_isdel.exe
- File Path:
C:\Windows\SysWOW64\InstallShield\_isdel.exe
- Description: 32-bit InstallShield Deleter.
Hashes
| Type |
Hash |
| MD5 |
51161BF79F25FF278912005078AD93D5 |
| SHA1 |
13CB580AA1D2823CA0F748B1FC262B7DB1689F19 |
| SHA256 |
B5DC0FEB738A91CE3CFA982647FE2779787335C6C2C598D5B49818565D7C3E84 |
| SHA384 |
AF6ED9D7226C7E459E66A1464A58E1442AC45BC3B8AAA0693BE644327D04EE811FBD73605D06CD4B24E7A3DE1D2D24CC |
| SHA512 |
C91EAC5A01EC7BFB4D3C9DF7F90A1C6C6211464ECFEDE54F7CE2F0C8A79561E4425A56EB41B48BCD89A80BD45228B2CE0C649ED92D24019A15916306D9131D8D |
| SSDEEP |
384:K3wIA7GjPE6nnP9TDWsKAkk/fG8+lmQP+0JSfgyz:MwIA7Q7tDUAdnemQVSfg |
| IMP |
AF417A432744D25669A269C31C292485 |
| PESHA1 |
FB5C09800C25B6498A54C4F0C638282CB01376E5 |
| PE256 |
499342A59AAFF1C1AC5F1BA1E0967C1EA21963505BAA43C841C16B02F5F3A186 |
Runtime Data
Open Handles:
| Path |
Type |
| (R–) C:\Windows\SysWOW64\InstallShield_isdel.exe |
File |
| (RW-) C:\Users\user |
File |
| (RW-) C:\Windows |
File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.19041.488_none_89e6152f0b32762e |
File |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000002.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000002.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2 |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
| \Sessions\1\Windows\Theme1175649999 |
Section |
| \Windows\Theme601709542 |
Section |
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\InstallShield_isdel.exe |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename:
- Product Name: InstallShield
- Company Name: InstallShield Software Corporation
- File Version: 5, 51, 138, 0
- Product Version: 5, 51
- Language: English (United States)
- Legal Copyright: Copyright 1990-1998 InstallShield Software Corporation, Phone: (847) 240-9111
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/76
- VirusTotal Link: https://www.virustotal.com/gui/file/b5dc0feb738a91ce3cfa982647fe2779787335c6c2c598d5b49818565d7c3e84/detection
File Similarity (ssdeep match)
MIT License. Copyright (c) 2020-2021 Strontic.