home

drivers for creative labs_10924_i91322488_il345.exe

FlashGet

KASHTAN OOO

The executable drivers for creative labs_10924_i91322488_il345.exe has been detected as malware by 1 anti-virus scanner. This is a setup and installation application and has been known to bundle potentially unwanted software.
Publisher:
Trend Media Corporation Limited.  (signed by KASHTAN OOO)

Product:
FlashGet

Description:
FlashGet Setup

Version:
3.7.0.1203

MD5:
892f99d569eca95e2ff161996ec42a0f

SHA-1:
27c463fdcac1599054008eb3c0518bc1a94d7319

SHA-256:
9218cee33c2b72c476d16dc270f13bbeb81c2308cad3864e9e131338e0853cec

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
5/15/2024 10:51:03 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.3.9.17

File size:
3.5 MB (3,645,840 bytes)

Copyright:
Copyright 2000-2009 Trend Media Corporation Limited.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\drivers for creative labs_10924_i91322488_il345.exe

Digital Signature
Signed by:
KASHTAN OOO

Authority:
Thawte, Inc.

Valid from:
7/4/2015 8:00:00 PM

Valid to:
5/21/2016 7:59:59 PM

Subject:
CN=KASHTAN OOO, O=KASHTAN OOO, L=Naberezhnye Chelny, S=Tatarstan republic, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
468BE39F7FCABE2D4D2D070862DD916B

File PE Metadata
Compilation timestamp:
11/27/2015 9:22:48 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x352562

Entry point:
68, CE, BD, 6E, 0C, E8, 01, 6B, FF, FF, 20, 8F, A0, EA, 6F, 07, B6, CF, 3E, EC, 2E, 1D, 93, A6, FE, 5D, 40, AB, D2, 22, 9B, 0F, 83, 20, D9, 01, 00, 8B, C7, 81, DF, 58, 49, 89, 6B, 0F, A4, CF, F9, 66, 0F, C1, FF, BF, 00, 08, 00, 00, F6, C7, A4, 2B, FA, E9, 79, A0, 01, 00, 30, 32, 88, 8E, E6, 6D, AE, 77, 71, B3, 9F, 09, 88, 8E, 99, 38, F5, 88, 0E, 2D, 63, EC, 77, F1, 2A, 88, 64, 77, 71, 49, 16, A4, 88, 8E, 35, 8F, 9A, 88, 0E, 3A, EB, F8, 88, 0E, D7, 64, 9E, 88, 8E, D2, 77, 50, 77, F1, 22, 1A, AC, 88, 8E, 4C...
 
[+]

Entropy:
7.5945

Code size:
3 MB (3,185,152 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.