home

update-download.exe

Intel Software Setup Assistant

Intel Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from app.box.com and multiple other hosts.
Publisher:
Copyright© 2012-2014 Intel Corporation. All rights reserved.  (signed by Intel Corporation)

Product:
Intel® Software Setup Assistant

Version:
1.0.9.39

MD5:
d6eda49a64178c9f6711d240f256fe36

SHA-1:
ba5b6b05e1c31f41f5094d2d78d9db62e6f68474

SHA-256:
5115b42b21dae08c705a183a740f9bcdf6e6b45f9fe407b4e161a10c8101abae

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 1:35:50 PM UTC  (today)

File size:
125 MB (131,085,936 bytes)

Product version:
1.0.9.39

Copyright:
Copyright© 2012-2014 Intel Corporation. All rights reserved.

Original file name:
Intel® Software Setup Assistant module

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\update-download.exe

Digital Signature
Signed by:
Intel Corporation

Authority:
Intel Corporation

Valid from:
4/16/2014 1:12:43 AM

Valid to:
4/16/2015 1:12:43 AM

Subject:
CN=Intel(R) Software Development Products, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Issuer:
CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Serial number:
330000B1C6067126E84AE6E26D00020000B1C6

File PE Metadata
Compilation timestamp:
7/1/2014 7:33:56 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3145728:OLRHdqmpLdH55X99tZTJOIgzvBTE08553IPsjAM:OLRHdNp9tZTJOIgzvBTQH3tjr

Entry address:
0x8D654

Entry point:
E8, BD, 7C, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, 84, 0E, 4C, 00, 75, 02, F3, C3, E9, 44, 7D, 00, 00, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D...
 
[+]

Entropy:
7.9218  (probably packed)

Code size:
670 KB (686,080 bytes)

The file update-download.exe has been seen being distributed by the following 3 URLs.

https://app.box.com/index.php?rm=box_download_shared_file&shared_name=kcmuy2br92geoue7573p&file_id=f_23621099861

https://download.xdk.intel.com/xdk_web_win_master_1494.exe

http://download.xdk.intel.com/xdk_web_win_master_1494.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.