home

hdtunepro_560_trial.exe

HD Tune Pro

EFD Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from xiazai.zol.com.cn and multiple other hosts.
Publisher:
EFD Software

Product:
HD Tune Pro

Description:
HD Tune Pro Setup

MD5:
6b0aa7731f1b02850e8ef1739128ac3f

SHA-1:
21e7a19c0de0b8827f4a720265aebd84d8d7ef18

SHA-256:
b37ed1c6d8071490e543b0e4dd0b29a4f1c87f7f59e9d3d4a85c4d84468360fb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 9:44:28 PM UTC  (today)

File size:
2.1 MB (2,239,373 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hdtunepro_560_trial.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:5aT+xHtWED3TAkiRvu9aeQpHjdAwic3oUyrEnn4lvMFj30f5yRF1bGiTO9g4FY:QT+xHtOkUvSmBPyr84lvMh0onC8

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file hdtunepro_560_trial.exe has been seen being distributed by the following 15 URLs.

http://xiazai.zol.com.cn/down.php?nn=48eaa000802cbab0c&softid=359922&subcateid=20&site=10&server=10&rand=526634&vipstr=48eaa000802cbab0c

http://www.bytesendclear.com/JOXFJw03CZq_7a8ZXV9OO7OTqp0j4fVLXk eUWF44WHEsjlurycL jbjwWM4D4iYyQyIt9aCWPk7YFysUOqp9P S_Atxc gmEQdUpNTpjIkejjIXkRSy37ZUOkffwRHZpBhwmM7 4ttQHh5VC4upmCVv5OPTM8Selm4DbpiETHfPDD1I4gyN8ar5P2xksLfeYEYoAet4CUM2F0OJaSnAVaQD9S6sIMknBIC0cJ9JQQVdNcC8R6ERLMiMmeJxYC1D0Nxaa37dyhKrUSMMw5sxVkpB6x KbrTqshJYPWAlbNdJePA2Mz3GHxU7QGXXfj4Kj_zsmEMxpDO0 lEQyyZxjj7ltj2ZcRUnxqBwseAAZc0Zv2q5hzF uYJH3C6Jy9HeO2442moHCXBQjXOZkoBRZAfA_9y1N8GXjXx0aKxkR3epWkEZ6luBZVfTyqZm2R6kEm8frAqV7Rv9KGbyBA3I2z7UKFJ8fHVj9A80iqorLfrZ8r2XR8BCCel7B77pshLkFHImdNp9yANOc13QvUJKNbe202KWB8KaPgCoJMH9sYF1BJRE2lScOcIb ccDSiWJv3C8SfF89EGgZmlzZhf8kSMVbKo9ijZtovVvRVqNP1ZwF_iuOqI=-G2IAAGTYtrmEse34RJsFDjlw K4JBKiBBRtj5yoS5BtTFAv3BOuyEz6bgS9q_8A6Qntg4lh2Q KC7L_gvyHQETPTwtHAyOuuWVT7AjU_r1ms 4JWLhCvAA==

http://hd-tune-pro.software.informer.com/.../

http://www.ranchsendgift.com/dSF7VNFVS7WL7cDz Nr11YOHUtFfbmmomJ5rYk2QjT01sSIc_Rn12zGd0m1fPpuiZIY2TfkfpbqPP1n7cZnF326SNjCLxAXZkjy4qg0EEcu_xkiDogk0mDqcnw0v18zrgbg1 ny9lLs92ICGWPmYXYwiRphNIkq6xk_umsu26 JlSlj2gTNMBajJ1h_1HrcutaFCaeH16b4qlT4yG5epvJxMrT7kjA==-GzIAAMTOFhsKrSpukzDz24NDDtjfsoQCDYONsXN8GuQ3Jv5k3CvYSDAMb7ZdTXy1Ej4A

http://kuwaiti.co/files/7/.../hdtunepro_560_trial.exe

temp:hdtunepro560.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://kuwaiti.co/files/0/.../hdtunepro_560_trial.exe

temp:hdtunepro_560_trial.exe

http://shareit1.element5.com/download.html?productid=300228723&affiliateid=200091810&ftp=http://hdtune.com/.../hdtunepro_560_trial.exe&sessionid=2850896649&random=7143203f07c10b16d1fc8f5627b70f2a

http://kuwaiti.co/files/4/.../hdtunepro_560_trial.exe

http://esd.element5.com/affiliate.html?affiliateid=70900&publisherid=200049408&target=http://www.hdtune.com/.../hdtunepro_560_trial.exe

http://hdtune.com/.../hdtunepro_560_trial.exe

http://www.programosy.pl/.../pobierz,hd-tune-pro,2.html

http://www.hdtune.com/.../hdtunepro_560_trial.exe

Scan hdtunepro_560_trial.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.