home

hdsp32.exe

Hammerfall DSP Settings

RME GmbH

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘HDSPTray1’.
Publisher:
RME  (signed by RME GmbH)

Product:
Hammerfall DSP Settings

Version:
4.0.4.0 built by: WinDDK

MD5:
52310e755ff24dac45544315ec064ece

SHA-1:
7168802695703e03d3a5608d2b06062725a61f4b

SHA-256:
8b7911288bac20a4d1db6138181dbaf74ed60e65fad70acb002f1f0ca0d146a1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 11:00:00 PM UTC  (a few moments ago)

File size:
649.9 KB (665,536 bytes)

Product version:
4.0.4.0

Copyright:
© RME 2014

Original file name:
hdsp32.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Windows\System32\hdsp32.exe

Digital Signature
Signed by:
RME GmbH

Authority:
GlobalSign nv-sa

Valid from:
1/20/2014 9:30:05 AM

Valid to:
1/20/2017 9:30:05 AM

Subject:
CN=RME GmbH, O=RME GmbH, L=Chemnitz, S=Sachsen, C=DE

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E74E67DF180B8C4C01CF11B3F4E2D4ED

File PE Metadata
Compilation timestamp:
10/8/2014 2:31:15 PM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
12288:tgzAmk4yaHr5CMi0DBAPVP7CdRuPHzPHIG6:Ocp4NNP

Entry address:
0x9209

Entry point:
6A, 70, 68, C8, 24, 00, 01, E8, 27, 02, 00, 00, 33, DB, 89, 5D, FC, 8D, 45, 80, 50, FF, 15, 60, 10, 00, 01, 83, CF, FF, 89, 7D, FC, 66, 81, 3D, 00, 00, 00, 01, 4D, 5A, 75, 28, A1, 3C, 00, 00, 01, 81, B8, 00, 00, 00, 01, 50, 45, 00, 00, 75, 17, 0F, B7, 88, 18, 00, 00, 01, 81, F9, 0B, 01, 00, 00, 74, 20, 81, F9, 0B, 02, 00, 00, 74, 05, 89, 5D, E4, EB, 2A, 83, B8, 84, 00, 00, 01, 0E, 76, F2, 33, C9, 39, 98, F8, 00, 00, 01, EB, 11, 83, B8, 74, 00, 00, 01, 0E, 76, DF, 33, C9, 39, 98, E8, 00, 00, 01, 0F, 95, C1...
 
[+]

Entropy:
4.6834

Developed / compiled with:
Microsoft Visual C++ v7.1

Code size:
36 KB (36,864 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
HDSPTray1

Command:
hdsp32.exe


Scan hdsp32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.