home

setup.exe

Intel WiDi

Intel Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from piratebay.com.co and multiple other hosts.
Publisher:
Intel Corporation  (signed and verified)

Product:
Intel® WiDi

Version:
6.0.44.0

MD5:
2d1bc0df2d5bf63d6fc56ec4b964c795

SHA-1:
103d1179435d5fb93fdd51538c3d026c3f7f3879

SHA-256:
d25cb30fb0f4e25bf64a7add75ee1f7fc55cbf074f63cadbabd46ddcf33bda64

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
10/17/2025 1:50:23 AM UTC  (today)

File size:
106.7 MB (111,856,648 bytes)

Product version:
6.0.44.0

Copyright:
Copyright © 2010-2015, Intel Corporation. All rights reserved.

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Intel Corporation

Authority:
Intel Corporation

Valid from:
6/19/2014 11:09:08 AM

Valid to:
6/3/2017 11:09:08 AM

Subject:
CN=Intel Corporation - pGFX, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Issuer:
CN=Intel External Basic Issuing CA 3B, O=Intel Corporation, L=Santa Clara, S=CA, C=US

Serial number:
330000B33510830D6C8A284DCB00020000B335

File PE Metadata
Compilation timestamp:
8/28/2015 3:00:10 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1572864:3Gj/e5iGdDNvWbSngougOAkia1CBiQ1XWX6aPqy6W+f8D4Iu98CDQKfiZFkW17uH:3a/eRDNMiga/6CBiGAPCr/DsZW07u

Entry address:
0x1B690

Entry point:
E8, F4, FF, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, E8, 50, 47, 00, E8, 4A, 03, 00, 00, E8, 84, CC, 00, 00, 0F, B7, F0, 6A, 02, E8, 87, FF, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, FB, 28, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, 16, 01, 00, 00, 59, E8...
 
[+]

Entropy:
7.9991  (probably packed)

Code size:
402 KB (411,648 bytes)

The file setup.exe has been seen being distributed by the following 8 URLs.

http://piratebay.com.co/.../

http://www.k9pcfixer.com/downloadip_allcs_dcom.asp?utm_source=p9stnsec&utm_campaign=p9stnsec_glo7

http://www.onlinevideopctools.com/.../setup.exe

http://az800981.vo.msecnd.net/.../Setup.exe

http://downloadmirror.intel.com/25153/.../Setup.exe

http://ttb.x9pbuoz.com/download/request/.../6WfU0OP9?__tc=1414238381.338&lpsl=3ff2e1b1306ed5f673a75286cda720e2&expire=1414324745&tgu_src_lp_domain=www.dllwnlsoftlistudate.com&ClickID=YnJzcj0zODQxJmJvPTImc2xpZD0wJnN1YmlkPTIwMDIzMTkwNjcyMjAwMDAwMCZzbz0yJmNpY21wPTM4NTY1OCZwdWJpZD02MzE2MyZjdTQ9MiZjaXBpZD05NzEwNDAmY2lzaWQ9MzQ4QzI3NzhERTc3NjUxNzEzNDYzMTY5NjQmY2lyaWQ9MzQ4QzI3NzhERTc3NjUxODMzMDEyOTc0MyZjaXVpZD0tMzkxNTg2NTk0NjY3MDQ2NDE5MiZjcmlkPTI2NTE5MzgmZXhjaWQ9MjImbW10PS0xJm9zaWQ9NTMzJmNudHJ5PTIwMA==&fileName=Setup

http://downloadmirror.intel.com/24692/.../Setup.exe

https://downloadmirror.intel.com/25153/.../Setup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.