiskinfo6_2_1-en.exe

CrystalDiskInfo 6.2.1

Noriyuki MIYAZAKI

The application crystaldiskinfo6_2_1-en.exe, “CrystalDiskInfo Setup ” by Noriyuki MIYAZAKI has been detected as a potentially unwanted program by 3 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. Additionally, the file is typically installed by a number of programs including Toolwiz Time Freeze 2014 by ToolWiz and SSDlife Pro by BinarySense Inc.. The installer uses the OpenCandy monitzation platform which will donwload and install offers in the setup for potentially unwanted software including ad/search-supported toolbars.
Publisher:
Crystal Dew World   (signed by Noriyuki MIYAZAKI)

Product:
CrystalDiskInfo 6.2.1

Description:
CrystalDiskInfo Setup

Version:
6.2.1

MD5:
084af0ac91de952846d79a3e74abb0be

SHA-1:
3c7b7df8d98a0b85608f99a8f04d8d1515504b09

SHA-256:
3d2e762e6548f43423c7bb50653a8123b6629c1136a930e89c550adaf29316a1

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Packages the OpenCandy software bundler that offers to install additional software and may include web browser add-ons and toolbars which display advertising (based on publisher settings and geo context).

Analysis date:
12/25/2024 1:23:17 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
OpenCandy
2015.0.3364

ESET NOD32
Win32/OpenCandy
8.10347

Reason Heuristics
PUP.OpenCandy.Installer (L)
16.12.1.1

File size:
2.9 MB (2,996,728 bytes)

Product version:
6.2.1

Copyright:
Crystal Dew World

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\crystaldiskinfo6_2_1-en.exe

Digital Signature
Signed by:
Noriyuki MIYAZAKI

Authority:
GlobalSign nv-sa

Valid from:
2/5/2013 2:53:40 PM

Valid to:
2/6/2016 2:53:40 PM

Subject:
CN=Noriyuki MIYAZAKI, C=JP

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121D6683A851E981F3776DC28605DC830EF

File PE Metadata
Compilation timestamp:
10/13/2013 10:19:32 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:GQ22xa4MnIcZe7hf0amjsWoH2PQO4O+lsw60h0/vzCaKnl+u4XwDXtjgy:e2xa43cZeF0amjzoWIh7C/vzCLl+u4Xi

Entry address:
0x113BC

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 2C, 00, 41, 00, E8, E8, 51, FF, FF, 33, C0, 55, 68, 9E, 1A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 5A, 1A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, 5B, 41, 00, E8, 16, D8, FF, FF, E8, 65, D3, FF, FF, 80, 3D, DC, 2A, 41, 00, 00, 74, 0C, E8, 2B, D9, FF, FF, 33, C0, E8, 80, 32, FF, FF, 8D, 55, EC, 33, C0, E8, E2, A3, FF, FF, 8B, 55, EC, B8, 50, 86...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
63.5 KB (65,024 bytes)

The file crystaldiskinfo6_2_1-en.exe has been discovered within the following programs.

SSDlife Pro  by BinarySense Inc.
Publisher's description - “SSDlife is a small and intuitive SSD diagnostic tool that helps users obtain comprehensive information about their SSD drives and take timely action if any problems are detected.”
ssd-life.com
About 3% of users remove it
Toolwiz Time Freeze 2014  by ToolWiz
www.Toolwiz.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file crystaldiskinfo6_2_1-en.exe has been seen being distributed by the following 23 URLs.

https://www.dropbox.com/s/.../CrystalDiskInfo6_2_1-en.exe

http://download.heise.de/software/165b5a0e9f38889186e3ed6651c5ad15/543ec051/.../crystaldiskinfo6_2_1-en.exe

http://54.187.69.3/.../2788-CrystalDiskInfo6_2_1-en.exe

http://software-files-a.cnet.com/s/software/13/81/08/.../CrystalDiskInfo6_2_1-en.exe

http://lb.cdn.m6web.fr/d/c/a/f8c5143d8ca9fa473f37f0abc420d856/549671db/soft/.../crystaldiskinfo_6-2-1_fr_306038.exe

http://files1.majorgeeks.com/109673a937086b08c10d3e25d277b682/.../CrystalDiskInfo6_2_1-en.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://download.heise.de/software/daf805e5af315224153b1a9034382bc6/5481dcf9/.../crystaldiskinfo6_2_1-en.exe

http://ftp-stahuj.centrum.cz/dl/508742e784f7c7298137138f562b3f74/542ac3cb/stahuj/download/software/secured/c/crystaldiskinfo/621/.../CrystalDiskInfo6_2_1-en.exe

http://telechargement2.pcastuces.com/temp6bs2/.../CrystalDiskInfo6_2_1-en.exe

http://down.filepuma.com/files/file-and-disk-management/.../CrystalDiskInfo_v6.2.1.exe

http://www.filepuma.com/down/1410369398c6664/crystaldiskinfo_6.2.1/.../0/

http://www.filepuma.com/file/1410369398c6664/crystaldiskinfo_6.2.1/.../0/

http://www.computerbase.de/downloads/system/festplatten/crystaldiskinfo/.../?download

http://www.filepuma.com/file/1410765152c6664/crystaldiskinfo_6.2.1/.../0/

http://jaist.dl.sourceforge.jp/crystaldiskinfo/.../CrystalDiskInfo6_2_1-en.exe

http://sourceforge.jp/frs/redir.php?m=jaist&f=/crystaldiskinfo/.../CrystalDiskInfo6_2_1-en.exe

http://www.filepuma.com/file/1411206559c6664/crystaldiskinfo_6.2.1/.../0/

http://external.comss.ru/url.php?url=http://dl4.comss.ru/.../CrystalDiskInfo6_2_1-en.exe

http://dl.cdn.chip.de/downloads/.../CrystalDiskInfo6_2_1.exe

http://www.filepuma.com/file/1409926480c6664/crystaldiskinfo_6.2.1/.../0/

http://d110.cdn.m6web.fr/soft/.../crystaldiskinfo_6-2-1_fr_306038.exe

http://www.filepuma.com/file/1409586124c6664/crystaldiskinfo_6.2.1/.../0/

Remove crystaldiskinfo6_2_1-en.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.