home

CTHWIUT.DLL

Creative Audio Product

Creative

It runs as a Windows kernel mode device driver named “CTHWIUT.DLL”.
Publisher:
Creative Technology Ltd.  (signed by Creative)

Product:
Creative Audio Product

Description:
Creative Utility Effects

Version:
6.00.01.1281-2.14.0970

MD5:
fa83a8c4e8f6721175df67f19e8d313b

SHA-1:
6883faa00fc77805b859894b9610a95e3a064c4b

SHA-256:
1e961c3b0f7d4ee8ab70f3b6ec317af99f42a1f618c56c86b73501888f02aec1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/8/2024 10:59:26 AM UTC  (today)

File size:
65.4 KB (67,008 bytes)

Product version:
2.14.00.0001

Copyright:
Copyright © 2002-2007

Original file name:
CTHWIUT.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Windows\System32\cthwiut.dll

Digital Signature
Signed by:
Creative

Authority:
Creative

Valid from:
11/12/2007 10:01:47 AM

Valid to:
12/31/2039 6:59:59 PM

Subject:
CN=Creative

Issuer:
CN=Creative

Serial number:
78193BA8C3E377814009CB569EE6205F

File PE Metadata
Compilation timestamp:
11/12/2007 8:35:08 AM

OS version:
5.2

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
7.10

CTPH (ssdeep):
1536:o45S/fqW0f29gn7dnbxurZ3VLx+dntiLMWGRpTZUj4G:o45S/fqW0f29O7dbxurZ3V9+dntiYWGE

Entry address:
0x12005

Entry point:
8B, FF, 55, 8B, EC, A1, 34, 00, 02, 00, 85, C0, B9, 40, BB, 00, 00, 74, 04, 3B, C1, 75, 23, 8B, 15, 28, C0, 01, 00, B8, 34, 00, 02, 00, C1, E8, 08, 33, 02, 25, FF, FF, 00, 00, A3, 34, 00, 02, 00, 75, 07, 8B, C1, A3, 34, 00, 02, 00, F7, D0, A3, 30, 00, 02, 00, 5D, E9, F4, F4, FE, FF, 74, 20, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 90, 21, 01, 00, 00, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, B4, 20, 01, 00, CC, 20, 01, 00, DA, 20, 01, 00, F0, 20, 01, 00, FA...
 
[+]

Entropy:
5.6545

Code size:
41.5 KB (42,496 bytes)

Driver
Display name:
CTHWIUT.DLL

Type:
Kernel device driver (KernelDriver)

Group:
Base


Scan CTHWIUT.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.