home

SetupDll.dll

SetupDll

Huayou Technology Co., Ltd.

Publisher:
Microsoft  (signed by Huayou Technology Co., Ltd.)

Product:
SetupDll

Version:
1.00

MD5:
814d39915e5c4cc810a6c606a8918168

SHA-1:
59a05272df75a64a09731c424d9da3882723c8a3

SHA-256:
97b8f221f56bfd163c6bc7c884f7e10f6b57363a4c498fcb491bd0d407a1e6ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 4:37:44 PM UTC  (today)

File size:
119.8 KB (122,648 bytes)

Product version:
1.00

Original file name:
SetupDll.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setupdll.dll

Digital Signature
Signed by:
Huayou Technology Co., Ltd.

Authority:
WoSign eCommerce Services Limited

Valid from:
9/24/2013 10:02:12 PM

Valid to:
9/27/2014 4:27:20 PM

Subject:
E=1532389386@qq.com, CN="Huayou Technology Co., Ltd.", O="Huayou Technology Co., Ltd.", L=Shangrao, S=Jiangxi, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
0A34A512001E06

Registration
CLSID:
{09BE322B-7403-4DE1-94DF-3266FE40990B}

ProgID:
SetupDll.Core

COM registered:
Yes

File PE Metadata
Compilation timestamp:
3/29/2014 7:00:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:Qgg65ooqhSCUdQ+XGvrPFHXZrU3NbWR5Eu8/L:QFmdQ+er9VU9bWPc

Entry address:
0x1B6C

Entry point:
5A, 68, A8, A0, 01, 11, 68, AC, A0, 01, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 50, 3B, 3A, E8, C8, 25, 2E, 4A, 8C, 3B, 02, 38, 3D, 1D, 4C, E8, 00, 00, 00, 00, 00, 00, 18, 00, 00, 00, 00, 00, 70, B3, 35, 02, 53, 65, 74, 75, 70, 44, 6C, 6C, 00, 08, 41, 00, 20, 08, 41, 00, 00, 07, 41, 00, A4, B3, 35, 02, A8, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 07, 00, 00, 00, 2B, 32, BE, 09, 03, 74, E1, 4D, 94, DF, 32, 66, FE, 40, 99, 0B...
 
[+]

Entropy:
5.9067

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
92 KB (94,208 bytes)

Automation Object
CLSID:
{09BE322B-7403-4DE1-94DF-3266FE40990B}

CLSID name:
SetupDll.Core


Scan SetupDll.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.