» xfstk-downloader_v1.7.0.exe
Overview
Analysis
File Details
Downloads (23)

xfstk-downloader_v1.7.0.exe

xFSTK-Downloader

Intel

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from doc-0c-3k-docs.googleusercontent.com and multiple other hosts.

File name:

xfstk-downloader_v1.7.0.exe

Publisher:

Intel Corporation (signed by Intel)

Product:

xFSTK-Downloader

Description:

Cross Platform Firmware Software Toolkit - Downloader

Version:

1.7.0

MD5:

4db980a9deacf31dd355364aa884dfd6

SHA-1:

4c0d7f471a9b22c990d0cf109b1ead02d808f52a

SHA-256:

4845d5a68c91a91c072b91bc78b45a987463fecf1f757613662941a81b069fb7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

1/13/2025 10:36:20 AM UTC (today)

File size:

44.4 MB (46,568,248 bytes)

Product version:

1.7.0

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\downloads\xfstk-downloader_v1.7.0.exe

Digital Signature

Signed by:

Intel

Authority:

Intel Corporation

Valid from:

9/7/2012 1:42:48 AM

Valid to:

5/16/2015 1:05:13 AM

Subject:

CN=xFSTK, OU=MCG, O=Intel

Issuer:

CN=Intel External Basic Issuing CA 3A, O=Intel Corporation, C=US

Serial number:

1BA0FF650001000093C6

File PE Metadata

Compilation timestamp:

6/20/1992 3:52:17 AM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

786432:rXA83KadUX22kn7TqsRZxCDstnZbos6KQA7f7L6QFLYR6Lh0wCJBfv3Njpybj8L1:rw8aaCmbfRZxCiZoHly6SY0h0JJdBp0k

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD... 
[+]

Entropy:

7.9999

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file xfstk-downloader_v1.7.0.exe has been seen being distributed by the following 23 URLs.

https://doc-0c-3k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/22ggdt2bv1qan79fpgdtt7784ehjet63/1479823200000/07344521154338774563/.../0B13kT_o3M-NbTjJINks2VHZoN1k?e=download

https://docs.google.com/uc?export=download&confirm=Dto7&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=Nyxz&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=Ctxq&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=hBtQ&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=sXQ9&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=zQPk&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://doc-10-88-docs.googleusercontent.com/docs/securesc/06bijaspshnv5vqm037e56kaekjvvchg/qgt3i6hi782epcbf4dgi0lecepnlt6q6/1483992000000/07344521154338774563/.../0B13kT_o3M-NbTjJINks2VHZoN1k?e=download

https://doc-0o-0g-docs.googleusercontent.com/docs/securesc/d2e6su8pdrb97boqns5p6p6q62jm21oa/7pu92mlm8l5k6bahachauan7l545vo4q/1480500000000/04046806806519435044/.../0B2oMRhweQ4CHbDNQdy1jVUJFcEE?e=download

https://docs.google.com/uc?export=download&confirm=3wFe&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://doc-0c-3k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/47fst04ruj1gd7b78cm6157b91877f67/1474178400000/07344521154338774563/.../0B13kT_o3M-NbTjJINks2VHZoN1k?e=download

https://docs.google.com/uc?export=download&confirm=3OWl&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=sOxL&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://doc-0g-ak-docs.googleusercontent.com/docs/securesc/rbks93hqdhgr0m64ns80h6ttsklf36ne/1rh6nbfgo6qpmn6bdj0jrisgms4vp96v/1476763200000/07344521154338774563/.../0B13kT_o3M-NbTjJINks2VHZoN1k?e=download

https://docs.google.com/uc?export=download&confirm=L9Sy&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=6O_5&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://doc-0c-3k-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/jl2qcr439hh7ojf52njbhhcauu48i5ab/1480370400000/07344521154338774563/.../0B13kT_o3M-NbTjJINks2VHZoN1k?e=download

https://docs.google.com/uc?export=download&confirm=ofev&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=2UfZ&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=-VEm&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=Sxob&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=lR5_&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

https://docs.google.com/uc?export=download&confirm=uuWi&id=0B2oMRhweQ4CHbDNQdy1jVUJFcEE

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.