Files named HWiNFO64.exe

159.203.225.195 · HWiNFO64.exe

United States · DIGITALOCEAN-ASN

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: dbc88954cc96484f3a697200d70606ab4f36bc4c
SHA256: 9864b5fa7eefcea4b7471041255b05ed795ac6a87ce4ee32224cbacffb53ce9c
application/x-msdos-program
2.45MB
2016-02-09 18:18:18 +0000 UTC

69.164.247.137 · HWiNFO64.exe

/Technical/hwi_714/

United States · IS-AS-1

SHA1: 7b79162cfa3b7f237491bb4ab30fd120d8165f16
SHA256: cc84765a0250bc12dad19ce27bbb69a3d4410ec41920b06e1934616d17ae89ee
application/octet-stream
5.90MB
2025-12-07 08:14:48 +0000 UTC

147.189.143.40 · HWiNFO64.exe

/depot/apps/HWiNFO 7.66 Build 5270 + Portable/hwi_766/

United States · ECL-1

SHA1: 9a060a7027e50a5229eb86f748897e3c3037275f
SHA256: 641ed114f990cde8011da603148bda31afe26a294e31635c5e20ecb06743283f
application/x-msdos-program
8.35MB
2024-07-08 05:59:51 +0000 UTC

23.25.61.41 · HWiNFO64.exe

/tlit/Programs/Tools/hw64_422/

United States · COMCAST-7922

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: ef081618ab91a775ddfc4cfc163e20322fe88967
SHA256: dd16ec6a7f6e047073f8676ae02b7c602134692e91ee4ebda1f2f72af93e2368
application/octet-stream
2.45MB
2013-08-06 15:18:58 +0000 UTC

68.43.94.8 · HWiNFO64.exe

/noPath/hwi_726/

United States · COMCAST-7922

SHA1: 5bf5a2d5ad0adb4537ce2904f4b9df11bf74584a
SHA256: afa4530b82e8024259435958e38671355a920254e181205e8d768d42fb03fa3d
application/x-msdownload
6.70MB
2022-06-21 08:43:06 +0000 UTC

68.43.94.8 · HWiNFO64.exe

/noPath/hwi_726/

United States · COMCAST-7922

SHA1: 5bf5a2d5ad0adb4537ce2904f4b9df11bf74584a
SHA256: afa4530b82e8024259435958e38671355a920254e181205e8d768d42fb03fa3d
application/x-msdownload
6.70MB
2022-06-21 08:43:06 +0000 UTC

178.208.88.167 · HWiNFO64.exe

/Other/Soft/

The Netherlands · Iron Hosting Centre LTD

SHA1: 64935350a0b9cf4618b2e31e91c0948899e53e81
SHA256: 350d0711edf63b117b6b62d7133b6ab0aea371f17118384eb50b12e0da831d2e
application/octet-stream
8.72MB
2024-05-07 07:04:40 +0000 UTC

179.110.135.203 · HWiNFO64.exe

/usuario-data/@data/hwi_744/

Brazil · TELEFONICA BRASIL S.A

SHA1: 9a7f12f401628480fe539b6c8c31cd8b961a9d9a
SHA256: 4fba69f56a709666a063f3a5edfec662c3d2bf7fc3292df88fa9e30f9061c585
application/x-msdos-program
7.11MB
2023-05-03 13:07:30 +0000 UTC

177.95.8.215 · HWiNFO64.exe

/usuario-data/@data/hwi_744/

Brazil · TELEFONICA BRASIL S.A

SHA1: 9a7f12f401628480fe539b6c8c31cd8b961a9d9a
SHA256: 4fba69f56a709666a063f3a5edfec662c3d2bf7fc3292df88fa9e30f9061c585
application/x-msdos-program
7.11MB
2023-05-03 13:07:30 +0000 UTC

www.ofm.ab-tek.it · HWiNFO64.exe

/homeale/aaa software/HWinfo portable 2023/

France · OVH SAS

SHA1: c6643f5cbe034c3098d7994028923f85c6f6a00f
SHA256: 525e38dabe9c9730d9d2b664086f2a8425096002489e96373ba5b748d4a3c3dd
application/x-msdownload
7.10MB
2023-09-07 13:23:36 +0000 UTC

nezu.vip · HWiNFO64.exe

/programs/

Poland · Multiplay Sp. z o.o.

