home

setup.exe

Intel WiDi

Intel Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from www.netzwelt.de and multiple other hosts.
Publisher:
Intel Corporation  (signed and verified)

Product:
Intel® WiDi

Version:
6.0.57.0

MD5:
bd9027761daf92bff177ee84fc56c21c

SHA-1:
1c44aa7ede2b398c76b4257d0eb3e3a5d5f1b2d0

SHA-256:
99ea893423a1be6add71168fc38ece050d5c83b85798bbcb887e034ddd2886b4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:19:22 PM UTC  (today)

File size:
122 MB (127,962,584 bytes)

Product version:
6.0.57.0

Copyright:
Copyright © 2010-2015, Intel Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup.exe

Digital Signature
Signed by:
Intel Corporation

Authority:
Intel Corporation

Valid from:
10/16/2015 7:11:48 PM

Valid to:
10/15/2016 7:11:48 PM

Subject:
CN=Intel(R) Wireless Display, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Issuer:
CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Serial number:
330000B7E741A34024FC3AB6E700020000B7E7

File PE Metadata
Compilation timestamp:
12/7/2015 8:37:29 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3145728:qmP5DJDNwV3VtL13B4QkmP4IUzTGjVMPOIvZ+R:qmP5DJDOV3PECyz2bOq

Entry address:
0x1B690

Entry point:
E8, F4, FF, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, E8, 50, 47, 00, E8, 4A, 03, 00, 00, E8, 84, CC, 00, 00, 0F, B7, F0, 6A, 02, E8, 87, FF, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, FB, 28, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, 16, 01, 00, 00, 59, E8...
 
[+]

Entropy:
7.9989  (probably packed)

Code size:
402 KB (411,648 bytes)

The file setup.exe has been seen being distributed by the following 15 URLs.

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=9d0a7f3629a0a95e3911b261117b067b

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=1010d911a7d969870e35121c7b6c057b

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=eb491e520e43aa3b78a673133be9a9d5

http://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=1b400d0ed817c74f898d795158f83506

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=03d7f69bdd17b3fb67aecb942e70f076

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=f762c671f974c141d874e1b449c96625

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=0be0bf15dbe19be1752f3387d0df3340

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=0ae9c2cbd1a9a2922e9e39f2016b2b6c

https://www.netzwelt.de/.../24756_2-intel-wireless-display.html?sig=3f62768f622a67a513c2cd10e2fefc4f

https://dl2.netzwelt.de/.../Intel Wireless Display.exe

http://www.anyprotect.com/dl.php?sct=NONC&data=null&anyprotect_id=1&r=ap_nun1_nc&pr=s&prm=dXJsPXt7aHR0cDovL2QzODltNGw1YjV3bGNiLmNsb3VkZnJvbnQubmV0L2FwbHBtb3YuaHRtbD9jaD1hcF9udW4xJmF1dG89MSZjaWQ9d0RFMUMxR0Q5UEI5T1VDQjA5UzlNSzU4fX0=

http://downloadmirror.intel.com/24692/.../Setup.exe

http://ttb.08i8b4384.com/download/request/.../pphq5rXX?__tc=1415885988.221&lpsl=1f459703f84a9fc6f04335562abc3b1e&expire=1415972387&PubID=1234&slp=www.ntotaldlwlist.com&ClickID=wI95T8KE8EFHB5VFGIHNMBCE&fileName=Setup

http://www.computerbase.de/downloads/systemtools/grafikkarten/.../

https://downloadmirror.intel.com/25153/.../Setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.