home

hw64_530.exe

HWiNFO64

Martin Malik - REALiX

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from download.fosshub.com and multiple other hosts.
Publisher:
Martin Malík - REALiX   (signed by Martin Malik - REALiX)

Product:
HWiNFO64

Description:
HWiNFO64 Setup

MD5:
09ffba809e382af97aae7318d30c9893

SHA-1:
8eab4f597e3b9165163871a4c487b20cdc4d9ded

SHA-256:
d65c71cd39fb69039f03c8dd0bbf425ebd8f0ec3f5b3c5d716893baa88cc1782

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 6:17:43 PM UTC  (today)

File size:
2.8 MB (2,937,656 bytes)

Product version:
5.30

Copyright:
Copyright ©1999-2016 Martin Malík - REALiX

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Digital Signature
Signed by:
Martin Malik - REALiX

Authority:
DigiCert Inc

Valid from:
7/27/2015 2:00:00 AM

Valid to:
7/31/2018 2:00:00 PM

Subject:
CN=Martin Malik - REALiX, O=Martin Malik - REALiX, L=Malacky, C=SK, PostalCode=90101, STREET=Bozeny Nemcovej 2291/28, SERIALNUMBER=101-15930, OID.1.3.6.1.4.1.311.60.2.1.3=SK, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0A0E779F8D20CBF50A9A2B082CF75E32

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:+a4r0z0qlh9FPDdOxzGoJLGyUFZZ+7p3dVwfValr2vW+yolSSzpamgWQlwGw2q1i:f4r0AaROEoJGyUFj+VNGf8lr2vg9SzgZ

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file hw64_530.exe has been seen being distributed by the following 20 URLs.

https://download.fosshub.com/Protected/expiretime=1465791814;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/0da006257bef384adea136f91271c1e174b56d83deef8697fab38368e50f5310/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1466334888;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/806e4b95df346755d4354794134ef6b4f392e002c702df8af05465b54f30f955/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1467760123;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/6104045397d0028abbe1f25be9175dbc295599eab710843ec1c0270f05693738/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1465553408;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/3b8e80aee87714fd77b171d9ab1d75fca83cc06df88ccb97e8b44d9c37adff06/.../hw64_530.exe

http://www.filepuma.com/file/1466642978c11778/hwinfo64_5.30/.../0/

https://download.fosshub.com/Protected/expiretime=1466089399;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/a57aeff74367d206574d6b80701cac2ef11e326665b6e3ca4150bfd2c8796856/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1466259274;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/2ae00ce9e3f9bb57d4f8fc58d001f54e4626bbf157ae32a2b88186d037765244/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1466633019;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/eb6723a86a4a79c919de159ca530b77a337ead1ba2d2b757f0277f0fe09e9d08/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1467492448;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/ef35b62b70ac33f27c68aa65a3dcdb1a56bd5bb640b38f5b27ac56db1e578cde/.../hw64_530.exe

http://dl.cdn.chip.de/downloads/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1467575544;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/dcf612976b91b539ecee628afc7956281f284043d1823289f0165fe34c5dce42/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1467449673;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/6f259d10fff7d528c0dfd42527d7274f6d2de4a742edb67f933cb17bdb80ca38/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1467577534;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/b5edc5005d970a687de19aed086436ead635ca3eeadb904db86f6433c663656c/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1466222394;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/559e13ef4883e5d83342a63d69108551a908279b5bef6c9cafaca5be020d2796/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1465519453;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/f90944f1209bb78197abe0bad4083d3ea03942b0de9ccdd92909cea8e0f81413/.../hw64_530.exe

http://www.guru3d.com/index.php?ct=files&action=download&

https://download.fosshub.com/Protected/expiretime=1465053449;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/452fe1e9d1fb6cff99533d4dd4977987e07ed6479681c9150d386e77a60306f4/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1465318030;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/0fbbaddc77a134226dac075c5870047fb0f43b56b9b3fe15d6f1a9d79363d264/.../hw64_530.exe

https://download.fosshub.com/Protected/expiretime=1464777841;badurl=aHR0cDovL3d3dy5mb3NzaHViLmNvbS9IV2lORk8uaHRtbA==/e097d3d571bd7e461daff867c408be310ed0be9beb84325c04d3d2d88fcf39cc/.../hw64_530.exe

http://www.hwinfo.com/.../hw64_530.exe

Scan hw64_530.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.