home

Pas9_WStartup.dll

WStartup

Palo Alto Software Inc.

Publisher:
Palo Alto Software  (signed by Palo Alto Software Inc.)

Product:
WStartup

Version:
1.343.0.0

MD5:
d1bcc4c0fec4b6850089190592fbea9b

SHA-1:
d30e91a6e4254174d1c64b7b6b2ec2415d6a10e3

SHA-256:
11c1c9d54a986a2ef96f374856b837e4b4f7418a5e33c60c51f3f6b909e0f882

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:19:42 AM UTC  (today)

File size:
145.5 KB (149,024 bytes)

Product version:
1.00.0343

Original file name:
Pas9_WStartup.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\common files\palo alto software\9.0\pas9_wstartup.dll

Digital Signature
Signed by:
Palo Alto Software Inc.

Authority:
VeriSign, Inc.

Valid from:
9/24/2006 7:00:00 PM

Valid to:
11/3/2008 5:59:59 PM

Subject:
CN=Palo Alto Software Inc., OU=ProDev, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Palo Alto Software Inc., L=Eugene, S=Oregon, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
25E80F7DE14A798010615E3ED1083105

File PE Metadata
Compilation timestamp:
3/12/2007 11:20:01 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:nZ8byuQ3ShQKXXMyWOieAU34+B8v1vFWt:ZypKShQKXXMyWOieAU3XOv1dM

Entry address:
0x1B28

Entry point:
5A, 68, E4, 37, 02, 11, 68, E8, 37, 02, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, F1, 39, C9, A9, CE, 31, D1, 4B, 9F, 89, 27, 3D, 94, FB, 02, B8, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 61, 73, 39, 5F, 57, 53, 74, 61, 72, 74, 75, 70, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C8, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0D, 00, 00, 00, 7C, 7C, 2E, B2, 69, AA, 1C, 41, A2, 91, 9E, 1A, 4A, 27, 99, AA...
 
[+]

Entropy:
5.8674

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
116 KB (118,784 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.