home

llftool.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
5c94c2cec8e39457c9b701b85cfbcac0

SHA-1:
b2713f040b44c1859869b697955b4666c813002e

SHA-256:
5e7a4381b87442aefcf0fcbbde9453fb34003368d793a416c0d942925e24d335

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
4/26/2024 4:33:11 AM UTC  (today)

File size:
1.9 MB (2,043,392 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\hddguru llf tool\llftool.exe

File PE Metadata
Compilation timestamp:
1/6/2012 9:42:46 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:qQbq2lZj8/96jo0BmO/ABdSC2lGPAB7esPZeKW8R5AU/zc/8tAU/zc/8:BgXSVB7ZheKW8RiU/Q/NU/Q/

Entry address:
0xFAC84

Entry point:
55, 8B, EC, 83, C4, F0, B8, CC, 35, 4F, 00, E8, 58, 01, F1, FF, A1, 30, F1, 4F, 00, 8B, 00, E8, 40, 34, FE, FF, E8, FB, 2F, FF, FF, 8B, 0D, 0C, F0, 4F, 00, A1, 30, F1, 4F, 00, 8B, 00, 8B, 15, 0C, F9, 4E, 00, E8, 3B, 34, FE, FF, 8B, 0D, 44, F3, 4F, 00, A1, 30, F1, 4F, 00, 8B, 00, 8B, 15, 24, EB, 4E, 00, E8, 23, 34, FE, FF, 8B, 0D, C8, ED, 4F, 00, A1, 30, F1, 4F, 00, 8B, 00, 8B, 15, A4, E4, 4E, 00, E8, 0B, 34, FE, FF, 8B, 0D, DC, F1, 4F, 00, A1, 30, F1, 4F, 00, 8B, 00, 8B, 15, 40, 2E, 4F, 00, E8, F3, 33, FE...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
996 KB (1,019,904 bytes)

The file llftool.exe has been discovered within the following programs.

Hard Disk Low Level Format Tool 4.25  by HDDGURU
HDD Low Level Format Tool is a utility for low-level hard disk drive formatting. Supported interfaces: S-ATA (SATA), IDE (E-IDE), SCSI, SAS, USB, FIREWIRE.
hddguru.com
6% remove it
League of Legends  by Riot Games
League of Legends (LoL) is a multiplayer online battle arena video game developed and published by Riot Games for Microsoft Windows. Players are formed into 2 even teams of Champions, 3v3 or 5v5. League of Legends is a session-based game.
www.RiotGames.com
12% remove it
 
Powered by Should I Remove It?

