home

hw64_450.exe

HWiNFO64

Martin Malik - REALiX

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dl.cdn.chip.de and multiple other hosts.
Publisher:
Martin Malík - REALiX   (signed by Martin Malik - REALiX)

Product:
HWiNFO64

Description:
HWiNFO64 Setup

MD5:
1da9d27e7ffe14316f9de8bd45a75dbf

SHA-1:
696c171dfcf513cb0a4849a8d9c20e37adfe43f9

SHA-256:
e0f927dc00371f11a2ad502a7526274375f533a87120a25b46020f93a7cf0812

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:07:46 PM UTC  (today)

File size:
2.6 MB (2,695,816 bytes)

Product version:
4.50

Copyright:
Copyright ©1999-2015 Martin Malík - REALiX

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hw64_450.exe

Digital Signature
Signed by:
Martin Malik - REALiX

Authority:
GlobalSign nv-sa

Valid from:
7/20/2012 10:26:42 AM

Valid to:
7/21/2015 10:26:42 AM

Subject:
CN=Martin Malik - REALiX, O=Martin Malik - REALiX, L=Bratislava, S=Bratislava, C=SK

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11217744F4734203086E7A2B2312FE1225D5

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:la4KbJixQ4QQeqTpbWN4XQur7pM+zZ+oCd0NDYjSFM2q1LdQ:k4svQtbs4XQm7pMnonYuIw

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Entropy:
7.9701

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file hw64_450.exe has been seen being distributed by the following 15 URLs.

http://dl.cdn.chip.de/downloads/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1422484950;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/004cca4333e9bbd6fe496ad1236023e82f04db91d127f6b4fdd6888f79589b69/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1424214301;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/b166a6d111d38bdda5c655ced081b1b1695c1f73eb6d1362bb72777cd7647dee/.../hw64_450.exe

http://download.softpedia.com/dl/5ff3b977948cdd5df6b3e7aeff4b6fba/54f2e2b4/100189486/software/system/.../hw64_450.exe

http://www.guru3d.com/index.php?ct=files&action=download&

http://download.fosshub.com/Protected/expiretime=1425168202;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/a8e3c1d7c302c6bdd0b32f4957d67fd7dd157c25b497fbe45eaf2b829bca54f2/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1423135204;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/9575c63192d3662ed6640ddc6db2811ce09bbfe6c5d67c7bc81aa5e9bc5d029b/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1426078468;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/c62b9d81121db6d888827e9a9164dfedb58142050afaa306df69e3c18dca20d5/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1424363426;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/27bc2934b8b9847b7da45f7f662839fb4d06671f69d0388bae58b6d2c9a69b5d/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1425238060;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/dbbd8403f7b1ba90de7eb1ef05d0c536e0c4f33cd7163462be468fe33746d254/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1424335235;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/b46de1587fe65d773072ccca3f77f74847682b358ce912b6bb5fe94bc281bdf9/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1424538854;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/1a8aee589c8313a81b9ce8a6210f1896edb2f00ddc0dd46a7e32a443f441610f/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1424047359;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/0b8544b6e7a686afeb7bf48705d4bf68ea9325c23dff04158201f0776bd0e407/.../hw64_450.exe

http://download.fosshub.com/Protected/expiretime=1424179330;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/72ae03505323157910f3d46d2e397d6bbb031d9766185734bd3cf0c339ffffd0/.../hw64_450.exe

http://www.hwinfo.com/.../hw64_450.exe

Scan hw64_450.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.