home

dc2919df052dada0c164efdb4639c732.exe

Intel

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from eu2-cdn.devid.info and multiple other hosts.
Publisher:
Intel  (signed and verified)

MD5:
3489b8a78e3566d6fbde8c8024718ed7

SHA-1:
babd2b845d617bf695c3c51e887eab998a06b863

SHA-256:
900cd8db8a25e79cb086baa50df5b4a92585bfdfb1b1a9ea66d2afae91875171

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 5:14:11 AM UTC  (today)

File size:
8.8 MB (9,228,824 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\drivertoolkit\download\dc2919df052dada0c164efdb4639c732.exe

Digital Signature
Signed by:
Intel

Authority:
Intel Corporation

Valid from:
3/1/2012 5:01:40 AM

Valid to:
2/14/2015 5:01:40 AM

Subject:
CN=Intel Corporation – Mobile & Communications Group, OU=Mobile & Communications Group, O=Intel

Issuer:
CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, C=US

Serial number:
3AC1BE95000100008B67

File PE Metadata
Compilation timestamp:
12/6/2009 8:50:52 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:JKswNln1nt5GAH7xzjdRhgpaotrtkS7j5fH3xCH13w7Bc0sIHNxcyDoVP:jGn1TGAzqVeSh3x6wdqm/cco1

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9993

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file dc2919df052dada0c164efdb4639c732.exe has been seen being distributed by the following 50 URLs.

http://eu2-cdn.devid.info/download/.../7fe7abf88905c9f1050c141706105855-Intel_Android_Drv_Setup_1.1.5.exe

http://download712.mediafire.com/3kliydy3w0og/.../IntelAndroidDrvSetup1.1.5.exe

http://download2060.mediafire.com/qqh5656439lg/.../IntelAndroidDrvSetup1.1.5.exe

http://download2134.mediafire.com/ycit8zbn74og/.../TechieYash-IntelAndroidDrvSetup1.1.5.exe

http://download004.fshare.vn/dl/.../IntelAndroidDrvSetup1.1.5.exe

http://files.downloadkilat.com/.../intelandroiddrvsetup.v1.1.5.exe

http://eu4-cdn.devid.info/download/.../7fe7abf88905c9f1050c141706105855-Intel_Android_Drv_Setup_1.1.5.exe

http://download2231.mediafire.com/w9b7g0cz3zyg/.../IntelAndroidDrvSetup1.1.5.exe

http://download1198.mediafire.com/tef9l0qm65xg/.../TechieYash-IntelAndroidDrvSetup1.1.5.exe

http://download1003.mediafire.com/5naka2nzbbxg/.../IntelAndroidDrvSetup1.1.5.exe

http://mobizoo.com.br/download/.../?wpdmdl=2726

http://download004.fshare.vn/dl/.../IntelAndroidDrvSetup1.1.5.exe

http://download1748.mediafire.com/jwzh4evplnng/.../IntelAndroidDrvSetup1.1.5.exe

http://download1385.mediafire.com/2v8ybsem389g/.../IntelAndroidDrvSetup1.1.5.exe

http://download1860.mediafire.com/0tx2beq5zl0g/.../IntelAndroidDrvSetup1.1.5.exe

http://www48.zippyshare.com/d/NAFGTUrN/.../IntelAndroidDrvSetup1.1.5.exe

http://qc1.androidfilehost.com/dl/Xeu5QeUYMe-xDsyZaGUH4w/1471192345/.../IntelAndroidDrvSetup1.1.5.exe

http://download1198.mediafire.com/kh7d7v6ra2tg/.../TechieYash-IntelAndroidDrvSetup1.1.5.exe

http://download1246.mediafire.com/fs9dcamupxtg/.../IntelAndroidDrvSetup1.1.5.exe

http://download2137.mediafire.com/v4z3h6zlxv4g/.../IntelAndroidDrvSetup1.1.5.exe

http://download1685.mediafire.com/ljldgrjpfrqg/.../IntelAndroidDrvSetup1.1.5.exe

http://download1003.mediafire.com/emsu3et3qwhg/.../IntelAndroidDrvSetup1.1.5.exe

https://doc-00-88-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/6i79jnr3ni52dvf71hilvbdg074us0dv/1476532800000/13450474315827358983/.../0BxZp-CBuLYgtdWFDbi0zbl9SbkE?e=download

http://download1043.mediafire.com/cvbis3bhrs0g/.../TechieYash-IntelAndroidDrvSetup1.1.5.exe

http://download1768.mediafire.com/wxw9kw113ubg/.../HowTrends-IntelAndroidDrvSetup1.1.5.exe

http://download1748.mediafire.com/ub203l9ti2bg/.../IntelAndroidDrvSetup1.1.5.exe

http://download1385.mediafire.com/4p7qzeh770dg/.../IntelAndroidDrvSetup1.1.5.exe

https://docs.google.com/uc?authuser=0&id=0B_Ar5N9FMNWwdlVwYXUzbmZ3NEU&export=download

http://a.foresting.info/hp/?q=TPPuplXK4HPjxBCDWYRL32PFTvgwKNSa/6VmAcK2auo0RQF1U7SzYcZodlCAJNqyfsBs2Q0ixNhddRyHjBv7sLqAU/GCE707WBw9Q 6l4/R98Db1l9UEc9fLTgktDitQWQ8OulIfRj/ivR1E/tcMLUd7x7ilb nTS9l/.../FfhtNLVn20PkUrPYngsqOpFVAJMQOYTAO8W1NrKlAkKJAJzWBGaP1KMalHB12iumb0 a6cNhuX1t3XItf89iSeZvgmPJDJZsGPpMfulXIafnT1KjPXNLiWY059iiQbo6yhD9BEqH4rX6NUEPQKU3rg2pqi8SnJleaDwgRJgRh5Z0vB0GdfOhzPMdgZ7Vc54D6OTSlPOWZhr&external_id=1431241873098026908

https://doc-10-8g-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/ra6otnd4c25tu6u31g9vknlfk5vdlu97/1475164800000/09316971153661968677/.../0B8jJNv66AOGUVTVtcXUzTzFGOEU?e=download

Latest 30 of 87 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.