home

hdtunepro_500_trial.exe

HD Tune Pro

EFD Software

The program is a setup application that uses the Inno Setup installer. This is installed with HD Tune Pro 5.00. The file has been seen being downloaded from s5990.chomikuj.pl and multiple other hosts.
Publisher:
EFD Software

Product:
HD Tune Pro

Description:
HD Tune Pro Setup

MD5:
041ffde06fa0dcd76ab5f507907e6242

SHA-1:
9f35bbcf627ad810389a206268e898f26471344b

SHA-256:
ec8266a837e7bf528a08efc96b181a3bdf54d80184ab3770e0eb8f1837595d86

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 5:13:26 PM UTC  (today)

File size:
1.5 MB (1,586,610 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hdtunepro_500_trial.exe

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:5na6PpYDkVbhwoTQmPWr1MCusUmiSCtibeV5vTzUc0rE/0Z3UEyysbWykelkWK/8:5aQbvT9aVezvTIbk9FbTO9g4FY

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9912

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file hdtunepro_500_trial.exe has been discovered within the following program.

HD Tune Pro 5.00  by EFD Software
HD Tune is a freeware hard disk utility for Microsoft Windows with many functions such as measure the drives performance, scan for errors, check the health status (S.M.A.R.T.) and securely erase all data.
www.hdtune.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file hdtunepro_500_trial.exe has been seen being distributed by the following 6 URLs.

http://s5990.chomikuj.pl/File.aspx?e=QmnwDlhFU6cHo3n6d-_uuCSLNbvBT_rGD0h241-pWAYRa7R4mtXkhDgdAbBRAUSdlOUHiUui9851cEplZKDdGUqCPquWRW4FFj-MvikShAlJFmQZa0JB3ak7fziYgt8vyArYGGffAMvgKyV_fZtHpOhW6QS3MwDwAycrR3fZsVY&pv=2

http://s5990.chomikuj.pl/File.aspx?e=QmnwDlhFU6cHo3n6d-_uuCSLNbvBT_rGD0h241-pWAYNdWxK9XX-DvISsMKbp_au-JCpDxGmttR11yW0PGlnpk_GZLCuYZcehNg39wpQe6MzXgxejJPa2xl9dweaLgU0yp1M42njN_PWmf1eCQtm4MPEmKPrg9GbsMh0XWLq0Yo&pv=2

http://dl.cdn.chip.eu/downloads/.../hdtunepro_500_trial_RO.exe

http://files.downloadnow.com/s/software/12/28/70/.../hdtunepro_500_trial.exe

http://www.hdtune.com/.../hdtunepro_500_trial.exe

http://hdtune.com/.../hdtunepro_500_trial.exe

Scan hdtunepro_500_trial.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.