home

_setup.dll

InstallShield

Waves Inc

Publisher:
Acresso Software Inc.  (signed by Waves Inc)

Product:
InstallShield

Description:
FLEXnet (R) InstallShield (R) Setup Launcher Resources

Version:
15.0.498

MD5:
56d94a9e4e6419a2735ec868eb4cab1d

SHA-1:
794f9aa982ab6036163b0124f72555b9a2fd078b

SHA-256:
1a761a9153ab1b44b195bac362841e5a0d4563e0dca89603855fabb0b4f77c17

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 9:50:26 AM UTC  (today)

File size:
143.6 KB (147,056 bytes)

Product version:
15.0

Copyright:
Copyright (C) 2008 Acresso Software Inc. and/or InstallShield Co. Inc. All Rights Reserved.

Original file name:
_setup7.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\installshield installation information\{91000001-c561-4e32-99eb-3c5ad3683a70}\_setup.dll

Digital Signature
Signed by:
Waves Inc

Authority:
VeriSign, Inc.

Valid from:
3/6/2013 4:00:00 PM

Valid to:
3/7/2015 3:59:59 PM

Subject:
CN=Waves Inc, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Waves Inc, L=Knoxville, S=Tennessee, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
279DDF11E4E4B6A99701AF0B89F2B0A4

File PE Metadata
Compilation timestamp:
5/9/2008 8:33:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:BFio9+PdRhcvF2VBnnnjWbmwDRN4ElFrx2UQfa4p0wGbKbq+ISZ7:nRo7njWTR3lFrxLQfnmwGO

Entry address:
0x1000

Entry point:
B8, 01, 00, 00, 00, C2, 0C, 00, 90, 90, 90, 90, 90, 90, 90, 90, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
4.4580

Code size:
4 KB (4,096 bytes)

The file _setup.dll has been seen being distributed by the following 2 URLs.

http://woli.waves.com/PC/V9/.../_Setup.dll

http://woli.waves.com/PC/V9/.../_Setup.dll

Scan _setup.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.