The file llftool.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1454080135&Signature=GM9g9QoPAf7k0CEjO4Z~zPbbqE2oghuWe8K8AfBxtLDGq3pqvupDbUToiRvgEDPRwbSrOmF-kq5c-Mafcj6geTGskGgyNesOTmqNZIXimmU~kCoZAq0jmFJDxtt1Y6iaSG9HuEhIQbxsJVZloo8cGNoGAmBKm2utXmq0Fjr5ABA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1478140421&Signature=eabbv2f4NL2VTAg6G5aNyva6r~t9-G4HFEnOwx57tmn~5DHjvGfK7ykHi7EhBMEAgHR96N9zcpSY2IKZ7GF2HgiSL~WX9GsO1XIS1WQ3Cd6mndecZkdtyShQc3Q02YNBW7zHILTYcsSYNgn3uaHi0SXEvOY-H8LzdZoXKOnWTSk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1460143614&Signature=B3-fz-PPe7jiYItFM9bcG817~1BZhKm3NtprUlQ2GtJ7KPzseIgaNpbdoJuawGSoFWp8UOlVzPU6OuJOP3OCVlLS8iU9nQVQSPbAsba720RbfrWyBHlvXekIep-jA3YhGJL1dogQzQTthkZtnqQIOmNx~2uPhuAQ4G5pZ-AZo4M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1482042783&Signature=cAaoOn~meN4l2KO9Ybbb0LhfDZmwOVS2oOCU1FNViJ-ZpcxGI4mnKSrGaE8iatMO8ChUm~xXy1Fi0CHxjx6lFyr4uxJUt8DRLXCVHRGYxYZoUlvwL4Rd5eP~ozgv2klW0bVFBLAfpsLk1fnU04GC3HJYwD9Q-op5lbHF0g00w3A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477936521&Signature=ib7-6wLmR7kMQiWC~J0tTvh1SLBhcJMPUHXKHwlgwP89mz5S3OCPh9mojRXgz~xatxBrB8YftFyahMuwrGvA6aW7Ut8AENEvnzrzadoFyyaBM4MBUd4Rc2IigzMC6W-v9YdFKPysFU7R8eHjOkUFOh4S0JEm8uFI98M2o2led18_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1478906139&Signature=AIpkQiHin56X1oy1cdvi5nN6NQeUV8ebiakuBU-HY1FDPFM5lfdVVrFVPA1O13Zv2mACY-zIDAVzBnME2hRSoM3XPb04eYofLdRiJPLqDSY4sS7YTl8w7asN-GBfbdwyGHv6YWEalGMgCrg~aN4~ayucZn3xCuStWmKuihC1EOY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1444050283&Signature=KfpEXjHQSXeti-4Rj-W-4VfOG7CuJnb4YUQ-IdN5uFb8AgpIWDrsPX~-wZEm5nTHZMWqXiKGtBFs83QNL2lNPoRKsz01w3-6gw73nCExkXdeU14cQYkAE81VvyVSFTXTONChYdMWXO697ysRb-SIbRYRWVCmHWPUQlknQXQwfs0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1481678996&Signature=OkLPRYdEEruMceUwPjtAB~VSHvHVWkPWipNyYsLukGWg-9RVnxUc6w1nNzP-d2-AfYWd6HxBmMbY1CC2XvPKqJuXYS~YLGjNuLrnWZMA6qKeL8QkdApSWLp6OyKVdff4AwB~SPlyrGNH-DzNdiUi1Fyt0mXrCJjKTgZYINUOziE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1466434747&Signature=QAWGtqtblxHI2STc3HD1i5-4T~wEW3MEuHEwP-RAsQL7Seeisy1s2OEtURqIcFEJQvXjOCYpotI9go9DpZZPCPwnP842f~mwtfoUV5kL9hublXr16ia3KmK7r4nOCz~143CmghQWQ-tYAEG9Sc7YYZ~-ixIfmtspn1A5SEWucgU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1468830771&Signature=YOS2lTpU~QwZGrrKughIHze8iegDhJA6FaZ2uEwMLtA5nP8MXcviDxdb2qFRYPGvaGt-DBJqjmfTCWaG8vISRfafqh~thPcKOCo-u8pHJ31KT0WDDH7Y5dtrJFmjXS2GnF1GhAtlN0jmUP6UkJvEY86~tp7~2OfM0tM9XCT4k3o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1434876236&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