home

hdd-scan-3-3-32-bits.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.ranchsendgift.com and multiple other hosts.
MD5:
2adb6a6cebdb00a5c973cce7450fd7b2

SHA-1:
f2f3e971c3a15761f4de5916c55e4cb3323efb0c

SHA-256:
199b83a874342c2211134c17fe7db647d25d1adf2c7d59e888b703cd0a0c8e74

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/7/2024 8:37:04 PM UTC  (today)

File size:
3.6 MB (3,822,364 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\hdd-scan-3-3-32-bits.exe

File PE Metadata
Compilation timestamp:
4/20/2006 6:41:20 PM

OS version:
11897.21077

OS bitness:
Win16

Linker version:
99.108

CTPH (ssdeep):
98304:sC920BDy7OPQKJX+V++DnJ5lpndMpwYt2lNb/ki5:sC9/94++TJjpndKdWNb/f

Entry address:
0x74617265

Entry point:
50, 4B, 03, 04, 0A, 00, 00, 00, 00, 00, F7, 55, 35, 3D, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0C, 00, 00, 00, 48, 44, 44, 53, 63, 61, 6E, 2D, 33, 2E, 33, 2F, 50, 4B, 03, 04, 0A, 00, 02, 00, 00, 00, 42, 4B, 31, 3D, 86, 0A, 5F, EF, 3E, 00, 00, 00, 3E, 00, 00, 00, 3B, 00, 00, 00, 48, 44, 44, 53, 63, 61, 6E, 2D, 33, 2E, 33, 2F, 41, 72, 74, 69, 63, 6C, 65, 73, 20, 6F, 6E, 20, 48, 44, 44, 20, 4F, 70, 65, 72, 61, 74, 69, 6F, 6E, 20, 61, 6E, 64, 20, 44, 61, 74, 61, 20, 52, 65, 63, 6F, 76, 65, 72, 79, 2E...
 
[+]

Code size:
1.7 GB (1,864,397,669 bytes)

The file hdd-scan-3-3-32-bits.exe has been seen being distributed by the following 3 URLs.

http://www.ranchsendgift.com/cf7_HqL8AlKE0ODCqRhc6qETEIxWliKBlJX10gcC6u2bjr3v9zVQ9ZNs4N0pZtU0iaqXkj9mumInqPOfaI5BNQsJFc0_RPNi0WJ_00TtuBJJ_bNcZEhLHIb7S7gndHzntpYnvQ650u754GRezrcQLHi4w7j5WNZehxs1caGslnb3rWBDR1zVDl5VcnIxDBFc7Uh4Fj4LsJKGmfFKXMDaT66DCOhF4w==-GyoAAOQbmwvDuIZvLDE4Up4uxJBZFJLYBnLjVuaFT4rokopY AAj4_cC

https://dl.dropboxusercontent.com/content_link/.../file?dl=1

http://hddscan.com/.../HDDScan-3.3.zip

Scan hdd-scan-3-3-32-bits.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.