home

SetupDll.dll

SetupDll

Huayou Technology Co., Ltd.

Publisher:
Microsoft  (signed by Huayou Technology Co., Ltd.)

Product:
SetupDll

Version:
1.00

MD5:
642ff6789db46b6d2d7f7ea0f3f8ad03

SHA-1:
ede766b720813cc7237fe836b2a28eaffa06c40f

SHA-256:
6e0d7de3006c4570eb5d9c6ea9f92331cc7f23d74602e3af12882a57364f1171

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:12:41 AM UTC  (today)

File size:
119.8 KB (122,648 bytes)

Product version:
1.00

Original file name:
SetupDll.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\setupdll.dll

Digital Signature
Signed by:
Huayou Technology Co., Ltd.

Authority:
WoSign eCommerce Services Limited

Valid from:
9/24/2013 4:02:12 PM

Valid to:
9/27/2014 10:27:20 AM

Subject:
E=1532389386@qq.com, CN="Huayou Technology Co., Ltd.", O="Huayou Technology Co., Ltd.", L=Shangrao, S=Jiangxi, C=CN

Issuer:
CN=WoSign Class 3 Code Signing CA, O=WoSign eCommerce Services Limited, C=CN

Serial number:
0A34A512001E06

Registration
CLSID:
{09BE322B-7403-4DE1-94DF-3266FE40990B}

ProgID:
SetupDll.Core

COM registered:
Yes

File PE Metadata
Compilation timestamp:
3/29/2014 12:00:50 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:xgg65ooqhSCUdQ+XGvrPFHXZrU3NbWR5Eu8/0:xFmdQ+er9VU9bWPz

Entry address:
0x1B6C

Entry point:
5A, 68, A8, A0, 01, 11, 68, AC, A0, 01, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 50, 3B, 3A, E8, C8, 25, 2E, 4A, 8C, 3B, 02, 38, 3D, 1D, 4C, E8, 00, 00, 00, 00, 00, 00, 18, 00, 00, 00, 00, 00, 70, B3, 35, 02, 53, 65, 74, 75, 70, 44, 6C, 6C, 00, 08, 41, 00, 20, 08, 41, 00, 00, 07, 41, 00, A4, B3, 35, 02, A8, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 07, 00, 00, 00, 2B, 32, BE, 09, 03, 74, E1, 4D, 94, DF, 32, 66, FE, 40, 99, 0B...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
92 KB (94,208 bytes)

Automation Object
CLSID:
{09BE322B-7403-4DE1-94DF-3266FE40990B}

CLSID name:
SetupDll.Core


Scan SetupDll.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.