Ih6Nh5TPk9TJd4j7gXqE6SW8oF7~p8nFj3fHC8JaGkqmAHuGey2HRccs64ETbjr2XUBGkq7DcL2wyQBN~EYRTJ~yHy8M2aTUuyqv8s2xW0w8O09OUuhY56oJQX3iU5PHZY2VOd6YpP7j004zHCk~qNhbIhN3kKNZ0fIpebuPkGI_&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1424319170&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=VRxCDF8-muFPduKuteKzTV-0ce5X6BmOoxsgCuWXWILYtE35j2EkcXGQ3IwaGK5GRyRVpVlYhL7~GPXGtvnl6ghfC~mJ3Fo2RfjZikfWhQ-SFVxVV5wAHzH0zgMJTMYnoZqt0H-r4mXVEmcKX~jgCmlKxwR0W2NujwK8jcCz544_&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1478651673&Signature=bGZyLGL2xVmnRfLJkpAmxz8afcFassISNjsO-WjA-MD3fkpIPCh~bAnyTuYFiiD8byZILFdUIVMP42DriyfXX41789lr1llBK8OKx-1qLsiqQIl-MYsuRmAMPmhxyAK991tcuhEA8SBVGf5OfInXuvGd~h2sr~utIsBNOBSDLUw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477532722&Signature=KDHj-aZYUJ~bD1dxGEHIKUXugBsr2Hpabc4~YuQvx87Mg7MvE0nuK1O2xIudqZ9bB0OqbZVVCyk6jfC3y0nj7SYBX2ysx2gs4gOoXXC-UT5exJ2dLiyoMvawDkMpWVoQ53-rJPGX2Il5iDpzlMmh0pmqUKz7zSaAdvwSP0aBcuM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477502824&Signature=gUcxxP3yBPxR8Vef~4oP7UH588A3SGwSg6T87GI48g4jSnm95YlMEKiD8hYSD~2e5DOcB51K5xUAvh8JFztWguG4ClwuMjF1tbLMJ7BMrXpqaDM0mRthLVjNSb~J4kYNegkGGtinmt9n4vfwg7o34kl6KtJZiRdTl74fn0re2bQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1473990514&Signature=RezPow51hJ2OUKaE-j22ZG5C3ISjm4ywiLUuWLKQdaUDAn6Ai7lDnhsc2~AdqTnZCh0Y~JIa1akmmS2HxP5RkGzFB7pjHyJtG0r0gzODAiiRdkGAUwsqCXHxqNfJaFij0b8VNnJ2RM4WlAWUBonBqxwsGr3C4mCpZ4XQlgK2wZg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1465264776&Signature=bnmu1RZ52wbUFtIJxTZJ5~jEa42hNjqpBzDCJmApvzmLGpvQSIxEgfmvQ2suI1yMugWubrw8U4QQl899DrZEgoNhGkzjKGlDFXYpgk5rlITdwZPwluj2YJ3M4dm9JqShkWxiqgUdd0ZeCiWMp1sjH-ZZcuZDcRwuMAZFvhL7fCY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477316201&Signature=AodDO0vKOL3scA-nGmNihG~X0aq2255shieYsPZgAu~FjQxQzZpFTcFrLtvFtBHejYPIGs4S6JTAh5bzFK1IFr3XNemTNTbneiTmhcEpypvYliXcUi0FZugQCcWwnHxBQ7~1ECEuHPSlnL3~zbxx9o01ybxlhrgDS8mFF7lXOmE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1474469766&Signature=NFIPyqPSbiwsT3KpBKPuhvt4z8tWPYVnyFBBF5pYpaHKbrX0Fj14O3t2VfdvHvJhS3GoWr4LFop5JjBDA9ljKzXQCzKxnZDzSycFkkeaItLGkd1Us45jcDrEWn~-G-uVBCA1daoMz7NLBPCEk0KTJT3SZb-iSK8M9LwpiqBs3aI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477440447&Signature=HHam-KgvPPQQ7jV0fjBwzeTgyeMZCyD8P4pe-QNUVt2ES1-6kRg4I0BsmoGwGWtBbu3fIuBFmnrnb7UHK9SmMaRgKqYZrv5493e6232RK8GsR9n6BQY95nbQ1EXtBkw4ZfiF8KBv1sshR5T7cRlq8rk3w2F8DsRUJm5UQYs-v2U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1443186011&Signature=P9OtBWJ0S8v4-P92t4cb5OZZqsBwbFYKFvksLxP15d-tka539HUnI1bx3qRDn5uPzElhj5H6uSq~BvXPiC5IfGRZBBY0oUssTe3Av5CNOhDE1XFC645anptusn1kwmGmHPFr5QXPpXAXvzwmjF-Hzp9FL2AZeojf48h~ulll1fY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477568808&Signature=f0heNaSl-6ypvkEUOkUtYDr7I5jYWR0UPqgB-sivXMuhZ5Pa8UeFNkGnO2ES4ujPvy-b7jCWjazkK~BjcpygVtcmO74RRZ2O37dvFbyb-sTTIk0e8hz06SM~1VAKr9YBWY-z46NettiTvTdLp-XgQWObSVf1qg8Xvzqw-QIo5PA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1476497424&Signature=CceuFI1DPzyILGfmzMsyidYpzXJDWaBcRPEQFRc3qaFZsVrMQbOvpH1YRaysf7CGUvzf~n6eROCQ7dvGm9ntRFDckH9gKH4i1v0QG0yfvkAcJep4xgrUyNQx9fWGcbGWi0VEYHsIFys3bB0Db-2mZOFhj7Kd2LM2410MClg3Jro_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1470546378&Signature=etVi4KesByqkCXBKwRceKAmQPcByTs4RF-SUae~ZfKz~QNIADMMjg0A01J0Pvjgx4~vj01YFvYMb2Ytb-Iqb1uwnwSZKhTAtyFDCkc~xvAjn7-lc0HoaKc4mgehSO4NqI0toOQL8hcvnlOsbGDfLjSL21-dW7yA1E200ESQBBlo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1475752336&Signature=gUUmojxaXO5TSddJLj4SbxWbvdxXLAGACvk0JodsmW9SHoNRH-tmA1fTEiujLVZr66hr9OLGea9CeKqXQmqIoLfp7hnF7BnuBGiMj~4XgjhhXZc~qLFJZlZw~kfO8XmUMeWfH6U6WyomXa047IhRjy-UIwKWPD9iGZpqUpyR3PI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1479900766&Signature=GaAdwSIoC4T4jtbIWLir4Bc7-KcnP4zuLvvqaUaoZNNdd0fPBt6taN7bC5JK1ETNO4nTLDpsJEotvJP2go-m0PXs9eXDr3f~iGZhM6ycW9FDO3HtUdszwaPGEQdRzVWrBStHmHasvDMUjnEj0r49SLyBOUiJWZYt4P460S2s6Pw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1477834748&Signature=TwLQgV0gTHSg~YZhcGuKLs70ZgYsO35vJpFtrnfZG0TgA2rLMe1j3t4XPGFdK4uWO2dOEPO6EpHgxQkDyxrFCGJOMqhfTbOrD3YYbVLnn3ohm4WbcNfbEGVgp8AyFJcPhMAFuOetVruCfqgHPXjwx8dUdGhCDcXL4-FQU-nCzVE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1465289289&Signature=G2E2htmzmqv6VYc474Zpp8OfTxS~HH7UM6zcGuvstqHCL~d4LeL0~oJzGZeftUfIsTb4rYuzYAnxm15y1rJhf84QJIdJKrB9-e3fobm4Ch-xGNf06~ROQ-uGdeULUSuyoXcHlmCcqQGspNJM7tiU0PLWxeN31lDJbe4Ri4kyFjA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1481808765&Signature=MZPYbWSYC9Jq1noGNVac8jBLF~~jcvhrKw4sEZLSzAY~bX6R35mNRnvZZ9T3PizOqSMx01S7eOdcmelW15hvX4MTXsNp0mxklaF5mEfhsADaSIu4EUox3NUabTOKm1-0E0RmKR0PuV5kOEGjaVnf1RqMbGP3LYxxe8G2nGUiFMs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

http://gsf-cf.softonic.com/b27/13f/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65355&instance=softonic_es&type=PROGRAM&Expires=1472309601&Signature=O71BY5GxLbRUW~Cs9oFeXlMg~rCBf9j8UWqys4dY7uLLrK-GltQOYtTq09yU9VR-PCKHZuxamSdss-APMkMqsw79qzWZkPewuQNZ2XJlbrKUPjliut4dOUmoQIsK3go8HEkBs9ihOjjiNzE7yMG1TnRaFPugC0oQbgzy3Nha~3U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=HDDLLF.4.25.exe

Latest 30 of 201 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.