SHA1: a155b60012230d21cdde1f7eefc42890b0d75149
SHA256: 6b18f7479fb64f84c6fdc33e9dfa534d57e4dfe25e77142c4dcf384720e1e89f
application/octet-stream
6.69MB
2022-04-21 08:04:09 +0000 UTC

soft.default.sk · HWiNFO64.exe

/HWInfo/

Slovakia · Zdruzenie pouzivatelov Slovenskej akademickej datovej siete SANET

SHA1: ece01a780726bea6cae01fcf74d2597583ec0177
SHA256: f0d493975289585b4767eafa9efe7270ffb86681a5416a0b80463c22f0a3f441
application/octet-stream
5.15MB
2020-12-09 08:39:00 +0000 UTC

68.43.94.8 · HWiNFO64.exe

/noPath/hwi_726/

United States · COMCAST-7922

SHA1: 5bf5a2d5ad0adb4537ce2904f4b9df11bf74584a
SHA256: afa4530b82e8024259435958e38671355a920254e181205e8d768d42fb03fa3d
application/x-msdownload
6.70MB
2022-06-21 08:43:06 +0000 UTC

68.43.94.8 · HWiNFO64.exe

/noPath/hwi_726/

United States · COMCAST-7922

SHA1: 5bf5a2d5ad0adb4537ce2904f4b9df11bf74584a
SHA256: afa4530b82e8024259435958e38671355a920254e181205e8d768d42fb03fa3d
application/x-msdownload
6.70MB
2022-06-21 08:43:06 +0000 UTC

193.168.173.66 · HWiNFO64.exe

/Technical/hwi_714/

Israel · Kamatera Inc

SHA1: 7b79162cfa3b7f237491bb4ab30fd120d8165f16
SHA256: cc84765a0250bc12dad19ce27bbb69a3d4410ec41920b06e1934616d17ae89ee
application/octet-stream
5.90MB
2025-08-21 10:20:26 +0000 UTC

178.208.88.167 · HWiNFO64.exe

/Other/Soft/

The Netherlands · Iron Hosting Centre LTD

SHA1: 64935350a0b9cf4618b2e31e91c0948899e53e81
SHA256: 350d0711edf63b117b6b62d7133b6ab0aea371f17118384eb50b12e0da831d2e
application/octet-stream
8.72MB
2024-05-07 07:04:40 +0000 UTC

159.203.225.195 · HWiNFO64.exe

/

United States · DIGITALOCEAN-ASN

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: dbc88954cc96484f3a697200d70606ab4f36bc4c
SHA256: 9864b5fa7eefcea4b7471041255b05ed795ac6a87ce4ee32224cbacffb53ce9c
application/x-msdos-program
2.45MB
2016-02-09 18:18:18 +0000 UTC

159.203.225.195 · HWiNFO64.exe

/

United States · DIGITALOCEAN-ASN

Yara INDICATOR_EXE_Packed_MPress From AlienVault by ditekSHen

Download archived sample

The password is "infected"

SHA1: dbc88954cc96484f3a697200d70606ab4f36bc4c
SHA256: 9864b5fa7eefcea4b7471041255b05ed795ac6a87ce4ee32224cbacffb53ce9c
application/x-msdos-program
2.45MB
2016-02-09 18:18:18 +0000 UTC

nezu.vip · HWiNFO64.exe

/programs/

Poland · Multiplay Sp. z o.o.

SHA1: a155b60012230d21cdde1f7eefc42890b0d75149
SHA256: 6b18f7479fb64f84c6fdc33e9dfa534d57e4dfe25e77142c4dcf384720e1e89f
application/octet-stream
6.69MB
2022-04-21 08:04:09 +0000 UTC

nezu.vip · HWiNFO64.exe

/programs/

Poland · Multiplay Sp. z o.o. Sp. K.

SHA1: a155b60012230d21cdde1f7eefc42890b0d75149
SHA256: 6b18f7479fb64f84c6fdc33e9dfa534d57e4dfe25e77142c4dcf384720e1e89f
application/octet-stream
6.69MB
2022-04-21 08:04:09 +0000 UTC