home

xw_install.exe

This is a setup and installation application. The file has been seen being downloaded from www.ibk.co.kr.
MD5:
58d8cbc8883f0acb12a5dcaed4e11754

SHA-1:
214b43173c90165b35e1b52eceac21f16839d09e

SHA-256:
831449d9d70a5b50f91fdb7537039cca343d2157d46343eb2094e1cb9834758c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 6:28:52 PM UTC  (today)

File size:
7.8 MB (8,223,263 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\xw_install.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
196608:kMCNTVoZoXIuIeVMC2wwhm/CNlO2AXx8FstVgp6ZIGUB/GOhn:k5NTVoLGMoucCNlO2W8StGpZGUrn

Entry point:
37, 7A, BC, AF, 27, 1C, 00, 03, D9, B0, E5, 7E, DC, 79, 7D, 00, 00, 00, 00, 00, 23, 00, 00, 00, 00, 00, 00, 00, EB, 5B, 41, 9B, E1, 15, B3, E0, 03, 5D, 00, 26, 96, 8E, 70, 00, 17, F7, EC, 05, BB, EA, F4, FF, 94, 01, 2F, 44, EE, 4E, BD, 09, 35, 38, FD, C1, 72, 2C, FB, 60, BC, 14, 0E, 8E, EE, F3, E7, 07, 75, 26, C0, 7A, 08, D7, 2C, F7, E1, 69, 95, 4D, 35, A0, 95, C5, 36, 84, 99, D0, 77, 30, A1, 55, 0E, 48, 48, 72, C1, 82, 60, 50, CB, 7C, EE, 48, AF, 28, E0, 21, 80, 9B, BC, 3E, D8, E7, E1, 48, 45, 0A, E5, 24...
 
[+]

Entropy:
7.9990  (probably packed)

The file xw_install.exe has been seen being distributed by the following URL.

http://www.ibk.co.kr/common/download.ibk?seq=1198&fileName=xw_install.exe&fullName=/fup/customer/.../xw_install.exe&category=null

Scan xw_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.