home

hdinspector.exe

Altrix Software Ltd

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HDInspector.exe’.
Publisher:
Altrixsoft  (signed by Altrix Software Ltd)

Description:
Hard Drive Inspector Professional

Version:
2, 80, 464, 0

MD5:
68d4d2f6444ec92ff5de98c79c15d6c0

SHA-1:
6669543d96747a3245fb02833023b5fddf559927

SHA-256:
a1be78d9975af3db4c3ce32fc7b361bb2952cf0fad5d99b995c7ba977e12088a

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 10:50:58 PM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
(Suspicious) - DNAScan
4.16.14.00

File size:
983.8 KB (1,007,368 bytes)

Product version:
2, 80, 464, 0

Copyright:
Altrixsoft. Copyright (C) 2002-2008. All rights reserved.

Original file name:
HDDStateInspector.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\hard drive inspector\hdinspector.exe

Digital Signature
Signed by:
Altrix Software Ltd

Authority:
VeriSign, Inc.

Valid from:
4/23/2007 9:00:00 PM

Valid to:
4/23/2008 8:59:59 PM

Subject:
CN=Altrix Software Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Altrix Software Ltd, L=Irkutsk, S=Irkutskaya oblast, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
39CA7A0F27245073095B2B721EC63C9D

File PE Metadata
Compilation timestamp:
2/27/2008 12:51:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
24576:D6GDtbWmAiG9j9oVReXMEUVIqY8VQF8PNYH5QiFGWfT:P5lAiGEqXMEsl5uINgFGWfT

Entry address:
0x1000

Entry point:
68, 01, 80, 63, 00, E8, 01, 00, 00, 00, C3, C3, 44, 3C, 2E, BB, AD, DC, BE, C4, 21, A2, 0A, F8, 4F, 63, 4B, 5C, A8, 7F, E6, C2, 98, FE, 72, 62, 50, F9, EC, 19, 94, 09, EB, 09, 4E, 69, 45, 25, D0, 00, 45, DA, A5, D2, C5, 45, 61, 29, 6F, DC, 6A, 1C, 97, 29, 67, 83, 25, 47, 6B, 64, 5E, C8, 8B, F4, 4C, D5, 3D, 3C, 54, D1, DB, 1D, 5B, 5E, E6, 89, FD, ED, 7F, 4E, 9B, 80, 91, B8, A8, 12, A6, C1, D6, D4, C9, 4B, 24, FA, B0, 5D, 2F, 12, 3C, 9F, AF, 6A, 58, B8, 1E, 1C, 4F, 98, AE, A3, 69, D3, 8F, 3A, 31, A7, 57, F2...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
1.7 MB (1,769,472 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HDInspector.exe

Command:
C:\Program Files\hard drive inspector\hdinspector.exe


Scan hdinspector.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.