» SansaUpdaterInstall.exe
Overview
Analysis
File Details
Behaviors (1)
Downloads (10)

SansaUpdaterInstall.exe

Sansa Updater Installer

SanDisk Corporation

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Sansa Updater by SanDisk Corporation. The file has been seen being downloaded from download.informer.com and multiple other hosts.

File name:

Publisher:

SanDisk Corporation (signed and verified)

Product:

Sansa Updater Installer

Description:

Installer for Sansa firmware updater

Version:

1.4.0.7

MD5:

d010db7ffb441ffe161bd9c52c85e37b

SHA-1:

91a769e519c90536ddad8875b75ca548518d7630

SHA-256:

f2fe5903e332076e7f4847181451ae054f86dbadb97c0d88a95a5f656c2ff6cd

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/29/2024 12:04:14 AM UTC (today)

File size:

2 MB (2,070,832 bytes)

Product version:

1.4.0.7

Original file name:

SansaUpdaterInstall.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\sansaupdaterinstall.exe

Digital Signature

Signed by:

SanDisk Corporation

Authority:

VeriSign, Inc.

Valid from:

12/11/2012 1:00:00 AM

Valid to:

3/13/2015 12:59:59 AM

Subject:

CN=SanDisk Corporation, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=SanDisk Corporation, L=Milpitas, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

30BE501660EB0D562AFF05B6C55FCBBC

File PE Metadata

Compilation timestamp:

6/10/2014 9:59:31 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

49152:0WvvfTaphLTbL5DewHJAkcrtiC43Uf5zhpTC7h/HABfhxh7kfr398x:0QvfchL75DDJAkEtiC43Uf5zHTwgBxky

Entry address:

0x10F8D4

Entry point:

E8, 0A, DD, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 75, 0B, FF, 75, 0C, E8, 11, B6, FF, FF, 59, 5D, C3, 56, 8B, 75, 0C, 85, F6, 75, 0D, FF, 75, 08, E8, C4, B5, FF, FF, 59, 33, C0, EB, 4D, 57, EB, 30, 85, F6, 75, 01, 46, 56, FF, 75, 08, 6A, 00, FF, 35, C8, 5F, 5A, 00, FF, 15, 08, C3, 54, 00, 8B, F8, 85, FF, 75, 5E, 39, 05, FC, 65, 5A, 00, 74, 40, 56, E8, 8F, 5B, 00, 00, 59, 85, C0, 74, 1D, 83, FE, E0, 76, CB, 56, E8, 7F, 5B, 00, 00, 59, E8, 41, 08, 00, 00, C7, 00, 0C, 00, 00, 00, 33... 
[+]

Code size:

1.3 MB (1,352,192 bytes)

Program Uninstaller

Program name:

Sansa Updater

Display publisher:

SanDisk Corporation

Display version:

1.407

Uninstall string:

C:\users\{user}\appdata\roaming\sandisk\sansa updater\sansaupdaterinstall.exe -u

The file SansaUpdaterInstall.exe has been seen being distributed by the following 10 URLs.

http://download.informer.com/.../sansaupdaterinstall.exe

http://sansa-updater.software.informer.com/.../

http://cdn.updatestarcontent.com/?ic_user_id=812

http://mp3support.sandisk.com/sansa/.../SansaUpdaterInstall.exe

Scan SansaUpdaterInstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.