Should I block it?
No, this file is 100% safe to run.
Additional versions
(Note, HTTO GROUP Ltd publishes each variation of this file with the same version, but the hashes are unique.)
Relationships
tu.exe
By HTTO GROUP Ltd (Signed)
| Version: | 1.0.0.0 |
| MD5: | f2050a23a1b3b092129f64be847917ad |
| SHA1: | 41cc8ec0aa861eee8d0ea884825002b648247a60 |
| SHA256: | e8df2658fccb6b77793717b111f1e86704c2db0a4459146597293a6e2820abe2 |
Overview
tu.exe is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by HTTO GROUP Ltd which was issued by the GlobalSign nv-sa certificate authority (CA). Note, some antivirus scanners have flagged this file, however it is not necessarily considered malware (see below for details).
Details
| File name: | tu.exe |
| Typical file path: | C:\Documents and Settings\user\Application data\sdiv 2.0\prot\tu\tu.exe |
| File version: | 1.0.0.0 |
| Size: | 130.41 KB (133,536 bytes) |
| Certificate |
| Issued to: | HTTO GROUP Ltd |
| Authority (CA): | GlobalSign nv-sa |
| Effective date: | Thursday, June 7, 2012 |
| Expiration date: | Saturday, June 8, 2013 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'TU' → "C:\Documents and Settings\user\Application Data\SDIV 2.0\Prot\tu\tu.exe"
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
100.00% |
|
Distribution by country
Sweden installs about 50.00% of tu.exe.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
100.00% |
|
