home

CustomActionOnFinishInst.exe

F1 2010

Codemasters Software Company Limited

The executable CustomActionOnFinishInst.exe, “F1 2010 Custom Action Executable” has been detected as malware by 5 anti-virus scanners.
Publisher:
Codemasters  (signed by Codemasters Software Company Limited)

Product:
F1 2010

Description:
F1 2010 Custom Action Executable

Version:
1, 0, 0, 0

MD5:
79f5aa0485751de1a4a0ce400521da8f

SHA-1:
e6972a9b4cf539ba4f9f1ae7ea95f6e7c3871689

SHA-256:
cfce13cb9ebe9a801dd034d4841e7e80f22ac3bd334ed34effebc058882f15dd

Scanner detections:
5 / 68

Status:
Malware

Analysis date:
4/23/2024 6:36:22 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Mabezat [Wrm]
160708-3

Emsisoft Anti-Malware
Win32.Worm.Mabezat.Gen
11.5.0.6191

ESET NOD32
Win32/Mabezat.A virus
8.0.319.0

F-Prot
W32/Mabezat.A-2
4.6.5.141

Norman
Win32.Worm.Mabezat.Gen
22.05.2016 07:18:28

File size:
212.2 KB (217,327 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright (C) 2007

Original file name:
CustomActionOnFinishInst.exe

File type:
Executable application (Win32 EXE)

Language:
English (Wielka Brytania)

Digital Signature
Signed by:
Codemasters Software Company Limited

Authority:
VeriSign, Inc.

Valid from:
8/11/2010 2:00:00 AM

Valid to:
8/11/2012 1:59:59 AM

Subject:
CN=Codemasters Software Company Limited, OU=Testing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Codemasters Software Company Limited, L=Southam, S=Warwickshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
51DF39D1E72433A404DA544965155E8F

File PE Metadata
Compilation timestamp:
7/29/2010 12:04:30 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
3072:lcbFWbHjyXetSOZxMX8qqBWVFfLH+WA3UACfRHqmz8TDXAgPJao:lcbF3wxMsnQfLH+WA3UxKXAoJl

Entry address:
0x13AC

Entry point:
BB, 0C, 9B, A0, 6D, 93, E9, 20, 01, 00, 00, 47, ED, 50, 4C, F8, 7C, 50, 4C, 50, A5, D0, D0, D0, 50, D0, D0, 4C, D0, D0, D0, 2F, 01, 06, 01, 00, 01, 09, 07, 06, D0, D0, D0, 44, 31, 4A, 35, 32, 31, 3D, 31, FE, 34, 3C, 3C, D0, D0, D0, D0, 2C, D0, D0, D0, 16, 42, 35, 35, 1C, 39, 32, 42, 31, 42, 49, D0, 13, 42, 35, 31, 44, 35, 14, 39, 42, 35, 33, 44, 3F, 42, 49, 11, D0, D0, D0, D0, 17, 35, 44, 27, 39, 3E, 34, 3F, 47, 43, 14, 39, 42, 35, 33, 44, 3F, 42, 49, 11, D0, D0, D0, D0, 17, 35, 44, 1D, 3F, 34, 45, 3C, 35...
 
[+]

Code size:
28 KB (28,672 bytes)

Remove CustomActionOnFinishInst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.