home

swing_installer.exe

Swing Web Installer

ZUMInternet Corp.

Publisher:
ZUM internet Corp.  (signed by ZUMInternet Corp.)

Product:
Swing Web Installer

Description:
Swing Browser Installer

Version:
16.5.25.0

MD5:
38108dc665d0663328a956cceb118e77

SHA-1:
f339f4c7b24bd204af158ba2e8b34b018cf64daa

SHA-256:
4a46473707661d3b82da1a78d289994551787fd037bca2efb3b6f831636ff470

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 8:13:54 AM UTC  (today)

File size:
778.6 KB (797,320 bytes)

Product version:
1.0.4.0

Copyright:
Copyright (c) 2013 ZUM internet Corp. All Rights Reserved.

Original file name:
swing_installer.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\swing_installer.exe

Digital Signature
Signed by:
ZUMInternet Corp.

Authority:
VeriSign, Inc.

Valid from:
10/31/2014 9:00:00 AM

Valid to:
12/30/2017 8:59:59 AM

Subject:
CN=ZUMInternet Corp., O=ZUMInternet Corp., L=Seocho-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
04A5BE8D013744BE6B24F42E317C37CB

File PE Metadata
Compilation timestamp:
5/25/2016 2:10:31 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
12288:k4zozNWvGRJY0uMhBLD4qZAC9OgQnXTNQaR78wm5F/1W39fk3tAMdqggj1:kgxvFG44OXXRQc8wm5a32tAMdNgp

Entry address:
0x50146

Entry point:
E8, D3, 3F, 01, 00, E9, 39, FE, FF, FF, 55, 8B, EC, 56, 8B, 75, 08, 83, 3C, F5, 90, 45, 49, 00, 00, 75, 13, 56, E8, 91, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 11, E8, B2, F5, FF, FF, 59, FF, 34, F5, 90, 45, 49, 00, FF, 15, CC, D0, 47, 00, 5E, 5D, C3, E8, 83, 2D, 00, 00, 85, C0, 75, 0B, FF, 74, 24, 04, 50, FF, 15, 1C, D2, 47, 00, 68, FF, 00, 00, 00, E8, 60, F4, FF, FF, 59, C3, 56, 57, BE, 90, 45, 49, 00, 8B, FE, 53, 8B, 1F, 85, DB, 74, 17, 83, 7F, 04, 01, 74, 11, 53, FF, 15, E8, D1, 47, 00, 53, E8, 24, B1, FF...
 
[+]

Entropy:
6.7295

Code size:
494.5 KB (506,368 bytes)

The file swing_installer.exe has been seen being distributed by the following 6 URLs.

http://d70om6793zmib.cloudfront.net/.../swing_installer.exe

http://high.software.dn.naver.com/56736a82ccf4d7098f577a14f81bc876/.../swing_installer.exe

http://101.246.189.115/files/A0430000028F6A54/cdnmedia-zum.cdn.x-cdn.com/zum/swingbrowser/.../swing_installer.exe

http://advert.estsoft.com/?event=201301091857428

http://113.171.224.205/.../swing_installer.exe

http://cdnmedia-zum.cdn.x-cdn.com/zum/swingbrowser/.../swing_installer.exe

Scan swing_installer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.